last executing test programs: 35.579406355s ago: executing program 2 (id=3419): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x81, 0x7, 0xc, 0x9, 0x0, 0x81, 0x48000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x2d0, 0x9, 0x706, 0x7, 0x8000000000000001, 0x3, 0x8, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0xac, 0x81, 0xb, 0x0, 0x0, 0xff, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x8001}, 0x1, 0x3, 0x0, 0x1, 0x6, 0x7, 0xc2da, 0x0, 0x400, 0x0, 0xffffffffffff7fff}, 0xffffffffffffffff, 0x7, r4, 0x8) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x1f, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1b, 0xd27, 0x7, 0xa, 0x2008, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x4, 0x3, 0x3}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x6}, 0xc) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x4018, r1}, 0x18) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x6, 0x6, 0x8001, 0x401, 0x52, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffeff, '\x00', 0x0, r4, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x19, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4b}, @jmp={0x5, 0x1, 0x3, 0x1, 0x2, 0xfffffffffffffff5, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xd8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0x5, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x101}, @map_fd={0x18, 0x2, 0x1, 0x0, r9}]}, &(0x7f0000000580)='GPL\x00', 0x6, 0xe2, &(0x7f00000005c0)=""/226, 0x40f00, 0x1, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[r11, r12, r13, r14, r15, r16, r17, r18], &(0x7f0000000bc0)=[{0x3, 0x3, 0x4, 0x6}, {0x4, 0x1, 0x3, 0xb}, {0x2, 0x2, 0x9, 0xb}], 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000cc0)=0x7) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x8) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000d00)=0x1) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x7) r19 = openat$cgroup_type(r3, &(0x7f0000000d40), 0x2, 0x0) write$cgroup_type(r19, &(0x7f0000000d80), 0x9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e00)=@o_path={&(0x7f0000000dc0)='./file1\x00', 0x0, 0x18, r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x4, &(0x7f0000000e40)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}], &(0x7f0000000e80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000f00)=[{0x2, 0x2, 0xb, 0x9}], 0x10, 0x8}, 0x94) 35.506143159s ago: executing program 2 (id=3421): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0xc, 0x212}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x86, 0x5}, 0x0, 0xfffffffffffffeff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r4) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0x140) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x16) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x32200, 0x0) ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x29, 0xa4832bc5d0eef200, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='+\x00\x00\x00\x00'], 0x5) 35.440417553s ago: executing program 0 (id=3422): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 35.079713394s ago: executing program 0 (id=3425): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 34.663710278s ago: executing program 3 (id=3427): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 34.607348482s ago: executing program 0 (id=3428): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x28, 0x0, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 34.390620035s ago: executing program 3 (id=3429): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4004, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x9e4, 0x5, 0x2, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003b000b05d25a806c8c6394f90224fc60100005000a0002", 0x1b}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000500)="630b00dcb95b0e4afdb20104bb4e", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a26c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x200}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast1}}}], 0x20}, 0x8000) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) close(r0) 31.539099981s ago: executing program 0 (id=3430): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r0, &(0x7f0000000400)="f4e46e149e703c4a33781b042b35a74fcad339c5d7427fc18531613fd81fc826c5d3145a01d9ad1449df48f526c4440a84cb8ce76dc35c2c"}, 0x20) r1 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x3, 0x0, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x5, 0x80, 0x6, 0x7, 0xb0, 0xfd, 0x0, 0x6, 0x10003, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000680), 0x3}, 0x100410, 0x1, 0x5, 0x3, 0x2000000000000, 0x4, 0x2, 0x0, 0x56, 0x0, 0x4}, r0, 0xd, 0xffffffffffffffff, 0x5) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x11, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) sendmsg$sock(r3, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4}, 0x4) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000060) r7 = socket$kcm(0x2c, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0xfffffff7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20) 31.538107411s ago: executing program 1 (id=3431): r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000001300)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67152944, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xc0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 31.537718481s ago: executing program 3 (id=3432): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map, 0x14, 0x0, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r0, r1, 0x7, 0x24, 0x0, @void, @void, @void, @value, r2}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0xb}, 0x109008, 0x0, 0x93c0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x20048888) 31.37977121s ago: executing program 2 (id=3433): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 31.37932819s ago: executing program 3 (id=3434): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors_recursive\x00', 0x7a44, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.swap.current\x00', 0x100002, 0x0) 31.261325827s ago: executing program 3 (id=3435): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xcda}, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x894c, 0x0) (async) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x894c, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pim6reg\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10e) r2 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@jmp={0x5, 0x0, 0xc, 0xa, 0x9, 0x2, 0x8}, @generic={0x79, 0x0, 0x0, 0xc0}, @generic={0x5, 0x8, 0x4, 0x3, 0x100}, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@jmp={0x5, 0x0, 0xc, 0xa, 0x9, 0x2, 0x8}, @generic={0x79, 0x0, 0x0, 0xc0}, @generic={0x5, 0x8, 0x4, 0x3, 0x100}, @exit, @alu={0x5, 0x0, 0xd, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0xfffffffffffffffe, 0x0) (async) bpf$MAP_CREATE(0x0, 0xfffffffffffffffe, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000980)={&(0x7f0000000340)=@l2={0x1f, 0x200, @none, 0x7}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="9d63fcd4ac0e69d8b0ba45eae344b5f9fd5da1e14554567a74931eb98a0991b2b731756a3e58e0a7da8e17d0cab122fb7b4a8e8630fe151aae9b4220e5a7be33c2a8a9244469d9245598647222e54db2ffeed3c68f1f6b7ac883b564201e9be0e1e063ea9d31db78be6c0d1dbfbc433b0fc5a3763b08f83f718ab1e4ee59f2972e786e245b970b4b6fc34dc566f23a178a296c06bda0c8a7fba0f4", 0x9b}, {&(0x7f0000000740)="88ae76a9f799bdb6736e6c2bfeafa47d0e3a2fe8bc6d6b633bf5e2590864832509818d5d028331b991741d762088e1bdf8aaa5c1126e7a7a969131a32bd8b88e845d28af285c2bc1850efb8c543b34150cdbd46ce88977e50a517668fcd475a4e9deb940a519e755da1cb945005786a819de8b168b", 0x75}], 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="d80000000000000019010000080000004b34f4bec17bfd813bb4e9ff0b78a4b87fb0bdec07438cd908a38cc5b50bfa142e9046775f9078989b1e52ed30dfe9c116169f43aaa2f9e87df5d68a57eae4deadb07d3da551fd5a35bf3d73233b162aa883ed1e1c7a51fe24a658f5d0c3360e46571718702afd69e4607ab32faef3f04ca1fe36d392ca61fdaed10c4808ea59ef405a9d73ac08f3ac4e30bdad0671603a29b823a2e9f7c7198ac46c21b7353b25b675ff190250364d0f66e65f16635fe2f41bf59a2a08df67287df30e8eee5f3e807ca4cfc888d5d6af0001040000000000000000000000001401000007000000bcfbdf352a36b0340b236c5ff27e0754242ee3cd962c9b785d5f3ba2eedd1b5a9da9b82cb409222a8c06838f6ea963c06728fda3a9a70c4972eb088ff0da0f3f4342cf3dc640a5a5486c6a20a387ef9b301bafcc79c41d552f3e7c2aa2da54df0de1031397e933564d564f854e4288ecc161897a862512eb4b52136eaaa3c2e0b9cf0de3e23b4e92c391fccc71ed5379c77d000000000000"], 0x180}, 0x1) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) socket$kcm(0x22, 0x2, 0x21) (async) socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 31.229984908s ago: executing program 0 (id=3436): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x1040, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000200)="707e89fa5ce189346cdc4eed903851af875cbffdf09db40c5ad58d8fbd2bd755033c6905008c395b737d51f53d1e7b5aeadd5d3a41c3e34ea84d7458077dc66ab61f6f848c778cc1d076cb95f2487afbc5a4ca1541c6c29d5a96318c1d63aafa0eb7089ffe547b5f6e9c483f08b7e353dc1cde6d6e2eebd0449897ceafbae24a7968b1f5c946bf847750a33bf217b17af166fd65f7d300f137829a7f4dfd0e21ab14d7234fc1f08ef30b524030e3004e635fbdcf596830c65b88e6d95b9e24a2b1df4c962445b4a410c65d618312cc734e37dbb4d8a0cc628e5382b32d04692f73869ef568e57c02a1d212776645dbea4c", &(0x7f0000000140)=""/74, &(0x7f0000000000)="c6ab4415774cca85e59b50984491d45a5fb767", &(0x7f0000000300)="bbd84792f2ddb82ffcd3991017493544c96d1baf6c45052d3033ba5a1621955f968c217c977523ff8c3abf401bd61736ee926326037c00ed7afd113eb5ba766517", 0x401, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) 31.186360291s ago: executing program 2 (id=3437): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 31.127748374s ago: executing program 1 (id=3438): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x0, 0x3, 0x4}, {}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c805000000000000290000000b00000043b6a6b2aa"], 0x5c8}, 0x0) 30.983111053s ago: executing program 2 (id=3439): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000046c0)={@fallback, 0xffffffffffffffff, 0x0, 0x10}, 0x20) 30.931078006s ago: executing program 1 (id=3440): r0 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/670], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) socket$kcm(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/670], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) (async) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200cb697efb"}) (async) 30.68306801s ago: executing program 1 (id=3441): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xffffff1f, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 30.682167091s ago: executing program 2 (id=3442): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xa, 0x530, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffa, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x6, 0x5, 0x0, 0x4, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x9, 0x12b}, 0x8000, 0xffffffffffffff77, 0x80000000, 0x5, 0x2, 0x7, 0x80, 0x0, 0x80, 0x0, 0x100000001}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x6, 0x5, 0x0, 0x4, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x9, 0x12b}, 0x8000, 0xffffffffffffff77, 0x80000000, 0x5, 0x2, 0x7, 0x80, 0x0, 0x80, 0x0, 0x100000001}) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10222000, &(0x7f0000000200)="1d5b1aa2b5345c5d73f0a66a57e157b4c130a20da7e24a6f7d5b25430260384302da0e545e74e736a7453ff0f7c6a74340fba90f26a7705f54641d5e9e752a8e75a66433d48e1458858757fc7d70c28fe7dfa71b0074ac95a6e770f2ab6223387d4fd173e34bec1e72e126c60b75ba0bd775f9cb62", 0x75, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x84, 0x1}], 0x10}, 0x8844) (async) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x84, 0x1}], 0x10}, 0x8844) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r5}, 0x10) socket$kcm(0x10, 0x3, 0x10) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 30.563496818s ago: executing program 3 (id=3443): close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x2, 0x0, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) openat$cgroup(r1, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) socket$kcm(0x10, 0x2, 0x0) unlink(&(0x7f00000006c0)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb017482d8326e8b001800000000000000560000005600000004000000020000000000000a010000000c0000000300000f02000000010000000180000001f0ffff040000000300000007000000050000000500000005000000f8a4ee0000000000000901000000080000000000001202000000"], &(0x7f0000000280)=""/199, 0x74, 0xc7, 0x0, 0xffffff80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4b, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x2, 0x1, 0x401}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8993}, 0x94) 30.562460748s ago: executing program 0 (id=3444): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000070000009500"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x20, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000b80000000000000001000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000048146dea22942a9b891e954694653437b7169aae048f290c2817c01b49b81f2b023ef006ba709ba402adcfb408b69625f99e81dc136f321523d2e349929dba0bd54a1fae4ccf8cef7e2c4243cb80d4c1705830c4ab0bd9e5544d8493ff629724a2cdca80750e2686d89dc091ddfcedc3664c23360a4d9d2222fb3b6947139cb29c2ffa81", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000060fd0000850000000600000085100000feffffff05390c000b00000088b40200f0ffffff185200000900000000000000000000008520000001000000ac23100010000000185b00000700"/160], &(0x7f0000000440)='GPL\x00', 0x401, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000680)={0x5, 0x4}, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="4ba5a10b80a2198af3a7b6f173e3554fe060", &(0x7f00000000c0)=""/234, &(0x7f0000000300)="c4be4bdffb13b140a87bef8d48a13e09ea2e281b56953ebfb502a5ab7a4a0f5d81f76aaeb0ace0c486c6f84f49d062cfa224b16f3bcf63525b7823659788beb7099ca368cb2588f31817d73c33eec6ca323743906c146716d95f0dcc9bf5bc951dcfd6f096816896c8c4de617e58c7b807498e0fb14115655d37838536856f0ae3eb422ecc9e007277305f5e84f5f6f382ecc03f3c260212d1add0c630dc49d9cecb7fe0e5c0975b2412e7ecca4c6ee228f49e", &(0x7f00000001c0)="ddf8c7d156a18dd7d897f2693ae8a0046163045f7691697fdb47ab6ac663bad7bfd3be5dbdb5f6c70ff3acbbd1059ce93a1874776952c580e29ad863a8e0717a4589f010ad96fb90e58e551570d6a5a813d9b5cdfef528d832a163d7206d1198738ba8850a3218b6936531693936ce03bd586c2a8825", 0x8, r0, 0x4}, 0x38) 30.307496993s ago: executing program 1 (id=3445): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) 30.272315464s ago: executing program 1 (id=3446): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180266115ff8a6444bddc37a000000000000000900000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 9.706335374s ago: executing program 32 (id=3444): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5f, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1808000000000000000000000000000085000000070000009500"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x20, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000b80000000000000001000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000048146dea22942a9b891e954694653437b7169aae048f290c2817c01b49b81f2b023ef006ba709ba402adcfb408b69625f99e81dc136f321523d2e349929dba0bd54a1fae4ccf8cef7e2c4243cb80d4c1705830c4ab0bd9e5544d8493ff629724a2cdca80750e2686d89dc091ddfcedc3664c23360a4d9d2222fb3b6947139cb29c2ffa81", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000060fd0000850000000600000085100000feffffff05390c000b00000088b40200f0ffffff185200000900000000000000000000008520000001000000ac23100010000000185b00000700"/160], &(0x7f0000000440)='GPL\x00', 0x401, 0x1000, &(0x7f0000000d80)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000680)={0x5, 0x4}, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="4ba5a10b80a2198af3a7b6f173e3554fe060", &(0x7f00000000c0)=""/234, &(0x7f0000000300)="c4be4bdffb13b140a87bef8d48a13e09ea2e281b56953ebfb502a5ab7a4a0f5d81f76aaeb0ace0c486c6f84f49d062cfa224b16f3bcf63525b7823659788beb7099ca368cb2588f31817d73c33eec6ca323743906c146716d95f0dcc9bf5bc951dcfd6f096816896c8c4de617e58c7b807498e0fb14115655d37838536856f0ae3eb422ecc9e007277305f5e84f5f6f382ecc03f3c260212d1add0c630dc49d9cecb7fe0e5c0975b2412e7ecca4c6ee228f49e", &(0x7f00000001c0)="ddf8c7d156a18dd7d897f2693ae8a0046163045f7691697fdb47ab6ac663bad7bfd3be5dbdb5f6c70ff3acbbd1059ce93a1874776952c580e29ad863a8e0717a4589f010ad96fb90e58e551570d6a5a813d9b5cdfef528d832a163d7206d1198738ba8850a3218b6936531693936ce03bd586c2a8825", 0x8, r0, 0x4}, 0x38) 5.974623422s ago: executing program 33 (id=3446): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180266115ff8a6444bddc37a000000000000000900000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)={r5}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 5.974231762s ago: executing program 34 (id=3442): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xa, 0x530, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffa, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x6, 0x5, 0x0, 0x4, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x9, 0x12b}, 0x8000, 0xffffffffffffff77, 0x80000000, 0x5, 0x2, 0x7, 0x80, 0x0, 0x80, 0x0, 0x100000001}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x4, 0x1, 0x6, 0x5, 0x0, 0x4, 0x1002, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x9, 0x12b}, 0x8000, 0xffffffffffffff77, 0x80000000, 0x5, 0x2, 0x7, 0x80, 0x0, 0x80, 0x0, 0x100000001}) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10222000, &(0x7f0000000200)="1d5b1aa2b5345c5d73f0a66a57e157b4c130a20da7e24a6f7d5b25430260384302da0e545e74e736a7453ff0f7c6a74340fba90f26a7705f54641d5e9e752a8e75a66433d48e1458858757fc7d70c28fe7dfa71b0074ac95a6e770f2ab6223387d4fd173e34bec1e72e126c60b75ba0bd775f9cb62", 0x75, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x84, 0x1}], 0x10}, 0x8844) (async) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[{0x10, 0x84, 0x1}], 0x10}, 0x8844) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000680)='GPL\x00', 0x5, 0x2a, &(0x7f0000000780)=""/42, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r5}, 0x10) socket$kcm(0x10, 0x3, 0x10) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800cac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 0s ago: executing program 35 (id=3443): close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x2, 0x0, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) openat$cgroup(r1, &(0x7f00000007c0)='syz0\x00', 0x200002, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r3}, 0x8) socket$kcm(0x10, 0x2, 0x0) unlink(&(0x7f00000006c0)='./file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb017482d8326e8b001800000000000000560000005600000004000000020000000000000a010000000c0000000300000f02000000010000000180000001f0ffff040000000300000007000000050000000500000005000000f8a4ee0000000000000901000000080000000000001202000000"], &(0x7f0000000280)=""/199, 0x74, 0xc7, 0x0, 0xffffff80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x4b, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x2, 0x1, 0x401}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8993}, 0x94) kernel console output (not intermixed with test programs): ff ff ff f7 d8 64 89 01 48 [ 461.816306][T12459] RSP: 002b:00007f97122ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.824830][T12459] RAX: ffffffffffffffda RBX: 00007f9711615fa0 RCX: 00007f971139aeb9 [ 461.832814][T12459] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 461.840801][T12459] RBP: 00007f9711408c1f R08: 0000000000000004 R09: 0000000000000000 [ 461.848785][T12459] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 461.856862][T12459] R13: 00007f9711616038 R14: 00007f9711615fa0 R15: 00007ffd290446c8 [ 461.864864][T12459] [ 461.907347][T12459] Mem-Info: [ 461.914708][T12459] active_anon:5441 inactive_anon:0 isolated_anon:0 [ 461.914708][T12459] active_file:18212 inactive_file:40069 isolated_file:0 [ 461.914708][T12459] unevictable:768 dirty:436 writeback:0 [ 461.914708][T12459] slab_reclaimable:10453 slab_unreclaimable:95547 [ 461.914708][T12459] mapped:24662 shmem:1361 pagetables:552 [ 461.914708][T12459] sec_pagetables:0 bounce:0 [ 461.914708][T12459] kernel_misc_reclaimable:0 [ 461.914708][T12459] free:1343925 free_pcp:7751 free_cma:0 [ 461.966873][T12459] Node 0 active_anon:21764kB inactive_anon:0kB active_file:72848kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98648kB dirty:1744kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11820kB pagetables:2208kB sec_pagetables:0kB all_unreclaimable? no [ 462.006091][T12459] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 462.039000][T12459] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 462.074990][T12459] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 462.082517][T12459] Node 0 DMA32 free:1470540kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21628kB inactive_anon:0kB active_file:72848kB inactive_file:159244kB unevictable:1536kB writepending:1744kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:13192kB local_pcp:2052kB free_cma:0kB [ 462.123933][T12459] lowmem_reserve[]: 0 0 0 0 0 [ 462.132953][T12459] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 462.166422][T12459] lowmem_reserve[]: 0 0 0 0 0 [ 462.176941][T12459] Node 1 Normal free:3889800kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19296kB local_pcp:7328kB free_cma:0kB [ 462.208579][T12459] lowmem_reserve[]: 0 0 0 0 0 [ 462.213466][T12459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 462.266311][T12459] Node 0 DMA32: 61*4kB (UME) 903*8kB (UME) 1348*16kB (UME) 1087*32kB (UME) 448*64kB (UME) 132*128kB (UME) 37*256kB (UME) 18*512kB (UME) 13*1024kB (UM) 5*2048kB (ME) 317*4096kB (M) = 1450060kB [ 462.286194][T12459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 462.363375][T12459] Node 1 Normal: 246*4kB (UME) 52*8kB (UME) 33*16kB (UME) 120*32kB (UME) 30*64kB (UE) 7*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3889800kB [ 462.403526][T12459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.413409][T12459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.423026][T12459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 462.438376][T12459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 462.465411][T12469] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1932'. [ 462.484276][T12459] 59942 total pagecache pages [ 462.489143][T12459] 0 pages in swap cache [ 462.504174][T12459] Free swap = 124996kB [ 462.510197][T12459] Total swap = 124996kB [ 462.511337][T12472] netlink: 126332 bytes leftover after parsing attributes in process `syz.3.1934'. [ 462.514395][T12459] 2097051 pages RAM [ 462.544300][T12459] 0 pages HighMem/MovableOnly [ 462.549161][T12459] 416922 pages reserved [ 462.553347][T12474] netlink: 126332 bytes leftover after parsing attributes in process `syz.3.1934'. [ 462.590334][T12459] 0 pages cma reserved [ 462.850357][T12482] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1936'. [ 465.109930][T12494] tap0: tun_chr_ioctl cmd 1074025677 [ 465.136774][T12494] tap0: linktype set to 778 [ 466.115395][T12518] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1945'. [ 466.138614][T12523] validate_nla: 5 callbacks suppressed [ 466.138634][T12523] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 466.200327][T12523] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 466.249863][T12524] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 466.259300][T12523] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 466.350034][T12524] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 467.145317][T12545] delete_channel: no stack [ 467.165403][T12545] delete_channel: no stack [ 467.270293][T12548] netlink: 'syz.2.1957': attribute type 1 has an invalid length. [ 467.288659][T12548] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1957'. [ 467.951059][T12564] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1961'. [ 467.956482][T12566] netlink: 'syz.0.1960': attribute type 3 has an invalid length. [ 468.030950][T12566] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1960'. [ 468.364610][T12576] netlink: 'syz.3.1962': attribute type 3 has an invalid length. [ 468.385036][T12576] netlink: 'syz.3.1962': attribute type 1 has an invalid length. [ 468.398885][T12576] netlink: 197476 bytes leftover after parsing attributes in process `syz.3.1962'. [ 468.512439][T12577] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1963'. [ 468.848054][T12586] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 468.870316][T12584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.430223][T12608] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1973'. [ 469.721947][T12618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1976'. [ 471.944203][T12648] validate_nla: 3 callbacks suppressed [ 471.944223][T12648] netlink: 'syz.3.1984': attribute type 5 has an invalid length. [ 472.700644][T12666] netlink: 'syz.0.1989': attribute type 6 has an invalid length. [ 472.729816][T12666] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1989'. [ 473.313560][T12675] syz.1.1993 (12675) used greatest stack depth: 17960 bytes left [ 473.444033][T12684] netlink: 'syz.1.1996': attribute type 1 has an invalid length. [ 473.452300][T12684] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1996'. [ 473.462327][T12684] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1996'. [ 474.476484][T12722] : port 1(gretap0) entered blocking state [ 474.488937][T12722] : port 1(gretap0) entered disabled state [ 474.495337][T12722] gretap0: entered allmulticast mode [ 474.507005][T12722] gretap0: entered promiscuous mode [ 474.519435][T12722] : port 2(veth0_to_team) entered blocking state [ 474.526349][T12722] : port 2(veth0_to_team) entered disabled state [ 474.542122][T12722] veth0_to_team: entered allmulticast mode [ 474.554191][T12722] veth0_to_team: entered promiscuous mode [ 479.295771][T12767] netlink: 151496 bytes leftover after parsing attributes in process `syz.3.2019'. [ 481.617409][T12788] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2026'. [ 483.760628][T12834] netlink: 'syz.3.2040': attribute type 12 has an invalid length. [ 483.899357][T12834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2040'. [ 485.393652][T12860] netlink: 'syz.1.2048': attribute type 3 has an invalid length. [ 485.406255][T12860] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2048'. [ 485.643745][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2052'. [ 485.713325][T12880] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2052'. [ 486.508425][T12886] netlink: 142528 bytes leftover after parsing attributes in process `syz.1.2054'. [ 486.583695][T12886] netlink: 'syz.1.2054': attribute type 1 has an invalid length. [ 487.260363][T12910] netlink: 'syz.3.2060': attribute type 5 has an invalid length. [ 487.288210][T12910] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2060'. [ 487.355831][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 490.498689][T12974] netlink: 'syz.0.2079': attribute type 15 has an invalid length. [ 490.518633][T12974] netlink: 'syz.0.2079': attribute type 7 has an invalid length. [ 490.531644][T12974] netlink: 'syz.0.2079': attribute type 46 has an invalid length. [ 490.558779][T12974] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2079'. [ 491.275862][T12989] net_ratelimit: 217 callbacks suppressed [ 491.275884][T12989] netlink: set zone limit has 8 unknown bytes [ 491.423938][T12993] netlink: 'syz.2.2086': attribute type 3 has an invalid length. [ 491.458725][T12993] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2086'. [ 492.016201][T13007] netlink: 'syz.1.2091': attribute type 4 has an invalid length. [ 492.039668][T13007] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2091'. [ 492.069437][T13011] bridge0: port 3(`) entered disabled state [ 492.080123][T13011] bridge_slave_1: left allmulticast mode [ 492.099833][T13011] bridge_slave_1: left promiscuous mode [ 492.106282][T13011] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.148500][T13011] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.948377][T13058] C: renamed from team_slave_0 [ 493.966820][T13058] netlink: 'syz.1.2105': attribute type 2 has an invalid length. [ 493.976872][T13058] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2105'. [ 493.987225][T13058] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 497.905653][T13145] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2130'. [ 498.034102][T13151] netlink: 'syz.0.2133': attribute type 10 has an invalid length. [ 498.355047][T13158] syzkaller0: entered promiscuous mode [ 498.406938][T13158] syzkaller0: entered allmulticast mode [ 499.422940][T13177] netlink: 'syz.2.2141': attribute type 6 has an invalid length. [ 499.444571][T13177] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2141'. [ 501.069708][T13179] netlink: 'syz.2.2141': attribute type 10 has an invalid length. [ 501.078064][T13179] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2141'. [ 501.095274][T13179] batman_adv: batadv0: Adding interface: virt_wifi0 [ 501.136462][T13179] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.186894][T13179] batman_adv: batadv0: Interface activated: virt_wifi0 [ 501.233809][T13184] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2142'. [ 501.486824][T13192] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2146'. [ 501.818670][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.828354][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.220988][T13208] netlink: 'syz.3.2150': attribute type 39 has an invalid length. [ 502.767242][T13215] netlink: 'syz.0.2151': attribute type 46 has an invalid length. [ 504.612595][T13266] netlink: 'syz.3.2169': attribute type 10 has an invalid length. [ 504.786875][T13266] C: left promiscuous mode [ 504.804139][T13266] C: left allmulticast mode [ 505.158951][T13266] ` (unregistering): Port device C removed [ 505.172770][T13266] team_slave_1: left promiscuous mode [ 505.199025][T13266] team_slave_1: left allmulticast mode [ 505.236785][T13266] ` (unregistering): Port device team_slave_1 removed [ 505.285167][T13266] ` (unregistering): Port device wlan1 removed [ 505.309217][T13266] dummy0: left promiscuous mode [ 505.316951][T13266] dummy0: left allmulticast mode [ 505.365910][T13266] ` (unregistering): Port device dummy0 removed [ 505.617535][T13277] pimreg: tun_chr_ioctl cmd 1074025677 [ 505.642194][T13277] pimreg: linktype set to 270 [ 506.499604][T13300] : renamed from vlan1 [ 507.396098][T13305] netlink: 'syz.2.2181': attribute type 10 has an invalid length. [ 508.256849][T13327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2187'. [ 508.662867][T13342] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2192'. [ 508.683691][T13342] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 508.704535][T13342] openvswitch: netlink: Message has 1 unknown bytes. [ 508.851319][T13340] -1: renamed from syzkaller0 [ 509.657935][T13362] netlink: 'syz.1.2198': attribute type 21 has an invalid length. [ 510.854416][T13384] -1: renamed from syzkaller0 [ 510.951830][T13386] netlink: 'syz.1.2207': attribute type 2 has an invalid length. [ 510.981484][T13386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2207'. [ 512.257871][T13386] netlink: 'syz.1.2207': attribute type 16 has an invalid length. [ 512.278913][T13386] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2207'. [ 512.288287][T13386] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.295608][T13386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.566012][T13400] netlink: 'syz.2.2209': attribute type 16 has an invalid length. [ 512.588847][T13400] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2209'. [ 513.292065][T13415] netlink: 'syz.1.2213': attribute type 21 has an invalid length. [ 513.309122][T13415] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2213'. [ 513.832211][T13424] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2217'. [ 513.868928][T13424] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 513.877297][T13424] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 514.229834][T13433] -1: renamed from syzkaller0 [ 514.611822][T13449] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2225'. [ 515.026612][T13458] syzkaller0: entered promiscuous mode [ 515.039019][T13458] syzkaller0: entered allmulticast mode [ 519.455803][T13483] netlink: 'syz.0.2237': attribute type 10 has an invalid length. [ 520.506582][T13523] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 520.527817][T13523] bond0: (slave bond_slave_0): Releasing backup interface [ 520.824377][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.860250][T13533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.889177][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.896886][T13533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.919463][T13533] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 520.926701][T13533] batman_adv: batadv0: Removing interface: virt_wifi0 [ 521.571138][ T5782] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 522.058192][T13574] netlink: 'syz.0.2264': attribute type 10 has an invalid length. [ 523.490204][T13625] netlink: 'syz.0.2280': attribute type 21 has an invalid length. [ 526.146988][T13662] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2292'. [ 526.343852][T13688] FAULT_INJECTION: forcing a failure. [ 526.343852][T13688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.357215][T13688] CPU: 1 PID: 13688 Comm: syz.1.2299 Not tainted syzkaller #0 [ 526.364736][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.374848][T13688] Call Trace: [ 526.378163][T13688] [ 526.381114][T13688] dump_stack_lvl+0x18c/0x250 [ 526.385931][T13688] ? show_regs_print_info+0x20/0x20 [ 526.391145][T13688] ? load_image+0x400/0x400 [ 526.395661][T13688] ? __might_fault+0xaa/0x120 [ 526.400352][T13688] ? __lock_acquire+0x7d40/0x7d40 [ 526.405666][T13688] should_fail_ex+0x39d/0x4d0 [ 526.410391][T13688] _copy_from_user+0x2f/0xe0 [ 526.415057][T13688] ___sys_sendmsg+0x1c7/0x360 [ 526.419860][T13688] ? get_pid_task+0x20/0x1e0 [ 526.424484][T13688] ? __sys_sendmsg+0x2a0/0x2a0 [ 526.429317][T13688] ? __lock_acquire+0x7d40/0x7d40 [ 526.434409][T13688] __se_sys_sendmsg+0x1c2/0x2b0 [ 526.439281][T13688] ? __x64_sys_sendmsg+0x80/0x80 [ 526.444268][T13688] ? lockdep_hardirqs_on+0x98/0x150 [ 526.449500][T13688] do_syscall_64+0x55/0xa0 [ 526.453938][T13688] ? clear_bhb_loop+0x40/0x90 [ 526.458645][T13688] ? clear_bhb_loop+0x40/0x90 [ 526.463350][T13688] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.469280][T13688] RIP: 0033:0x7fedeeb9aeb9 [ 526.473725][T13688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.493528][T13688] RSP: 002b:00007fedefa05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.502056][T13688] RAX: ffffffffffffffda RBX: 00007fedeee15fa0 RCX: 00007fedeeb9aeb9 [ 526.510072][T13688] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000004 [ 526.518064][T13688] RBP: 00007fedefa05090 R08: 0000000000000000 R09: 0000000000000000 [ 526.526140][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.534126][T13688] R13: 00007fedeee16038 R14: 00007fedeee15fa0 R15: 00007ffd9bd333a8 [ 526.542145][T13688] [ 527.452439][T13719] FAULT_INJECTION: forcing a failure. [ 527.452439][T13719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.471560][T13719] CPU: 1 PID: 13719 Comm: syz.2.2310 Not tainted syzkaller #0 [ 527.479109][T13719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 527.489820][T13719] Call Trace: [ 527.493142][T13719] [ 527.496117][T13719] dump_stack_lvl+0x18c/0x250 [ 527.500858][T13719] ? show_regs_print_info+0x20/0x20 [ 527.506131][T13719] ? load_image+0x400/0x400 [ 527.510707][T13719] ? __lock_acquire+0x7d40/0x7d40 [ 527.515791][T13719] should_fail_ex+0x39d/0x4d0 [ 527.520535][T13719] _copy_from_user+0x2f/0xe0 [ 527.525270][T13719] __copy_msghdr+0x3bb/0x580 [ 527.529939][T13719] ___sys_sendmsg+0x214/0x360 [ 527.534697][T13719] ? get_pid_task+0x20/0x1e0 [ 527.539352][T13719] ? __sys_sendmsg+0x2a0/0x2a0 [ 527.544305][T13719] ? __lock_acquire+0x7d40/0x7d40 [ 527.549438][T13719] __se_sys_sendmsg+0x1c2/0x2b0 [ 527.554430][T13719] ? __x64_sys_sendmsg+0x80/0x80 [ 527.559446][T13719] ? lockdep_hardirqs_on+0x98/0x150 [ 527.564705][T13719] do_syscall_64+0x55/0xa0 [ 527.569187][T13719] ? clear_bhb_loop+0x40/0x90 [ 527.573907][T13719] ? clear_bhb_loop+0x40/0x90 [ 527.578632][T13719] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.584694][T13719] RIP: 0033:0x7f368079aeb9 [ 527.589157][T13719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.608978][T13719] RSP: 002b:00007f36816dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 527.617439][T13719] RAX: ffffffffffffffda RBX: 00007f3680a15fa0 RCX: 00007f368079aeb9 [ 527.625463][T13719] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000004 [ 527.633486][T13719] RBP: 00007f36816dc090 R08: 0000000000000000 R09: 0000000000000000 [ 527.641495][T13719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.649516][T13719] R13: 00007f3680a16038 R14: 00007f3680a15fa0 R15: 00007ffef47b2508 [ 527.657562][T13719] [ 529.140874][T13735] netlink: 'syz.2.2315': attribute type 21 has an invalid length. [ 529.165276][T13735] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2315'. [ 529.392711][T13740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 529.407003][T13740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 529.433755][T13740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 529.454529][T13740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 529.569634][T13740] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 529.577873][T13740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 530.354785][ T9462] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.478957][ T9462] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.523100][T13753] FAULT_INJECTION: forcing a failure. [ 530.523100][T13753] name failslab, interval 1, probability 0, space 0, times 0 [ 530.541551][T13753] CPU: 1 PID: 13753 Comm: syz.1.2321 Not tainted syzkaller #0 [ 530.549184][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 530.559304][T13753] Call Trace: [ 530.562626][T13753] [ 530.565606][T13753] dump_stack_lvl+0x18c/0x250 [ 530.570369][T13753] ? show_regs_print_info+0x20/0x20 [ 530.575622][T13753] ? load_image+0x400/0x400 [ 530.580200][T13753] ? __might_sleep+0xe0/0xe0 [ 530.584839][T13753] ? __lock_acquire+0x7d40/0x7d40 [ 530.589890][T13753] ? __lock_acquire+0x1273/0x7d40 [ 530.595062][T13753] should_fail_ex+0x39d/0x4d0 [ 530.599817][T13753] should_failslab+0x9/0x20 [ 530.604408][T13753] slab_pre_alloc_hook+0x59/0x310 [ 530.609528][T13753] kmem_cache_alloc_node+0x60/0x320 [ 530.614801][T13753] ? __alloc_skb+0x103/0x2c0 [ 530.619484][T13753] __alloc_skb+0x103/0x2c0 [ 530.624060][T13753] alloc_skb_with_frags+0xca/0x7b0 [ 530.629277][T13753] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 530.636135][T13753] sock_alloc_send_pskb+0x883/0x9a0 [ 530.641538][T13753] ? sock_kzfree_s+0x50/0x50 [ 530.646242][T13753] ? dev_get_by_index+0x22/0x2d0 [ 530.651247][T13753] ? dev_get_by_index+0x22/0x2d0 [ 530.656262][T13753] packet_sendmsg+0x316e/0x4d70 [ 530.661215][T13753] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 530.666996][T13753] ? __might_sleep+0xe0/0xe0 [ 530.671714][T13753] ? verify_lock_unused+0x140/0x140 [ 530.676941][T13753] ? perf_trace_lock_acquire+0x34f/0x410 [ 530.682627][T13753] ? aa_sk_perm+0x83c/0x970 [ 530.687176][T13753] ? packet_getsockopt+0xad0/0xad0 [ 530.692334][T13753] ? aa_sock_msg_perm+0x94/0x150 [ 530.697303][T13753] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 530.702730][T13753] ? security_socket_sendmsg+0x80/0xa0 [ 530.708216][T13753] ? packet_getsockopt+0xad0/0xad0 [ 530.713446][T13753] ____sys_sendmsg+0x5ba/0x960 [ 530.718243][T13753] ? __lock_acquire+0x7d40/0x7d40 [ 530.723391][T13753] ? __asan_memset+0x22/0x40 [ 530.728102][T13753] ? __sys_sendmsg_sock+0x30/0x30 [ 530.733155][T13753] ? __import_iovec+0x3fa/0x850 [ 530.738059][T13753] ? import_iovec+0x73/0xa0 [ 530.743125][T13753] ___sys_sendmsg+0x2a6/0x360 [ 530.747824][T13753] ? get_pid_task+0x20/0x1e0 [ 530.752474][T13753] ? __sys_sendmsg+0x2a0/0x2a0 [ 530.757304][T13753] ? __lock_acquire+0x7d40/0x7d40 [ 530.762485][T13753] __se_sys_sendmsg+0x1c2/0x2b0 [ 530.767362][T13753] ? __x64_sys_sendmsg+0x80/0x80 [ 530.772571][T13753] ? lockdep_hardirqs_on+0x98/0x150 [ 530.777806][T13753] do_syscall_64+0x55/0xa0 [ 530.782255][T13753] ? clear_bhb_loop+0x40/0x90 [ 530.786960][T13753] ? clear_bhb_loop+0x40/0x90 [ 530.791685][T13753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.797600][T13753] RIP: 0033:0x7fedeeb9aeb9 [ 530.802039][T13753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.821669][T13753] RSP: 002b:00007fedefa05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.830112][T13753] RAX: ffffffffffffffda RBX: 00007fedeee15fa0 RCX: 00007fedeeb9aeb9 [ 530.838104][T13753] RDX: 0000000000008000 RSI: 0000200000000440 RDI: 0000000000000004 [ 530.846097][T13753] RBP: 00007fedefa05090 R08: 0000000000000000 R09: 0000000000000000 [ 530.854188][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.862268][T13753] R13: 00007fedeee16038 R14: 00007fedeee15fa0 R15: 00007ffd9bd333a8 [ 530.870293][T13753] [ 530.986521][ T9462] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.138364][ T9462] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.457069][T13738] chnl_net:caif_netlink_parms(): no params data found [ 531.668696][ T5782] Bluetooth: hci2: command tx timeout [ 531.898990][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.906231][T13738] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.923264][T13738] bridge_slave_0: entered allmulticast mode [ 531.933042][T13738] bridge_slave_0: entered promiscuous mode [ 531.942450][T13738] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.950427][T13738] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.957760][T13738] bridge_slave_1: entered allmulticast mode [ 531.965856][T13738] bridge_slave_1: entered promiscuous mode [ 532.119688][T13790] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2330'. [ 533.022629][T13738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.036385][T13738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.293250][T13810] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2332'. [ 533.553331][T13738] team0: Port device team_slave_0 added [ 533.601729][T13738] team0: Port device team_slave_1 added [ 533.757044][ T5782] Bluetooth: hci2: command tx timeout [ 533.950785][ T9462] gretap0 (unregistering): left allmulticast mode [ 533.965864][ T9462] gretap0 (unregistering): left promiscuous mode [ 533.974248][ T9462] : port 1(gretap0) entered disabled state [ 534.188298][T13814] netlink: 'syz.1.2331': attribute type 4 has an invalid length. [ 534.232258][T13814] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2331'. [ 534.306933][T13814] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 534.417285][T13738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.433589][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.466191][T13738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.509562][T13738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.550440][T13738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.647087][T13738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.963747][T13738] hsr_slave_0: entered promiscuous mode [ 534.977050][T13738] hsr_slave_1: entered promiscuous mode [ 535.450315][T13844] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2341'. [ 535.597983][T13843] delete_channel: no stack [ 535.841995][ T5782] Bluetooth: hci2: command tx timeout [ 536.011713][ T9462] veth0_to_team: left allmulticast mode [ 536.017398][ T9462] veth0_to_team: left promiscuous mode [ 536.054135][ T9462] : port 2(veth0_to_team) entered disabled state [ 536.095916][ T9462] hsr_slave_0: left promiscuous mode [ 536.119913][ T9462] hsr_slave_1: left promiscuous mode [ 536.135577][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.144634][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.166984][ T9462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.174727][ T9462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.231128][ T9462] veth1_macvtap: left promiscuous mode [ 536.237380][ T9462] veth0_macvtap: left promiscuous mode [ 536.262477][ T9462] veth1_vlan: left promiscuous mode [ 536.392867][T13875] delete_channel: no stack [ 536.397524][T13875] delete_channel: no stack [ 537.215138][ T9462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.224063][ T9462] bond_slave_1 (unregistering): left promiscuous mode [ 537.269766][ T9462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.282154][ T9462] bond_slave_0 (unregistering): left promiscuous mode [ 537.511893][ T9462] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 537.521558][ T9462] batadv0 (unregistering): left promiscuous mode [ 537.595659][ T9462] bond0 (unregistering): Released all slaves [ 537.909295][ T5782] Bluetooth: hci2: command tx timeout [ 538.334912][T13906] netlink: 'syz.0.2354': attribute type 29 has an invalid length. [ 538.363429][T13906] netlink: 'syz.0.2354': attribute type 29 has an invalid length. [ 538.477464][T13738] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.533227][T13738] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.581327][T13738] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.619357][T13738] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 538.795502][T13922] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2356'. [ 538.815524][T13922] netlink: 'syz.0.2356': attribute type 4 has an invalid length. [ 538.895136][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.947749][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.984429][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.991697][T10001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.081205][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.088496][ T9467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.223845][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.470491][T13738] veth0_vlan: entered promiscuous mode [ 540.535809][T13738] veth1_vlan: entered promiscuous mode [ 540.701688][T13738] veth0_macvtap: entered promiscuous mode [ 540.759695][T13738] veth1_macvtap: entered promiscuous mode [ 540.794987][T13976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.856622][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.882168][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.906832][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.928124][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.946422][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.957779][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.969851][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.980029][T13738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.992537][T13738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.043134][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.147473][T13976] syzkaller0: entered promiscuous mode [ 541.154477][T13976] syzkaller0: entered allmulticast mode [ 541.162972][T13738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.172117][T13738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.181992][T13738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.198348][T13738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.610897][T14002] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2369'. [ 543.344717][T14002] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2369'. [ 543.549733][ T9462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.557602][ T9462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.637250][ T9467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.700132][ T9467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.394103][T14037] syzkaller0: mtu less than device minimum [ 544.955201][T14045] bridge0: port 3(gretap0) entered blocking state [ 544.999506][T14045] bridge0: port 3(gretap0) entered disabled state [ 545.022326][T14045] gretap0: entered allmulticast mode [ 545.070134][T14045] gretap0: entered promiscuous mode [ 545.076088][T14045] bridge0: port 3(gretap0) entered blocking state [ 545.083109][T14045] bridge0: port 3(gretap0) entered forwarding state [ 545.434212][T13740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.446426][T13740] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.455239][T13740] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.470051][T13740] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.479589][T13740] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.493713][T13740] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.593294][T14056] netlink: 'syz.3.2378': attribute type 10 has an invalid length. [ 545.620416][T14056] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2378'. [ 545.823003][ T1087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.121882][T14068] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2381'. [ 546.151798][ T1087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.238487][T14070] netlink: 'syz.3.2382': attribute type 21 has an invalid length. [ 546.383965][T14070] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2382'. [ 546.431317][ T1087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.719748][T14080] bond0: entered promiscuous mode [ 546.751704][T14080] bond_slave_1: entered promiscuous mode [ 546.881372][ T1087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.080420][T14052] chnl_net:caif_netlink_parms(): no params data found [ 547.141945][T14087] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2385'. [ 547.594074][ T5782] Bluetooth: hci4: command tx timeout [ 547.715641][T14052] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.798889][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.879799][T14052] bridge_slave_0: entered allmulticast mode [ 547.933706][T14052] bridge_slave_0: entered promiscuous mode [ 548.018913][T14052] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.026254][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.324844][T14052] bridge_slave_1: entered allmulticast mode [ 548.376240][T14052] bridge_slave_1: entered promiscuous mode [ 548.576444][T14052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.583736][T14052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.909574][ T5782] Bluetooth: hci4: command tx timeout [ 550.355230][T14052] team0: Port device team_slave_0 added [ 550.365671][T14052] team0: Port device team_slave_1 added [ 550.437149][T14052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.511937][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.588570][T14052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.019822][T14052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.027076][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.173175][T14052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.784584][T14132] netlink: 'syz.2.2393': attribute type 10 has an invalid length. [ 551.988715][ T5782] Bluetooth: hci4: command tx timeout [ 552.043032][T14052] hsr_slave_0: entered promiscuous mode [ 552.067740][T14052] hsr_slave_1: entered promiscuous mode [ 552.128811][T14052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.170937][T14052] Cannot create hsr debugfs directory [ 552.409484][T14151] netlink: 'syz.1.2399': attribute type 39 has an invalid length. [ 553.139248][T14164] netlink: 'syz.3.2401': attribute type 21 has an invalid length. [ 553.147141][T14164] netlink: 'syz.3.2401': attribute type 15 has an invalid length. [ 554.088538][ T5782] Bluetooth: hci4: command tx timeout [ 555.202779][T14192] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2405'. [ 556.125955][ T1087] hsr_slave_0: left promiscuous mode [ 556.138184][ T1087] hsr_slave_1: left promiscuous mode [ 556.199151][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.214946][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.235601][ T1087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.243271][ T1087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.259703][ T1087] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 556.267104][ T1087] batman_adv: batadv0: Removing interface: virt_wifi0 [ 556.300078][ T1087] veth1_macvtap: left promiscuous mode [ 556.305678][ T1087] veth0_macvtap: left promiscuous mode [ 556.311793][ T1087] veth1_vlan: left promiscuous mode [ 557.896155][T14052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 557.908115][T14052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 557.927897][T14052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 557.982583][T14052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 558.310511][T14052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.385978][T14052] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.428154][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.435462][ T9462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.506611][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.514066][ T9462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.615179][T14233] netlink: 'syz.1.2411': attribute type 9 has an invalid length. [ 558.643738][T14233] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2411'. [ 559.479169][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.726679][T14052] veth0_vlan: entered promiscuous mode [ 559.776174][T14052] veth1_vlan: entered promiscuous mode [ 560.042116][T14052] veth0_macvtap: entered promiscuous mode [ 560.123086][T14052] veth1_macvtap: entered promiscuous mode [ 560.241640][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.264959][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.276702][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.287524][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.299827][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.369353][T14275] netlink: 'syz.1.2418': attribute type 39 has an invalid length. [ 560.398250][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.416734][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.428103][T14052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.445873][T14052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.459293][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.490650][T14052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.500474][T14052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.510995][T14052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.520139][T14052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.174338][ T9462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.198487][ T9462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.306723][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.361771][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.409504][T14302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2423'. [ 561.525427][T14302] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2423'. [ 563.237612][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.244301][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.923507][T13740] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 563.934968][T13740] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 563.943459][T13740] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 563.957699][T13740] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 563.969397][T13740] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 563.977059][T13740] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 564.684091][ T9462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.814764][T14361] netlink: 'syz.0.2430': attribute type 39 has an invalid length. [ 565.074151][T14341] chnl_net:caif_netlink_parms(): no params data found [ 565.211493][ T9462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.504611][ T9462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.527590][T14379] syz.1.2435[14379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.724719][ T9462] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.913185][T14341] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.952129][T14341] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.987663][T14341] bridge_slave_0: entered allmulticast mode [ 566.007955][T14341] bridge_slave_0: entered promiscuous mode [ 566.033580][T14394] netlink: 'syz.0.2436': attribute type 10 has an invalid length. [ 566.069127][ T5782] Bluetooth: hci1: command tx timeout [ 566.115699][T14394] bond0: (slave bond_slave_0): Releasing backup interface [ 566.194539][T14341] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.214579][T14341] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.232719][T14341] bridge_slave_1: entered allmulticast mode [ 566.249101][T14341] bridge_slave_1: entered promiscuous mode [ 566.447498][T14341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.471250][T14341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.684129][T14341] team0: Port device team_slave_0 added [ 566.703027][T14341] team0: Port device team_slave_1 added [ 566.966008][T14341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.013278][T14341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.151929][T14341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.361141][T14341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.392667][T14341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.453533][T14341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.149002][ T5782] Bluetooth: hci1: command tx timeout [ 568.164033][T14341] hsr_slave_0: entered promiscuous mode [ 568.194464][T14341] hsr_slave_1: entered promiscuous mode [ 568.209586][T14341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.231692][T14341] Cannot create hsr debugfs directory [ 568.530031][T14451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2449'. [ 569.416289][T14472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2456'. [ 569.453819][T14472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2456'. [ 570.298825][T14476] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 570.321686][ T5782] Bluetooth: hci1: command tx timeout [ 570.866025][T14480] netlink: 'syz.1.2456': attribute type 10 has an invalid length. [ 572.393848][ T5782] Bluetooth: hci1: command tx timeout [ 572.634924][T14511] netlink: 'syz.3.2461': attribute type 21 has an invalid length. [ 572.667679][T14511] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2461'. [ 572.991508][T14509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.068903][T14515] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2462'. [ 573.082309][T14341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 573.259092][T14341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 573.297744][T14341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 573.748473][ T9462] hsr_slave_0: left promiscuous mode [ 573.818631][ T9462] hsr_slave_1: left promiscuous mode [ 573.843744][ T9462] bridge_slave_1: left allmulticast mode [ 573.849524][ T9462] bridge_slave_1: left promiscuous mode [ 573.855350][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.997162][ T9462] bridge_slave_0: left allmulticast mode [ 574.018742][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.854879][ T9462] veth0_macvtap: left promiscuous mode [ 574.878782][ T9462] veth1_vlan: left promiscuous mode [ 574.884758][ T9462] veth0_vlan: left promiscuous mode [ 577.233960][T14341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.247009][T14531] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2465'. [ 577.256849][T14533] netlink: 'syz.0.2465': attribute type 25 has an invalid length. [ 577.952588][T14341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.985391][T14573] netlink: 'syz.1.2471': attribute type 10 has an invalid length. [ 578.008981][T14573] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 578.050855][T14341] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.111060][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.118372][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.174887][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.182218][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.295452][T14586] netlink: 'syz.3.2475': attribute type 39 has an invalid length. [ 578.817970][T14341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.916372][T14341] veth0_vlan: entered promiscuous mode [ 578.943878][T14341] veth1_vlan: entered promiscuous mode [ 579.018072][T14341] veth0_macvtap: entered promiscuous mode [ 579.036705][T14341] veth1_macvtap: entered promiscuous mode [ 579.068118][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.084492][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.095054][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.110349][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.120748][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.131659][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.144203][T14341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.172515][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.192022][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.223809][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.268397][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.288577][T14341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.311785][T14341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.324293][T14341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.433104][T14341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.452435][T14341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.472481][T14341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.498480][T14341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.001230][ T3002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.048568][ T3002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.247041][T14630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2480'. [ 580.293196][ T9474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.338671][ T9474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.342881][T14630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2480'. [ 580.389182][T14634] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2480'. [ 582.126058][T14651] netlink: 'syz.3.2483': attribute type 29 has an invalid length. [ 582.334948][T14651] netlink: 'syz.3.2483': attribute type 29 has an invalid length. [ 583.123661][T14658] IPv6: pim6reg1: Disabled Multicast RS [ 586.829226][T14691] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2498'. [ 588.872904][T14740] netlink: 'syz.0.2510': attribute type 19 has an invalid length. [ 590.772519][T13740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.784787][T13740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.793991][T13740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.829883][T13740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.848056][T13740] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.855767][T13740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 591.153367][ T3002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.540374][ T3002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.175195][ T3002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.250309][T14793] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2525'. [ 592.455313][ T3002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.508285][T14793] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2525'. [ 592.805361][T14797] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2526'. [ 592.958667][T13740] Bluetooth: hci0: command tx timeout [ 593.302589][T14780] chnl_net:caif_netlink_parms(): no params data found [ 594.912616][T14780] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.947757][T14780] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.989842][T14780] bridge_slave_0: entered allmulticast mode [ 594.997402][T14780] bridge_slave_0: entered promiscuous mode [ 595.028968][T13740] Bluetooth: hci0: command tx timeout [ 595.041506][T14832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2531'. [ 595.156785][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.164875][T14780] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.181586][T14780] bridge_slave_1: entered allmulticast mode [ 595.195135][T14780] bridge_slave_1: entered promiscuous mode [ 595.517142][T14780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.644102][T14780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.706208][ T3002] gretap0 (unregistering): left allmulticast mode [ 595.736025][ T3002] gretap0 (unregistering): left promiscuous mode [ 595.743705][ T3002] : port 1(gretap0) entered disabled state [ 595.993552][T14780] team0: Port device team_slave_0 added [ 596.081665][T14780] team0: Port device team_slave_1 added [ 596.327760][T14780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.341180][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.388512][T14780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.411974][T14780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.423692][T14780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.460550][T14780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.747428][T14780] hsr_slave_0: entered promiscuous mode [ 596.769051][T14780] hsr_slave_1: entered promiscuous mode [ 596.784934][T14780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.795186][T14780] Cannot create hsr debugfs directory [ 597.108931][T13740] Bluetooth: hci0: command tx timeout [ 598.358992][T14908] netlink: 'syz.0.2548': attribute type 10 has an invalid length. [ 598.388455][T14908] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2548'. [ 599.190595][T13740] Bluetooth: hci0: command tx timeout [ 599.383370][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.406241][T14932] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.2552'. [ 599.422852][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.432750][T14932] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 599.480817][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.535061][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.544744][ T3002] bridge0: port 3(batadv0) entered disabled state [ 599.556456][ T3002] bridge_slave_1: left allmulticast mode [ 599.562900][ T3002] bridge_slave_1: left promiscuous mode [ 599.570104][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.582796][ T3002] bridge_slave_0: left promiscuous mode [ 599.590017][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.619554][ T3002] veth1_macvtap: left promiscuous mode [ 599.625264][ T3002] veth0_macvtap: left promiscuous mode [ 599.632293][ T3002] veth1_vlan: left promiscuous mode [ 599.637738][ T3002] veth0_vlan: left promiscuous mode [ 600.058942][ T3002] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 600.704981][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.714644][ T3002] bond_slave_1 (unregistering): left promiscuous mode [ 601.084564][ T3002] bond0 (unregistering): Released all slaves [ 601.213457][T14936] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 601.223205][T14936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2553'. [ 601.233502][T14936] ipvlan1: entered promiscuous mode [ 601.250566][T14936] ipvlan1: entered allmulticast mode [ 601.266815][T14936] veth0_vlan: entered allmulticast mode [ 601.283985][T14936] bridge0: port 3(ipvlan1) entered blocking state [ 601.296673][T14936] bridge0: port 3(ipvlan1) entered disabled state [ 601.314950][T14936] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 601.621367][T14944] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2556'. [ 601.631562][T14780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 601.661255][T14780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 601.699575][T14780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 601.726649][T14780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.334821][T14780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.431604][T14966] netlink: 'syz.3.2560': attribute type 41 has an invalid length. [ 602.455255][T14966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2560'. [ 602.523293][T14780] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.624727][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.632187][ T9474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.662052][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.669396][ T9474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.915876][T14780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 603.844316][T14780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.875288][T15007] netlink: 'syz.2.2568': attribute type 28 has an invalid length. [ 603.916998][T15007] netlink: 'syz.2.2568': attribute type 29 has an invalid length. [ 603.948276][T15007] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2568'. [ 604.003142][T15009] netlink: 'syz.0.2569': attribute type 41 has an invalid length. [ 604.037063][T15009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2569'. [ 604.113089][T14780] veth0_vlan: entered promiscuous mode [ 604.199846][T14780] veth1_vlan: entered promiscuous mode [ 604.359878][T14780] veth0_macvtap: entered promiscuous mode [ 604.384302][T14780] veth1_macvtap: entered promiscuous mode [ 604.548582][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.569534][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.592106][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.613197][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.638866][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.656291][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.671733][T14780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.723164][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.737432][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.750491][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.761626][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.772554][T14780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 604.796675][T14780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.814821][T14780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.832646][T14780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.844299][T14780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.886994][T14780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.920696][T14780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.133384][T15030] netlink: 'syz.2.2573': attribute type 39 has an invalid length. [ 605.434136][T15043] netlink: 'syz.3.2575': attribute type 9 has an invalid length. [ 605.450605][T15043] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2575'. [ 605.801057][ T9467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.866604][ T9467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.135566][ T9462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.155063][ T9462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.846290][T15077] netlink: 'syz.1.2578': attribute type 41 has an invalid length. [ 606.877821][T15077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2578'. [ 607.404267][T15089] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 607.420314][T15089] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2582'. [ 608.257854][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 608.805280][T15119] netlink: 'syz.2.2596': attribute type 19 has an invalid length. [ 608.813806][T15119] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2596'. [ 609.496438][T15135] netlink: 'syz.0.2600': attribute type 46 has an invalid length. [ 610.862548][T15157] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.2608'. [ 611.477065][T13740] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 611.498104][T15178] netlink: 'syz.0.2615': attribute type 21 has an invalid length. [ 611.703239][T15185] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2617'. [ 613.109468][ T9467] wlan1: Trigger new scan to find an IBSS to join [ 614.583088][ T9467] wlan1: Creating new IBSS network, BSSID 8e:f6:1b:e4:ac:19 [ 615.014070][T15205] netlink: 'syz.1.2626': attribute type 21 has an invalid length. [ 615.041210][T15205] netlink: 'syz.1.2626': attribute type 1 has an invalid length. [ 615.051826][T15205] netlink: 'syz.1.2626': attribute type 2 has an invalid length. [ 615.062859][T15205] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.2626'. [ 615.305609][T15205] netlink: 'syz.1.2626': attribute type 33 has an invalid length. [ 615.329716][T15205] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.2626'. [ 616.635294][T15252] netlink: 'syz.3.2637': attribute type 10 has an invalid length. [ 616.830443][T15252] veth1_vlan: entered allmulticast mode [ 617.087619][T15252] team0: Device veth1_vlan failed to register rx_handler [ 617.421693][T15259] macvlan1: entered promiscuous mode [ 618.380739][T15288] netlink: 'syz.3.2648': attribute type 21 has an invalid length. [ 618.399080][T15288] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2648'. [ 619.396968][T15319] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2655'. [ 619.438690][T15323] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2655'. [ 619.699141][T15319] wg2: entered allmulticast mode [ 620.020341][T15324] netlink: 'syz.2.2657': attribute type 33 has an invalid length. [ 620.089584][T15324] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2657'. [ 620.108810][T15324] `: renamed from team0 (while UP) [ 620.739944][T15345] netlink: 'syz.1.2662': attribute type 8 has an invalid length. [ 620.748439][T15342] netlink: 'syz.1.2662': attribute type 8 has an invalid length. [ 620.822237][T15342] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2662'. [ 620.838366][T15345] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2662'. [ 623.967167][T15384] delete_channel: no stack [ 624.353615][T15395] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2678'. [ 624.634727][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.641287][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.356611][T15411] netlink: 'syz.1.2683': attribute type 10 has an invalid length. [ 625.365126][T15411] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2683'. [ 625.444602][T15413] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2683'. [ 628.737515][T15438] netlink: 'syz.3.2690': attribute type 10 has an invalid length. [ 628.753858][T15438] batman_adv: batadv0: Adding interface: wlan0 [ 628.760888][T15438] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.802844][T15438] batman_adv: batadv0: Interface activated: wlan0 [ 629.118847][T15447] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2691'. [ 629.405386][T15448] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2694'. [ 629.539716][T15454] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 629.546920][T15454] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 630.993405][T15473] netlink: 'syz.2.2701': attribute type 29 has an invalid length. [ 631.043207][T15473] netlink: 'syz.2.2701': attribute type 29 has an invalid length. [ 631.464979][T15486] netlink: 'syz.1.2705': attribute type 27 has an invalid length. [ 631.555152][T15489] netlink: 'syz.0.2706': attribute type 19 has an invalid length. [ 631.608629][T15489] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2706'. [ 631.916273][T15495] netlink: 'syz.1.2708': attribute type 1 has an invalid length. [ 631.949157][T15495] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2708'. [ 632.157968][T15498] netlink: 4079 bytes leftover after parsing attributes in process `syz.1.2708'. [ 632.214132][T15495] netlink: 'syz.1.2708': attribute type 16 has an invalid length. [ 632.235594][T15495] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2708'. [ 633.808631][T15517] netlink: 'syz.1.2715': attribute type 20 has an invalid length. [ 634.002761][T15519] netlink: 'syz.0.2716': attribute type 29 has an invalid length. [ 634.033776][T15519] netlink: 'syz.0.2716': attribute type 29 has an invalid length. [ 634.307783][T15524] netlink: 'syz.3.2717': attribute type 9 has an invalid length. [ 634.348546][T15524] netlink: 30355 bytes leftover after parsing attributes in process `syz.3.2717'. [ 635.027095][T15544] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2725'. [ 637.090671][T15571] validate_nla: 1 callbacks suppressed [ 637.090689][T15571] netlink: 'syz.3.2730': attribute type 29 has an invalid length. [ 637.178045][T15571] netlink: 'syz.3.2730': attribute type 29 has an invalid length. [ 638.035774][T15581] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2734'. [ 638.168129][T15587] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2735'. [ 641.140693][T15603] netlink: 'syz.2.2742': attribute type 1 has an invalid length. [ 641.159127][T15603] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2742'. [ 641.390843][T15604] C: renamed from team_slave_0 (while UP) [ 641.469969][T15608] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.2742'. [ 641.492213][T15604] netlink: 'syz.1.2750': attribute type 8 has an invalid length. [ 641.599027][T15604] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 641.623309][T15603] netlink: 'syz.2.2742': attribute type 16 has an invalid length. [ 641.661539][T15603] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2742'. [ 642.781536][T15626] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2747'. [ 644.190798][T15645] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2751'. [ 647.502307][T15672] syzkaller0: entered promiscuous mode [ 647.520936][T15672] syzkaller0: entered allmulticast mode [ 652.314978][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 652.835779][T15689] sit0: entered allmulticast mode [ 653.443348][T15719] delete_channel: no stack [ 653.770577][T15741] netlink: 'syz.2.2781': attribute type 21 has an invalid length. [ 653.783449][T15741] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2781'. [ 653.795463][T15741] netlink: 'syz.2.2781': attribute type 5 has an invalid length. [ 653.812644][T15741] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2781'. [ 654.043279][T15753] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 654.054098][T15753] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 654.063893][T15753] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 654.073160][T15753] netlink: 'syz.2.2785': attribute type 29 has an invalid length. [ 654.280673][T15760] netlink: 'syz.2.2789': attribute type 1 has an invalid length. [ 654.295558][T15760] netlink: 'syz.2.2789': attribute type 4 has an invalid length. [ 654.304430][T15760] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2789'. [ 656.065966][T15807] netlink: 'syz.2.2793': attribute type 4 has an invalid length. [ 656.088297][T15807] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2793'. [ 656.141079][T15807] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 656.477950][T15818] netlink: 'syz.2.2803': attribute type 39 has an invalid length. [ 659.375958][T15869] 22Gx: renamed from bond0 (while UP) [ 659.800723][T15878] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2826'. [ 660.183343][T15890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.326404][T15893] netlink: 'syz.2.2828': attribute type 2 has an invalid length. [ 660.350871][T15893] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2828'. [ 660.467050][T15895] veth0_vlan: entered allmulticast mode [ 660.520878][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.933810][T15896] : renamed from vlan0 [ 661.210978][T15901] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2832'. [ 663.137448][T15910] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2835'. [ 663.282793][T15910] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2835'. [ 663.318727][T15919] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2835'. [ 664.408923][T15942] sit0: entered allmulticast mode [ 664.455574][T15946] netlink: 'syz.1.2846': attribute type 9 has an invalid length. [ 664.489634][T15946] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2846'. [ 664.532869][T15946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2846'. [ 664.552575][T15946] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2846'. [ 665.015595][T15956] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2850'. [ 665.150157][T15958] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2851'. [ 665.159946][T15958] openvswitch: netlink: Key type 4112 is out of range max 32 [ 665.764924][T15966] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2856'. [ 667.117958][T15989] tap0: tun_chr_ioctl cmd 1074025680 [ 667.744322][ T5782] Bluetooth: hci4: command 0x0406 tx timeout [ 667.884125][T15994] netlink: 'syz.1.2862': attribute type 9 has an invalid length. [ 667.930843][T15994] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2862'. [ 668.544958][T16005] netlink: 'syz.2.2866': attribute type 29 has an invalid length. [ 668.565993][T16005] netlink: 'syz.2.2866': attribute type 29 has an invalid length. [ 668.591823][T16005] netlink: 'syz.2.2866': attribute type 64 has an invalid length. [ 669.758524][T16020] netlink: 'syz.2.2871': attribute type 7 has an invalid length. [ 669.842997][T16020] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2871'. [ 670.068757][ T9] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 670.265018][T16043] bridge0: port 3(gretap0) entered blocking state [ 670.298806][T16043] bridge0: port 3(gretap0) entered disabled state [ 670.305891][T16043] gretap0: entered allmulticast mode [ 670.333317][T16043] gretap0: entered promiscuous mode [ 670.343243][T16045] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2877'. [ 670.363072][T16043] bridge0: port 3(gretap0) entered blocking state [ 670.369779][T16043] bridge0: port 3(gretap0) entered forwarding state [ 670.375008][T16049] netlink: 'syz.2.2878': attribute type 5 has an invalid length. [ 670.409552][T16049] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2878'. [ 672.428242][T16063] netlink: 'syz.0.2883': attribute type 4 has an invalid length. [ 672.497671][T16082] syz.2.2888[16082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.499886][T16082] syz.2.2888[16082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 672.508724][T16063] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2883'. [ 672.707966][T16088] netlink: 'syz.3.2890': attribute type 29 has an invalid length. [ 672.835027][T16063] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 673.001465][T16088] netlink: 'syz.3.2890': attribute type 29 has an invalid length. [ 673.070825][T16094] pim6reg1: entered promiscuous mode [ 673.076463][T16094] pim6reg1: entered allmulticast mode [ 673.189809][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 673.433682][T16098] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2893'. [ 674.601626][T16111] netlink: 'syz.1.2895': attribute type 33 has an invalid length. [ 674.625990][T16111] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2895'. [ 674.862499][T16123] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.2899'. [ 674.900430][T16123] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 676.051436][T16152] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2907'. [ 676.325405][T16161] netlink: 'syz.3.2910': attribute type 3 has an invalid length. [ 676.354222][T16161] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2910'. [ 677.135234][ T1087] wlan1: Trigger new scan to find an IBSS to join [ 677.400703][T16177] syzkaller0: entered promiscuous mode [ 677.406351][T16177] syzkaller0: entered allmulticast mode [ 678.094215][T16190] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2918'. [ 678.105675][T10001] wlan1: Creating new IBSS network, BSSID 66:d1:75:bd:f2:79 [ 678.532640][T16202] netlink: 'syz.0.2921': attribute type 33 has an invalid length. [ 678.698704][T16202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2921'. [ 681.145534][T16246] netlink: 'syz.2.2934': attribute type 21 has an invalid length. [ 681.154107][T16246] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2934'. [ 681.455590][T16242] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2932'. [ 681.563784][T16259] netlink: 'syz.0.2938': attribute type 10 has an invalid length. [ 681.578722][T16259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2938'. [ 681.602651][T16259] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 681.629076][T16259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.663481][T16255] batman_adv: batadv0: Interface deactivated: wlan0 [ 683.025578][T16280] netlink: 'syz.0.2943': attribute type 21 has an invalid length. [ 683.081292][T16280] IPv6: NLM_F_CREATE should be specified when creating new route [ 683.118620][T16287] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.2947'. [ 683.387804][T16293] @0: renamed from bond_slave_1 (while UP) [ 684.499936][T16289] netlink: 'syz.1.2946': attribute type 4 has an invalid length. [ 684.532992][T16289] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2946'. [ 684.718900][T16289] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 685.099951][T16314] netlink: 'syz.0.2955': attribute type 21 has an invalid length. [ 685.523323][T16321] netlink: 'syz.0.2958': attribute type 21 has an invalid length. [ 685.538619][T16321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2958'. [ 685.730311][T16323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2960'. [ 686.421408][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.427949][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.309237][T16335] netlink: 'syz.2.2963': attribute type 10 has an invalid length. [ 687.769644][T16335] `: Device veth1_macvtap failed to register rx_handler [ 688.388587][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 688.479110][T16349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2967'. [ 688.596592][T16351] syzkaller0: entered promiscuous mode [ 688.604380][T16351] syzkaller0: entered allmulticast mode [ 688.612837][T16353] netlink: 'syz.3.2969': attribute type 12 has an invalid length. [ 688.621160][T16353] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2969'. [ 688.632632][T10001] syzkaller0: tun_net_xmit 48 [ 688.697523][T16351] syzkaller0: create flow: hash 3602414136 index 1 [ 691.664403][T16354] netlink: 'syz.0.2968': attribute type 21 has an invalid length. [ 691.710203][T16350] syzkaller0: delete flow: hash 3602414136 index 1 [ 694.621176][T16391] netlink: 'syz.0.2976': attribute type 10 has an invalid length. [ 694.654351][T16391] team0: Device hsr_slave_0 failed to register rx_handler [ 694.868727][T16399] netlink: 'syz.3.2978': attribute type 29 has an invalid length. [ 694.888578][T16396] netlink: 'syz.3.2978': attribute type 29 has an invalid length. [ 694.892047][T16399] netlink: 'syz.3.2978': attribute type 29 has an invalid length. [ 694.936003][T16403] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2980'. [ 695.179660][T16416] netlink: 'syz.3.2984': attribute type 21 has an invalid length. [ 695.211121][T16416] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2984'. [ 695.888220][T16437] netlink: 'syz.1.2989': attribute type 10 has an invalid length. [ 696.279808][T16450] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2993'. [ 697.207803][T16466] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2998'. [ 697.973929][T16484] netlink: 'syz.0.3004': attribute type 10 has an invalid length. [ 698.049400][T16484] team0: Port device macvlan0 added [ 698.687999][T16497] netlink: 'syz.0.3008': attribute type 33 has an invalid length. [ 698.745030][T16497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3008'. [ 699.454454][T16527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 699.524182][T16527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.631325][T16527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.640642][T16527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.391500][T16544] tap0: tun_chr_ioctl cmd 35108 [ 700.429691][T16545] tap0: tun_chr_ioctl cmd 1074025673 [ 700.448689][T16546] tap0: tun_chr_ioctl cmd 35108 [ 701.192724][T16570] sit0: entered allmulticast mode [ 701.253915][T16570] sit0: entered promiscuous mode [ 704.764291][T16591] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 704.914095][T16596] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 706.234644][T16613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3040'. [ 706.250520][T16613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3040'. [ 706.271183][T16613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3040'. [ 706.298316][T16613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3040'. [ 709.979611][T16664] netlink: 'syz.1.3050': attribute type 2 has an invalid length. [ 709.987484][T16664] netlink: 'syz.1.3050': attribute type 8 has an invalid length. [ 710.021485][T16664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3050'. [ 710.392266][ T9468] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 711.192510][T16690] netlink: 'syz.2.3060': attribute type 33 has an invalid length. [ 711.272526][T16690] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3060'. [ 711.858881][T16697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3063'. [ 713.099069][T16727] tap0: tun_chr_ioctl cmd 1074025677 [ 713.105008][T16727] tap0: linktype set to 805 [ 713.643784][T16738] netlink: 'syz.3.3074': attribute type 21 has an invalid length. [ 713.662289][T16738] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3074'. [ 713.692796][T16738] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3074'. [ 713.714700][T16743] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3074'. [ 713.749240][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 715.781356][T16764] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3081'. [ 717.143793][T16776] sit0: entered promiscuous mode [ 717.149752][T16776] sit0: entered allmulticast mode [ 718.420833][T16803] tap0: tun_chr_ioctl cmd 1074025677 [ 718.426589][T16803] tap0: linktype set to 805 [ 718.485772][T16808] netlink: 'syz.2.3095': attribute type 11 has an invalid length. [ 718.542437][T16808] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3095'. [ 719.763667][T16821] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.3099'. [ 720.558193][T16851] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3107'. [ 720.582895][T16851] openvswitch: netlink: Duplicate key (type 0). [ 721.314144][T16866] netlink: 'syz.1.3113': attribute type 4 has an invalid length. [ 721.345991][T16866] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3113'. [ 721.412857][T16866] A link change request failed with some changes committed already. Interface 722Gx may have been left with an inconsistent configuration, please check. [ 722.174806][T16892] netlink: 'syz.1.3121': attribute type 1 has an invalid length. [ 722.190099][T16892] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3121'. [ 724.378032][T16898] netlink: 'syz.3.3122': attribute type 21 has an invalid length. [ 724.386142][T16898] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3122'. [ 724.673101][T16913] netlink: 'syz.2.3125': attribute type 10 has an invalid length. [ 724.798785][T16913] veth0_macvtap: left promiscuous mode [ 724.930285][T16912] netlink: 'syz.2.3125': attribute type 10 has an invalid length. [ 726.028997][T16952] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3139'. [ 726.074796][T16954] netlink: 'syz.0.3139': attribute type 21 has an invalid length. [ 726.269366][T16965] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 726.277221][T16965] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 726.292245][T16965] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3142'. [ 726.302576][T16966] netlink: 'syz.0.3142': attribute type 1 has an invalid length. [ 726.332115][T16966] netlink: 'syz.0.3142': attribute type 4 has an invalid length. [ 726.351151][T16966] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3142'. [ 727.132858][T16989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3147'. [ 727.477774][T17002] syz.0.3155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 727.528940][T17002] CPU: 1 PID: 17002 Comm: syz.0.3155 Not tainted syzkaller #0 [ 727.536484][T17002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 727.546576][T17002] Call Trace: [ 727.549937][T17002] [ 727.552888][T17002] dump_stack_lvl+0x18c/0x250 [ 727.557596][T17002] ? show_regs_print_info+0x20/0x20 [ 727.562826][T17002] ? load_image+0x400/0x400 [ 727.567398][T17002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 727.573942][T17002] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 727.580488][T17002] warn_alloc+0x246/0x340 [ 727.584883][T17002] ? stack_trace_save+0xaa/0x100 [ 727.589868][T17002] ? zone_watermark_ok_safe+0x230/0x230 [ 727.595457][T17002] ? kasan_set_track+0x5f/0x70 [ 727.600238][T17002] ? kasan_set_track+0x4e/0x70 [ 727.605015][T17002] ? __kasan_kmalloc+0x8f/0xa0 [ 727.609892][T17002] ? xsk_init_queue+0xad/0x100 [ 727.614680][T17002] ? xsk_setsockopt+0x4e5/0x760 [ 727.619551][T17002] ? do_sock_setsockopt+0x175/0x1a0 [ 727.624783][T17002] ? __x64_sys_setsockopt+0x182/0x200 [ 727.630198][T17002] __vmalloc_node_range+0x126/0x1330 [ 727.635708][T17002] ? free_vm_area+0x50/0x50 [ 727.640251][T17002] vmalloc_user+0x74/0x80 [ 727.644613][T17002] ? xskq_create+0xbf/0x170 [ 727.649138][T17002] xskq_create+0xbf/0x170 [ 727.653535][T17002] xsk_init_queue+0xad/0x100 [ 727.658143][T17002] xsk_setsockopt+0x4e5/0x760 [ 727.662844][T17002] ? xsk_poll+0x680/0x680 [ 727.667236][T17002] ? __rcu_read_unlock+0x69/0xd0 [ 727.672200][T17002] ? __fget_files+0x28/0x4b0 [ 727.676807][T17002] ? __fget_files+0x28/0x4b0 [ 727.681413][T17002] ? aa_sock_opt_perm+0x74/0x100 [ 727.686383][T17002] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 727.692029][T17002] ? security_socket_setsockopt+0x7e/0xa0 [ 727.697767][T17002] ? xsk_poll+0x680/0x680 [ 727.702200][T17002] do_sock_setsockopt+0x175/0x1a0 [ 727.707248][T17002] ? __fdget+0x180/0x210 [ 727.711603][T17002] __x64_sys_setsockopt+0x182/0x200 [ 727.716829][T17002] do_syscall_64+0x55/0xa0 [ 727.721337][T17002] ? clear_bhb_loop+0x40/0x90 [ 727.726050][T17002] ? clear_bhb_loop+0x40/0x90 [ 727.731210][T17002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 727.737125][T17002] RIP: 0033:0x7ff69d59aeb9 [ 727.741570][T17002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.761459][T17002] RSP: 002b:00007ff69e4f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 727.769900][T17002] RAX: ffffffffffffffda RBX: 00007ff69d815fa0 RCX: 00007ff69d59aeb9 [ 727.777897][T17002] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 727.785881][T17002] RBP: 00007ff69d608c1f R08: 0000000000000004 R09: 0000000000000000 [ 727.793957][T17002] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 727.801956][T17002] R13: 00007ff69d816038 R14: 00007ff69d815fa0 R15: 00007ffd34216448 [ 727.809961][T17002] [ 727.836026][T17002] Mem-Info: [ 727.849378][T17002] active_anon:8548 inactive_anon:0 isolated_anon:0 [ 727.849378][T17002] active_file:19070 inactive_file:40176 isolated_file:0 [ 727.849378][T17002] unevictable:768 dirty:239 writeback:0 [ 727.849378][T17002] slab_reclaimable:10714 slab_unreclaimable:93185 [ 727.849378][T17002] mapped:24616 shmem:1361 pagetables:522 [ 727.849378][T17002] sec_pagetables:0 bounce:0 [ 727.849378][T17002] kernel_misc_reclaimable:0 [ 727.849378][T17002] free:1340476 free_pcp:9556 free_cma:0 [ 727.933730][T17006] netlink: 'syz.3.3156': attribute type 39 has an invalid length. [ 727.982172][T17002] Node 0 active_anon:34292kB inactive_anon:0kB active_file:76280kB inactive_file:160500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98464kB dirty:952kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11580kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no [ 728.026358][T17002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 728.064498][T17002] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.097142][T17002] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 728.158864][T17002] Node 0 DMA32 free:1453992kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34080kB inactive_anon:0kB active_file:76280kB inactive_file:159680kB unevictable:1536kB writepending:960kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21836kB local_pcp:17540kB free_cma:0kB [ 728.322071][T17002] lowmem_reserve[]: 0 0 0 0 0 [ 728.327021][T17002] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 728.364370][T17002] lowmem_reserve[]: 0 0 0 0 0 [ 728.371710][T17002] Node 1 Normal free:3892616kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16512kB local_pcp:5792kB free_cma:0kB [ 728.485804][T17002] lowmem_reserve[]: 0 0 0 0 0 [ 728.512262][T17002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 728.552831][T17002] Node 0 DMA32: 1018*4kB (UME) 1366*8kB (UM) 1485*16kB (UME) 624*32kB (UME) 463*64kB (UME) 389*128kB (UME) 104*256kB (UME) 62*512kB (UM) 30*1024kB (UME) 3*2048kB (M) 297*4096kB (UM) = 1449896kB [ 728.599184][T17002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.620936][T17002] Node 1 Normal: 246*4kB (UME) 52*8kB (UME) 33*16kB (UME) 176*32kB (UME) 46*64kB (UE) 7*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3892616kB [ 728.658943][T17002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.669965][T17002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 728.687186][T17002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.698629][T17002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 728.730465][T17002] 60609 total pagecache pages [ 728.738594][T17002] 0 pages in swap cache [ 728.745869][T17002] Free swap = 124996kB [ 728.756005][T17002] Total swap = 124996kB [ 728.778561][T17002] 2097051 pages RAM [ 728.782433][T17002] 0 pages HighMem/MovableOnly [ 728.828601][T17002] 416922 pages reserved [ 728.832995][T17002] 0 pages cma reserved [ 729.002417][T17010] netlink: 'syz.1.3157': attribute type 9 has an invalid length. [ 729.025950][T17010] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3157'. [ 729.454587][T17037] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3165'. [ 729.748173][T17050] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3168'. [ 730.457064][T17069] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.535467][T17075] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3180'. [ 730.557893][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3180'. [ 731.055487][T17090] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3184'. [ 731.799892][T17111] tap0: tun_chr_ioctl cmd 2147767507 [ 731.824698][T17111] tap0: tun_chr_ioctl cmd 2147767521 [ 731.840197][T17111] tap0: tun_chr_ioctl cmd 35108 [ 731.877917][T17111] netlink: 'syz.0.3190': attribute type 1 has an invalid length. [ 731.888535][T17111] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3190'. [ 732.032225][T17117] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.3192'. [ 732.214594][T17124] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3197'. [ 732.935511][T17128] netlink: 'syz.3.3196': attribute type 9 has an invalid length. [ 732.953082][T17128] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3196'. [ 733.191969][ T9462] wlan1: Trigger new scan to find an IBSS to join [ 733.299654][T17144] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.419774][T17152] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.427122][T17152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.614543][T17159] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 734.316675][T17162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3206'. [ 734.945588][T17167] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 735.136776][T17187] netlink: 'syz.2.3212': attribute type 3 has an invalid length. [ 735.218787][T17187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3212'. [ 735.457794][T17198] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3215'. [ 735.730019][T17189] netlink: 'syz.0.3214': attribute type 9 has an invalid length. [ 735.762402][T17189] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3214'. [ 736.426110][T17214] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3221'. [ 736.507719][T17214] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 737.116473][T17228] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.3226'. [ 737.256751][T17228] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3226'. [ 737.324683][T17234] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3226'. [ 737.956336][T17240] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3229'. [ 738.149312][ T9467] wlan1: Trigger new scan to find an IBSS to join [ 738.157216][T17246] netlink: 'syz.0.3231': attribute type 3 has an invalid length. [ 738.184479][T17246] netlink: 'syz.0.3231': attribute type 1 has an invalid length. [ 738.249110][T17246] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3231'. [ 739.333976][ T9468] wlan1: Creating new IBSS network, BSSID ce:7b:50:92:3a:d8 [ 739.723859][T17283] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3244'. [ 740.218096][T17301] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 740.262821][T17301] IPv6: Can't replace route, no match found [ 740.535068][T17312] netlink: 'syz.2.3252': attribute type 3 has an invalid length. [ 740.556641][T17312] __nla_validate_parse: 1 callbacks suppressed [ 740.556658][T17312] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3252'. [ 742.569097][T17393] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3262'. [ 742.600473][T17393] tc_dump_action: action bad kind [ 742.995602][T17402] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3266'. [ 743.601519][T17415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3268'. [ 743.615718][T17415] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3268'. [ 743.732019][T17413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3268'. [ 743.872741][T17415] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.3268'. [ 744.164522][T17420] netlink: 'syz.0.3271': attribute type 1 has an invalid length. [ 744.216002][T17420] IPv6: Can't replace route, no match found [ 746.147047][T17456] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.803492][T17482] netlink: 'syz.1.3291': attribute type 9 has an invalid length. [ 746.811595][T17482] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3291'. [ 746.864564][T17486] netlink: 'syz.1.3291': attribute type 9 has an invalid length. [ 746.872905][T17486] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3291'. [ 746.881977][T17485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3292'. [ 746.917239][T17485] netlink: 'syz.2.3292': attribute type 153 has an invalid length. [ 746.934154][T17485] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3292'. [ 747.084529][T17496] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3294'. [ 747.132724][T17496] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3294'. [ 747.389700][T17493] delete_channel: no stack [ 747.400314][T17501] syz.2.3296[17501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.531663][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.551033][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.765579][T17516] netlink: 'syz.3.3302': attribute type 21 has an invalid length. [ 747.789238][T17516] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3302'. [ 748.633154][T17527] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 748.658954][T17527] hsr0: entered promiscuous mode [ 748.674138][T17527] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 750.342586][T17556] netlink: 'syz.3.3314': attribute type 21 has an invalid length. [ 750.355834][T17556] netlink: 'syz.3.3314': attribute type 30 has an invalid length. [ 751.558016][T17578] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3320'. [ 752.217875][T17595] syzkaller0: entered promiscuous mode [ 752.224028][T17595] syzkaller0: entered allmulticast mode [ 752.236364][T17597] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3326'. [ 752.307598][T17597] netlink: 'syz.0.3326': attribute type 13 has an invalid length. [ 752.333281][T17597] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.3326'. [ 752.597330][T13740] Bluetooth: hci2: ISO packet for unknown connection handle 16 [ 753.671157][T17628] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 753.744317][T17628] 8021q: adding VLAN 0 to HW filter on device ` [ 753.799530][T17628] bond0: (slave `): Enslaving as an active interface with an up link [ 753.909563][T17627] netlink: 'syz.2.3336': attribute type 10 has an invalid length. [ 754.084667][T17628] lo: entered allmulticast mode [ 754.103056][T17637] netlink: 'syz.0.3340': attribute type 6 has an invalid length. [ 754.131637][T17637] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3340'. [ 754.702291][T17652] netlink: 'syz.2.3344': attribute type 2 has an invalid length. [ 754.724057][T17652] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3344'. [ 755.801179][T17681] netlink: 'syz.0.3353': attribute type 21 has an invalid length. [ 755.839146][T17675] pim6reg1: entered promiscuous mode [ 755.869759][T17675] pim6reg1: entered allmulticast mode [ 756.254344][T17694] sctp: [Deprecated]: syz.1.3355 (pid 17694) Use of int in maxseg socket option. [ 756.254344][T17694] Use struct sctp_assoc_value instead [ 756.554906][T17689] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3354'. [ 756.984421][T17695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3355'. [ 757.092052][T17705] netlink: 'syz.0.3357': attribute type 1 has an invalid length. [ 757.177541][T17709] FAULT_INJECTION: forcing a failure. [ 757.177541][T17709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.196306][T17709] CPU: 0 PID: 17709 Comm: syz.1.3359 Not tainted syzkaller #0 [ 757.203923][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 757.214029][T17709] Call Trace: [ 757.217437][T17709] [ 757.220401][T17709] dump_stack_lvl+0x18c/0x250 [ 757.225222][T17709] ? show_regs_print_info+0x20/0x20 [ 757.230488][T17709] ? load_image+0x400/0x400 [ 757.235039][T17709] ? __might_fault+0xaa/0x120 [ 757.239769][T17709] ? __lock_acquire+0x7d40/0x7d40 [ 757.244837][T17709] should_fail_ex+0x39d/0x4d0 [ 757.249551][T17709] _copy_from_user+0x2f/0xe0 [ 757.254208][T17709] __sys_bpf+0x23e/0x890 [ 757.258505][T17709] ? bpf_link_show_fdinfo+0x390/0x390 [ 757.263974][T17709] ? lock_chain_count+0x20/0x20 [ 757.268859][T17709] __x64_sys_bpf+0x7c/0x90 [ 757.273306][T17709] do_syscall_64+0x55/0xa0 [ 757.277831][T17709] ? clear_bhb_loop+0x40/0x90 [ 757.282526][T17709] ? clear_bhb_loop+0x40/0x90 [ 757.287219][T17709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 757.293128][T17709] RIP: 0033:0x7fd921f9aeb9 [ 757.297554][T17709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.317177][T17709] RSP: 002b:00007fd922f28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 757.325613][T17709] RAX: ffffffffffffffda RBX: 00007fd922215fa0 RCX: 00007fd921f9aeb9 [ 757.333597][T17709] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 757.341576][T17709] RBP: 00007fd922f28090 R08: 0000000000000000 R09: 0000000000000000 [ 757.349643][T17709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.357773][T17709] R13: 00007fd922216038 R14: 00007fd922215fa0 R15: 00007ffdb9be7338 [ 757.365785][T17709] [ 757.381059][T17712] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.3360'. [ 757.500692][T17718] netlink: 'syz.1.3362': attribute type 3 has an invalid length. [ 757.509810][T17718] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.3362'. [ 758.021770][T17739] netlink: 'syz.3.3365': attribute type 51 has an invalid length. [ 758.495272][T17745] FAULT_INJECTION: forcing a failure. [ 758.495272][T17745] name failslab, interval 1, probability 0, space 0, times 0 [ 758.531836][T17745] CPU: 1 PID: 17745 Comm: syz.2.3371 Not tainted syzkaller #0 [ 758.539463][T17745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 758.549659][T17745] Call Trace: [ 758.552993][T17745] [ 758.555970][T17745] dump_stack_lvl+0x18c/0x250 [ 758.560726][T17745] ? show_regs_print_info+0x20/0x20 [ 758.565974][T17745] ? load_image+0x400/0x400 [ 758.570544][T17745] should_fail_ex+0x39d/0x4d0 [ 758.575308][T17745] should_failslab+0x9/0x20 [ 758.579960][T17745] slab_pre_alloc_hook+0x59/0x310 [ 758.585133][T17745] ? lock_chain_count+0x20/0x20 [ 758.590031][T17745] ? __get_vm_area_node+0x125/0x370 [ 758.595469][T17745] __kmem_cache_alloc_node+0x53/0x250 [ 758.600900][T17745] ? __get_vm_area_node+0x125/0x370 [ 758.606414][T17745] kmalloc_node_trace+0x26/0xe0 [ 758.611314][T17745] __get_vm_area_node+0x125/0x370 [ 758.616391][T17745] __vmalloc_node_range+0x36e/0x1330 [ 758.621827][T17745] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 758.627393][T17745] ? mark_lock+0x94/0x320 [ 758.631746][T17745] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 758.637584][T17745] ? perf_trace_preemptirq_template+0x269/0x330 [ 758.643864][T17745] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 758.649863][T17745] ? free_vm_area+0x50/0x50 [ 758.654422][T17745] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 758.659981][T17745] __vmalloc+0x7a/0x90 [ 758.664068][T17745] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 758.669631][T17745] bpf_prog_alloc_no_stats+0x47/0x440 [ 758.675015][T17745] ? bpf_prog_alloc+0x2b/0x1a0 [ 758.679790][T17745] bpf_prog_alloc+0x3d/0x1a0 [ 758.684397][T17745] bpf_prog_load+0x6eb/0x1670 [ 758.689100][T17745] ? map_freeze+0x420/0x420 [ 758.693628][T17745] ? __might_fault+0xaa/0x120 [ 758.698320][T17745] ? __lock_acquire+0x7d40/0x7d40 [ 758.703363][T17745] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 758.709619][T17745] ? __might_fault+0xaa/0x120 [ 758.714568][T17745] ? __might_fault+0xc6/0x120 [ 758.719260][T17745] ? __might_fault+0xaa/0x120 [ 758.723950][T17745] ? bpf_lsm_bpf+0x9/0x10 [ 758.728557][T17745] ? security_bpf+0x7e/0xa0 [ 758.733073][T17745] __sys_bpf+0x5ba/0x890 [ 758.737333][T17745] ? bpf_link_show_fdinfo+0x390/0x390 [ 758.742731][T17745] ? lock_chain_count+0x20/0x20 [ 758.747603][T17745] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 758.753698][T17745] __x64_sys_bpf+0x7c/0x90 [ 758.758127][T17745] do_syscall_64+0x55/0xa0 [ 758.762743][T17745] ? clear_bhb_loop+0x40/0x90 [ 758.767427][T17745] ? clear_bhb_loop+0x40/0x90 [ 758.772115][T17745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.778189][T17745] RIP: 0033:0x7f47ce39aeb9 [ 758.782616][T17745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.802320][T17745] RSP: 002b:00007f47cf32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 758.810767][T17745] RAX: ffffffffffffffda RBX: 00007f47ce615fa0 RCX: 00007f47ce39aeb9 [ 758.818768][T17745] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 758.826752][T17745] RBP: 00007f47cf32e090 R08: 0000000000000000 R09: 0000000000000000 [ 758.834910][T17745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.842898][T17745] R13: 00007f47ce616038 R14: 00007f47ce615fa0 R15: 00007fff65a0d088 [ 758.851076][T17745] [ 758.869685][T17745] syz.2.3371: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 758.950914][T17752] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3373'. [ 758.961299][T17745] CPU: 0 PID: 17745 Comm: syz.2.3371 Not tainted syzkaller #0 [ 758.968817][T17745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 758.978916][T17745] Call Trace: [ 758.982233][T17745] [ 758.985216][T17745] dump_stack_lvl+0x18c/0x250 [ 758.989943][T17745] ? show_regs_print_info+0x20/0x20 [ 758.995175][T17745] ? load_image+0x400/0x400 [ 758.999720][T17745] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 759.006171][T17745] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 759.012710][T17745] warn_alloc+0x246/0x340 [ 759.017087][T17745] ? __get_vm_area_node+0x125/0x370 [ 759.022331][T17745] ? zone_watermark_ok_safe+0x230/0x230 [ 759.027926][T17745] ? rcu_is_watching+0x15/0xb0 [ 759.032735][T17745] ? __get_vm_area_node+0x356/0x370 [ 759.038162][T17745] __vmalloc_node_range+0x393/0x1330 [ 759.043472][T17745] ? mark_lock+0x94/0x320 [ 759.047797][T17745] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 759.053632][T17745] ? perf_trace_preemptirq_template+0x269/0x330 [ 759.059980][T17745] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 759.065972][T17745] ? free_vm_area+0x50/0x50 [ 759.070510][T17745] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 759.076538][T17745] __vmalloc+0x7a/0x90 [ 759.080659][T17745] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 759.086341][T17745] bpf_prog_alloc_no_stats+0x47/0x440 [ 759.091765][T17745] ? bpf_prog_alloc+0x2b/0x1a0 [ 759.096652][T17745] bpf_prog_alloc+0x3d/0x1a0 [ 759.101354][T17745] bpf_prog_load+0x6eb/0x1670 [ 759.106067][T17745] ? map_freeze+0x420/0x420 [ 759.110594][T17745] ? __might_fault+0xaa/0x120 [ 759.115287][T17745] ? __lock_acquire+0x7d40/0x7d40 [ 759.120415][T17745] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 759.126720][T17745] ? __might_fault+0xaa/0x120 [ 759.131454][T17745] ? __might_fault+0xc6/0x120 [ 759.136266][T17745] ? __might_fault+0xaa/0x120 [ 759.138490][T17752] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.3373'. [ 759.140981][T17745] ? bpf_lsm_bpf+0x9/0x10 [ 759.154464][T17745] ? security_bpf+0x7e/0xa0 [ 759.159017][T17745] __sys_bpf+0x5ba/0x890 [ 759.163306][T17745] ? bpf_link_show_fdinfo+0x390/0x390 [ 759.168739][T17745] ? lock_chain_count+0x20/0x20 [ 759.173644][T17745] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 759.179713][T17745] __x64_sys_bpf+0x7c/0x90 [ 759.184183][T17745] do_syscall_64+0x55/0xa0 [ 759.188655][T17745] ? clear_bhb_loop+0x40/0x90 [ 759.193388][T17745] ? clear_bhb_loop+0x40/0x90 [ 759.198208][T17745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 759.204147][T17745] RIP: 0033:0x7f47ce39aeb9 [ 759.208606][T17745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.228283][T17745] RSP: 002b:00007f47cf32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 759.236796][T17745] RAX: ffffffffffffffda RBX: 00007f47ce615fa0 RCX: 00007f47ce39aeb9 [ 759.244817][T17745] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 759.252843][T17745] RBP: 00007f47cf32e090 R08: 0000000000000000 R09: 0000000000000000 [ 759.260863][T17745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.268964][T17745] R13: 00007f47ce616038 R14: 00007f47ce615fa0 R15: 00007fff65a0d088 [ 759.277004][T17745] [ 759.297719][T17761] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3374'. [ 759.329149][T17757] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3374'. [ 759.384909][T17745] Mem-Info: [ 759.410361][T17745] active_anon:8567 inactive_anon:0 isolated_anon:0 [ 759.410361][T17745] active_file:19209 inactive_file:40190 isolated_file:0 [ 759.410361][T17745] unevictable:768 dirty:45 writeback:50 [ 759.410361][T17745] slab_reclaimable:10736 slab_unreclaimable:92873 [ 759.410361][T17745] mapped:24719 shmem:1361 pagetables:526 [ 759.410361][T17745] sec_pagetables:0 bounce:0 [ 759.410361][T17745] kernel_misc_reclaimable:0 [ 759.410361][T17745] free:1338107 free_pcp:10650 free_cma:0 [ 759.533253][T17745] Node 0 active_anon:34168kB inactive_anon:0kB active_file:76836kB inactive_file:160556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98876kB dirty:180kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11464kB pagetables:2104kB sec_pagetables:0kB all_unreclaimable? no [ 759.628524][T17745] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 759.679100][T17745] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 759.726055][T17773] netlink: 'syz.3.3379': attribute type 2 has an invalid length. [ 759.738051][T17745] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 759.744607][T17745] Node 0 DMA32 free:1444496kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:34132kB inactive_anon:0kB active_file:76836kB inactive_file:159728kB unevictable:1536kB writepending:180kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:25688kB local_pcp:21200kB free_cma:0kB [ 759.772048][T17773] netlink: 'syz.3.3379': attribute type 1 has an invalid length. [ 759.778845][T17777] netlink: 'syz.1.3381': attribute type 7 has an invalid length. [ 759.791765][T17777] netlink: 'syz.1.3381': attribute type 1 has an invalid length. [ 759.799842][T17745] lowmem_reserve[]: 0 0 0 0 0 [ 759.804654][T17745] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 759.827042][T17778] netlink: 'syz.1.3381': attribute type 7 has an invalid length. [ 759.832400][T17777] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3381'. [ 759.848490][T17773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3379'. [ 759.854434][T17745] lowmem_reserve[]: 0 0 0 0 0 [ 759.867003][T17745] Node 1 Normal free:3892872kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16256kB local_pcp:10720kB free_cma:0kB [ 759.872089][T17778] netlink: 'syz.1.3381': attribute type 1 has an invalid length. [ 759.942720][T17778] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3381'. [ 759.978463][T17745] lowmem_reserve[]: 0 0 0 0 0 [ 759.983294][T17745] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 760.015059][T17782] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3382'. [ 760.031610][T17745] Node 0 DMA32: 386*4kB (UME) 703*8kB (ME) 1338*16kB (UME) 1126*32kB (UME) 480*64kB (UME) 348*128kB (UME) 106*256kB (UME) 62*512kB (UM) 29*1024kB (UME) 8*2048kB (UM) 298*4096kB (UM) = 1465440kB [ 760.056046][T17745] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 760.068035][T17745] Node 1 Normal: 246*4kB (UME) 52*8kB (UME) 33*16kB (UME) 182*32kB (UME) 47*64kB (UE) 7*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (U) 2*2048kB (UE) 946*4096kB (M) = 3892872kB [ 760.089750][T17745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.104252][T17745] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 760.159666][T17745] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 760.178811][T17745] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 760.188193][T17745] 60761 total pagecache pages [ 760.218373][T17745] 0 pages in swap cache [ 760.222602][T17745] Free swap = 124996kB [ 760.226943][T17745] Total swap = 124996kB [ 760.267979][T17745] 2097051 pages RAM [ 760.297133][T17745] 0 pages HighMem/MovableOnly [ 760.337171][T17745] 416922 pages reserved [ 760.356603][T17745] 0 pages cma reserved [ 760.906144][T17784] delete_channel: no stack [ 761.743199][T17811] validate_nla: 3 callbacks suppressed [ 761.743217][T17811] netlink: 'syz.3.3388': attribute type 10 has an invalid length. [ 761.783524][T17811] team0: Device hsr_slave_0 failed to register rx_handler [ 761.957853][T17821] netlink: 'syz.3.3392': attribute type 1 has an invalid length. [ 762.000966][T17823] netlink: 'syz.2.3393': attribute type 10 has an invalid length. [ 762.006803][T17821] netlink: 'syz.3.3392': attribute type 3 has an invalid length. [ 762.011956][T17823] dummy0: entered promiscuous mode [ 762.032765][T17823] dummy0: entered allmulticast mode [ 762.061127][T17823] bridge0: port 4(dummy0) entered blocking state [ 762.082862][T17823] bridge0: port 4(dummy0) entered disabled state [ 762.192675][T17823] bridge0: port 4(dummy0) entered blocking state [ 762.199252][T17823] bridge0: port 4(dummy0) entered forwarding state [ 762.428258][T17832] pim6reg1: entered promiscuous mode [ 762.444575][T17832] pim6reg1: entered allmulticast mode [ 762.558269][T17834] netlink: 'syz.0.3397': attribute type 51 has an invalid length. [ 764.851321][T17884] __nla_validate_parse: 5 callbacks suppressed [ 764.851356][T17884] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3412'. [ 765.610164][T17891] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3415'. [ 765.632180][T17891] veth0_to_bond: entered promiscuous mode [ 766.429636][T17911] netlink: 'syz.1.3420': attribute type 10 has an invalid length. [ 766.503449][T17911] team0: Port device syz_tun added [ 766.561601][T17914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3421'. [ 767.114851][T17918] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3421'. [ 767.132052][T17923] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3425'. [ 767.558758][T17932] netlink: 'syz.0.3428': attribute type 3 has an invalid length. [ 767.577274][T17932] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3428'. [ 769.344453][ T9998] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 770.820723][T17953] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3435'. [ 770.847236][T17957] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3435'. [ 770.878903][T17952] netlink: 'syz.3.3435': attribute type 9 has an invalid length. [ 770.893784][T17952] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3435'. [ 771.028672][T17953] netlink: 'syz.3.3435': attribute type 9 has an invalid length. [ 771.036488][T17953] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3435'. [ 771.334283][T17970] netlink: 'syz.2.3442': attribute type 9 has an invalid length. [ 771.377408][T17970] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3442'. [ 771.426864][T17976] netlink: 'syz.3.3443': attribute type 4 has an invalid length. [ 771.686831][T17981] : port 1(ip6gretap0) entered blocking state [ 771.693866][T17981] : port 1(ip6gretap0) entered disabled state [ 771.704045][T17981] ip6gretap0: entered allmulticast mode [ 771.738623][T17981] ip6gretap0: entered promiscuous mode [ 793.089888][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 793.100763][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 793.109614][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 793.117940][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 793.126194][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 793.133965][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 793.580187][T13740] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 793.595238][T13740] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 793.603690][T13740] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 793.612869][T13740] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 793.621727][T13740] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 793.629647][T13740] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 795.906966][ T5782] Bluetooth: hci3: command tx timeout [ 795.913184][ T5782] Bluetooth: hci5: command tx timeout [ 796.674676][T17998] chnl_net:caif_netlink_parms(): no params data found [ 796.771135][ T5775] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 796.781491][ T5775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 796.796890][ T5775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 796.805659][ T5775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 796.815128][ T5775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 796.823731][ T5775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 796.832428][ T5775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 796.841051][ T5775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 796.856713][ T5775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 796.864962][ T5775] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 796.873287][ T5775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 796.881714][ T5775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 797.167195][T18003] chnl_net:caif_netlink_parms(): no params data found [ 797.274579][T17998] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.288506][T17998] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.298814][T17998] bridge_slave_0: entered allmulticast mode [ 797.306545][T17998] bridge_slave_0: entered promiscuous mode [ 797.357423][T17998] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.371173][T17998] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.385992][T17998] bridge_slave_1: entered allmulticast mode [ 797.399909][T17998] bridge_slave_1: entered promiscuous mode [ 797.608075][T17998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.737822][T17998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.918606][T18017] Bluetooth: hci3: command tx timeout [ 801.925694][ T5782] Bluetooth: hci7: command tx timeout [ 801.932433][ T5782] Bluetooth: hci6: command tx timeout [ 801.939802][T18021] Bluetooth: hci5: command tx timeout [ 801.973388][ T9998] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 803.990114][T18021] Bluetooth: hci5: command tx timeout [ 803.995775][T18021] Bluetooth: hci3: command tx timeout [ 804.001391][T18017] Bluetooth: hci6: command tx timeout [ 804.006866][T18017] Bluetooth: hci7: command tx timeout [ 809.999535][T18021] Bluetooth: hci3: command tx timeout [ 810.005829][T18021] Bluetooth: hci7: command tx timeout [ 810.011800][T18021] Bluetooth: hci6: command tx timeout [ 810.017233][T18021] Bluetooth: hci5: command tx timeout [ 810.026498][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.032915][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.068534][ T5775] Bluetooth: hci7: command tx timeout [ 812.074065][T18021] Bluetooth: hci6: command tx timeout [ 857.400059][ T5775] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 857.417268][ T5775] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 857.425628][ T5775] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 857.441269][ T5775] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 857.449322][ T5775] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 857.456745][ T5775] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 858.107821][T18017] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 858.128769][T18017] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 858.137481][T18017] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 858.146098][T18017] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 858.155195][T18017] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 858.162815][T18017] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 858.171891][T18017] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 858.190162][T18017] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 858.198631][T18017] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 858.209796][T18017] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 858.237590][T18017] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 858.248747][T18017] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 858.329561][ T5775] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 858.345895][ T5775] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 858.354274][ T5775] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 858.370147][ T5775] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 858.378686][ T5775] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 858.386249][ T5775] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 864.557359][T18017] Bluetooth: hci8: command tx timeout [ 864.563490][T18017] Bluetooth: hci9: command tx timeout [ 864.578772][T18017] Bluetooth: hci10: command tx timeout [ 864.584721][T18017] Bluetooth: hci11: command tx timeout [ 866.628890][T18017] Bluetooth: hci10: command tx timeout [ 866.634444][T18017] Bluetooth: hci9: command tx timeout [ 866.649799][T18021] Bluetooth: hci8: command tx timeout [ 866.656078][ T5775] Bluetooth: hci11: command tx timeout [ 872.083741][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.090234][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.098378][ T5775] Bluetooth: hci11: command tx timeout [ 872.103988][ T5775] Bluetooth: hci9: command tx timeout [ 872.109449][T18017] Bluetooth: hci8: command tx timeout [ 872.114917][T18017] Bluetooth: hci10: command tx timeout [ 874.149049][T18017] Bluetooth: hci10: command tx timeout [ 874.154701][T18017] Bluetooth: hci9: command tx timeout [ 874.160443][ T5775] Bluetooth: hci8: command tx timeout [ 874.165965][ T5775] Bluetooth: hci11: command tx timeout [ 876.458303][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 876.465214][ C0] rcu: 0-....: (10494 ticks this GP) idle=246c/1/0x4000000000000000 softirq=66006/66006 fqs=2662 [ 876.476864][ C0] rcu: hardirqs softirqs csw/system [ 876.483289][ C0] rcu: number: 1308835 0 0 [ 876.489702][ C0] rcu: cputime: 15834 33969 42 ==> 49810(ms) [ 876.497511][ C0] rcu: (t=10500 jiffies g=89713 q=2251 ncpus=2) [ 876.503853][ C0] CPU: 0 PID: 17970 Comm: syz.2.3442 Not tainted syzkaller #0 [ 876.511315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 876.521386][ C0] RIP: 0010:memset_orig+0x15/0xac [ 876.526422][ C0] Code: f0 48 89 d1 f3 aa 4c 89 c8 c3 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 <48> 0f af c1 41 89 f9 41 83 e1 07 75 6c 48 89 d1 48 c1 e9 06 74 35 [ 876.546285][ C0] RSP: 0018:ffffc90000005ff0 EFLAGS: 00000202 [ 876.552360][ C0] RAX: 0101010101010101 RBX: ffffc90000006100 RCX: 0000000000000000 [ 876.560332][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000006118 [ 876.568307][ C0] RBP: ffffc90000006118 R08: ffffc90000006127 R09: 1ffff92000000c24 [ 876.576554][ C0] R10: ffffc90000006118 R11: fffff52000000c25 R12: ffffc900000060c8 [ 876.584534][ C0] R13: dffffc0000000000 R14: ffffffff890863cf R15: ffffffff8f9241b2 [ 876.592678][ C0] FS: 00007f47cf32e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 876.601693][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 876.608360][ C0] CR2: 0000000100000000 CR3: 000000004d841000 CR4: 00000000003506f0 [ 876.616448][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 876.624417][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 876.632390][ C0] Call Trace: [ 876.635670][ C0] [ 876.638513][ C0] unwind_next_frame+0x1648/0x2970 [ 876.643645][ C0] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 876.648422][ C0] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 876.653199][ C0] ? stack_trace_save+0x100/0x100 [ 876.658237][ C0] arch_stack_walk+0x144/0x190 [ 876.663009][ C0] ? tcp_v4_rcv+0x23bf/0x2af0 [ 876.667687][ C0] stack_trace_save+0xaa/0x100 [ 876.672451][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 876.677561][ C0] ? sched_clock+0x3f/0x60 [ 876.682266][ C0] ? sched_clock_cpu+0x75/0x430 [ 876.687150][ C0] ? lapic_next_event+0x11/0x20 [ 876.692095][ C0] ? clockevents_program_event+0x230/0x310 [ 876.698076][ C0] kasan_set_track+0x4e/0x70 [ 876.702666][ C0] ? kasan_set_track+0x4e/0x70 [ 876.707426][ C0] ? kasan_save_free_info+0x2e/0x50 [ 876.712622][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 876.717921][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 876.723577][ C0] ? kmem_cache_free+0xf8/0x270 [ 876.728445][ C0] ? packet_rcv+0x16b/0x13d0 [ 876.733067][ C0] ? dev_queue_xmit_nit+0xb16/0xbb0 [ 876.738362][ C0] ? dev_hard_start_xmit+0x148/0x740 [ 876.743669][ C0] ? sch_direct_xmit+0x25e/0x4c0 [ 876.748610][ C0] ? __dev_queue_xmit+0x179c/0x36b0 [ 876.753814][ C0] ? ip_finish_output2+0xcec/0x11e0 [ 876.759027][ C0] ? ip_output+0x2a1/0x3b0 [ 876.763464][ C0] ? __ip_queue_xmit+0x1049/0x1950 [ 876.768599][ C0] ? __tcp_transmit_skb+0x1cbd/0x32f0 [ 876.774044][ C0] ? tcp_rcv_established+0xb06/0x1d20 [ 876.779451][ C0] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 876.784344][ C0] ? kasan_save_stack+0x60/0x60 [ 876.789205][ C0] ? kmem_cache_free+0xf8/0x270 [ 876.794073][ C0] kasan_save_free_info+0x2e/0x50 [ 876.799291][ C0] ____kasan_slab_free+0x126/0x1e0 [ 876.804429][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 876.809919][ C0] ? packet_rcv+0x16b/0x13d0 [ 876.814564][ C0] kmem_cache_free+0xf8/0x270 [ 876.819923][ C0] packet_rcv+0x16b/0x13d0 [ 876.826409][ C0] ? packet_sock_destruct+0x160/0x160 [ 876.832012][ C0] dev_queue_xmit_nit+0xb16/0xbb0 [ 876.837040][ C0] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 876.842154][ C0] dev_hard_start_xmit+0x148/0x740 [ 876.847529][ C0] sch_direct_xmit+0x25e/0x4c0 [ 876.852307][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 876.858301][ C0] __dev_queue_xmit+0x179c/0x36b0 [ 876.863344][ C0] ? lapic_next_event+0x11/0x20 [ 876.868266][ C0] ? clockevents_program_event+0x230/0x310 [ 876.874089][ C0] ? __dev_queue_xmit+0x26b/0x36b0 [ 876.879234][ C0] ? mark_lock+0x94/0x320 [ 876.883601][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 876.889674][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 876.894957][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 876.901194][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 876.906393][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 876.912544][ C0] ? ip_finish_output2+0xb04/0x11e0 [ 876.917740][ C0] ? ip_finish_output2+0x457/0x11e0 [ 876.922929][ C0] ip_finish_output2+0xcec/0x11e0 [ 876.927949][ C0] ? ip_finish_output2+0x457/0x11e0 [ 876.933200][ C0] ? ip_fragment+0x210/0x210 [ 876.937808][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 876.942673][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 876.947705][ C0] ip_output+0x2a1/0x3b0 [ 876.952038][ C0] ? ip_output+0x60/0x3b0 [ 876.956366][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 876.961299][ C0] __ip_queue_xmit+0x1049/0x1950 [ 876.966240][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 876.971177][ C0] __tcp_transmit_skb+0x1cbd/0x32f0 [ 876.976389][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 876.981266][ C0] ? __tcp_send_ack+0x176/0x5a0 [ 876.986159][ C0] tcp_rcv_established+0xb06/0x1d20 [ 876.991372][ C0] ? rt_is_expired+0x1c/0x2d0 [ 876.996076][ C0] ? tcp_check_space+0xad0/0xad0 [ 877.001035][ C0] ? rt_is_expired+0x1c/0x2d0 [ 877.005728][ C0] ? rt_is_expired+0x250/0x2d0 [ 877.010612][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 877.015307][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 877.019832][ C0] ? tcp_filter+0x90/0x90 [ 877.024267][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 877.029730][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 877.035359][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 877.040821][ C0] NF_HOOK+0x32d/0x3b0 [ 877.045110][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 877.049377][ C0] ? NF_HOOK+0x9f/0x3b0 [ 877.053574][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 877.058610][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 877.062867][ C0] ? ip_rcv_finish_core+0xd8f/0x1bc0 [ 877.068162][ C0] ? ip_local_deliver+0x122/0x1b0 [ 877.073187][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 877.077869][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 877.083071][ C0] ? ip_list_rcv+0x440/0x440 [ 877.087689][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 877.092301][ C0] ip_list_rcv+0x3f2/0x440 [ 877.096729][ C0] ? ip_rcv_finish+0x250/0x250 [ 877.101499][ C0] ? __list_del_entry_valid_or_report+0x9c/0x130 [ 877.107839][ C0] ? ip_rcv_finish+0x250/0x250 [ 877.112691][ C0] __netif_receive_skb_list_core+0x2da/0x750 [ 877.118709][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 877.123346][ C0] ? read_tsc+0x9/0x20 [ 877.127427][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 877.133598][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 877.140020][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 877.145133][ C0] ? netif_receive_skb_core+0x230/0x230 [ 877.150701][ C0] napi_gro_receive+0x565/0xb00 [ 877.155565][ C0] receive_buf+0x2203/0x3820 [ 877.160162][ C0] ? virtnet_poll_tx+0x530/0x530 [ 877.165117][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 877.170585][ C0] virtnet_poll+0x5dd/0x1280 [ 877.175265][ C0] ? refill_work+0x220/0x220 [ 877.179873][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.186089][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 877.191300][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.197476][ C0] __napi_poll+0xc0/0x460 [ 877.201821][ C0] net_rx_action+0x616/0xc40 [ 877.206461][ C0] ? net_tx_action+0x980/0x980 [ 877.211271][ C0] ? detach_timer+0x2b0/0x2b0 [ 877.216057][ C0] handle_softirqs+0x280/0x820 [ 877.220928][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 877.225762][ C0] ? do_softirq+0x1a0/0x1a0 [ 877.230294][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 877.235635][ C0] __irq_exit_rcu+0xd3/0x190 [ 877.240438][ C0] ? irq_exit_rcu+0x20/0x20 [ 877.245045][ C0] irq_exit_rcu+0x9/0x20 [ 877.249404][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 877.255067][ C0] [ 877.258040][ C0] [ 877.261005][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 877.267090][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 877.273082][ C0] Code: 75 11 e8 02 02 0b 00 48 85 db 75 16 e8 f8 01 0b 00 eb 15 e8 f1 01 0b 00 e8 bc 39 08 09 48 85 db 74 ea e8 e2 01 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 877.292773][ C0] RSP: 0018:ffffc9001158fa00 EFLAGS: 00000246 [ 877.298927][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88802b919e00 [ 877.306902][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.315047][ C0] RBP: ffffc9001158fad0 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 877.323109][ C0] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: 1ffff920022b1f44 [ 877.331079][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920022b1f65 [ 877.339150][ C0] ? event_function+0x300/0x300 [ 877.344034][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 877.349753][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 877.355559][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 877.360927][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 877.366556][ C0] smp_call_function_single+0x36d/0x5a0 [ 877.372099][ C0] ? event_function+0x300/0x300 [ 877.377060][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 877.383295][ C0] ? event_function+0x300/0x300 [ 877.388173][ C0] perf_install_in_context+0x5be/0x920 [ 877.393740][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 877.399719][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 877.405054][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 877.410516][ C0] ? perf_event__header_size+0x165/0x220 [ 877.416161][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 877.421892][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 877.427734][ C0] ? lock_chain_count+0x20/0x20 [ 877.432619][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 877.437931][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 877.443601][ C0] do_syscall_64+0x55/0xa0 [ 877.448018][ C0] ? clear_bhb_loop+0x40/0x90 [ 877.452869][ C0] ? clear_bhb_loop+0x40/0x90 [ 877.457573][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 877.463484][ C0] RIP: 0033:0x7f47ce39aeb9 [ 877.467902][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.487684][ C0] RSP: 002b:00007f47cf32e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 877.496103][ C0] RAX: ffffffffffffffda RBX: 00007f47ce615fa0 RCX: 00007f47ce39aeb9 [ 877.504072][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 877.512141][ C0] RBP: 00007f47ce408c1f R08: 0000000000000000 R09: 0000000000000000 [ 877.520305][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 877.528291][ C0] R13: 00007f47ce616038 R14: 00007f47ce615fa0 R15: 00007fff65a0d088 [ 877.536293][ C0]