last executing test programs: 24.193844496s ago: executing program 2 (id=12301): socket$kcm(0x29, 0x7, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x57, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0xffff, 0x5, 0x21000, r0, 0x8000, '\x00', r1, r2, 0x2, 0x5, 0x0, 0x2}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x0, 0xa, 0x4, 0x4, 0x9}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x11}, @ldst={0x3, 0x0, 0x4, 0x7, 0x5, 0xffffffffffffffc0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0xe06, 0xf, &(0x7f0000000680)=""/15, 0x41100, 0x18, '\x00', r1, 0x25, r4, 0x8, &(0x7f00000006c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r3, r0, r0, r3, r3, r3, r3], &(0x7f0000000740)=[{0x3, 0x4, 0x6, 0x1}, {0x4, 0x1, 0x2, 0x5}]}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000840)=@o_path={&(0x7f0000000500)='./file0\x00', r3, 0x4000, r5}, 0x18) openat$cgroup_procs(r3, &(0x7f0000000880)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000008c0), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000900)=r6, 0x4) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000940)={r6}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f00000009c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00), 0x228200, 0x0) r9 = perf_event_open(&(0x7f0000000b00)={0x5, 0x80, 0x5, 0xe, 0x7, 0x0, 0x0, 0x7, 0x40080, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000ac0)}, 0x100040, 0xd, 0x8000, 0x3, 0x1, 0x40, 0x276}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000a40)={0x5, 0x80, 0x8, 0x5, 0x3, 0x19, 0x0, 0x3, 0x46228, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xfdab, 0x84d6}, 0x2000, 0x631b, 0x80000000, 0x6, 0x0, 0x1, 0x91d, 0x0, 0x5, 0x0, 0xc2}, r7, 0xc, r9, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r9, 0x2405, r7) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x7f, '\x00', r1, r5, 0x5, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r10}, &(0x7f0000000c00), &(0x7f0000000c40)=r5}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TUNSETVNETLE(r8, 0x400454dc, &(0x7f0000000d00)=0x1) r11 = syz_clone(0x128400, &(0x7f0000000e00)="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", 0x1000, &(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)="cfd471bf6bb0547feefbe1128f79284821202e1bda07085b0d19d027726758b186418b4bbb356a07cfa3940bd46ab6939cb8af120a1bcd0b6fb0dd308df48f36") perf_event_open(&(0x7f0000000d80)={0x5, 0x80, 0xf, 0xfd, 0x7, 0x8, 0x0, 0x1, 0x928c0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000d40), 0xb}, 0x100, 0xffff, 0x9, 0x2, 0x0, 0xfffffff9, 0x5, 0x0, 0xfffffffc, 0x0, 0x3}, r11, 0x8, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001ec0)={'syzkaller1\x00', 0x100}) socketpair(0x22, 0x4, 0x36, &(0x7f0000001f00)) 6.799646254s ago: executing program 4 (id=12388): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x7}, 0x21, 0x0, 0x0, 0x0, 0xff, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd49}, 0x40000002) recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x1000000, 0x1, 0x1ff}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/217, 0x33, 0xd9, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)={r1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28}, 0x28) socket$kcm(0x1e, 0x5, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r2, 0x8, 0x0, 0x0, 0x14}, 0x94) 6.151120076s ago: executing program 3 (id=12394): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) 5.536804216s ago: executing program 4 (id=12395): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'batadv_slave_1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcd, &(0x7f0000000a80)=""/205, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETOFFLOAD(r1, 0x80047456, 0xf0ff1f00000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x0, 0x4) (async) r6 = socket$kcm(0x10, 0x0, 0x4) close(r6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) (async) close(r7) setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f0000000180), 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) sendmsg$inet(r5, 0x0, 0x851) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r8, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xc, &(0x7f00000000c0), 0x4) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, 0x0, 0x15b517efa6b05fd5) 5.293448164s ago: executing program 3 (id=12397): socket$kcm(0x2b, 0x1, 0x0) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, 0x0, 0x20000004) (async) sendmsg$kcm(r0, 0x0, 0x20000004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x1802, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, 0x0, 0x2020) r2 = socket$kcm(0x10, 0x3, 0x10) close(r2) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a0000000400000008000000fcbc75c627ca74e4d037cc0c00", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0), 0x0, 0x81, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), 0x0, 0x0, 0xf, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r3, @ANYRES32], 0x50) 5.236663606s ago: executing program 1 (id=12398): socket$kcm(0x10, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'pim6reg0\x00', @link_local}) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7a, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="12000000040000000400"/19, @ANYRES32, @ANYBLOB="00eeffffff0000000000000000000000006d000000", @ANYRESHEX=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x16, 0x0, 0xfffffffa, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x104002, 0x8, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r2], 0x48) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) (rerun: 32) socket$kcm(0x10, 0x2, 0x4) r5 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) (async) perf_event_open(0x0, 0x0, 0x4, r3, 0x2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000980)="b0ff04c66b0d69", 0x0, 0x2f, 0xe8034000, 0x0, 0x8b, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba", 0x5dc}, 0x50) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902", 0x37}], 0x1}, 0x4010) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b040231a6080c000acc28d2280000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair(0x1d, 0x2, 0x2, 0x0) 5.12689883s ago: executing program 0 (id=12399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) 5.011202113s ago: executing program 0 (id=12400): socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x9, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069003600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 5.003406644s ago: executing program 2 (id=12305): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[{0x10, 0x114, 0x7f}, {0x10, 0x84, 0x1}], 0x20}, 0x40091) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.904604637s ago: executing program 4 (id=12401): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae) socketpair(0x15, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89ed, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x3, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0xc2ba, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="01000020109b"}) 4.903267137s ago: executing program 1 (id=12402): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x758, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008095) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 4.82950806s ago: executing program 3 (id=12403): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x6}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101}, 0x90, 0x0, 0x33e00000, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e4"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.5230492s ago: executing program 0 (id=12404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003e512008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r5, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x5451, 0x0) 4.444811592s ago: executing program 2 (id=12405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x400, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[], 0xffdd) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003e00200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r2, r6}, 0xc) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffef}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000080), &(0x7f0000000140)=r7}, 0x20) 4.325780156s ago: executing program 1 (id=12406): socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0010000900"}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8933, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a08\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4a, &(0x7f0000000280), 0x4) (async) close(r3) (async) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'veth1_macvtap\x00', @random="010000000700"}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4aea03, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) close(r6) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/39, 0x27}, {&(0x7f0000001a40)=""/190, 0xbe}, {&(0x7f0000001b00)=""/226, 0xe2}, {&(0x7f0000001c00)=""/195, 0xc3}], 0x5, &(0x7f0000001d80)=""/200, 0xc8}, 0x102) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x95, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.076617394s ago: executing program 4 (id=12409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) 960.600938ms ago: executing program 2 (id=12410): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000004300)={&(0x7f0000001300)=@sco, 0x80, &(0x7f0000004100)=[{&(0x7f0000001380)="cb16647bcdf374e968", 0x9}, {&(0x7f00000013c0)="dda10660e0858936edfd30449f70b434c700787ed93676729adc482a0776aaa3af539d2f1b568965628a5e30eed614f7985ff90fabd09e290c7e967285e003049c922784f4adaac0e0010e4b7553de68ec1e6f3c02f1cc72451a959701814c409f7db356dc87ace0f931e26194be19503ec0e7ebb3803a3854f454365afc3a7ba25fedd14e20abf5bc7b", 0x8a}, {&(0x7f00000030c0)="a81a22c14f564ce9133e7c3e7200e8f09692360f7baff4aea045985fbce50d9f1aaf8a9711235e73e786b81e15075d3fff840264b58c4a66594acf8a13d0ccd62d7a1dc30fe0e5fbcf717641cb605c08415ec136bee6c42e3f4306259aa3e5506580ffa63b19264f710e6ef2a90defc7cac326dee406e110f54864eb27fe72016acd738f5f609ab7b9878ee081ffe0d973d260cdfd49e3e9712870cddf55999c9bbd0b6dcdf2ee95ad2d5b776f3544dc18f6ef2a76e174e989eb3a1a4421e434da142050bfd7a4fb19295bb24a1d76ce01b616e6b8eaa16520354374ac2777564217285c1e0765e6a9e4ed560a5408d0fa908349c6148a78e3a2a38c703e8fa98ff9539b69b54a8b9f86c969eea2a43be8909f630f1883559b1604389cc0519121c275238a34cd1114d8093950f4dce23e56811120cecad1e711a8a1feaea0ee9a8504d02080bb6f265b4a3ae85b9917af3a8aacdd64de2b0e9cb3690b864d8d27eceed0231dcf13d953d276f97768c1cee65238ba4d9eb4bed6fb574ce2c4854ec9466e31364050a320409952e2b87f2454c5a6835fdecb5f970bb3f20a4f6b26eab05e666396b84a6e212cf7e04898b7ebefb629d5bb50ef5680722a8e5435eac7e8883180ac8b4e05b82d8f2e8aa1a665f1c25720b82a84501659e28ebde783367e165f37c4d7db93cf1fbdd62eee00e5c67bf94d22bb700f4677b43a42dee5f128e342d5c05a170dae2122e2c470ad9396e5c3eea9f8365f66cb783918f719507cbdd24c1b74210d5b1fcd33c1d2dd6161f2d7e11155bef5d13b1bb1899bfb8e9542f80c814a0b1f669cf534089c29152763bdf2cedc1b1c18c59f66234232d2fcda02294df1698adb2569f377e41f5efb6a7f18cb6f5971b28e5b07178270587d645b19c1863b77f4115ea921c30a512dfcfb7c9d9a9a72ab54691eb8e6fa4117d586685aad3dd6d8d6134f1391c9e7216e442a91d6fc5194bcd0dd31ad18b6912ad04f242d5f5e48298019561ff810a6cd8e1391a2d4b2f1df2b012ff46e1af55122f1d772b213309859c26730b9e3037c5f432035ff4b60ae755773caab0c53946ee8e3d0e8cb86b5adf8165ad4d41c9ec4b7be4a455128f34306179e84cde455bd67e9c3229111b0e9ee0819ae303735a874b23ba964820846448a04ea05bd80fa3cc7ba39ab4bdb8f2382832b7ed75b57828465edaeabd7db85de98967cb19119087d6d62e586066744a10bd2d1350cf2867ee9086ec277e6bb8598a69482859e4d2adf4863aa038338e955d9f26a9e3326eaa897e318f3bfff98bc480e214e7cb6ecc3f5e4ac93af0336682085eef43964936849f03fe35d60dc3b7db8b8448b143e6a29cfc88d33389eff946bef4c786e04e3035bb6940c449fa4e93f7fd804cf6334c2144b43c1e481534834c078b000bd3709bdc623a3a82e8e1b69426adff6fc6ba42178588fbdef2bb69ac37c692939d326693eb044012d0022bd5d4e1e71420c50fe7eb721cda7be04768f3b7575926e1339eaf33fa6d68b502c46966c6c4b8dcf788440de75338beab181b7ce1df737c98023ff15d102687553621a3118dd9b739bd0ceba9ff58b2b2c62747fc200b4cdc9b0fe40803bbb5b4f8f08590dfba0f7648d90aba78e62f908875966b0a3e8d5199ec6b50cd3e4e46e3562abb571f5c8fe7f0e28c89cc1d27072de404a9207e00daa4cf9d245693a1d5ff11e8756fdf32416a9d7d444fb9a7923385d568497dcdc5e23954abb0f5812d04b6539f43f5af76c153e2e07a9f5163b7a54a169fea66e68b5617aca7c95600947e00baefa0ee194da72b63af8753cd8869471ccf8bc38dd4936c06b08e248c593cc8e5698316f93bfca9a212611c88aec61af1417bf41deaab950c216d9f9c8b22d4de7458144d143b6a6d68f6f53a8a6da8ca14bd93027f9975240de973d46efa0b1ede0035036d0f82c2cd73d91f226d1ef6323ec9b8e13d4d23e7a580f821fdc69852245df799aed489aeaeb9284377c0b49a4047a6cd4d535ac7868b78881962e6add9320f52eea3790fe63bcca8ce52f1a5ea473d55a930660323d83028be6bdb8f5ed661412919bde183b702952779d705e6bb69cfc655c6cea8f1cfec1858736ccfb87dfe15c7ea09501c2b003714fe18c2273ea2c14d6ea50b71765b83141655fe3530117b898e2eb01845542ab7474f7eb4ec5f23a4ef2b8b02e81639bd3dcf6c785c61181d4c0ff74d2943d02d07159f4e8049f03693f0a6691a08ebbc4e4d72b0b85a08e3aa40b4a997179b3ea84f003486775ece435f2f9b1bd889dd6f8466c5288b6b7877ef6795bbaaf18d985144a41017ad1252c4e949ae0119814fcb3216b53afe17c9042f0e84bf8956ed7995c30d3b940c3d4ea173229f0a4c899191d88ba4b4908c1962ae96f569f8e66345db61f0b00eca00552c6d6fba5c2cb8efa75418ff988918c5f9ff7824de77285be9e655492cc563968ca798260723d68c3f94647a4f4bf66f216766572296f0be5994e94ed3063850436255bb8e345a98ba28213f4b097bcc12af5a502c449456d8da0fbeafe011c08617673ca0271671c01f79dc67f498c31d366deba1f6bb8d326a85b5c3de31911451dfa76f70fcc5160fd43cd0b123521a20cf52f25c38a4594c1e61a59b63a6c54e0518461e492d29722d92b27dcab2ed13852f969ceb57e4a9bbf762290603f3eef863e6f72b684dd00cb15f34c3e161e8641c1ac2bbcf500150c00a393693bb99b78457cb359dd2e74895f1753433dc0d9037d461473494582529d89e758d370d80f088d6f6985948617372cc4dd9745eca8eb08e5b82a898916613703ea9ce1bfd3ebd30ab7643838539d2cb742ccec02f58eaa1741e22fcd1b7d506d271e7b980d94dd06032bdac838cc7d2ec741cfc30a8bd341ea1d60fc151955e3d53fc3b5dc63bab936ac819f3196c8173c8d32b4ed103b61dd1db8fd5dfa336ad9a82f95ec66f1eb6640b20705dafcd3e5dcc2488f4a588432403c8c1219b75bca4c875a3d369584a6de46ac797ffc44b8bec1978cc5f859cfe098895c271edf8dd9b035d325d660963a445b1d9336220532d47cf257b0c8679f897c043554feb3cfb7ad4105a58357c87aa0a447a4afdd03ac324e63c96db7a144a3616e95094df5fb4876da768c81c5d2fb3ada1b8061b48d20f1e98da2b9ab870e583d647b5877775685bde8bb07237d396a93f27af3d3e8d95442c36d66e838f178167116ce75f6dda6be27c335ca9d7a17243ee697118dd2389bfa1164ba4be5c8256c83818d18ca68cd57623b5f5ff0f69eaae14275374503c3d53f78d411d631feed027f0606b514604ea324d66400a251ba9a5cef1f950715d5fdd1ff8e47f5353d82d71c011e01728f010fd5c24f81c2b1741df4412c5c017fdaf2337e42967880194d193435618f376076d1d83650dc71aa1061408ef0f3908e33bce3a0b75b774f344a4fcef2e9667d1ac79ccc490f47892055dbacdc67c930c8ec8960bafdfede1b32e4feb7b0475b404ec31ecf884a40381e2e4d42e0a82b0acb6191725c6a7cbf9fa3145e605b442696ac52234c89a29277fdb81831e8a5b107398a390e265bb5ad6e601fd1f61c4a945dc2518f6ab5548e4ff95becd29b0d7b4def18a10b97ba07e99cdac50b6497f841631df5e9491bc77ac1b671b30f8cc4e876512ea1957e24340b31d6cd8da4b00c64735eb530ce6c09fb43bf788f8653a4807ef2bee1b8d8882c2ae41cd929acc8c614736404c4a6df0caad5b47a1f70d1d768d7a687b3e0aa1e9017bbb58774d2b0d95f8fbca67fcd22469cf0147e2ecf353084464a5340f72cf5e1dff6cfe6c4e87ab42e5d2bf793df184a6e99bd5654aee6016b12d5a7b019e372eb6f0e0f9803dfb741b69cddc970c4b009173bd9d82046ed67d81ae854027218403f654f277e25a97f70ae941b956b0f28c3e3b012b187774b3d7249243fbebdb4406d2ba7ddd1ddbd045f62e0bdc4e83eadbe8f37be30e699b7ab4fd6c5d3d1785361df7687ca34226c4b4728da866868c4101e079aa0817042c1921dff7e9e2dba330afd530943a8956866fe894df4443476dda2857be57483a6c449afba6b82ae5a23cebca4bdd956f245aac0c825f68194749290ec81f6e691dc7148d90137efd97f60c87613b8e9fdeb26ade16657348a994a04aec6610ec3ac34e283944015eae22f7187ea1ea23a72d5ff42cbdeb0f65d2eb91eb83706792d169552a84c7e6e7fa6d6719875890717d40c1b634cdea28d512f7b60d08ecfd1132a00fb107fe8140f28fcb79777395a7744f502a774fc49f0dfd99df8b4bafe620e7fd28c438a807c5cc1cf016b924df601a687ee7d2cf68c62dbcfbbd9364360976d0c447ffc81ad07477b27d1d6d99c19a67cfd831fc271e8e435b0e10cef5c873ae2ac8f5bbd712be62a2402b9be4b36306743dec26c9437612f9f5e42d6c71d5a44108ec8d39ff414e69ac812f5bea59c8c069029a813e65daf55935edce28486d3898e7ad5d7af86d5cb11ad0b9e27ba8d11c3b4c2f5b2f717a8370d31f65783aff3fce496febd6264f72f7acca877a1fb24c6688f62ae6446ccd67ac29f00e35fa4075dbe24422d82bcfbac593ac06a06236cee40570ead171f2969b1356524d718d452753d2a8e0b1d770e9df35ac7f0108eaeb7493fac4202eab830876c26d4f9765bc0316b9308fa24ab4edd7b59ee6b4999df2e625d2de2d6134267da7392f6fc8cc4fa6c191c8558b7ffb4254777238058d4a2f3f4ae5341b92adb0e31e7bc63d34641979164a55e752884c79663a5903f6e6ef9a23267964bddfe0af3e5a7b1096a4a65141f33fec022948b0699f2ce1e0091cfdaad9d4517e8bb927715e06770a02fdd1a7f1ba0da86b768edee979aac81707730f6178ca4cb0b1cc6e74845cdb216fef5a0ad119d0bbb434bc8e369d9871b7aa3d6e79df4c47c62e324aa7fe9374b066b3d9cbf1c25826725dae0387cef4f10c423684ed81ea214c2a2f5fceb4f09ce2266011c14905e17cb7b0ba36d9c79ecf1ef19e023427f76ef0705fb71de29d12acbe53c5d8d2fca370585efd3897a5023cb0e7452c1e32f24a56cdac93fb6a0fbd2b6e9eee84f823dc0709989ddf475cceaab552acb2ab42158f70c9467fd9eab8c268c9c306fd011d85bb8acc4251b348a18605dd836049923a62f10bcca30c8a49dfae442dea492e162d4a895cc2535d0f9694221ba01974a18ee50cc07d94a027e731eb302610e7498ff2ae1891412cb612890360ef24a997df2571eac57a254f8d14bf0013b840ac50ab262e9782d95feefe8642915885c57ac3d787b30603e9ffa93b26a19efe9b4d327fc1da8b6c0d0fa9bfea9083aae695b0e539ed5e68f35165a76465ca1d465aabfe00100e5cb9d0e4e0ae7e2c7bf77f0396c5adb50e81f94adccba207213cd6e8ad48c8d17f7a160fffc8d1329db0de3aef7cca7d2e0c6bbcd8c824d3647115b1b214e63b81afc209a244d735a5694c20ec7088281e961baf21d25f1a531e7a6c4dea7aae1ad76debd239c96a50b4fb679de2fb9232fafc3ae3b548ff2056c400f3f1e285daa7bb13d4b1c523689deef99a201e642bb29b069f6460179baca71c3f2c0fc879d44389efac23348cbd76c456b791a78b72ad75015fea555ef2abc60c6174f8909eb44ae49fbf5212cbbcf74fcc7fe976193be127cef2faf7a2b75adcf4756defd84b7e24e44e12ecf51247357da3828d261ab81536697f7d24916dc7ecbcfcbfe1bdae1", 0x1000}, {&(0x7f00000040c0)="43e919335dd6def7a093dc3b", 0xc}], 0x4, &(0x7f0000004140)=[{0x28, 0x10f, 0xad5, "592a2f9d441d93b7a5d5dbf8cab4b6bd858263b2"}, {0x50, 0x1, 0x4, "2f9ed96fa045ef2c44fdaa24ef70cab93710b0f83b19ee65ffffffffb3f9729bca85fc719414f9aa2c5984eeafd275c6ead46cededd39b2bfb2240"}, {0x80, 0x29, 0x0, "78355edf3680c5a2c66818a3e29068cb85addf19fb1394699a8cce5902a72268cd8d18ced0ee10537c93ab685a70c75ed8c0916b88ae2ae0680ecad40ca483a82c0f2b83306a86ada5911787b0871997c8fc1f3b782bf6e0f32703cf878dee8dd7840063644122fdcf91ca"}, {0x90, 0x101, 0x2, "06fc6bec048afaf1e29045b13174c4a13489d56e24c4cf66cbe2a1171609f3cb95464e0d8c9f83c49f431fd690015766c8f286463b52321ac6c3431f86f9f0bab4c37e91b99aaf52bc2f8b9e61576523dd71d3ee1f01528a151fcc411955d604deab25d53b67c7861a97db02d96655336eb96404e1912f7851b791"}], 0x188}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000100)=r2, 0x120) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x2005, 0x0, 0x51, 0x9, 0x0, 0x4}, 0x0, 0xfffffffffffeffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="07000000040000000001000004000000200000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800030000000000000000002d3314e67f17", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1a00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000020000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000001000018", @ANYRES32=r6, @ANYRES32=r6], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 893.169701ms ago: executing program 0 (id=12411): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2040, 0xac5d, 0x0, 0x0, 0xa38, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x13, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x59}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="178d8544cab8a6048604bf0bb019", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259}, 0x67) r3 = perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x1, 0x1, 0xfa, 0xd, 0x0, 0x2, 0x240, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x1008, 0x100, 0x6, 0x3, 0x1, 0x8, 0x6, 0x0, 0x8, 0x0, 0x1850}, 0x0, 0x2, r0, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfffffffffffffffb) socket$kcm(0x23, 0x2, 0x0) close(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)) 882.898421ms ago: executing program 4 (id=12412): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf067105acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000040)="130000001a0081044e81f782db4cb9041c1d08", 0x13}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 758.362425ms ago: executing program 1 (id=12413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000018000000850000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x88, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x85, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x80}}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x56, 0x2}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x56}, @const={0xb}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0x6, 0x1}]}]}, {0x0, [0x0, 0x71]}}, &(0x7f0000000700)=""/182, 0x88, 0xb6, 0x0, 0x1}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0xe, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYBLOB="3eca", @ANYRES8=r10], 0x9a) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000007000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x1b, &(0x7f0000000040)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r1}, @ldst={0x0, 0x1, 0x5, 0x8, 0x4, 0xfffffffffffffffb, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0xb85229af56e3c60e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0x9e, 0x25, &(0x7f0000000240)=""/37, 0x40f00, 0x40, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000800)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x5, 0x4, 0x8}, 0x10, 0x13bfe, r0, 0x4, &(0x7f00000009c0)=[r5, 0xffffffffffffffff, r6, r7, r11, r12, r13, r14], &(0x7f0000000a00)=[{0x5, 0x2, 0x8, 0x2}, {0x0, 0x1, 0x5, 0x5}, {0x5, 0x2, 0x4, 0xd}, {0x2, 0x1, 0x1, 0x8}], 0x10, 0xea4a4000}, 0x94) 757.878145ms ago: executing program 3 (id=12414): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff008}, {0x6, 0xff, 0x84, 0x1}]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10, 0x0, r0}, 0x94) 686.206248ms ago: executing program 4 (id=12415): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000006c0)={0x0, 0x80, 0x1, 0x40, 0x4, 0x3, 0x0, 0x6, 0x0, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xe0000, 0x4, @perf_bp={&(0x7f0000000680), 0x3}, 0x20, 0x4f6a, 0x9, 0x5, 0x0, 0xd0, 0x7, 0x0, 0x3b08, 0x0, 0x7}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003e512008500000086000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000006000000c63900000100000080000000", @ANYRES32=r0, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0300"/28], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047459, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x20f1, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, &(0x7f0000000380)="927c875f66b8b25ced6d6a6cff56d02d31ac18a4188e3a1445630e4be1c2072cb6783b617f0279187fc66497985473c4a97923e136285093c760a0efcd999f99e7b5c8fd00a6097984d808099d0bd340149fcef362bb7c93387b8518e355c7ea89052dd3601dc76eb90e011fc974db4f79ae9a9ee71006c90f430f0a", &(0x7f0000000400)=""/193, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 438.027016ms ago: executing program 1 (id=12416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) close(r1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x10, 0x3}, {0x10000002, 0x4, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffea3, &(0x7f00000003c0), 0x18}, 0x10000) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000480)="be", 0x1}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x9b, &(0x7f0000000300)=""/155}, 0x80) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000202000000000000000200000d02000000"], &(0x7f0000000000)=""/219, 0x42, 0xdb, 0x1}, 0x28) setsockopt$sock_attach_bpf(r1, 0x84, 0x25, &(0x7f0000000000), 0x20000010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/73}, 0x20) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r2) 304.72905ms ago: executing program 2 (id=12417): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xe, &(0x7f00000011c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0xffffffff}, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) 154.623175ms ago: executing program 3 (id=12418): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$kcm(r0, &(0x7f00000002c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x6}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101}, 0x90, 0x0, 0x33e00000, 0x0, 0x7, 0x1, 0x40, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 149.696206ms ago: executing program 1 (id=12419): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x200, 0x1126, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af74911d5e51b76d2c31b8bece7b0f"], &(0x7f0000000080)='GPL\x00'}, 0x65) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_pressure(r6, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'geneve1\x00'}) 52.776899ms ago: executing program 2 (id=12420): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x758, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000080)=r2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008095) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 0s ago: executing program 0 (id=12421): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803", 0x3d}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0xe0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback=r0, r0, 0x0, 0x22, r1}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 720.267179][T10427] netlink: 'syz.4.10811': attribute type 21 has an invalid length. [ 1720.281847][T10427] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10811'. [ 1722.350715][T10491] netlink: 'syz.1.10832': attribute type 2 has an invalid length. [ 1722.379733][T10491] netlink: 'syz.1.10832': attribute type 8 has an invalid length. [ 1722.411762][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10832'. [ 1722.454797][T10499] netlink: 'syz.1.10832': attribute type 2 has an invalid length. [ 1722.483652][T10499] netlink: 'syz.1.10832': attribute type 8 has an invalid length. [ 1722.520421][T10499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10832'. [ 1725.517902][T10535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1725.992925][T10535] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1726.014941][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1726.032992][T10537] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10843'. [ 1727.144304][T10575] netlink: 'syz.3.10852': attribute type 21 has an invalid length. [ 1727.356098][T10588] netlink: 'syz.0.10855': attribute type 2 has an invalid length. [ 1727.418767][T10593] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.10857'. [ 1728.400658][T10601] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10861'. [ 1728.415706][T10601] device hsr_slave_0 left promiscuous mode [ 1728.439877][T10601] device hsr_slave_1 left promiscuous mode [ 1728.544997][T10614] netlink: 'syz.3.10863': attribute type 11 has an invalid length. [ 1728.553017][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10863'. [ 1728.749255][T10642] netlink: 'syz.3.10869': attribute type 10 has an invalid length. [ 1728.831979][T10642] team0: Device wg1 is of different type [ 1729.222904][T10664] netlink: 'syz.3.10876': attribute type 3 has an invalid length. [ 1729.231506][T10664] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.10876'. [ 1730.290457][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.296902][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.049558][T10701] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1731.115795][T10701] netlink: 'syz.0.10886': attribute type 10 has an invalid length. [ 1732.045292][T10701] team0: Device veth1_vlan failed to register rx_handler [ 1732.087896][T10710] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.10885'. [ 1732.137379][T10732] netlink: 152 bytes leftover after parsing attributes in process `syz.1.10893'. [ 1732.206589][T10735] netlink: 'syz.0.10894': attribute type 10 has an invalid length. [ 1732.235365][T10735] team0: Device ipvlan1 failed to register rx_handler [ 1732.362695][T10738] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.10896'. [ 1732.403187][T10738] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.10896'. [ 1732.674626][T10757] netlink: 'syz.0.10899': attribute type 27 has an invalid length. [ 1732.693688][T10757] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.10899'. [ 1733.163784][T10777] device syzkaller0 entered promiscuous mode [ 1737.392731][T10805] netlink: 'syz.0.10916': attribute type 27 has an invalid length. [ 1737.401449][T10805] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1737.577000][T10824] netlink: 'syz.1.10922': attribute type 2 has an invalid length. [ 1737.604020][T10824] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.10922'. [ 1738.770478][T10864] netlink: 'syz.4.10933': attribute type 10 has an invalid length. [ 1738.891999][T10864] team0: Port device geneve1 added [ 1738.961037][T10873] netlink: 'syz.3.10935': attribute type 13 has an invalid length. [ 1738.987039][T10873] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10935'. [ 1739.025824][T10873] syz_tun: refused to change device tx_queue_len [ 1739.048106][T10873] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1739.110911][T10877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10938'. [ 1739.354441][T10891] netlink: 'syz.2.10940': attribute type 29 has an invalid length. [ 1739.368084][T10891] netlink: 'syz.2.10940': attribute type 3 has an invalid length. [ 1739.379269][T10891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10940'. [ 1739.737637][T10904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1739.745001][T10904] IPv6: NLM_F_CREATE should be set when creating new route [ 1739.752283][T10904] IPv6: NLM_F_CREATE should be set when creating new route [ 1739.759585][T10904] IPv6: NLM_F_CREATE should be set when creating new route [ 1739.962998][T10904] netlink: 'syz.1.10943': attribute type 10 has an invalid length. [ 1739.983486][T10904] team0: Device ipvlan1 failed to register rx_handler [ 1740.087627][T10910] netlink: 'syz.3.10945': attribute type 7 has an invalid length. [ 1740.096050][T10910] netlink: 126644 bytes leftover after parsing attributes in process `syz.3.10945'. [ 1740.859899][T10925] device wlan1 entered promiscuous mode [ 1741.534713][T10957] syz.0.10959[10957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1741.534865][T10957] syz.0.10959[10957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1742.075805][T10965] netlink: 'syz.2.10962': attribute type 29 has an invalid length. [ 1742.175308][T10965] netlink: 'syz.2.10962': attribute type 29 has an invalid length. [ 1742.194724][T10967] netlink: 'syz.2.10962': attribute type 29 has an invalid length. [ 1742.273461][T10966] netlink: 'syz.1.10963': attribute type 46 has an invalid length. [ 1743.199942][T10981] can: request_module (can-proto-5) failed. [ 1743.542153][T10993] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.10970'. [ 1744.521406][T11023] validate_nla: 1 callbacks suppressed [ 1744.521426][T11023] netlink: 'syz.3.10977': attribute type 10 has an invalid length. [ 1744.616167][T11023] team0: Device wg1 is of different type [ 1744.963314][T11037] netlink: 'syz.3.10980': attribute type 10 has an invalid length. [ 1744.972599][T11037] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10980'. [ 1744.986043][T11037] bridge0: port 4(veth0_vlan) entered blocking state [ 1744.992976][T11037] bridge0: port 4(veth0_vlan) entered disabled state [ 1745.006416][T11037] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1745.122258][T11049] syz.2.10984[11049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1745.122367][T11049] syz.2.10984[11049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1745.225080][T11046] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1745.326939][T11046] syzkaller1: linktype set to 825 [ 1746.796080][T11104] netlink: 'syz.1.11001': attribute type 33 has an invalid length. [ 1746.816580][T11104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11001'. [ 1748.212422][T11152] netlink: 'syz.0.11012': attribute type 7 has an invalid length. [ 1748.223279][T11154] netlink: 196 bytes leftover after parsing attributes in process `syz.2.11014'. [ 1748.846220][T11179] netlink: 'syz.2.11021': attribute type 11 has an invalid length. [ 1748.874139][T11179] netlink: 'syz.2.11021': attribute type 6 has an invalid length. [ 1748.882302][T11179] netlink: 125060 bytes leftover after parsing attributes in process `syz.2.11021'. [ 1749.032887][T11177] netlink: 'syz.1.11020': attribute type 4 has an invalid length. [ 1749.105061][T11177] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.11020'. [ 1749.328600][T11195] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.11024'. [ 1749.413104][T11196] netlink: 'syz.2.11024': attribute type 10 has an invalid length. [ 1752.136327][ T4277] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1752.401594][T11229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1752.418463][T11229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1752.428346][T11230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1752.462690][T11229] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1752.644727][T11238] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11039'. [ 1752.681172][T11240] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11037'. [ 1752.917308][T11235] netlink: 'syz.4.11036': attribute type 10 has an invalid length. [ 1752.937058][T11235] device macvlan0 entered promiscuous mode [ 1753.086241][T11235] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1753.291941][T11261] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.11044'. [ 1753.329635][T11266] netlink: 'syz.0.11046': attribute type 21 has an invalid length. [ 1753.394336][T11269] ip6gretap0: mtu less than device minimum [ 1754.169982][T11307] netlink: 'syz.3.11057': attribute type 2 has an invalid length. [ 1754.190966][T11307] netlink: 'syz.3.11057': attribute type 3 has an invalid length. [ 1754.220639][T11307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11057'. [ 1754.856190][T11322] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11061'. [ 1755.248266][T11333] netlink: 'syz.0.11064': attribute type 21 has an invalid length. [ 1755.305319][T11333] IPv6: NLM_F_CREATE should be specified when creating new route [ 1755.354058][T11333] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1755.361364][T11333] IPv6: NLM_F_CREATE should be set when creating new route [ 1755.368709][T11333] IPv6: NLM_F_CREATE should be set when creating new route [ 1755.375999][T11333] IPv6: NLM_F_CREATE should be set when creating new route [ 1755.423731][T11333] netlink: 31731 bytes leftover after parsing attributes in process `syz.0.11064'. [ 1755.447438][T11336] delete_channel: no stack [ 1755.601927][T11358] tipc: Started in network mode [ 1755.677292][T11358] tipc: Node identity 9215a268, cluster identity 4711 [ 1755.709596][T11358] tipc: Node number set to 2450891368 [ 1756.584354][T11397] netlink: 'syz.4.11078': attribute type 29 has an invalid length. [ 1756.592369][T11397] netlink: 'syz.4.11078': attribute type 29 has an invalid length. [ 1756.659493][T11395] netlink: 'syz.4.11078': attribute type 29 has an invalid length. [ 1760.017585][T11419] netlink: 'syz.4.11086': attribute type 10 has an invalid length. [ 1760.043965][T11420] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.11086'. [ 1760.673260][T11450] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11094'. [ 1760.954693][T11461] netlink: 'syz.4.11098': attribute type 25 has an invalid length. [ 1760.984042][T11461] netlink: 'syz.4.11098': attribute type 9 has an invalid length. [ 1761.065902][T11461] netlink: 'syz.4.11098': attribute type 16 has an invalid length. [ 1761.104478][T11461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11098'. [ 1761.424322][T11483] cgroup: fork rejected by pids controller in /syz4 [ 1761.572437][T11496] netlink: 'syz.2.11106': attribute type 2 has an invalid length. [ 1761.598116][T11496] netlink: 'syz.2.11106': attribute type 3 has an invalid length. [ 1761.624077][T11496] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11106'. [ 1761.959392][T11519] netlink: 'syz.1.11116': attribute type 10 has an invalid length. [ 1761.980514][T11519] team0: Port device wlan1 added [ 1761.987073][T11519] netlink: 'syz.1.11116': attribute type 10 has an invalid length. [ 1762.050359][ T9546] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.067497][T11519] netlink: 'syz.1.11116': attribute type 10 has an invalid length. [ 1762.151059][ T9546] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.248431][ T9546] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.314822][T11530] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.11118'. [ 1762.371850][ T9546] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.383803][T11530] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1762.653719][T11545] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11121'. [ 1763.006676][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1763.017040][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1763.025553][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1763.035017][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1763.042691][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1763.054956][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1763.789591][T11552] chnl_net:caif_netlink_parms(): no params data found [ 1763.831421][T11588] netlink: 'syz.1.11130': attribute type 2 has an invalid length. [ 1763.985719][T11588] device 0 entered promiscuous mode [ 1764.316202][T11603] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11131'. [ 1764.332758][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.341682][T11552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.350304][T11552] device bridge_slave_0 entered promiscuous mode [ 1764.360413][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.368030][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.383533][T11552] device bridge_slave_1 entered promiscuous mode [ 1764.466869][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.480240][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.538670][T11552] team0: Port device team_slave_0 added [ 1764.569220][T11552] team0: Port device team_slave_1 added [ 1764.615219][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.639845][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.707030][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1764.913291][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1764.922672][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1765.000619][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1765.139300][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 1765.534841][T11552] device hsr_slave_0 entered promiscuous mode [ 1765.576727][T11552] device hsr_slave_1 entered promiscuous mode [ 1765.667685][ T9546] device bridge_slave_0 left promiscuous mode [ 1765.682948][ T9546] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.768368][ T9546] device veth0_macvtap left promiscuous mode [ 1765.804537][ T9546] device veth0_vlan left promiscuous mode [ 1766.477148][ T9546] team0 (unregistering): Port device geneve1 removed [ 1766.759942][ T9546] team0 (unregistering): Port device macvlan1 removed [ 1766.809658][ T9546] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1767.222080][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 1767.448191][ T9546] team0 (unregistering): Port device team_slave_1 removed [ 1767.536031][ T9546] team0 (unregistering): Port device team_slave_0 removed [ 1767.609477][ T9546] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1767.723674][ T9546] team0 (unregistering): Port device bridge_slave_1 removed [ 1768.063672][ T9546] bond0 (unregistering): Released all slaves [ 1768.230325][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11144'. [ 1768.257864][T11659] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11144'. [ 1768.417004][T11675] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.11148'. [ 1768.546003][T11675] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1769.294090][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 1769.350514][T11704] validate_nla: 2 callbacks suppressed [ 1769.350532][T11704] netlink: 'syz.3.11152': attribute type 10 has an invalid length. [ 1769.396229][T11704] bridge0: port 3(team0) entered disabled state [ 1769.402983][T11704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.409155][T11707] netlink: 'syz.1.11153': attribute type 3 has an invalid length. [ 1769.410301][T11704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.418504][T11707] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11153'. [ 1769.668101][T11552] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1769.745296][T11552] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1769.786057][T11711] netlink: 'syz.0.11154': attribute type 10 has an invalid length. [ 1769.810663][T11713] delete_channel: no stack [ 1769.868018][T11711] device macvlan0 entered promiscuous mode [ 1770.001546][T11552] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1770.056945][T11552] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1770.955064][T11736] tun0: tun_chr_ioctl cmd 1074025681 [ 1770.983282][T11740] netlink: 'syz.3.11160': attribute type 19 has an invalid length. [ 1771.136964][T11552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1771.176113][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1771.190052][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1771.229668][T11552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1771.283858][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1771.313996][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1771.344535][ T8010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.351686][ T8010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1771.373991][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 1771.437032][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1771.460140][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1771.496469][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1771.524791][ T8010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.531942][ T8010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1771.557470][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1771.582715][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1771.610633][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1771.646596][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1771.679113][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1771.827152][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1771.858464][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1771.920053][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1771.947147][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1771.996469][ T9546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1772.035067][ T9546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1772.083177][T11552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1772.808175][T11817] netlink: 'syz.3.11178': attribute type 12 has an invalid length. [ 1772.855609][T11817] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.11178'. [ 1772.925514][T11826] syz.1.11181[11826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1772.925697][T11826] syz.1.11181[11826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1773.851586][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1773.910627][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1773.932365][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1774.920842][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1774.941046][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1774.975615][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1774.993678][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1775.021658][T11552] device veth0_vlan entered promiscuous mode [ 1775.032855][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1775.042934][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1775.058283][T11552] device veth1_vlan entered promiscuous mode [ 1775.117350][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1775.135801][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1775.154588][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1775.175283][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1775.196905][T11552] device veth0_macvtap entered promiscuous mode [ 1775.214764][T11552] device veth1_macvtap entered promiscuous mode [ 1775.277114][T11552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1775.314652][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1775.344329][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1775.382312][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1775.413619][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1775.448412][T11552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1775.485500][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1775.495923][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1775.518306][T11552] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.528310][T11552] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.545458][T11552] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.575315][T11552] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.746534][ T8010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.775095][ T8010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.787508][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1775.824135][ T9457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1775.832033][ T9457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1775.852985][ T8010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1775.881389][T11921] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11198'. [ 1775.931491][T11928] sock: sock_timestamping_bind_phc: sock not bind to device [ 1776.113524][T11921] team0 (unregistering): Port device team_slave_0 removed [ 1776.233368][T11921] team0 (unregistering): Port device team_slave_1 removed [ 1776.327047][T11921] team0 (unregistering): Port device dummy0 removed [ 1776.373482][T11921] team0 (unregistering): Port device wlan1 removed [ 1776.501502][T11929] netlink: 172 bytes leftover after parsing attributes in process `syz.2.11200'. [ 1776.567634][T11943] tipc: Started in network mode [ 1776.572794][T11943] tipc: Node identity 9215a268, cluster identity 4711 [ 1776.602862][T11943] tipc: Node number set to 2450891368 [ 1777.009822][T11965] netlink: 176 bytes leftover after parsing attributes in process `syz.0.11209'. [ 1777.100352][T11964] netlink: 'syz.1.11207': attribute type 10 has an invalid length. [ 1777.140255][T11964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11207'. [ 1777.406474][T11988] netlink: 'syz.2.11215': attribute type 10 has an invalid length. [ 1777.457066][T11988] bridge0: port 3(dummy0) entered disabled state [ 1777.463661][T11988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.471021][T11988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.513798][T11988] bridge0: port 3(dummy0) entered blocking state [ 1777.520344][T11988] bridge0: port 3(dummy0) entered forwarding state [ 1777.527185][T11988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.534377][T11988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.541905][T11988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.549151][T11988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.608225][T11988] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1777.750619][T11991] delete_channel: no stack [ 1777.781852][T11998] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11218'. [ 1780.805125][T12014] netlink: 'syz.1.11222': attribute type 41 has an invalid length. [ 1780.996969][T12022] netlink: 'syz.1.11225': attribute type 10 has an invalid length. [ 1781.028388][T12022] netlink: 'syz.1.11225': attribute type 15 has an invalid length. [ 1781.081037][T12022] netlink: 'syz.1.11225': attribute type 7 has an invalid length. [ 1781.101628][T12022] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11225'. [ 1781.114790][T12030] netlink: 'syz.1.11225': attribute type 21 has an invalid length. [ 1781.123001][T12030] netlink: 'syz.1.11225': attribute type 6 has an invalid length. [ 1781.190317][T12030] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11225'. [ 1783.565125][T12059] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11237'. [ 1783.789465][T12063] netlink: 'syz.1.11237': attribute type 1 has an invalid length. [ 1783.799801][T12063] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.11237'. [ 1784.432995][T12066] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1784.477901][T12066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1784.529855][T12068] mac80211_hwsim hwsim93 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1784.548905][T12065] netlink: 'syz.0.11238': attribute type 10 has an invalid length. [ 1784.591862][T12065] device wlan1 left promiscuous mode [ 1784.673550][T12065] team0: Port device wlan1 added [ 1784.688944][T12068] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11239'. [ 1784.928823][T12068] device team_slave_0 left promiscuous mode [ 1784.962474][T12068] team0: Port device team_slave_0 removed [ 1785.168457][T12088] netlink: 'syz.2.11244': attribute type 21 has an invalid length. [ 1785.177142][T12088] netlink: 156 bytes leftover after parsing attributes in process `syz.2.11244'. [ 1785.189925][T12082] device syzkaller0 entered promiscuous mode [ 1785.341800][T12097] bridge0: port 3(veth0_to_bond) entered blocking state [ 1785.367895][T12097] bridge0: port 3(veth0_to_bond) entered disabled state [ 1785.446788][T12097] device veth0_to_bond entered promiscuous mode [ 1785.574794][T12097] bridge0: port 3(veth0_to_bond) entered blocking state [ 1785.582020][T12097] bridge0: port 3(veth0_to_bond) entered forwarding state [ 1786.931747][ T9546] wlan1: Trigger new scan to find an IBSS to join [ 1787.709740][T12157] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11264'. [ 1788.708484][T12189] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11282'. [ 1788.753430][T12190] netlink: 'syz.1.11272': attribute type 2 has an invalid length. [ 1788.910744][T12195] netlink: 'syz.0.11274': attribute type 10 has an invalid length. [ 1788.988249][T12195] team0: Port device netdevsim0 added [ 1789.862659][ T8010] wlan1: Trigger new scan to find an IBSS to join [ 1791.810236][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.816673][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.904559][ T8010] wlan1: Creating new IBSS network, BSSID 46:12:65:17:b0:7f [ 1792.271817][T12210] netlink: 'syz.3.11278': attribute type 21 has an invalid length. [ 1792.315234][T12210] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11278'. [ 1792.652526][T12230] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.11285'. [ 1792.730325][T12234] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.11285'. [ 1792.840232][T12232] device sit0 entered promiscuous mode [ 1793.005892][T12233] netlink: 'syz.1.11286': attribute type 10 has an invalid length. [ 1793.013854][T12233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1793.023690][T12233] device bond0 entered promiscuous mode [ 1793.030221][T12233] device bond_slave_1 entered promiscuous mode [ 1793.036923][T12233] bridge0: port 3(bond0) entered blocking state [ 1793.043326][T12233] bridge0: port 3(bond0) entered disabled state [ 1794.685021][T12303] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11305'. [ 1794.825511][T12303] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.11305'. [ 1795.872066][T12370] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.11324'. [ 1795.959399][T12376] netlink: 'syz.4.11328': attribute type 2 has an invalid length. [ 1795.984078][T12376] netlink: 'syz.4.11328': attribute type 1 has an invalid length. [ 1795.994436][T12376] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.11328'. [ 1798.912687][T12406] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11335'. [ 1798.980494][T12406] device vcan0 entered promiscuous mode [ 1798.990742][T12406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1799.005310][T12410] netlink: 'syz.2.11337': attribute type 11 has an invalid length. [ 1799.013583][T12410] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11337'. [ 1800.221484][T12464] device syzkaller0 entered promiscuous mode [ 1800.369786][T12472] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.11350'. [ 1800.460541][T12476] netlink: 'syz.4.11351': attribute type 3 has an invalid length. [ 1800.481657][T12476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11351'. [ 1804.448054][T12510] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 1804.636441][T12526] netlink: 'syz.4.11364': attribute type 7 has an invalid length. [ 1804.664059][T12526] netlink: 'syz.4.11364': attribute type 7 has an invalid length. [ 1804.671935][T12526] netlink: 198580 bytes leftover after parsing attributes in process `syz.4.11364'. [ 1804.926811][T12541] delete_channel: no stack [ 1805.063984][T12546] can: request_module (can-proto-0) failed. [ 1805.307804][T12555] netlink: 'syz.3.11370': attribute type 10 has an invalid length. [ 1805.452414][T12555] bridge0: port 3(team0) entered disabled state [ 1805.479989][T12555] device team_slave_1 left promiscuous mode [ 1805.533498][T12555] team0 (unregistering): Port device team_slave_1 removed [ 1805.554479][T12555] device hsr_slave_0 left promiscuous mode [ 1805.595724][T12555] team0 (unregistering): Port device hsr_slave_0 removed [ 1805.661187][T12563] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11371'. [ 1805.727838][T12567] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.11371'. [ 1805.919764][T12576] netlink: 'syz.1.11375': attribute type 10 has an invalid length. [ 1805.937823][T12576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11375'. [ 1805.957580][T12576] netlink: 'syz.1.11375': attribute type 10 has an invalid length. [ 1805.984489][T12576] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11375'. [ 1806.036699][T12581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11375'. [ 1806.349916][T12581] bridge0: port 3(bond0) entered disabled state [ 1806.388576][T12581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.424690][T12581] device bond_slave_1 left promiscuous mode [ 1806.463815][T12581] bond0 (unregistering): Released all slaves [ 1809.777511][T12621] netlink: 'syz.0.11396': attribute type 39 has an invalid length. [ 1810.067410][T12632] can: request_module (can-proto-0) failed. [ 1810.127372][T12631] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11386'. [ 1810.150842][T12628] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.11386'. [ 1813.097473][T12670] netlink: 'syz.2.11398': attribute type 10 has an invalid length. [ 1813.144137][T12670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11398'. [ 1813.199278][T12670] netlink: 'syz.2.11398': attribute type 10 has an invalid length. [ 1813.264663][T12670] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11398'. [ 1813.299501][T12673] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11398'. [ 1813.462025][T12673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.522977][T12673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.566305][T12673] bond0 (unregistering): (slave team0): Releasing backup interface [ 1813.606534][T12673] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1813.616867][T12673] bridge0: port 3(dummy0) entered disabled state [ 1813.623462][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.630796][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.649083][T12673] bond0 (unregistering): Released all slaves [ 1813.659558][T12672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11402'. [ 1813.703673][T12683] netlink: 'syz.3.11400': attribute type 9 has an invalid length. [ 1813.754329][T12683] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11400'. [ 1813.770655][T12688] netlink: 'syz.4.11405': attribute type 39 has an invalid length. [ 1814.350625][T12725] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11416'. [ 1814.378797][T12725] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1814.786167][T12743] netlink: 'syz.1.11418': attribute type 12 has an invalid length. [ 1814.818677][T12743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11418'. [ 1814.938262][T12751] netlink: 'syz.2.11422': attribute type 39 has an invalid length. [ 1814.970482][T12754] netlink: 'syz.4.11421': attribute type 10 has an invalid length. [ 1814.979463][T12754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11421'. [ 1815.061849][T12754] netlink: 'syz.4.11421': attribute type 10 has an invalid length. [ 1815.216382][T12748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.250984][T12748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.285804][T12748] bond0 (unregistering): Released all slaves [ 1815.404420][ T9546] bridge0: port 3(veth0_to_bond) entered disabled state [ 1819.297099][T12815] netlink: 'syz.1.11437': attribute type 21 has an invalid length. [ 1819.324051][T12815] netlink: 'syz.1.11437': attribute type 6 has an invalid length. [ 1819.331999][T12815] __nla_validate_parse: 2 callbacks suppressed [ 1819.332015][T12815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11437'. [ 1819.555460][T12828] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11442'. [ 1819.674324][T12836] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11443'. [ 1819.943112][T12844] netlink: 'syz.1.11446': attribute type 21 has an invalid length. [ 1819.975604][T12844] netlink: 'syz.1.11446': attribute type 6 has an invalid length. [ 1819.995321][T12844] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11446'. [ 1820.077736][T12851] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11449'. [ 1820.100599][T12848] netlink: 'syz.3.11447': attribute type 10 has an invalid length. [ 1820.124104][T12848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11447'. [ 1820.153714][T12848] device macvlan1 entered promiscuous mode [ 1820.163040][T12848] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1820.725656][T12874] delete_channel: no stack [ 1821.517089][T12883] netlink: 'syz.4.11459': attribute type 19 has an invalid length. [ 1821.555911][T12883] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.11459'. [ 1821.878841][T12898] netlink: 'syz.0.11464': attribute type 9 has an invalid length. [ 1821.905474][T12898] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.11464'. [ 1825.066813][T12936] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.11471'. [ 1827.752577][T12945] device sit0 left promiscuous mode [ 1827.957119][T12958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1827.995680][T12958] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1828.050969][T12959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1828.079318][T12958] netlink: 'syz.2.11478': attribute type 3 has an invalid length. [ 1828.105022][T12958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11478'. [ 1828.319644][T12972] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11484'. [ 1828.330639][T12972] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11484'. [ 1828.349931][T12972] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11484'. [ 1828.391197][T12976] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11486'. [ 1828.413051][T12978] netlink: 'syz.3.11487': attribute type 21 has an invalid length. [ 1828.424437][T12978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11487'. [ 1828.516159][T12985] netlink: 'syz.2.11491': attribute type 8 has an invalid length. [ 1828.639243][T12994] netlink: 'syz.0.11493': attribute type 10 has an invalid length. [ 1828.815500][T13000] netlink: 'syz.3.11496': attribute type 10 has an invalid length. [ 1828.897573][T13012] netlink: 'syz.2.11500': attribute type 25 has an invalid length. [ 1829.298897][T13034] netlink: 'syz.2.11508': attribute type 10 has an invalid length. [ 1830.272442][T13063] netlink: 'syz.1.11519': attribute type 28 has an invalid length. [ 1830.280740][T13063] netlink: 'syz.1.11519': attribute type 4 has an invalid length. [ 1830.291797][T13063] __nla_validate_parse: 6 callbacks suppressed [ 1830.291811][T13063] netlink: 136 bytes leftover after parsing attributes in process `syz.1.11519'. [ 1830.341486][T13063] netlink: 'syz.1.11519': attribute type 25 has an invalid length. [ 1830.351999][T13063] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11519'. [ 1831.232904][T13084] device syzkaller0 entered promiscuous mode [ 1835.673243][T13099] validate_nla: 1 callbacks suppressed [ 1835.673277][T13099] netlink: 'syz.4.11530': attribute type 10 has an invalid length. [ 1835.752310][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.761934][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.929791][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.937946][T13099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.949739][T13099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.957560][T13099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.366255][T13099] team0: Port device bridge0 added [ 1837.258105][T13136] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11540'. [ 1837.282294][T13137] netlink: 'syz.4.11541': attribute type 2 has an invalid length. [ 1837.298588][T13137] netlink: 'syz.4.11541': attribute type 1 has an invalid length. [ 1837.330185][T13137] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.11541'. [ 1837.803566][T13133] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.11539'. [ 1837.845184][T13137] Q±6ã`Ò˜: renamed from lo [ 1840.399175][T13163] netlink: 'syz.3.11546': attribute type 21 has an invalid length. [ 1840.544916][T13171] netlink: 'syz.4.11547': attribute type 19 has an invalid length. [ 1840.585136][T13171] netlink: 'syz.4.11547': attribute type 7 has an invalid length. [ 1840.598304][T13171] netlink: 126644 bytes leftover after parsing attributes in process `syz.4.11547'. [ 1840.678500][T13178] netlink: 196 bytes leftover after parsing attributes in process `syz.3.11550'. [ 1840.906776][T13185] netlink: 'syz.2.11553': attribute type 21 has an invalid length. [ 1840.927164][T13185] netlink: 'syz.2.11553': attribute type 1 has an invalid length. [ 1840.949083][T13185] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11553'. [ 1841.892791][T13207] netlink: 'syz.4.11560': attribute type 10 has an invalid length. [ 1841.911626][T13207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11560'. [ 1841.945555][T13207] device ipvlan1 entered promiscuous mode [ 1841.963097][T13207] bridge0: port 4(ipvlan1) entered blocking state [ 1841.977951][T13207] bridge0: port 4(ipvlan1) entered disabled state [ 1842.007553][T13207] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1842.028096][T13219] netlink: 'syz.3.11561': attribute type 10 has an invalid length. [ 1842.068729][T13219] bond0: (slave dummy0): Releasing backup interface [ 1842.115435][T13215] netlink: 'syz.3.11561': attribute type 10 has an invalid length. [ 1842.363469][T13238] netlink: 'syz.1.11569': attribute type 1 has an invalid length. [ 1842.385215][T13238] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11569'. [ 1842.424535][T13240] netlink: 'syz.2.11570': attribute type 11 has an invalid length. [ 1842.444019][T13240] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11570'. [ 1843.520797][T13250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1843.531327][T13250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1843.542533][T13250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1843.550886][T13250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1843.633506][T13260] netlink: 'syz.3.11574': attribute type 10 has an invalid length. [ 1843.641891][T13260] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.11574'. [ 1843.675325][T13257] €Â0: renamed from pim6reg1 [ 1843.732636][T13269] netlink: 'syz.1.11576': attribute type 2 has an invalid length. [ 1843.748511][T13269] netlink: 'syz.1.11576': attribute type 1 has an invalid length. [ 1843.758603][T13269] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.11576'. [ 1843.811088][T13269] Q±6ã`Ò˜: renamed from lo [ 1844.699946][T13296] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11587'. [ 1844.709744][T13296] device hsr_slave_0 left promiscuous mode [ 1844.724095][T13296] device hsr_slave_1 left promiscuous mode [ 1846.009333][T13327] netlink: 'syz.2.11594': attribute type 2 has an invalid length. [ 1846.024109][T13327] netlink: 'syz.2.11594': attribute type 1 has an invalid length. [ 1846.034348][T13327] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.11594'. [ 1846.276883][T13348] netlink: 'syz.3.11598': attribute type 10 has an invalid length. [ 1846.383116][T13354] device veth0_vlan left promiscuous mode [ 1846.414642][T13354] device veth0_vlan entered promiscuous mode [ 1847.742411][T13364] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1847.772485][T13364] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1847.792987][T13364] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1848.050813][T13388] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11608'. [ 1848.088070][T13388] netlink: 'syz.4.11608': attribute type 2 has an invalid length. [ 1848.116989][T13388] netlink: 'syz.4.11608': attribute type 8 has an invalid length. [ 1848.134329][T13388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11608'. [ 1848.169432][T13388] netlink: 'syz.4.11608': attribute type 21 has an invalid length. [ 1848.199073][T13385] delete_channel: no stack [ 1851.031407][T13404] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11613'. [ 1851.168529][T13414] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.11616'. [ 1851.962495][T13435] device bond_slave_1 entered promiscuous mode [ 1851.974008][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1852.203797][T13447] netlink: 'syz.1.11627': attribute type 10 has an invalid length. [ 1852.557734][T13457] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11630'. [ 1853.149619][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.156417][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.756845][T13475] IPv6: …: Disabled Multicast RS [ 1854.091366][T13486] netlink: 'syz.4.11639': attribute type 29 has an invalid length. [ 1854.161996][T13486] netlink: 'syz.4.11639': attribute type 29 has an invalid length. [ 1856.560727][T13538] sctp: [Deprecated]: syz.0.11653 (pid 13538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1856.560727][T13538] Use struct sctp_sack_info instead [ 1856.624370][T13540] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.11654'. [ 1856.830343][T13548] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.11657'. [ 1856.902291][T13548] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11657'. [ 1856.936367][T13549] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11658'. [ 1857.197162][T13556] netlink: 'syz.3.11662': attribute type 28 has an invalid length. [ 1858.523176][T13581] device wlan1 entered promiscuous mode [ 1859.210400][T13605] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.11675'. [ 1859.338477][T13607] netlink: 'syz.4.11676': attribute type 2 has an invalid length. [ 1859.447353][T13607] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.11676'. [ 1861.735374][T13639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11685'. [ 1861.776317][T13639] tc_dump_action: action bad kind [ 1862.031195][T13654] netlink: 'syz.3.11689': attribute type 3 has an invalid length. [ 1862.043193][T13650] netlink: 'syz.4.11687': attribute type 13 has an invalid length. [ 1862.061680][T13650] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11687'. [ 1862.071546][T13654] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11689'. [ 1862.093846][T13650] syz_tun: refused to change device tx_queue_len [ 1862.136322][T13650] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1862.207203][T13659] IPv6: Can't replace route, no match found [ 1866.941331][T13759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.11719'. [ 1867.467826][T13770] netlink: 'syz.4.11721': attribute type 39 has an invalid length. [ 1867.670405][T13782] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.11724'. [ 1868.206978][T13811] netlink: 'syz.4.11733': attribute type 21 has an invalid length. [ 1868.218300][T13807] netlink: 'syz.3.11732': attribute type 3 has an invalid length. [ 1868.236917][T13811] IPv6: NLM_F_CREATE should be specified when creating new route [ 1868.245610][T13807] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.11732'. [ 1868.249688][T13811] IPv6: Can't replace route, no match found [ 1868.340201][T13813] netlink: 'syz.4.11733': attribute type 10 has an invalid length. [ 1868.357547][T13813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11733'. [ 1868.375502][T13813] bridge0: port 4(ipvlan1) entered blocking state [ 1868.389209][T13813] bridge0: port 4(ipvlan1) entered disabled state [ 1868.403388][T13813] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1868.440755][T13814] netlink: 'syz.4.11733': attribute type 10 has an invalid length. [ 1868.459562][T13814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11733'. [ 1868.480516][T13814] bridge0: port 4(ipvlan1) entered blocking state [ 1868.495362][T13814] bridge0: port 4(ipvlan1) entered disabled state [ 1868.515088][T13814] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1868.564749][T13812] netlink: 'syz.3.11732': attribute type 21 has an invalid length. [ 1868.572731][T13812] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11732'. [ 1868.624294][T13812] netlink: 'syz.3.11732': attribute type 4 has an invalid length. [ 1868.632189][T13812] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11732'. [ 1869.528870][T13827] netlink: 'syz.0.11736': attribute type 1 has an invalid length. [ 1869.540837][T13827] netlink: 5 bytes leftover after parsing attributes in process `syz.0.11736'. [ 1870.647557][T13837] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11737'. [ 1870.955519][T13841] netlink: 'syz.4.11740': attribute type 1 has an invalid length. [ 1874.419324][T13857] IPv6: Can't replace route, no match found [ 1876.791854][T13901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11761'. [ 1876.950860][T13914] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.11763'. [ 1876.975613][T13920] netlink: 'syz.0.11765': attribute type 21 has an invalid length. [ 1876.989771][T13920] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11765'. [ 1879.176901][T13960] netlink: 'syz.3.11774': attribute type 3 has an invalid length. [ 1879.197739][T13960] netlink: 'syz.3.11774': attribute type 1 has an invalid length. [ 1879.207167][T13960] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.11774'. [ 1881.568237][T13974] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.11778'. [ 1882.379871][T13981] netlink: 'syz.1.11781': attribute type 10 has an invalid length. [ 1882.794217][T13997] sock: sock_timestamping_bind_phc: sock not bind to device [ 1882.807060][T13990] netlink: 'syz.2.11785': attribute type 21 has an invalid length. [ 1882.825794][T13990] netlink: 'syz.2.11785': attribute type 1 has an invalid length. [ 1882.834551][T13990] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11785'. [ 1884.428222][T14045] netlink: 'syz.4.11802': attribute type 2 has an invalid length. [ 1884.916300][T14045] device 0 entered promiscuous mode [ 1885.218199][T14064] netlink: 148 bytes leftover after parsing attributes in process `syz.0.11809'. [ 1885.732675][T14083] netlink: 'syz.3.11813': attribute type 29 has an invalid length. [ 1885.756255][T14083] netlink: 'syz.3.11813': attribute type 29 has an invalid length. [ 1885.787092][T14083] netlink: 'syz.3.11813': attribute type 29 has an invalid length. [ 1885.944297][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 1887.041105][T14091] netlink: 'syz.4.11817': attribute type 2 has an invalid length. [ 1887.064240][T14091] netlink: 'syz.4.11817': attribute type 8 has an invalid length. [ 1887.094475][T14091] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.11817'. [ 1887.109881][T14094] netlink: 'syz.4.11817': attribute type 2 has an invalid length. [ 1887.120233][T14094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11817'. [ 1887.142768][T14091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11817'. [ 1887.947150][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11825'. [ 1888.106256][T14128] validate_nla: 3 callbacks suppressed [ 1888.106293][T14128] netlink: 'syz.1.11829': attribute type 27 has an invalid length. [ 1888.125342][T14128] netlink: 'syz.1.11829': attribute type 4 has an invalid length. [ 1888.133830][T14128] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11829'. [ 1888.185830][T14127] netlink: 'syz.2.11828': attribute type 10 has an invalid length. [ 1888.402435][T14127] team0: Device wg1 is of different type [ 1888.702792][T14146] netlink: 'syz.1.11834': attribute type 2 has an invalid length. [ 1888.725313][T14146] netlink: 'syz.1.11834': attribute type 1 has an invalid length. [ 1891.364402][T14180] netlink: 'syz.0.11843': attribute type 21 has an invalid length. [ 1891.429476][T14188] netlink: 'syz.1.11846': attribute type 10 has an invalid length. [ 1891.782880][T14207] netlink: 'syz.4.11852': attribute type 3 has an invalid length. [ 1891.804299][T14207] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.11852'. [ 1892.299258][T14228] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.11858'. [ 1892.566238][T14245] netlink: 'syz.1.11862': attribute type 3 has an invalid length. [ 1892.574464][T14245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11862'. [ 1893.801831][T14279] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11872'. [ 1893.861466][T14287] netlink: 'syz.0.11873': attribute type 10 has an invalid length. [ 1893.954170][T14298] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.11873'. [ 1893.987692][T14294] netlink: 'syz.3.11875': attribute type 15 has an invalid length. [ 1894.004062][T14294] netlink: 'syz.3.11875': attribute type 7 has an invalid length. [ 1894.499650][T14313] Q±6ã`Ò˜: renamed from lo [ 1894.887555][T14333] netlink: 'syz.1.11885': attribute type 14 has an invalid length. [ 1894.917385][T14333] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.11885'. [ 1894.958373][T14341] netlink: 'syz.1.11885': attribute type 9 has an invalid length. [ 1894.969575][T14340] netlink: 763 bytes leftover after parsing attributes in process `syz.4.11887'. [ 1895.013998][T14341] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.11885'. [ 1896.270001][T14378] netlink: 'syz.4.11900': attribute type 4 has an invalid length. [ 1896.294238][T14378] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11900'. [ 1897.452306][T14427] netlink: 'syz.0.11909': attribute type 16 has an invalid length. [ 1897.485119][T14427] netlink: 'syz.0.11909': attribute type 4 has an invalid length. [ 1897.511285][T14427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11909'. [ 1898.307079][T14443] sctp: [Deprecated]: syz.4.11917 (pid 14443) Use of int in maxseg socket option. [ 1898.307079][T14443] Use struct sctp_assoc_value instead [ 1898.424703][T14451] netlink: 140 bytes leftover after parsing attributes in process `syz.3.11919'. [ 1898.547376][T14455] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1898.612625][T14456] netlink: 164 bytes leftover after parsing attributes in process `syz.3.11919'. [ 1898.673011][T14450] netlink: 'syz.2.11920': attribute type 10 has an invalid length. [ 1899.250543][T14450] team0: Device veth1_vlan failed to register rx_handler [ 1902.156081][T14493] netlink: 'syz.1.11930': attribute type 1 has an invalid length. [ 1902.202907][T14493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11930'. [ 1902.548932][T14496] FAULT_INJECTION: forcing a failure. [ 1902.548932][T14496] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.648216][T14496] CPU: 0 PID: 14496 Comm: syz.4.11931 Not tainted syzkaller #0 [ 1902.655831][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1902.665987][T14496] Call Trace: [ 1902.669833][T14496] [ 1902.672775][T14496] dump_stack_lvl+0x188/0x24e [ 1902.677472][T14496] ? show_regs_print_info+0x12/0x12 [ 1902.682683][T14496] ? load_image+0x400/0x400 [ 1902.687206][T14496] ? __lock_acquire+0x7d10/0x7d10 [ 1902.692255][T14496] should_fail_ex+0x399/0x4d0 [ 1902.696964][T14496] should_failslab+0x5/0x20 [ 1902.701494][T14496] slab_pre_alloc_hook+0x59/0x310 [ 1902.706554][T14496] ? verify_lock_unused+0x140/0x140 [ 1902.711783][T14496] ? bpf_test_init+0x9f/0x140 [ 1902.716483][T14496] __kmem_cache_alloc_node+0x4f/0x260 [ 1902.721884][T14496] ? bpf_test_init+0x9f/0x140 [ 1902.726574][T14496] __kmalloc+0xa0/0x240 [ 1902.730757][T14496] bpf_test_init+0x9f/0x140 [ 1902.735283][T14496] bpf_prog_test_run_xdp+0x484/0xf10 [ 1902.740599][T14496] ? dev_put+0x80/0x80 [ 1902.744704][T14496] ? dev_put+0x80/0x80 [ 1902.748812][T14496] bpf_prog_test_run+0x31e/0x390 [ 1902.753783][T14496] __sys_bpf+0x62b/0x780 [ 1902.758060][T14496] ? bpf_link_show_fdinfo+0x380/0x380 [ 1902.763478][T14496] ? lock_chain_count+0x20/0x20 [ 1902.768379][T14496] __x64_sys_bpf+0x78/0x90 [ 1902.772840][T14496] do_syscall_64+0x4c/0xa0 [ 1902.777292][T14496] ? clear_bhb_loop+0x60/0xb0 [ 1902.782001][T14496] ? clear_bhb_loop+0x60/0xb0 [ 1902.786718][T14496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1902.792640][T14496] RIP: 0033:0x7f613c99ce59 [ 1902.797072][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.816700][T14496] RSP: 002b:00007f613d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1902.825158][T14496] RAX: ffffffffffffffda RBX: 00007f613cc15fa0 RCX: 00007f613c99ce59 [ 1902.833150][T14496] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1902.841138][T14496] RBP: 00007f613d8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.849123][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.857106][T14496] R13: 00007f613cc16038 R14: 00007f613cc15fa0 R15: 00007ffe440d34d8 [ 1902.865110][T14496] [ 1902.894538][T14508] netlink: 830 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1903.775660][T14527] sock: sock_set_timeout: `syz.4.11940' (pid 14527) tries to set negative timeout [ 1904.662907][T14534] netlink: 'syz.3.11945': attribute type 21 has an invalid length. [ 1905.635992][T14552] FAULT_INJECTION: forcing a failure. [ 1905.635992][T14552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1905.651418][T14554] netlink: 'syz.1.11948': attribute type 10 has an invalid length. [ 1905.734429][T14552] CPU: 0 PID: 14552 Comm: syz.0.11949 Not tainted syzkaller #0 [ 1905.742047][T14552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1905.752135][T14552] Call Trace: [ 1905.755478][T14552] [ 1905.758433][T14552] dump_stack_lvl+0x188/0x24e [ 1905.763144][T14552] ? show_regs_print_info+0x12/0x12 [ 1905.768373][T14552] ? load_image+0x400/0x400 [ 1905.772910][T14552] ? __lock_acquire+0x7d10/0x7d10 [ 1905.777960][T14552] ? __virt_addr_valid+0x188/0x540 [ 1905.783096][T14552] should_fail_ex+0x399/0x4d0 [ 1905.787795][T14552] _copy_from_user+0x2c/0x170 [ 1905.792497][T14552] bpf_test_init+0xde/0x140 [ 1905.797024][T14552] bpf_prog_test_run_xdp+0x484/0xf10 [ 1905.802342][T14552] ? dev_put+0x80/0x80 [ 1905.806436][T14552] ? dev_put+0x80/0x80 [ 1905.810520][T14552] bpf_prog_test_run+0x31e/0x390 [ 1905.815497][T14552] __sys_bpf+0x62b/0x780 [ 1905.819780][T14552] ? bpf_link_show_fdinfo+0x380/0x380 [ 1905.825195][T14552] ? lock_chain_count+0x20/0x20 [ 1905.830065][T14552] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1905.836615][T14552] __x64_sys_bpf+0x78/0x90 [ 1905.841410][T14552] do_syscall_64+0x4c/0xa0 [ 1905.845838][T14552] ? clear_bhb_loop+0x60/0xb0 [ 1905.850527][T14552] ? clear_bhb_loop+0x60/0xb0 [ 1905.855227][T14552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1905.861137][T14552] RIP: 0033:0x7fe3ec59ce59 [ 1905.865568][T14552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1905.885194][T14552] RSP: 002b:00007fe3ed3c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1905.893630][T14552] RAX: ffffffffffffffda RBX: 00007fe3ec815fa0 RCX: 00007fe3ec59ce59 [ 1905.901614][T14552] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1905.909615][T14552] RBP: 00007fe3ed3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1905.917597][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1905.925589][T14552] R13: 00007fe3ec816038 R14: 00007fe3ec815fa0 R15: 00007ffcc49e3688 [ 1905.933587][T14552] [ 1906.340774][T14573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11954'. [ 1906.552861][T14582] netlink: 830 bytes leftover after parsing attributes in process `syz.0.11954'. [ 1906.667244][T14584] netlink: 'syz.3.11958': attribute type 1 has an invalid length. [ 1907.833149][T14599] netlink: 'syz.2.11963': attribute type 10 has an invalid length. [ 1907.855263][T14599] team0: Device wg1 is of different type [ 1907.876793][T14603] FAULT_INJECTION: forcing a failure. [ 1907.876793][T14603] name failslab, interval 1, probability 0, space 0, times 0 [ 1907.915955][T14603] CPU: 0 PID: 14603 Comm: syz.0.11964 Not tainted syzkaller #0 [ 1907.923558][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1907.933630][T14603] Call Trace: [ 1907.936926][T14603] [ 1907.939874][T14603] dump_stack_lvl+0x188/0x24e [ 1907.944581][T14603] ? show_regs_print_info+0x12/0x12 [ 1907.949810][T14603] ? load_image+0x400/0x400 [ 1907.954346][T14603] ? __might_sleep+0xd0/0xd0 [ 1907.958948][T14603] ? __lock_acquire+0x7d10/0x7d10 [ 1907.963981][T14603] should_fail_ex+0x399/0x4d0 [ 1907.968688][T14603] should_failslab+0x5/0x20 [ 1907.973222][T14603] slab_pre_alloc_hook+0x59/0x310 [ 1907.978320][T14603] ? __lock_acquire+0x7d10/0x7d10 [ 1907.983374][T14603] ? kvmalloc_node+0x6c/0x180 [ 1907.988092][T14603] __kmem_cache_alloc_node+0x4f/0x260 [ 1907.993497][T14603] ? schedule_delayed_monitor_work+0x160/0x160 [ 1907.999691][T14603] ? kvmalloc_node+0x6c/0x180 [ 1908.004395][T14603] __kmalloc_node+0xa0/0x240 [ 1908.009016][T14603] kvmalloc_node+0x6c/0x180 [ 1908.013559][T14603] bpf_test_run_xdp_live+0x1dd/0x1a90 [ 1908.018971][T14603] ? 0xffffffffa0004440 [ 1908.023155][T14603] ? text_poke_copy+0x79/0x90 [ 1908.027874][T14603] ? 0xffffffffa0004440 [ 1908.032054][T14603] ? 0xffffffffa0004440 [ 1908.036235][T14603] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1908.042161][T14603] ? 0xffffffffa0004440 [ 1908.046347][T14603] ? xdp_convert_md_to_buff+0x330/0x330 [ 1908.051955][T14603] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1908.058229][T14603] ? bpf_test_init+0x119/0x140 [ 1908.063003][T14603] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1908.068474][T14603] bpf_prog_test_run_xdp+0x736/0xf10 [ 1908.073767][T14603] ? dev_put+0x80/0x80 [ 1908.077838][T14603] ? dev_put+0x80/0x80 [ 1908.081896][T14603] bpf_prog_test_run+0x31e/0x390 [ 1908.086849][T14603] __sys_bpf+0x62b/0x780 [ 1908.091125][T14603] ? bpf_link_show_fdinfo+0x380/0x380 [ 1908.096557][T14603] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1908.102757][T14603] __x64_sys_bpf+0x78/0x90 [ 1908.107227][T14603] do_syscall_64+0x4c/0xa0 [ 1908.111669][T14603] ? clear_bhb_loop+0x60/0xb0 [ 1908.116377][T14603] ? clear_bhb_loop+0x60/0xb0 [ 1908.121089][T14603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1908.127016][T14603] RIP: 0033:0x7fe3ec59ce59 [ 1908.131460][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1908.151094][T14603] RSP: 002b:00007fe3ed3c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1908.159525][T14603] RAX: ffffffffffffffda RBX: 00007fe3ec815fa0 RCX: 00007fe3ec59ce59 [ 1908.167509][T14603] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1908.175503][T14603] RBP: 00007fe3ed3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1908.183511][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1908.192034][T14603] R13: 00007fe3ec816038 R14: 00007fe3ec815fa0 R15: 00007ffcc49e3688 [ 1908.200048][T14603] [ 1908.281267][T14612] sctp: [Deprecated]: syz.2.11967 (pid 14612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1908.281267][T14612] Use struct sctp_sack_info instead [ 1908.522093][T14624] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.11972'. [ 1908.745384][T14632] netlink: 830 bytes leftover after parsing attributes in process `syz.4.11975'. [ 1909.750979][T14648] FAULT_INJECTION: forcing a failure. [ 1909.750979][T14648] name failslab, interval 1, probability 0, space 0, times 0 [ 1909.794160][T14648] CPU: 0 PID: 14648 Comm: syz.1.11979 Not tainted syzkaller #0 [ 1909.801767][T14648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1909.811859][T14648] Call Trace: [ 1909.815138][T14648] [ 1909.818095][T14648] dump_stack_lvl+0x188/0x24e [ 1909.822811][T14648] ? show_regs_print_info+0x12/0x12 [ 1909.828003][T14648] ? load_image+0x400/0x400 [ 1909.832538][T14648] ? __might_sleep+0xd0/0xd0 [ 1909.837144][T14648] ? __lock_acquire+0x7d10/0x7d10 [ 1909.842205][T14648] should_fail_ex+0x399/0x4d0 [ 1909.846906][T14648] should_failslab+0x5/0x20 [ 1909.851407][T14648] slab_pre_alloc_hook+0x59/0x310 [ 1909.856432][T14648] ? kvmalloc_node+0x6c/0x180 [ 1909.861112][T14648] __kmem_cache_alloc_node+0x4f/0x260 [ 1909.866485][T14648] ? kvmalloc_node+0x6c/0x180 [ 1909.871190][T14648] __kmalloc_node+0xa0/0x240 [ 1909.875793][T14648] kvmalloc_node+0x6c/0x180 [ 1909.880301][T14648] bpf_test_run_xdp_live+0x209/0x1a90 [ 1909.885956][T14648] ? 0xffffffffa0004440 [ 1909.890146][T14648] ? text_poke_copy+0x79/0x90 [ 1909.894841][T14648] ? 0xffffffffa0004440 [ 1909.899078][T14648] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1909.904976][T14648] ? 0xffffffffa0004440 [ 1909.909150][T14648] ? xdp_convert_md_to_buff+0x330/0x330 [ 1909.914717][T14648] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1909.920959][T14648] ? bpf_test_init+0x119/0x140 [ 1909.925808][T14648] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1909.931263][T14648] bpf_prog_test_run_xdp+0x736/0xf10 [ 1909.936564][T14648] ? dev_put+0x80/0x80 [ 1909.940641][T14648] ? dev_put+0x80/0x80 [ 1909.944881][T14648] bpf_prog_test_run+0x31e/0x390 [ 1909.949911][T14648] __sys_bpf+0x62b/0x780 [ 1909.954328][T14648] ? bpf_link_show_fdinfo+0x380/0x380 [ 1909.959712][T14648] ? lock_chain_count+0x20/0x20 [ 1909.964564][T14648] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1909.970546][T14648] __x64_sys_bpf+0x78/0x90 [ 1909.974978][T14648] do_syscall_64+0x4c/0xa0 [ 1909.979389][T14648] ? clear_bhb_loop+0x60/0xb0 [ 1909.984065][T14648] ? clear_bhb_loop+0x60/0xb0 [ 1909.988746][T14648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1909.994636][T14648] RIP: 0033:0x7f86aad9ce59 [ 1909.999044][T14648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.018651][T14648] RSP: 002b:00007f86abcb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1910.027064][T14648] RAX: ffffffffffffffda RBX: 00007f86ab015fa0 RCX: 00007f86aad9ce59 [ 1910.035029][T14648] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1910.042996][T14648] RBP: 00007f86abcb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.050962][T14648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.059187][T14648] R13: 00007f86ab016038 R14: 00007f86ab015fa0 R15: 00007ffffff85838 [ 1910.067165][T14648] [ 1910.166817][T14652] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.11982'. [ 1910.192490][ T4277] Bluetooth: hci5: Malformed HCI Event [ 1910.193305][T14656] netlink: 'syz.0.11983': attribute type 29 has an invalid length. [ 1910.236524][T14656] netlink: 'syz.0.11983': attribute type 29 has an invalid length. [ 1910.861313][T14685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11991'. [ 1910.906840][T14685] netlink: 'syz.3.11991': attribute type 10 has an invalid length. [ 1912.313248][T14713] FAULT_INJECTION: forcing a failure. [ 1912.313248][T14713] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.334198][T14713] CPU: 1 PID: 14713 Comm: syz.2.11999 Not tainted syzkaller #0 [ 1912.341824][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1912.345066][T14716] netlink: 'syz.3.12000': attribute type 10 has an invalid length. [ 1912.351901][T14713] Call Trace: [ 1912.351919][T14713] [ 1912.351934][T14713] dump_stack_lvl+0x188/0x24e [ 1912.351975][T14713] ? show_regs_print_info+0x12/0x12 [ 1912.352002][T14713] ? load_image+0x400/0x400 [ 1912.352046][T14713] ? __might_sleep+0xd0/0xd0 [ 1912.379883][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12000'. [ 1912.380607][T14713] ? __lock_acquire+0x7d10/0x7d10 [ 1912.380663][T14713] should_fail_ex+0x399/0x4d0 [ 1912.402213][T14716] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1912.404018][T14713] should_failslab+0x5/0x20 [ 1912.404049][T14713] slab_pre_alloc_hook+0x59/0x310 [ 1912.404074][T14713] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1912.404114][T14713] ? page_pool_create+0x6d/0x5c0 [ 1912.404147][T14713] __kmem_cache_alloc_node+0x4f/0x260 [ 1912.446145][T14713] ? page_pool_create+0x6d/0x5c0 [ 1912.451152][T14713] kmalloc_node_trace+0x22/0xe0 [ 1912.456074][T14713] page_pool_create+0x6d/0x5c0 [ 1912.460918][T14713] bpf_test_run_xdp_live+0x223/0x1a90 [ 1912.466361][T14713] ? 0xffffffffa0004440 [ 1912.470592][T14713] ? text_poke_copy+0x79/0x90 [ 1912.475340][T14713] ? 0xffffffffa0004440 [ 1912.479738][T14713] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1912.485693][T14713] ? 0xffffffffa0004440 [ 1912.489917][T14713] ? xdp_convert_md_to_buff+0x330/0x330 [ 1912.495631][T14713] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1912.501927][T14713] ? bpf_test_init+0xeb/0x140 [ 1912.506665][T14713] ? audit_tree_destroy_watch+0x20/0x20 [ 1912.512267][T14713] ? bpf_test_init+0x119/0x140 [ 1912.517074][T14713] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1912.522564][T14713] bpf_prog_test_run_xdp+0x736/0xf10 [ 1912.527901][T14713] ? dev_put+0x80/0x80 [ 1912.532018][T14713] ? dev_put+0x80/0x80 [ 1912.536111][T14713] bpf_prog_test_run+0x31e/0x390 [ 1912.541073][T14713] __sys_bpf+0x62b/0x780 [ 1912.545337][T14713] ? bpf_link_show_fdinfo+0x380/0x380 [ 1912.550763][T14713] ? lock_chain_count+0x20/0x20 [ 1912.555628][T14713] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1912.561643][T14713] __x64_sys_bpf+0x78/0x90 [ 1912.566087][T14713] do_syscall_64+0x4c/0xa0 [ 1912.570510][T14713] ? clear_bhb_loop+0x60/0xb0 [ 1912.575206][T14713] ? clear_bhb_loop+0x60/0xb0 [ 1912.579907][T14713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.585807][T14713] RIP: 0033:0x7ff63319ce59 [ 1912.590236][T14713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.609899][T14713] RSP: 002b:00007ff634079028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1912.618326][T14713] RAX: ffffffffffffffda RBX: 00007ff633415fa0 RCX: 00007ff63319ce59 [ 1912.626314][T14713] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1912.634381][T14713] RBP: 00007ff634079090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.642356][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.650334][T14713] R13: 00007ff633416038 R14: 00007ff633415fa0 R15: 00007ffe5bc0f828 [ 1912.658356][T14713] [ 1912.672177][T14719] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12000'. [ 1912.854714][T14725] device syzkaller0 entered promiscuous mode [ 1914.580066][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.586573][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.848454][T14736] netlink: 'syz.4.12008': attribute type 11 has an invalid length. [ 1918.856779][T14738] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12009'. [ 1918.878055][T14753] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12012'. [ 1918.897838][T14753] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1918.999155][T14765] FAULT_INJECTION: forcing a failure. [ 1918.999155][T14765] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.034156][T14765] CPU: 1 PID: 14765 Comm: syz.4.12015 Not tainted syzkaller #0 [ 1919.041758][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1919.051835][T14765] Call Trace: [ 1919.055138][T14765] [ 1919.058089][T14765] dump_stack_lvl+0x188/0x24e [ 1919.062792][T14765] ? show_regs_print_info+0x12/0x12 [ 1919.068016][T14765] ? load_image+0x400/0x400 [ 1919.072552][T14765] ? __might_sleep+0xd0/0xd0 [ 1919.077166][T14765] ? __lock_acquire+0x7d10/0x7d10 [ 1919.082226][T14765] should_fail_ex+0x399/0x4d0 [ 1919.087016][T14765] should_failslab+0x5/0x20 [ 1919.091535][T14765] slab_pre_alloc_hook+0x59/0x310 [ 1919.096584][T14765] ? kvmalloc_node+0x6c/0x180 [ 1919.101301][T14765] __kmem_cache_alloc_node+0x4f/0x260 [ 1919.106705][T14765] ? kvmalloc_node+0x6c/0x180 [ 1919.111402][T14765] __kmalloc_node+0xa0/0x240 [ 1919.116030][T14765] kvmalloc_node+0x6c/0x180 [ 1919.120649][T14765] page_pool_create+0x1e7/0x5c0 [ 1919.125520][T14765] bpf_test_run_xdp_live+0x223/0x1a90 [ 1919.130912][T14765] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1919.136658][T14765] ? bpf_arch_text_copy+0x24/0x40 [ 1919.141701][T14765] ? 0xffffffffa0004440 [ 1919.145871][T14765] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1919.151798][T14765] ? 0xffffffffa0004440 [ 1919.155976][T14765] ? xdp_convert_md_to_buff+0x330/0x330 [ 1919.161593][T14765] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1919.167952][T14765] ? bpf_test_init+0x119/0x140 [ 1919.172827][T14765] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1919.178314][T14765] bpf_prog_test_run_xdp+0x736/0xf10 [ 1919.183624][T14765] ? dev_put+0x80/0x80 [ 1919.187700][T14765] ? dev_put+0x80/0x80 [ 1919.191768][T14765] bpf_prog_test_run+0x31e/0x390 [ 1919.196711][T14765] __sys_bpf+0x62b/0x780 [ 1919.200955][T14765] ? bpf_link_show_fdinfo+0x380/0x380 [ 1919.206377][T14765] ? lock_chain_count+0x20/0x20 [ 1919.211226][T14765] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1919.217217][T14765] __x64_sys_bpf+0x78/0x90 [ 1919.221641][T14765] do_syscall_64+0x4c/0xa0 [ 1919.226052][T14765] ? clear_bhb_loop+0x60/0xb0 [ 1919.230727][T14765] ? clear_bhb_loop+0x60/0xb0 [ 1919.235406][T14765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1919.241299][T14765] RIP: 0033:0x7f613c99ce59 [ 1919.245707][T14765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.265342][T14765] RSP: 002b:00007f613d8fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1919.273753][T14765] RAX: ffffffffffffffda RBX: 00007f613cc15fa0 RCX: 00007f613c99ce59 [ 1919.281720][T14765] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1919.289692][T14765] RBP: 00007f613d8fe090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.297743][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.305707][T14765] R13: 00007f613cc16038 R14: 00007f613cc15fa0 R15: 00007ffe440d34d8 [ 1919.313688][T14765] [ 1919.514216][T14765] page_pool_create() gave up with errno -12 [ 1919.608141][T14778] netlink: 'syz.0.12016': attribute type 10 has an invalid length. [ 1920.018029][T14786] netlink: 'syz.2.12020': attribute type 19 has an invalid length. [ 1920.026250][T14786] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.12020'. [ 1921.222841][T14815] FAULT_INJECTION: forcing a failure. [ 1921.222841][T14815] name failslab, interval 1, probability 0, space 0, times 0 [ 1921.321453][T14815] CPU: 1 PID: 14815 Comm: syz.0.12031 Not tainted syzkaller #0 [ 1921.329077][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1921.339164][T14815] Call Trace: [ 1921.342471][T14815] [ 1921.345410][T14815] dump_stack_lvl+0x188/0x24e [ 1921.350093][T14815] ? show_regs_print_info+0x12/0x12 [ 1921.355300][T14815] ? load_image+0x400/0x400 [ 1921.360088][T14815] ? __might_sleep+0xd0/0xd0 [ 1921.364693][T14815] ? __lock_acquire+0x7d10/0x7d10 [ 1921.370003][T14815] should_fail_ex+0x399/0x4d0 [ 1921.374701][T14815] should_failslab+0x5/0x20 [ 1921.379221][T14815] slab_pre_alloc_hook+0x59/0x310 [ 1921.384269][T14815] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1921.389579][T14815] __kmem_cache_alloc_node+0x4f/0x260 [ 1921.395156][T14815] ? memset+0x1e/0x40 [ 1921.399179][T14815] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1921.404518][T14815] kmalloc_trace+0x26/0xe0 [ 1921.408946][T14815] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1921.414088][T14815] ? kvmalloc_node+0x6c/0x180 [ 1921.418948][T14815] ? kvmalloc_node+0x6c/0x180 [ 1921.423630][T14815] ? xdp_reg_mem_model+0x30/0x30 [ 1921.428586][T14815] xdp_reg_mem_model+0x1e/0x30 [ 1921.433376][T14815] bpf_test_run_xdp_live+0x299/0x1a90 [ 1921.438755][T14815] ? 0xffffffffa0004440 [ 1921.442904][T14815] ? text_poke_copy+0x79/0x90 [ 1921.447583][T14815] ? 0xffffffffa0004440 [ 1921.451728][T14815] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1921.457625][T14815] ? 0xffffffffa0004440 [ 1921.461783][T14815] ? xdp_convert_md_to_buff+0x330/0x330 [ 1921.467362][T14815] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1921.473599][T14815] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1921.479582][T14815] ? bpf_test_init+0x119/0x140 [ 1921.484357][T14815] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1921.489843][T14815] bpf_prog_test_run_xdp+0x736/0xf10 [ 1921.495160][T14815] ? dev_put+0x80/0x80 [ 1921.499248][T14815] ? dev_put+0x80/0x80 [ 1921.503328][T14815] bpf_prog_test_run+0x31e/0x390 [ 1921.508279][T14815] __sys_bpf+0x62b/0x780 [ 1921.512527][T14815] ? bpf_link_show_fdinfo+0x380/0x380 [ 1921.517906][T14815] ? lock_chain_count+0x20/0x20 [ 1921.522761][T14815] __x64_sys_bpf+0x78/0x90 [ 1921.527178][T14815] do_syscall_64+0x4c/0xa0 [ 1921.531584][T14815] ? clear_bhb_loop+0x60/0xb0 [ 1921.536258][T14815] ? clear_bhb_loop+0x60/0xb0 [ 1921.540929][T14815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1921.546836][T14815] RIP: 0033:0x7fe3ec59ce59 [ 1921.551254][T14815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1921.571438][T14815] RSP: 002b:00007fe3ed3c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1921.579853][T14815] RAX: ffffffffffffffda RBX: 00007fe3ec815fa0 RCX: 00007fe3ec59ce59 [ 1921.587821][T14815] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1921.595787][T14815] RBP: 00007fe3ed3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1921.603753][T14815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1921.611738][T14815] R13: 00007fe3ec816038 R14: 00007fe3ec815fa0 R15: 00007ffcc49e3688 [ 1921.619729][T14815] [ 1921.766152][T14833] netlink: 'syz.1.12036': attribute type 10 has an invalid length. [ 1921.785402][T14833] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12036'. [ 1921.846061][T14833] netlink: 'syz.1.12036': attribute type 10 has an invalid length. [ 1921.872453][T14833] netlink: 'syz.1.12036': attribute type 21 has an invalid length. [ 1921.895723][T14833] netlink: 'syz.1.12036': attribute type 1 has an invalid length. [ 1921.907754][T14833] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12036'. [ 1921.959022][T14835] netlink: 'syz.0.12037': attribute type 19 has an invalid length. [ 1921.969164][T14835] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.12037'. [ 1922.093813][T14846] netlink: 'syz.3.12041': attribute type 10 has an invalid length. [ 1922.115759][T14846] netlink: 'syz.3.12041': attribute type 10 has an invalid length. [ 1922.131922][T14846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1922.256159][T14852] FAULT_INJECTION: forcing a failure. [ 1922.256159][T14852] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.290205][T14852] CPU: 0 PID: 14852 Comm: syz.0.12044 Not tainted syzkaller #0 [ 1922.297823][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1922.307906][T14852] Call Trace: [ 1922.311201][T14852] [ 1922.314154][T14852] dump_stack_lvl+0x188/0x24e [ 1922.319117][T14852] ? show_regs_print_info+0x12/0x12 [ 1922.324344][T14852] ? load_image+0x400/0x400 [ 1922.328935][T14852] ? __might_sleep+0xd0/0xd0 [ 1922.333541][T14852] ? __lock_acquire+0x7d10/0x7d10 [ 1922.338594][T14852] should_fail_ex+0x399/0x4d0 [ 1922.343299][T14852] should_failslab+0x5/0x20 [ 1922.347823][T14852] slab_pre_alloc_hook+0x59/0x310 [ 1922.352880][T14852] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1922.358197][T14852] __kmem_cache_alloc_node+0x4f/0x260 [ 1922.363609][T14852] ? memset+0x1e/0x40 [ 1922.367628][T14852] ? __xdp_reg_mem_model+0x1e0/0x5c0 [ 1922.372953][T14852] kmalloc_trace+0x26/0xe0 [ 1922.377406][T14852] __xdp_reg_mem_model+0x1e0/0x5c0 [ 1922.382554][T14852] ? kvmalloc_node+0x6c/0x180 [ 1922.387268][T14852] ? kvmalloc_node+0x6c/0x180 [ 1922.391968][T14852] ? xdp_reg_mem_model+0x30/0x30 [ 1922.396932][T14852] xdp_reg_mem_model+0x1e/0x30 [ 1922.401714][T14852] bpf_test_run_xdp_live+0x299/0x1a90 [ 1922.407114][T14852] ? 0xffffffffa0004440 [ 1922.411284][T14852] ? text_poke_copy+0x79/0x90 [ 1922.415994][T14852] ? 0xffffffffa0004440 [ 1922.420157][T14852] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 1922.426075][T14852] ? 0xffffffffa0004440 [ 1922.430253][T14852] ? xdp_convert_md_to_buff+0x330/0x330 [ 1922.435853][T14852] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1922.442119][T14852] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1922.448126][T14852] ? bpf_test_init+0x119/0x140 [ 1922.453003][T14852] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1922.458481][T14852] bpf_prog_test_run_xdp+0x736/0xf10 [ 1922.463798][T14852] ? dev_put+0x80/0x80 [ 1922.467887][T14852] ? dev_put+0x80/0x80 [ 1922.471985][T14852] bpf_prog_test_run+0x31e/0x390 [ 1922.476975][T14852] __sys_bpf+0x62b/0x780 [ 1922.481251][T14852] ? bpf_link_show_fdinfo+0x380/0x380 [ 1922.486655][T14852] ? lock_chain_count+0x20/0x20 [ 1922.491514][T14852] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1922.497517][T14852] __x64_sys_bpf+0x78/0x90 [ 1922.502118][T14852] do_syscall_64+0x4c/0xa0 [ 1922.506542][T14852] ? clear_bhb_loop+0x60/0xb0 [ 1922.511233][T14852] ? clear_bhb_loop+0x60/0xb0 [ 1922.515929][T14852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1922.521837][T14852] RIP: 0033:0x7fe3ec59ce59 [ 1922.526258][T14852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1922.545894][T14852] RSP: 002b:00007fe3ed3c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1922.554511][T14852] RAX: ffffffffffffffda RBX: 00007fe3ec815fa0 RCX: 00007fe3ec59ce59 [ 1922.562485][T14852] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1922.570549][T14852] RBP: 00007fe3ed3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.578523][T14852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1922.586499][T14852] R13: 00007fe3ec816038 R14: 00007fe3ec815fa0 R15: 00007ffcc49e3688 [ 1922.594490][T14852] [ 1922.872919][T14864] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.12048'. [ 1922.916480][T14869] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12050'. [ 1922.976414][T14873] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12051'. [ 1922.976831][T14864] delete_channel: no stack [ 1923.233048][T14880] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12054'. [ 1923.829549][ T8006] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1924.042726][T14911] validate_nla: 2 callbacks suppressed [ 1924.042763][T14911] netlink: 'syz.1.12061': attribute type 29 has an invalid length. [ 1924.187130][T14911] netlink: 'syz.1.12061': attribute type 29 has an invalid length. [ 1924.216323][T14914] netlink: 'syz.1.12061': attribute type 29 has an invalid length. [ 1924.257590][T14915] netlink: 'syz.1.12061': attribute type 29 has an invalid length. [ 1924.274495][T14916] netlink: 'syz.1.12061': attribute type 29 has an invalid length. [ 1924.433269][T14927] netlink: 'syz.4.12064': attribute type 27 has an invalid length. [ 1924.442012][T14927] netlink: 164 bytes leftover after parsing attributes in process `syz.4.12064'. [ 1925.845787][T14922] netlink: 'syz.4.12064': attribute type 46 has an invalid length. [ 1925.863580][T14922] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12064'. [ 1925.990949][T14930] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.12066'. [ 1926.022516][T14930] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1926.400489][T14935] netlink: 'syz.3.12066': attribute type 22 has an invalid length. [ 1926.423403][T14935] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.12066'. [ 1926.444392][T14938] netlink: 'syz.2.12070': attribute type 2 has an invalid length. [ 1926.708096][T14963] netlink: 'syz.4.12076': attribute type 19 has an invalid length. [ 1927.389473][T14975] device sit0 entered promiscuous mode [ 1927.556090][T14985] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12086'. [ 1928.320578][T15028] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.12100'. [ 1928.354939][T15028] netlink: 184 bytes leftover after parsing attributes in process `syz.0.12100'. [ 1930.258431][T15053] delete_channel: no stack [ 1930.565084][T15076] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.12115'. [ 1931.136836][T15095] device syzkaller0 entered promiscuous mode [ 1931.314186][T15099] validate_nla: 1 callbacks suppressed [ 1931.314202][T15099] netlink: 'syz.3.12120': attribute type 21 has an invalid length. [ 1931.346470][ T47] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1931.357473][ T47] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1931.366539][ T47] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1931.381118][ T47] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1931.390685][ T47] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1931.398324][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1931.838855][T15116] netlink: 'syz.4.12124': attribute type 21 has an invalid length. [ 1931.854909][T15116] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12124'. [ 1931.979011][T15097] chnl_net:caif_netlink_parms(): no params data found [ 1932.586939][T15097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1932.594328][T15097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1932.602537][T15097] device bridge_slave_0 entered promiscuous mode [ 1932.625896][T15097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1932.633253][T15097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1932.641854][T15097] device bridge_slave_1 entered promiscuous mode [ 1932.666686][T15097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1932.678606][T15097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1932.698785][T15129] netlink: 'syz.3.12128': attribute type 1 has an invalid length. [ 1932.723471][T15097] team0: Port device team_slave_0 added [ 1932.740766][ T4277] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1932.741977][T15129] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.12128'. [ 1932.769316][T15097] team0: Port device team_slave_1 added [ 1932.804874][T15097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.811867][T15097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1932.849009][T15133] netlink: 'syz.3.12128': attribute type 2 has an invalid length. [ 1932.877777][T15133] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.12128'. [ 1932.896758][T15097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.929600][T15097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.949881][T15097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1933.025488][T15097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1933.050329][T15139] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12129'. [ 1933.465108][ T4277] Bluetooth: hci4: command 0x0409 tx timeout [ 1933.801649][T15148] sctp: [Deprecated]: syz.3.12133 (pid 15148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1933.801649][T15148] Use struct sctp_sack_info instead [ 1934.788676][T15097] device hsr_slave_0 entered promiscuous mode [ 1935.015263][T15097] device hsr_slave_1 entered promiscuous mode [ 1935.534015][ T47] Bluetooth: hci4: command 0x041b tx timeout [ 1935.976186][ T7985] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1935.993689][T15166] netlink: 'syz.0.12139': attribute type 21 has an invalid length. [ 1936.002757][T15169] netlink: 'syz.2.12137': attribute type 3 has an invalid length. [ 1936.024824][T15169] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.12137'. [ 1936.169878][ T7985] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1936.206254][T15175] netlink: 'syz.4.12138': attribute type 10 has an invalid length. [ 1936.228598][T15175] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12138'. [ 1936.254139][T15175] bridge0: port 4(ipvlan1) entered blocking state [ 1936.266904][T15175] bridge0: port 4(ipvlan1) entered disabled state [ 1936.287469][T15175] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1937.351955][ T7985] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.371994][T15186] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.12141'. [ 1937.425347][T15186] device bridge_slave_1 entered promiscuous mode [ 1937.490428][ T7985] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1937.615739][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 1937.931653][ T7985] device 0 left promiscuous mode [ 1938.266163][T15212] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12150'. [ 1939.117228][T15234] netlink: 'syz.4.12152': attribute type 3 has an invalid length. [ 1939.143451][T15234] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.12152'. [ 1939.565902][T15248] netlink: 'syz.3.12156': attribute type 16 has an invalid length. [ 1939.590151][T15248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12156'. [ 1939.697986][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 1939.770681][T15097] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1939.821818][T15097] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1940.028645][T15097] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1940.066753][T15097] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1940.079477][T15261] netlink: 'syz.2.12159': attribute type 1 has an invalid length. [ 1940.439969][T15097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.497674][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1940.514767][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1940.561080][T15097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1940.610380][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1940.629772][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1940.657237][ T9457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.664582][ T9457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1940.729204][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1940.761955][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1940.790038][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1940.802679][ T9457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.809942][ T9457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1940.884997][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1940.925224][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1940.980721][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1941.006566][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1941.048875][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1941.073735][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1941.112844][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1941.150878][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1941.224538][T15097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1941.275228][T15097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1941.347975][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1941.409562][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1941.455642][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1941.650288][T15291] netlink: 'syz.0.12165': attribute type 19 has an invalid length. [ 1941.686881][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12165'. [ 1944.052487][T15309] device wlan1 entered promiscuous mode [ 1944.080710][T15307] netlink: 'syz.3.12168': attribute type 3 has an invalid length. [ 1944.105509][T15307] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.12168'. [ 1944.177558][ T7985] device bridge_slave_1 left promiscuous mode [ 1944.185965][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.196456][ T7985] device bridge_slave_0 left promiscuous mode [ 1944.202722][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.347107][ T7985] device veth1_macvtap left promiscuous mode [ 1945.782967][T15325] netlink: 'syz.3.12174': attribute type 29 has an invalid length. [ 1945.805709][T15097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.814634][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1945.822181][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1945.847982][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1945.859732][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1945.911823][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1945.931739][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1945.967089][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1945.989157][ T9457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1946.012786][T15097] device veth0_vlan entered promiscuous mode [ 1946.070220][T15336] netlink: 'syz.3.12185': attribute type 10 has an invalid length. [ 1946.131998][T15097] device veth1_vlan entered promiscuous mode [ 1946.176288][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1946.196793][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1946.233030][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1946.256135][ T9550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1946.276143][T15097] device veth0_macvtap entered promiscuous mode [ 1946.325495][T15097] device veth1_macvtap entered promiscuous mode [ 1946.349538][T15345] sctp: [Deprecated]: syz.4.12179 (pid 15345) Use of int in max_burst socket option deprecated. [ 1946.349538][T15345] Use struct sctp_assoc_value instead [ 1946.416830][T15097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1946.450875][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1946.467840][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1946.487182][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1946.508522][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1946.537749][T15097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1946.555759][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1946.579694][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1946.616940][T15097] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.638812][T15097] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.669412][T15097] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.697748][T15097] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1947.026449][ T9550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.058685][ T9550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.133150][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1947.189607][ T7994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1947.209559][ T7994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.222259][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1948.435157][ T4277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1948.446304][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1948.458650][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1948.477228][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1948.486800][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1948.499176][ T2874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1948.986640][T15382] chnl_net:caif_netlink_parms(): no params data found [ 1950.574144][ T47] Bluetooth: hci1: command 0x0409 tx timeout [ 1951.413679][T15400] netlink: 'syz.1.12191': attribute type 21 has an invalid length. [ 1951.439831][T15400] netlink: 164 bytes leftover after parsing attributes in process `syz.1.12191'. [ 1951.594448][T15382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.601690][T15382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1951.621972][T15382] device bridge_slave_0 entered promiscuous mode [ 1951.631051][T15382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.638560][T15382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1951.646839][T15382] device bridge_slave_1 entered promiscuous mode [ 1951.688796][T15382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.704287][T15382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1951.759330][T15382] team0: Port device team_slave_0 added [ 1951.791761][T15382] team0: Port device team_slave_1 added [ 1951.855401][T15382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.873349][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.919050][T15382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1952.671524][ T47] Bluetooth: hci1: command 0x041b tx timeout [ 1954.422996][T15382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1954.433937][T15382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1954.461833][T15382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1954.615013][T15382] device hsr_slave_0 entered promiscuous mode [ 1954.628866][T15382] device hsr_slave_1 entered promiscuous mode [ 1954.643092][T15382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1954.674834][T15382] Cannot create hsr debugfs directory [ 1954.736400][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 1954.900991][T15470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12210'. [ 1955.054719][T15382] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1955.153835][T15382] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1956.814398][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 1958.486758][T15382] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1958.583043][T15496] netlink: 'syz.2.12217': attribute type 28 has an invalid length. [ 1958.730845][T15382] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1959.633747][T15526] netlink: 'syz.1.12226': attribute type 11 has an invalid length. [ 1959.642436][T15526] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12226'. [ 1959.718797][T15382] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1959.742481][T15382] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1959.798529][T15532] netlink: 'syz.0.12227': attribute type 27 has an invalid length. [ 1960.388770][T15525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1961.099498][T15382] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1961.152083][T15382] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1961.178799][T15538] device veth0_to_bond left promiscuous mode [ 1961.188909][T15538] bridge0: port 3(veth0_to_bond) entered disabled state [ 1961.207164][T15538] device bridge_slave_1 left promiscuous mode [ 1961.224212][T15538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1961.249513][T15538] device bridge_slave_0 left promiscuous mode [ 1961.258586][T15538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1961.327672][T15538] team0: Port device bridge0 removed [ 1961.722616][T15382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1961.751006][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1961.770136][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1961.796367][T15382] 8021q: adding VLAN 0 to HW filter on device team0 [ 1961.821318][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1961.841880][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1961.873681][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.880940][ T7985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.927648][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1961.946564][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1961.973088][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1961.992600][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.999824][ T7985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.009529][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1962.031328][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1962.050435][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1962.079700][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1962.117460][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1962.126821][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1962.142902][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1962.152523][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1962.168508][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1962.189428][T15382] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1962.206316][T15382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1962.218262][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1962.228692][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1962.693072][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1962.704596][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1962.718406][T15382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.770269][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1962.781092][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1962.810337][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1962.832117][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1962.842913][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1962.873303][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1962.974854][T15382] device veth0_vlan entered promiscuous mode [ 1962.995654][T15382] device veth1_vlan entered promiscuous mode [ 1963.117243][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1963.148094][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1963.168570][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1963.227353][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1963.268136][T15382] device veth0_macvtap entered promiscuous mode [ 1963.306181][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1963.341194][T15382] device veth1_macvtap entered promiscuous mode [ 1963.400487][T15591] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.12247'. [ 1963.445372][T15382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1963.477690][T15382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.510240][T15382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1963.547213][ T7999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1963.559823][ T7999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1963.577520][T15382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1963.619258][T15382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1963.645406][T15382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1963.688244][T15382] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.715307][T15382] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.746386][T15382] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.763928][T15382] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.896599][ T7999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1963.905645][ T7999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1964.230282][T15617] netlink: 'syz.2.12245': attribute type 27 has an invalid length. [ 1965.574257][ T9547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.582138][ T9547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.687425][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1965.715648][ T9543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1965.746814][ T9543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1965.779699][ T9547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1965.817870][T15645] netlink: 'syz.4.12258': attribute type 23 has an invalid length. [ 1966.177816][T15650] netlink: 'syz.1.12262': attribute type 41 has an invalid length. [ 1966.646558][T15656] netlink: 'syz.3.12187': attribute type 6 has an invalid length. [ 1966.878343][ T56] device bridge_slave_1 left promiscuous mode [ 1966.886241][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1966.930593][ T56] device bridge_slave_0 left promiscuous mode [ 1966.945708][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.513634][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1971.572466][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1971.889858][ T56] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1971.921794][ T56] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1971.931387][ T56] bond0 (unregistering): Released all slaves [ 1972.020541][T15682] netlink: 'syz.1.12269': attribute type 21 has an invalid length. [ 1972.028620][T15682] netlink: 'syz.1.12269': attribute type 1 has an invalid length. [ 1972.036521][T15682] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.12269'. [ 1972.046198][T15683] netlink: 'syz.3.12270': attribute type 10 has an invalid length. [ 1972.064030][T15683] device hsr0 entered promiscuous mode [ 1972.069982][T15683] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1972.088124][T15687] netlink: 'syz.2.12272': attribute type 9 has an invalid length. [ 1972.107767][T15690] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1972.126530][T15692] netlink: 'syz.4.12271': attribute type 27 has an invalid length. [ 1972.145606][T15690] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1972.203292][T15690] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1972.596696][T15712] device syzkaller0 entered promiscuous mode [ 1976.022727][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.029705][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.743990][T15745] netlink: 'syz.1.12277': attribute type 28 has an invalid length. [ 1979.828898][T15805] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12304'. [ 1980.035690][T15805] team0: Port device team_slave_0 removed [ 1980.790661][ T2874] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1980.824281][ T2874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1980.833181][ T2874] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1980.847326][ T2874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1980.856036][ T2874] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1980.865301][ T2874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1980.932118][T15830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12311'. [ 1981.010269][ T7999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.222519][ T7999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.312662][ T7999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.871626][ T7999] team0: Port device netdevsim0 removed [ 1982.879569][ T7999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.894199][ T2874] Bluetooth: hci2: command 0x0409 tx timeout [ 1982.927854][T15858] netlink: 'syz.0.12313': attribute type 28 has an invalid length. [ 1983.101335][T15832] chnl_net:caif_netlink_parms(): no params data found [ 1983.280398][T15832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.287840][T15832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.296193][T15832] device bridge_slave_0 entered promiscuous mode [ 1983.403417][T15879] netlink: 'syz.1.12322': attribute type 27 has an invalid length. [ 1983.490699][T15832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.554336][T15883] netlink: 'syz.4.12323': attribute type 153 has an invalid length. [ 1983.562589][T15883] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.12323'. [ 1983.605601][T15832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.648712][T15832] device bridge_slave_1 entered promiscuous mode [ 1983.742388][T15832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1983.764754][T15880] delete_channel: no stack [ 1983.769675][T15880] delete_channel: no stack [ 1983.777219][T15832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1983.885585][T15832] team0: Port device team_slave_0 added [ 1983.917348][T15832] team0: Port device team_slave_1 added [ 1983.980382][T15832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1984.004060][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.051435][T15832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1984.087487][T15897] netlink: 'syz.4.12327': attribute type 3 has an invalid length. [ 1984.095664][T15832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1984.109542][T15832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.118033][T15897] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12327'. [ 1984.194253][T15832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1984.271503][T15832] device hsr_slave_0 entered promiscuous mode [ 1984.289587][T15832] device hsr_slave_1 entered promiscuous mode [ 1984.315156][T15832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1984.322774][T15832] Cannot create hsr debugfs directory [ 1984.685974][T15908] netlink: 'syz.0.12324': attribute type 29 has an invalid length. [ 1984.698625][T15908] netlink: 'syz.0.12324': attribute type 29 has an invalid length. [ 1984.709501][T15908] netlink: 'syz.0.12324': attribute type 29 has an invalid length. [ 1984.980314][ T2874] Bluetooth: hci2: command 0x041b tx timeout [ 1985.607350][ T7999] tipc: Left network mode [ 1985.883203][T15930] netlink: 'syz.0.12335': attribute type 21 has an invalid length. [ 1985.943003][T15930] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1985.996480][T15933] netlink: 'syz.1.12336': attribute type 10 has an invalid length. [ 1986.202522][T15942] netlink: 'syz.0.12338': attribute type 29 has an invalid length. [ 1986.247903][T15939] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.12336'. [ 1986.338570][T15947] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12337'. [ 1986.446372][T15955] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1986.502582][T15959] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1986.548589][T15960] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12339'. [ 1987.070074][ T2874] Bluetooth: hci2: command 0x040f tx timeout [ 1988.079867][T15832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1988.114820][T15832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1988.209228][T15832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1988.237301][T15990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12347'. [ 1988.461405][T15832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1988.623981][ T7999] device gretap0 left promiscuous mode [ 1988.629588][ T7999] Ÿë: port 2(gretap0) entered disabled state [ 1988.645611][T16001] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12349'. [ 1988.895464][T16019] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1988.901581][T16019] syzkaller1: group set to 778 [ 1989.058734][T16016] validate_nla: 7 callbacks suppressed [ 1989.058769][T16016] netlink: 'syz.1.12353': attribute type 27 has an invalid length. [ 1989.110114][T16016] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1989.138919][ T2874] Bluetooth: hci2: command 0x0419 tx timeout [ 1989.274866][T15832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1989.338216][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1989.355485][ T9543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1989.416330][T15832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1990.704662][T16057] netlink: 'syz.1.12363': attribute type 10 has an invalid length. [ 1990.734155][T16057] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12363'. [ 1990.764357][T16057] device team0 entered promiscuous mode [ 1990.773736][T16057] device team_slave_0 entered promiscuous mode [ 1990.794793][T16057] device team_slave_1 entered promiscuous mode [ 1990.809099][T16057] bridge0: port 3(team0) entered blocking state [ 1990.816381][T16057] bridge0: port 3(team0) entered disabled state [ 1990.835104][T16057] bridge0: port 3(team0) entered blocking state [ 1990.842000][T16057] bridge0: port 3(team0) entered forwarding state [ 1990.867528][T16058] netlink: 'syz.1.12363': attribute type 10 has an invalid length. [ 1990.885211][T16058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12363'. [ 1990.907298][T16070] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.12366'. [ 1990.920573][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1990.933822][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1990.943110][T16070] openvswitch: netlink: Flow actions attr not present in new flow. [ 1990.962648][T19745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.969884][T19745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1990.983470][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1990.993581][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1991.007254][T19745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1991.014438][T19745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1991.026230][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1991.039252][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1991.163602][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1991.197449][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1991.246615][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1991.281388][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1991.331475][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1991.367631][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1991.425197][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1991.829612][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1991.930963][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1991.950385][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1991.969585][T15832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1992.007912][ T7999] device veth0_to_team left promiscuous mode [ 1992.028312][ T7999] Ÿë: port 1(veth0_to_team) entered disabled state [ 1992.069709][ T7999] bridge0: port 3(dummy0) entered disabled state [ 1992.088330][ T7999] device bridge_slave_1 left promiscuous mode [ 1992.106619][ T7999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.120325][ T7999] device bridge_slave_0 left promiscuous mode [ 1992.126855][ T7999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.185849][ T7999] device veth0_macvtap left promiscuous mode [ 1992.202796][ T7999] device veth0_vlan left promiscuous mode [ 1994.223086][ T7999] team0 (unregistering): Port device team_slave_1 removed [ 1994.277032][ T7999] team0 (unregistering): Port device team_slave_0 removed [ 1996.821018][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1996.834334][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1996.844067][T15832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1996.952665][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1997.017711][ T9544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1997.077764][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1997.105740][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1997.127467][T15832] device veth0_vlan entered promiscuous mode [ 1997.145077][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1997.160863][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1997.174184][T15832] device veth1_vlan entered promiscuous mode [ 1997.222883][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1997.239760][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1997.262809][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1997.286996][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1997.320447][T15832] device veth0_macvtap entered promiscuous mode [ 1997.330004][T16168] netlink: 'syz.4.12388': attribute type 10 has an invalid length. [ 1997.358484][T15832] device veth1_macvtap entered promiscuous mode [ 1997.379891][T15832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1997.390934][T15832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.415644][T15832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1997.429664][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1997.448267][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1997.466192][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1997.480293][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1997.507847][T15832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.518701][T15832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.528679][T15832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1997.539643][T15832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1997.551971][T15832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1997.565575][T16176] netlink: 'syz.0.12392': attribute type 10 has an invalid length. [ 1998.220545][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1998.239369][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1998.255506][T15832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.272783][T15832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.282890][T15832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.303935][T15832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.493230][ T7994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.514620][ T7994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.541361][ T7994] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1998.621649][ T7994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1998.635791][ T7994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1998.650237][T19745] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1998.910853][T16210] netlink: 'syz.2.12305': attribute type 3 has an invalid length. [ 1998.943355][T16209] netlink: 'syz.0.12400': attribute type 21 has an invalid length. [ 1998.949372][T16210] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12305'. [ 1998.978670][T16209] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12400'. [ 1999.003359][T16212] netlink: 2 bytes leftover after parsing attributes in process `syz.1.12402'. [ 1999.030526][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.042576][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.061502][T16212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1999.073016][T16212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1999.102881][T16212] device batadv_slave_1 entered promiscuous mode [ 1999.653370][T16224] device syzkaller0 entered promiscuous mode [ 1999.689591][T16224] netlink: 'syz.2.12405': attribute type 21 has an invalid length. [ 1999.750368][T16224] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12405'. [ 2002.703725][T16235] device syzkaller0 entered promiscuous mode [ 2002.947439][T16247] netlink: 'syz.2.12410': attribute type 29 has an invalid length. [ 2002.971565][T16247] netlink: 'syz.2.12410': attribute type 29 has an invalid length. [ 2003.912919][T16276] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12420'. [ 2003.999748][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2004.063202][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.104429][T16276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2004.152101][T16276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.173351][ C1] [ 2004.173360][ C1] ================================ [ 2004.173365][ C1] WARNING: inconsistent lock state [ 2004.173384][ C1] syzkaller #0 Not tainted [ 2004.173392][ C1] -------------------------------- [ 2004.173397][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 2004.173404][ C1] syz.1.12419/16278 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2004.173421][ C1] ffff8880347aa218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 2004.173464][ C1] {INITIAL USE} state was registered at: [ 2004.173470][ C1] lock_acquire+0x1bb/0x4a0 [ 2004.173489][ C1] _raw_spin_lock+0x2a/0x40 [ 2004.173506][ C1] htab_lock_bucket+0x179/0x2f0 [ 2004.173520][ C1] htab_map_delete_elem+0x19e/0x5b0 [ 2004.173535][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 2004.173552][ C1] bpf_overflow_handler+0x522/0x7c0 [ 2004.173568][ C1] __perf_event_overflow+0x448/0x610 [ 2004.173586][ C1] perf_swevent_overflow+0x19b/0x230 [ 2004.173602][ C1] perf_swevent_event+0x458/0x570 [ 2004.173619][ C1] perf_bp_event+0x312/0x3f0 [ 2004.173640][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 2004.173659][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 2004.173674][ C1] notify_die+0x141/0x1a0 [ 2004.173688][ C1] notify_debug+0x20/0x30 [ 2004.173704][ C1] noist_exc_debug+0x73/0x120 [ 2004.173718][ C1] asm_exc_debug+0x2f/0x40 [ 2004.173734][ C1] irq event stamp: 1132 [ 2004.173739][ C1] hardirqs last enabled at (1131): [] exc_debug+0xf0/0x130 [ 2004.173758][ C1] hardirqs last disabled at (1132): [] exc_debug+0x6e/0x130 [ 2004.173775][ C1] softirqs last enabled at (618): [] bpf_prog_load+0x1127/0x1560 [ 2004.173798][ C1] softirqs last disabled at (616): [] bpf_ksym_add+0x29/0x340 [ 2004.173816][ C1] [ 2004.173816][ C1] other info that might help us debug this: [ 2004.173820][ C1] Possible unsafe locking scenario: [ 2004.173820][ C1] [ 2004.173824][ C1] CPU0 [ 2004.173827][ C1] ---- [ 2004.173830][ C1] lock(&htab->lockdep_key); [ 2004.173840][ C1] [ 2004.173844][ C1] lock(&htab->lockdep_key); [ 2004.173853][ C1] [ 2004.173853][ C1] *** DEADLOCK *** [ 2004.173853][ C1] [ 2004.173857][ C1] no locks held by syz.1.12419/16278. [ 2004.173864][ C1] [ 2004.173864][ C1] stack backtrace: [ 2004.173869][ C1] CPU: 1 PID: 16278 Comm: syz.1.12419 Not tainted syzkaller #0 [ 2004.173881][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2004.173890][ C1] Call Trace: [ 2004.173896][ C1] <#DB> [ 2004.173903][ C1] dump_stack_lvl+0x188/0x24e [ 2004.173920][ C1] ? show_regs_print_info+0x12/0x12 [ 2004.173947][ C1] ? print_usage_bug+0x42a/0x690 [ 2004.173967][ C1] ? verify_lock_unused+0x18/0x140 [ 2004.173988][ C1] lock_acquire+0x2df/0x4a0 [ 2004.174010][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 2004.174028][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2004.174053][ C1] ? perf_trace_lock_acquire+0x100/0x3e0 [ 2004.174073][ C1] _raw_spin_lock+0x2a/0x40 [ 2004.174089][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 2004.174106][ C1] htab_lock_bucket+0x179/0x2f0 [ 2004.174125][ C1] ? htab_lru_map_delete_node+0x630/0x630 [ 2004.174142][ C1] ? look_up_lock_class+0x75/0x140 [ 2004.174161][ C1] ? verify_lock_unused+0x18/0x140 [ 2004.174181][ C1] ? htab_map_hash+0x301/0x6d0 [ 2004.174200][ C1] htab_map_delete_elem+0x19e/0x5b0 [ 2004.174218][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 2004.174236][ C1] ? htab_map_update_elem+0xb00/0xb00 [ 2004.174255][ C1] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 2004.174276][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 2004.174295][ C1] bpf_overflow_handler+0x522/0x7c0 [ 2004.174315][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 2004.174332][ C1] ? perf_swevent_overflow+0x230/0x230 [ 2004.174347][ C1] ? lock_release+0xcf/0x920 [ 2004.174368][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 2004.174389][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 2004.174411][ C1] __perf_event_overflow+0x448/0x610 [ 2004.174437][ C1] perf_swevent_overflow+0x19b/0x230 [ 2004.174458][ C1] perf_swevent_event+0x458/0x570 [ 2004.174481][ C1] ? perf_tp_event+0xc30/0xc30 [ 2004.174509][ C1] perf_bp_event+0x312/0x3f0 [ 2004.174533][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 2004.174573][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2004.174591][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2004.174616][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 2004.174639][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 2004.174657][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 2004.174676][ C1] notify_die+0x141/0x1a0 [ 2004.174694][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 2004.174722][ C1] notify_debug+0x20/0x30 [ 2004.174739][ C1] exc_debug+0xd9/0x130 [ 2004.174756][ C1] asm_exc_debug+0x1a/0x40 [ 2004.174774][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 2004.174797][ C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 2004.174810][ C1] RSP: 0018:ffffc900049d7d48 EFLAGS: 00050202 [ 2004.174824][ C1] RAX: ffffffff84115b01 RBX: 0000000000000050 RCX: 000000000000000c [ 2004.174835][ C1] RDX: 0000000000000050 RSI: 0000200000000304 RDI: ffffc900049d7e04 [ 2004.174846][ C1] RBP: 0000000000000000 R08: ffffc900049d7e0f R09: 1ffff9200093afc1 [ 2004.174857][ C1] R10: dffffc0000000000 R11: fffff5200093afc2 R12: 00007fffffffefb0 [ 2004.174869][ C1] R13: 0000000000000050 R14: ffffc900049d7dc0 R15: 00002000000002c0 [ 2004.174885][ C1] ? _copy_from_user+0xb1/0x170 [ 2004.174910][ C1] [ 2004.174915][ C1] [ 2004.174920][ C1] _copy_from_user+0xf4/0x170 [ 2004.174946][ C1] __sys_bpf+0x2ea/0x780 [ 2004.174967][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 2004.174997][ C1] ? lock_chain_count+0x20/0x20 [ 2004.175022][ C1] __x64_sys_bpf+0x78/0x90 [ 2004.175041][ C1] do_syscall_64+0x4c/0xa0 [ 2004.175055][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2004.175072][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2004.175093][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2004.175111][ C1] RIP: 0033:0x7fdb2f39ce59 [ 2004.175124][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2004.175136][ C1] RSP: 002b:00007fdb30290028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2004.175152][ C1] RAX: ffffffffffffffda RBX: 00007fdb2f615fa0 RCX: 00007fdb2f39ce59 [ 2004.175163][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2004.175174][ C1] RBP: 00007fdb2f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 2004.175183][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2004.175193][ C1] R13: 00007fdb2f616038 R14: 00007fdb2f615fa0 R15: 00007fff2ef58248 [ 2004.175215][ C1] [ 2005.009122][T16276] device batadv_slave_1 entered promiscuous mode