last executing test programs: 5.549545781s ago: executing program 0 (id=5682): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="1b000000180081034e81f783db4cb9040a1d020006007c09e8fc55", 0x1b}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1400000040000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="5254ff12340000000000000000dd", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup(r3, &(0x7f0000000400)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000500), 0x2, 0x0) 5.489530097s ago: executing program 4 (id=5683): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r1, 0x0, 0xe80, 0x0, &(0x7f00000016c0)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001700)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xc, &(0x7f0000000500)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0xc, 0xe, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], &(0x7f0000003500)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003540)={r5, 0x2e0, 0xf, 0x0, &(0x7f00000035c0)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000003600)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000002500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002540), 0xfffffedf, 0x10, &(0x7f0000002580), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000025c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000002640)="63eced8e46dc3f0adf337cfe74a4", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) 5.232836403s ago: executing program 4 (id=5684): socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="855d0700000000000000000100000085"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b40), 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xffc0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x6, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60080, 0x0) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000080)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r3, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) sendmsg$inet(r2, &(0x7f0000000b00)={&(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000002c0)="56aec3aa85e327b0706f9856ca6db424241dfde198472113d593157e205ba5c58c225ee9", 0x24}, {&(0x7f0000000380)="820316faac60e49640b9b6e9beb1028d872f6e7dc85a958ff45a8a43df83f53b327f080a86f0be1190a34353f952cc88898eb9eac4fc5fb9b14b9c574d3a83f35d4091", 0x43}, {&(0x7f00000005c0)="52be0ae0d99fa1f98afe5eed8720624d7f1be23c4d2401a4b001722d63729caabeafed0babe2c01ba4edd12173a43aa472d00c9c18dc418cb9e27d493bda9e75a0bc6981e4", 0x45}, {&(0x7f0000000640)="12454cb9c63ec5a2212563c3dec3d06acc4e66f8057dde283e8124cb6e81a34d9856f411870477d58b80c390213c1154cb37e2c69809f2ac744c830d8db64f37a973e2cfee5e70bdafb0ffdefede23092ec6ba8ba6e2eccaad891d07b7f219a14555063d731ad3471650880b516267b77d6e4414d5ce5b0cd8a3ba5ee93ffb26d7b02a37c1619ec568e4650835a6c5bc12f917a66f5cbe29ffe3e159", 0x9c}, {&(0x7f0000000700)="6443f3a770798910c43c6fd7c1c43bfb1eccff80ccfa77d999eea351793e68b6d98537e1f3b069539341375024e70a7e067800eff0cab739fd71de4d0d5d45df6888bcc6f0d492af145d79ddfc15eb78862068296d196438d309a037a20a7845d9a4aa11a7365999b7c339ed955529b3a7db64102f809b9f936e7a0c057385d82a97126dc532329b27594ee2f0056c6831c7a481339996511366f8566be57c1589a094f66e30b0b9b9d1633d78924a4bd47fb3b36759d29e4bcd44d50cbbfc2ae9ea8d0f1cb8799cade5930a0f00fc1a7028eec5b8c2b67e2ae9b958e3ab17", 0xdf}, {&(0x7f0000000800)="a634843d00d2220f75d82cb58d45831f47293e23cc87ba2b47025a6586d068f1965d0cddfc53f9792439901dcd01c28cf4631609cf537d796094f5bea6d4433fdfd414e17997353fb42f73d727b6dd1c083bf8ed5cc9382982f0070ea6bc8094ff2f5d6d9211cf8c6639d7503cc9d4a4ba3ccefa5a826d26ed1c20500e3d450eaaf6e257dd61978dbaecd3fa57b3c9cc02eba213939eeb75ce19c735f6223ea639519850e3e91eae50b75a29742a892c093fd037cfdc59d747598ed2c6880c1e99c5f5d7d33ac3e372956f472608cf6c1edd3249ce265a753ae5212914e65d19cb6d7aa61e74bf713108b4cf", 0xec}, {&(0x7f0000000900)="385085159997a1db2e0a5f7991a34ab2c61cff4dbc398b0aaaad4a7a20bd6c2f61cf6dcd8d2fad476e928366e305c4eef60117189d948a366b2a250138898ffe2fac2103eecac60182972bf082366f46189232d631dc176ace016ce557265d51b184f4aae33c8570d9f91218b2d34e8e8e473ffc598b22321d8e8a25add362ce79aba59fba2cbc11b26ebf5c532fa10dc84b2bb6570b1fbfddfeaee15c4c2c0a458f76f15a3177503bde342a3bb1313900aef59b0b6726e023c5f200d2b3fd9a3e952a1b4f89e05afdfc5d149f09ddb246f2fa1362e7e339d3b4446f794b4ca8754806df5910a743641b15a0e78d00ad797dc5138be286", 0xf7}, {&(0x7f0000000a00)="d03a4adcbbc1c12afbed1545b1e23a7d367b3aa7b6fd09a516b74734befb2911fa65e5f9d51156485098e30d4cf10201182ff636470cc3583d9d7e47e97eabac0b16b02ed944a1aa6870ea3be0577b4137e1fd63737a8b3ec9da7c8b78ac948da62bed", 0x63}], 0x8}, 0x20040800) 2.473441686s ago: executing program 3 (id=5685): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r3}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r3}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x5, 0x4, 0x6, 0x9f, 0x0, 0x7, 0x40000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x3, 0x9}, 0x1104c, 0x2, 0x8001, 0x6, 0x6, 0xfffffd91, 0xc, 0x0, 0x6, 0x0, 0xb1}, r4, 0xd, r1, 0xa) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xffffffffffffff4e, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffff2e, [{0x0, 0x3, 0x6}, {0x0, 0x1}]}]}}, &(0x7f0000000700)=""/136, 0x3e, 0x88, 0x1}, 0x20) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012000400054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000ac0)={r5, &(0x7f0000000980)="a57aaf87ffb6f4a2d39315b575ae3ad1f7e8cd6b85cea9899b9acb969764b17d6fa6ce389ad3698df2857c9d64ef136a16a4a9216666a27e1fc57cc463eb0e575e4e3428eb9903cb4a5e54f6d57f176d5b9ca4346a2ad0aa4dd9e483b82291aa10467ef1af320d79a810112fe4ddac1b0ce93883ae169b1cd561a51d7bcd6f9e874497404f4365a21721348b5e48f0ff9d9eb0df521e7e915bfcade6e59620055a6233b1eca88ee46ffdd21ad283c99775211ca154f8a6433fe91f05c3a68944f086ac0cf951ff55259e507c1491ce506d5b8c6b3fc3b69c18e1d4a72f1e234a", &(0x7f0000000a80)=""/46}, 0x20) 2.390320665s ago: executing program 4 (id=5686): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000540), 0x4) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x10}, 0x10c102, 0xac5d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891c, &(0x7f0000000740)={'ip6_vti0\x00', @random="02000400"}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.307798083s ago: executing program 0 (id=5688): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x15, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x400000, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000440)={'vxcan1\x00'}) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x23, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f00000004c0)='./file0\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) openat$cgroup(r4, &(0x7f0000000840)='syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000880)=r10, 0x1c) recvmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000940)=r11, 0x1c) 2.084682726s ago: executing program 3 (id=5689): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendmsg$kcm(r3, &(0x7f0000002780)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000005c0)="dfcd2528df71f123eb061a6d29bdd647dca75edc13516145c484ed39c194473e0eab155e36a4fd52bbc03dc161ce37be8de4ca2eb720d6481e4d7cea77e3e7e94e31872414de96d1b0807340ff340f175522aeaafc9e94f2fd15323ccb383d51fcdb004c1b63b20f36959dc19a401e389b6d302323442d3e8cf071ba76d7b797b25b1c83f21e67a305e2fa49301b1ab7bf8a25c86576df406ddbb0b1", 0x9c}, {&(0x7f0000000680)="5afceefa6ae452a38b06e1c3d06482660a2929f8d76660fbfe2b786141f660a8f40d9203c681e93d4e2db952d2cbc14077b6bcf428cb6429e6756e1b161bcb8d27164345cb064d74d46cad424bbfb08f2635e5a63f5a9efbf9d1dd5b54902c89ef7809a64b4e075ce41af629e31ab3b474ca02a27eb47fe6e56f8793d4b223d14672c04af32884e5dbd9638e0203aff807731406330e8704c5374841e583a256ed86e3", 0xa3}, {&(0x7f0000000780)="f0289bb1e0ce741e07c296fb6340249f210cf971153b0a3867c10ad90a54463924cb69a4c35767ab901cb4e2370f322e773898286e206baa88c395effb58f03543cd8f5aa4a55e4d132989a2f5c0a657451b7bb37f4b2e0e9e2944a001ac36fa07c7fb61ad4006b256071676b6e97f68003349d76462a7a7acdedd41be3e62e570d3c2f0bd898ac8d2aa49401c61bc3d38b9234dc8f8d3902442c01bf725c68aec153371595167b735658f8e82d115938676013915d8e97927ac70a2ad7696c632eeb0c15ab48d27496fc07794375bd8dcb254168d9e6143fd07532705d9f4f899d9a2fc2752630e33f732ad1c086ab6ec67", 0xf2}, {&(0x7f0000000880)="52d2", 0x2}, {&(0x7f00000016c0)="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", 0x1000}], 0x5, &(0x7f0000002740)=[{0x38, 0x111, 0xf3c, "56c8e34c41db48118a977b3ffc7a827744ba00879b4438e53eeb8bd839e3965bc621a3bea1"}], 0x38}, 0x0) setsockopt$sock_attach_bpf(r3, 0x110, 0x4, 0x0, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, 0x0, 0x12) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r10, 0x29, 0x6, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000280)=0x8000) setsockopt$sock_attach_bpf(r9, 0x84, 0x1e, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r9, 0x84, 0x1e, &(0x7f0000000000), 0x4) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="5400020029000b05d25a806f8c6394b877b7d0e5ff9a3f80be598182a441f90424fc61c63ba09ee3c9c500053582c137153e370248018000f01700d1bd00a11a9901666c8ed0c87f298df25f2aa62d68fce17c7891ef87d850b4c789d731d2b84337881c2db48d8daaf83272a8bc17b7cad03a80d36067a94820c2", 0x7b}], 0x1, 0x0, 0x0, 0x5000000}, 0x1) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5) sendmsg$kcm(r9, &(0x7f0000000c80)={&(0x7f0000000400)=@xdp={0x2c, 0x1, 0x0, 0x39}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000008c0)="20a177fc4834e26f63f7c4babea41b5a9f586ae1406185b61ac26a8d1d4e808cefdd5b9398dd0a39b8d95f763cdd0685dabe6625df584116955ce270872d1ff96f237084b91fc953b619783b7f1f57c8b9d727bfe4fc94dc8e7b1719a694b2f03932a4f89309ecc79f29c17e0ae67ed1d460012593a4bfcd931665770f992c590c845a833230698c1d87c889b92f63d82ac5d4ad809e67ca948d71e933e2f2c12c4f12a3ff8ba77029a696daf6f98b0047de1747fc5fb2fb07a4e5c799ecedba91d92bd26d86e12baad4a62555454050", 0xd0}, {&(0x7f00000009c0)="ca2b2b38265bf25c5ab32d30591a7d2e4f7125694f237de52ab8d6120cb2359182b03e30d266d8b7aea20f651b2df43e8fb481240eee4c6c663179704625e8a72a6851abfac02a7de1445b7b", 0x4c}, {&(0x7f0000000a40)="eb2ba9db9c0d0838a512cd29aebb4e4fa0e79f3bae3dcabbbe2882970dc99bb80a381f0bca2a77c6c557ad924ac6b4d2ffa761e4e0e1e75432724d158b360aa65981c22f2ff442cb1b9f72cac8020ca3cd22a226202699aa7cd41a87db456058ef793ddebda8d467b199cb966ca7992a737fce93171723d20aae8358bfbaa9efd179a9bff6d4f46595a9433ce58beba78484fe5413792f1438ac04672f32af49513310f4a9217348e9e4b1e68c7ef5", 0xaf}, {&(0x7f0000000b00)}], 0x4, &(0x7f0000000b80)=[{0xf0, 0x10b, 0xb14, "8c11aa0ad802d94d4eee2cd908c6265d0a879d21747a46c876fab25a1e3dcd0cc1adb8b34aaa92b8363d539e006bdfc967ee64bb6ab46d1025d3aeef87d8d695989d24530966ab776e90dd2442853b944978dc98a0924c979daf8fffc02647e85d91f0a5a68bb4e55a2454251ff6d222246a8667c91ccdee7da5636b682bcf48dc435444d8ab0ef117696f2a8f758899e347e64ab7ad5839edf357b8df673766ffac60d9fff820b8b1200cb504c67eced27ef45304b7d838c7eb8fdbca0aaf2c9f97e7cd309b0d8acdda217891d0afb5753d9c854f0c7f3c3df6"}], 0xf0}, 0x40010) 2.056521249s ago: executing program 4 (id=5690): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000001600)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000001640)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x283, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000016c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x1000, 0x3, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001780), 0xc) (async) socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000580), 0x43) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000400)) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000005c0), 0x4) (async) recvmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000002a00)=""/80, 0x50}], 0x1}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000680)="b8", 0x1}], 0x1}, 0x4000001) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x18420e, 0x7fffffffffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x42d92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000200000000, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0xffffff2d, &(0x7f0000000400)=[{&(0x7f0000000440)="c00e020022003505d25a806f8c6394f95f24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x8, &(0x7f0000000200), 0x120) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'macvtap0\x00', 0x200}) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[], 0x101d0) 1.998043305s ago: executing program 0 (id=5691): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000740)=@raw=[@alu={0x7, 0x0, 0x1, 0x4, 0xbb2f4475ed83ebf0, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x685a}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000800)='GPL\x00', 0x8, 0x90, &(0x7f0000000840)=""/144, 0x41100, 0x14, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x8, 0x2, 0x7f}, 0x10, 0x1bb1c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000980)=[{0x0, 0x4, 0xa, 0x8}, {0x5, 0x2, 0xb, 0xb}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@fallback=r2, 0xd, 0x0, 0xc, &(0x7f0000000a00)=[0x0], 0x1, 0x0, &(0x7f0000000a40)=[0x0, 0x0], &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x12, 0x26, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000b80)={r4, &(0x7f0000000bc0), 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0], 0x0, 0x22, &(0x7f0000000e00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000e80), &(0x7f0000000ec0), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000f00)}}, 0x10) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@arena={0x21, 0x0, 0x0, 0x13, 0x20000, r4, 0x8, '\x00', r5, r6, 0x3, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@arena={0x21, 0x0, 0x0, 0x17, 0x0, r3, 0x29a7, '\x00', r5, r3, 0x3, 0x1, 0x4}, 0x50) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="93adc3cbf79183ee758fcddc029866bee0daca2a28369ce6cbb267f7adade29293d76c", 0x23}, {&(0x7f0000000180)="83bff79e7954da07525db37a9e0b2831ee9b5df8753d6452272bc959e90af5fc8b063266bb8f9e09bd", 0x29}, {&(0x7f0000000280)="41044f25f97428cf9c8d340094f3447f2d8b0952b89d8e0f4ebbcadd12e6665dd0b143c0b03315de43680851c919d33aea6376f6ddd12b6bca4f12ece313c95bc7a7cf55f0c3e683261cd73631723fa172123980db7ceea389f2083b855dcfa1d77f2e7e874981f724134a1c927a7702a8b67f53428c9ec8878a102efc55c64c81f7c2c281bcacc6fd8b9aeb930d1ee75c8e83990bddd06dff53aac2852c75204c5338", 0xa3}], 0x3, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x22}, @dev={0xac, 0x14, 0x14, 0x2b}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe60}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @broadcast}}}], 0x70}, 0x0) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x8, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.996866265s ago: executing program 1 (id=5600): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 1.938317151s ago: executing program 2 (id=5692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) socket$kcm(0x10, 0x7, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x5) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d80000002c0081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xc8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x102000, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x10, 0x3, 0x7, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x85, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000740)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.734328882s ago: executing program 1 (id=5693): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)}], 0x1}, 0x0) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000104"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000580)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c8050000000000002900000037"], 0x5c8}, 0x0) 1.536869642s ago: executing program 0 (id=5694): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x60024, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xba32, 0x6}, 0x20, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x3e}, 0x40001) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, &(0x7f0000000000), 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="42000008006de0e900"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYRESDEC=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xe, 0x2c, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000004000000000000e000000018110000ca21509d6a5b9e2edcb5ebd8057b0c1024f86e6ad109e409ac9d10776dce37f72e0e5d08d86d766a4da59e6b2626a9b2954f18bb941eb7c5a4511447ca194e779828e4bcbadefea296dd5cefd01d2d9b927ca9a81ca94b7d8aae3c8f375bdac85cad7847a8bdddd5f4a0bf92b51aa28e8c2b37a4bdf4552b69f9c3461ffba553ebdded76be464447a4e60a86bcddd7aed536736032dfbad988456903c8e06be5f53272fc6f6a73de433aed55069ff78c10be4784922b8d16eba5f566fa11222e4f3b851f", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000f791652c47c1ed92000000bf090000000000005509010000000000950000000000000018270000", @ANYRES32=r4, @ANYBLOB="000000000300000018110000", @ANYRES32, @ANYRESDEC=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018440000fbffffff000000000000000085000000490000001830000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000760cd0cc8500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xa14a, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0x10, 0x5, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000001000)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, r4, r4, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff], &(0x7f0000000140)=[{0x1, 0x1, 0xc, 0xc}, {0x3, 0x4, 0x8}, {0x1, 0x1, 0x9, 0xc}, {0x5, 0x2, 0xc, 0x7}, {0x5, 0x5, 0xd, 0x7}, {0x4, 0x5, 0x40007}, {0x4, 0x4002, 0x8, 0x2}], 0x10, 0x80}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x3b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072d431e9fd2b4223a8ee0764a1fb48973f7665cb6bbeb3e88a5b5db6d4c2ee416ef3e76e303874d43e124c5175536be201", @ANYRESDEC=r0], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000b40)={r7}, 0x8) setsockopt$sock_attach_bpf(r6, 0x107, 0xe, &(0x7f0000000b80)=r8, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0x0, 0x0, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000040)="c9944fed1993f17c9e319d9a156b0041000000000000000200000000000000", 0x1f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48010) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001c00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) write$cgroup_pid(r7, 0x0, 0xfffffffffffffd7a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a40)=@o_path={&(0x7f0000000200)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x1, 0x0) 1.476669908s ago: executing program 1 (id=5695): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000e80)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000ec0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x10014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x8, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18e6dd7a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4390, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x100000001, 0x1}, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, r1, 0xb) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000002f00)={&(0x7f0000002f40)=@l2tp6={0xa, 0x1100, 0x0, @mcast1}, 0x80, 0x0}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002fc0)={&(0x7f0000003000)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x200}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003100)="cc8ee103e5d5499b01df3de9cd88eb63bcb17802ff2cd5d0a6ccccf39d03d19883dbc1ee1c9db5737027dd2583745b6a64a08c807d3a88918484696dc82ed2a1932bd72a1c427c1eef3e1a20bf3b2f1f", 0x50}, {0x0}, {&(0x7f0000003180)="abe03b3e054df5f24eebaac00b39218834b3afc2b7e5e2fb0079312f59515a1216d709a7dce3e0762f4c886cfaf88dec2b771b44a39311e9d84307fafa07f09a0af70d19da3b6e8476", 0x49}, {&(0x7f0000003200)="68f76aed33dfcc0bd03a1dc96810b477471e4649930f507f0261dfce998d6efef73bcbe6033491d7410b1614090cf9db91a8fe87c22642a48a82ea6ae7421ebab35c092cf4df01ff8cb9279dd244594979b9771c3e395abfb43c1128c0d51bf57cc53a097dfb4ffdf217045583b9a00f5c782ee5ce179b4d3498be37aace08809b888e043511d8a3c34e4577f7a3cb7be386b5b64c1510c916b69d0b08ba9b071d6b74dffd27e69890f1c933a95e1e2e4d38e9fc053e2cc14c974f8a2513528854f807505468f03a0e31967e30f8b631cb37bd", 0xd3}, {&(0x7f0000003300)="f0de76570237312099a0c6d8e0806e79cf78d4dba3", 0x15}, {0x0}], 0x6, &(0x7f0000003340)=[@txtime={{0x18, 0x1, 0x3d, 0x6202}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0xc}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x200}}], 0xc0}, 0xc000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="050000007f000000f00e"], 0x48) r5 = perf_event_open(&(0x7f0000003440)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0x5, 0x3, &(0x7f0000003580)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000003cc0)='GPL\x00', 0x5, 0x252, &(0x7f0000003d00)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003e00)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003e40), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000003e80)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000003ec0)=ANY=[@ANYBLOB="720000000000000071f2810fe91358200e8799dc2f81ec"], 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003f40), &(0x7f0000003f80), 0x402, r4}, 0x38) r9 = perf_event_open(&(0x7f0000003fc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r9, 0x0) sendmsg$kcm(r2, &(0x7f00000040c0)={0x0, 0xffffff0a, &(0x7f0000004100)=[{&(0x7f0000004140)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000f000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) 1.354749811s ago: executing program 3 (id=5696): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001540)=[{0x2}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x10c602, 0xac59, 0x0, 0x6, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/136, 0x88}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x3, &(0x7f00000000c0)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x16}}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0xd18c9b0a, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="c00e02003f000b05d25a80648c6394f90224fc60586502400c000400050082c103003e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x1, 0x3c, &(0x7f0000001180), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x0, 0x43, 0xd3, &(0x7f0000000580)="f2d4e49dda17fd10d45bf881d6f89a3222fe1f0641f1be5044d5bc3c7cf1fcffae1084f6c27ea0e3158e59e15111b469dd2dcedb57ab88d0c6ad37376efcdd7075a0e6", &(0x7f0000000600)=""/211, 0x1, 0x0, 0xbf, 0x2c, &(0x7f0000000e00)="9d4f631c0e6c31458acebf56b00f660bd8b4c77c0b5f620c5f3e0281a439b7bc5664b5d87215cadce84cdc0707a3a20d21ba42538f32ac7700bbf26095e9d95c0f4f06d5f118c07c3683266f8f9029b53817dc93f3abaaf79a09f4ba55162aa24fe795ece3ebdd5605e36a737914e9e5ee0e80c369d20d96cd526fdfa3a225ce8474a1c71413051a74d1ca8903e75fa7c7dfc6061e76f98d1287084f373ff87493c0f79110c29009bffb11b86096bf2f598a8ddbc8c535840ed9ad543dc8c3", &(0x7f0000000ec0)="e6f29000a76ea286452db7986e4d034187b4c838702fb17892f797b87e22d7c66050c72042fd2e301780764b", 0x4, 0x0, 0x1}, 0x50) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0xc, 0x4, [@union={0x1, 0x8, 0x0, 0x5, 0x1, 0x5, [{0xf, 0x2, 0x6}, {0x5, 0x4, 0x8}, {0xc, 0x4}, {0x9, 0x1, 0x8}, {0x6, 0x2, 0x6}, {0x9, 0x5, 0x3}, {0xe, 0x2, 0x8001}, {0x200e, 0x1, 0xffff}]}, @restrict={0xd}, @enum={0x9}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000002c0)=""/178, 0xa0, 0xb2, 0x1, 0x2a5, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x80, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001140)=r7, 0x4) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xd}], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x17, r6, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x18de0, r8, 0x2, 0x0, &(0x7f0000000440)=[{0x2, 0x4, 0xf}, {0x5, 0x5, 0x9, 0xb}], 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.244785882s ago: executing program 2 (id=5697): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000002fd000085000000e8ffffffffffffff00000000000000000000c7d4000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000180)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000001c0), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000200)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000240), 0x127) socketpair(0x9, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000680)="aa429007c79162774ac69c612662a7b3c229b1fb68da3e88b78f06c7618cd7d18f", 0x21}, {&(0x7f00000007c0)="2058c9134b7cc8bc4e115a26f7", 0xd}, {&(0x7f0000000800)="743fa80902c78d0771ffd9e7584303bfad922a9eda13bbc1338a7c4c58dba8911a8ea85830dab97519332d613e9421b0faec2ac6bd6e2e7bd3570a786e7d63f4f869f739d337967b928e1ccc8a191aa1e84994767e1ed8b3e501bbe05aa00cb6a04615dfb206b8c5318cfcc95f89074ae43e12ea36d627abde9b84e7407e708bd9a23164b79eb64dd197292bd16d8406e4cb6e3fe95f6441f66459db2c29e541214716b87c9fe68ad63b894cf9ebbe45ec841885daedf94c219bda41d8a06172313e1f724d6a1fd5d636abb585a43d0ed3638883a4884104bd68beb2a57db1c3d5d1acdfaa32e197684117", 0xeb}, {&(0x7f0000000900)="4ef0aef0e51c5580db50ce8e40680b789ed380c54433e00a748fbf464c531f13ac8e50402b7b0925702bac42d938ba6467a23d78d3f00c36eabf9a8f25fdfe1710f2e35db1c7c2094b7fb9d521", 0x4d}, {&(0x7f0000000980)="10d0543ef58d9ae4423f04b7a8e43b8a3f2adccb976dc82441cfe4c6dde2931731180fa1415844738a74977ac5162dd4c1ce", 0x32}, {&(0x7f00000009c0)="7d77d0fa58c795dc5abb4a1f8d11bdab8d2fc073608744d53aa61c641bdf56c8c860b2d65f6a071c6e7f921110c5878688b8f3eb53e6b7797a0e276e28d047295f74c3c02219547c168ea091c15040c5d59888d0fa1f12e2e9322cb8d174d3e4559dddba51be1dd0e24d7df0af1ca1aba59c183593ef658a783a8bb392388273adcff111a86bebdf38fb9ccd473f83c986cb4c86c01169dfdbd68dcf94670e99a8797259136d462d35f6123760bb7dbcf18b3d4580655664847a4a6c2e33", 0xbe}, {&(0x7f0000000a80)="b6a99811214142e827af1279cd21e56857c9d0ac0c90a6b05395403029", 0x1d}, {&(0x7f0000000ac0)="0a63a091515edd9fab6175b46a85d59a35552bb3cebdae362696d7dfab3a401b6b0034befe13c61df2d566db5d6e8def573045148cf5f61beedcfb19793b8369fb", 0x41}], 0x8, &(0x7f0000000bc0)=[{0xb0, 0x107, 0x6, "fff62d68ee87d3a7879a34fa5a5afe05a790a7d054a198d41b1bde0f6fe526dc662c89f1af161ddca095ea7600622bfbacc034af96a3f92267a2b79274a5389cf4532a8ce9e749a14fd284d47a8ae0940501592cf84940b6a21fcdd5d94f3bef4db57ce7e3f437d924b9e2bacc5809a473c599a85cecaab77b380000d38780e6129948304a18fcb3d934210bc44301607acc4202e823090a022c0e42"}], 0xb0}, 0x24004000) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000280), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000002c0), 0x43) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/80, 0x50}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="b8", 0x1}], 0x1}, 0x4000001) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[], 0x101d0) sendmsg$kcm(r6, &(0x7f00000005c0)={&(0x7f0000000600)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/102, 0x66}], 0x1}, 0x40) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', r7}, 0x18) 988.805489ms ago: executing program 0 (id=5698): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000009000000000000000000000905000000070000000000000e0500000000000000000000000000000202000000000000000000000d000000000000000000000002000000000000000000000061"], 0x0, 0x61}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001180)={'syzkaller0\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001200)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000001280)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f00000012c0)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000001300)={'syzkaller0\x00', @random='\x00\a\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f00000006c0), &(0x7f00000008c0)='%-010d \x00'}, 0x20) socketpair(0x11, 0xa, 0x300, &(0x7f0000000a00)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000f80)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x8}]}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000001080)=r7, 0x10) r8 = socket$kcm(0x2, 0x5, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cgroup.kill\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x78, &(0x7f0000001100)=r9, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r10, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000c40)=[{}], 0x8, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) 979.827299ms ago: executing program 4 (id=5699): socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000000000000000000000e08c1f3f04000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socket$kcm(0xa, 0x2, 0x73) (async) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f0000000240)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000000280)=[{&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001f40)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x14, 0x29, 0x3e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0xff00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000004440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) (async) close(r6) recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/34, 0x22}, {&(0x7f0000000100)=""/8, 0x8}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/244, 0xf4}], 0x4}, 0x0) socket$kcm(0x11, 0x3, 0x300) (async) socket$kcm(0x11, 0x3, 0x300) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000028c0)="d8000000580081044e81f782db", 0xd}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b80)=[{0x0, 0x0, 0x3}, {0x10040002, 0x0, 0x7, 0x5}], 0x10, 0x80}, 0x94) 916.597256ms ago: executing program 3 (id=5700): close(0xffffffffffffffff) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x28, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0x2, 0x1, 0x8, 0xfffffffffffffff4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdb8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9571, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x7, &(0x7f0000000280)=""/7, 0x41000, 0x30, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x2, 0xa8, 0x8}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x3, 0x2, 0x2}], 0x10, 0x80000001}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r2, r3, 0x4}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x701940, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000001b40)={&(0x7f00000004c0)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000540)="87a4f6cb51bf5ee4bd58fc213ebca6342107250bfe8452698878b349a0c16a4a77878656a6c380425b0f2027ced0ebb31995b43e0689fe17e2f832ec58624cf207db46791fcfb0e83a98de3376ec28808a241751c4552f7c0f92508712be194cc09f5827c43a0e53bc935252aafd6bbbc01ee8fb2ecbb307003f9abcadc4b65e1ddb1f", 0x83}, {&(0x7f0000000600)="8eac97ecf2a992de860d3d7d5e5f3b6396764114f98653fb0f90c2891b0e3a51240d3956d5deeab81910a176370205f3ca23b8274bec4dcab1dfb8b2f86fea1cd190d83b61ab0168174460041a011f61c6ad398c80c26d9e4d81f91fa60331d4836990546cd3b935cd408ae01e08f23f5a6c7aa52e66e8223b69952ff90a5407c34123a3597298ce89bc0d3400776356ae4f6e46f553280ba73e61943b4f731cf56124ce4f8e8604bb0436320e49e7e29bab6cc35e48bfb3b07e80c78c005aa48c574be81696d0decef9f6ea", 0xcc}, {&(0x7f0000000700)="e56c4c48e3baa25961ad2beff4316502c7548b46096e02ef8aab794840e24464fee1ee0fb1419324ffe62c7f985d46c9f293b923e71436f30b502290099d0f2793a1221288f9984adc812be044c051e7f7c437886be11abd4921a709cd0c1e1998bdcec3a80b8f0488241b5c8ca0a659529702f569216f997e9943b8dafd14eca790bc0822303f8530689c82430fb80fcc6d9afdc4221470", 0x98}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="c338ba1b10377d6cd31d3a9aba5fcd259328b63137b927c62b09a45141f094b50e6dc43dac550880a8f04a23f7e2b5f163db29291cc69e036e2f93d448a77a7b55d94e87c9f7b7abf816a9eb0c470df88ab5971313a4a7f6e5e8abd2a508c34e8d5929e5b77718270d3ebb61559dedb56608f7ca2aa54405f95fff95ce3315ff2fea5530dd03fa530ec45ad52301ce968907e5413dfd30d910630fb2ffc134d763d0c70976b155d36d9940fe58fed682bcdfd77cdcbaf1bc7085735c0c4ff79584a61774d3cad8f3f3d8d796e24661f5d15928eb796116fbb58c6f43e43a4487ce710c5998428f26ce344fddb71ed8b481e07a5427a8fbcbc31d0b3ea519e0a24b1ba543afaef74b761080148599fb99c3145dc755670c5b568c374b3b3097cf2b86f3dae95e051414f6ba830af3e9039f2b3e5515e8b7b38111088e83fbfdb611c5a1d663a84761710c7c14ce674d7dac295cb7171e648b652de4e976ed6515ebc90f048db8d20dde07241468d401cda2941d6b095ad08abfdbc7786e8a9d6519bcb64739719b972d04063df7636e64724bdfb654ac5388da12805e0b560f187e6ba390ad015b7898c3138e32c74e3432085d1e545fc8eba44b6739f542121e1ba24c24c4c0759315d1329e4c00815d984cfba2bbdd38dbe37e8451de2228a559cf3b16fb2aa2a91fb5729cc37d988b50c105c67d7f56c61ada84726dc1bbe8db15829d67b0a29416a09f361ee9d9318a43e0ddcb1b8f1109bf32271d53a51ab25cd12b8bfe739c60dfb053a7c7d13d297d1ef5d0538074ad9290fe3ce4f1fdf046bbfb5d3718f638b279a411c60bb5c5dd333bd428cb5bd2f5cf8cf458f110b666456dee958a38a8a0c89f494413f93ea2fa47beb57ffe1783596505fd89103b67d2c9c012db787b0affbf5a247b014042e6d20ed77509c6c1d94ee572dec43ec1d3a9ae0c584c9f83fe8da5194f99ce157eb63554f740614396b997f515db8e5bee14966c86d52a5facbdd6e3f77927126d76ca08c56ef2146701d26200b147ee7cd9a6b530479f3d53a853adb9b1ad3f1078132b03b30d2f68725df855fb5b18ca7b78d353c45f5ad9dc70434478c7b3915e58586d131989fdac86157f5ed8a1b7b3a7a40e82eae155146d7f487773da474a8ca2f92928cf23958dec4fa0af36d7b6375f7a4ea9fc6f481c159872de6a9be3a45903dc1444f01fbef26956d16b21e2e9cb73416c53095425f0f2b524142e9ad4fbf0e1c4dfec04d0e1133e80317de4a5c3c993f5d1066359ee01293b7abce7b177c65c8a849982bb58da8cc6e119497b5539e61543d6a7b532ef8aee9a78ebc81297bd7a836d757a0b2f3a62de1a0c6f0862d6488558ff8d99c3b870abc6f76f66f746b1f2d71b4774481135dd59a6e765a0f372f9525e6441c773fd27a4d185f93d0b5a1f9b5fff62c5371d50cfbd796ea49c7620be9b3aac2c8704b9371eda41bff710c693ce1f83625f1b13d7561fcdec83e44c2849ad077218aad4437290e080f1016e3233379624a246aef043752f4b19de9b6ce61326789f61b4fd55368e2694292d6edd09d8fd74886008029446ed1a7cb47a0e099724f399b149ecfe79dc7d009e7a27a7cb0ba411f63fb999489751c0753293cca11e3cbc9e274d372538762685d043474aecf170f7751a1fca6eff0e0329aa49c70da06af91ced7246b10cdce4cfcb00a643a6f133086680524b3f5e4223b7b98d046ddc5d25d8c1ee067959a1eb5efc17a9fe1f427586094adf7350b0b13240c37588531cb0687e5c6f67b44c4737d043050534d0d153ddde45dd8e59ac40794efb944d9b06051270af06df0dd956915087bbe3f2cdcd8b6116e957bc836ab116fc8972898aa25ee43cdf984c4dfaacadb9ba0626ade927c1281f2e541785e1f148d2e15727046e79e25949460ecadf6922d4b82c2f7628895385ee020adf204d51c5271abf605b025a06a37a60012388f5fc945165f0910cfcc65e56b3e8a6f0427e7f5940cc5c9271c021e30bc0801b42ce7394555fadb174e17395cdec58e0bdca5b0bdb197322a78243ff23e79cb21dde0c8bdc06b9e5881d5fe639f4bbf25c68bb1fcedd6271330f1f4a46f398cccc849f5941ca9c8b81fc4b5f05454cfd40e478dc2927fecfa769f7e9336d8a1a4f3c696d662bbdb84384aa8bf3fd6ac0cef49facbb9965749bc061fcce274ca8885e7267a8750d7546f88b380c67ef5408f766a9ea3d3483a7c8db2fd8cbdff9283267cc2f7207ffd8aed8eaaab23c7320b6e2abf833e365cc833fcab416e8a7296622b015a0731315597907e148760cf0268def4b0ab7e780634c82d1296283ac6cd9ff70de2e47853e52ccc30e0996a1a0d1d8c3f5d111fefd35918aeb7fcb92892d709cb6fca7ac505c8dca1fe6f8baa48270e98beed3469e0fe173d7c45554462a640d6f60603d2437be0d2c7ec0a5b7905578db7f956388bcda0de1c0c6976d5efad96725fac2f48552de1295b7098823c7a779f0d401a8811ba24d8f38efb0dbeef648f16cceb66d20947c3498bbba36865ad8726ec41f697956f4a4ad67bf27a7133bebb0b4fa0284b388b5501665bb97406a6414eea09a7796097f9853283adb30f38713f6f8798d61188e54817c4e1734adcf77668cfa20227bf541785587b3fed61129425bdcec0b2d64e43b760129b527112319f467535e7298fdc7d3185abdd76bcdd1d820cfed83405f0c1ff563a2cfc36a271d8aa0c770bbc251a7c77fc2ebb7f9312d514d176bddc89d73e054740b2fdf00f5966a57a98808cc73d0b2e61114415835a119c19425161a7c60eac46872ba66e19e98bf31b574bd3a09f5460ae77b5cc1df6fc2b4d1024517c69ec735fa96bae3d890135e2dd7857c1d7826542b64b6743e4f08fa2d4d034bbcb607696b99ef12b59007312e5276c845138c13befa8b2305a36e12e6001522def68476ad1fc0d34449774b5481d5b6bffd62dcf5e6103aff9fbce206c07ccb0563032ec32f7ceee1acfaec33de90ebe9b443f16612fb1017ee1d8c3cc4361701424d644aade9a357aa1357d6ed42aedeaa9fc39c581ba52c74bb4dc7a1f52e7d0298f15a1296ad07f99bcc7c689174eb25d5a9ce9b19ff08355203e3dc793453bfb2a550847d70f70664ff12062ec024f5f5e81f44397afd78b3cdb5792f59621bbd9df995a4a4b872432317d183f47cd0c9f2b0f8f9b9ad62a6c8c856148e12cdeb171be6789252695b427f648b73886255c3dda6e71670a3b0f956e87b08ed060314277103c556b126cd5082932dafca2668caa8bd26d0c2bc86f2d30a061dbeee0ba9218348fe13842ed87e6d731db85eaa706f144626235b0c025e0af87d667653b1f78e9156a2ed4c1bf67158b9fbacf59b92e5ea0e76292f84ef98c671448cb65f2a32658a6ee2c23aa4835ebf157e3915ffa8ec270a32c8a8ec53fe461e1403d78bf8b51dc27d3ae51aca2f0aaef62004510a0f3a69112921fee4df8b1fd3a520352813202ab148455b3100e85195c4cf93df595d0233c9e34e7c30e9d91d060b3839a0ce5beb4ccb7d4c47b41ff2286bca6dc474a5f5838224f079571ea08c5dd715845974d2628b19fedc0dd5b8a2114c13cae06ad5380a1dd76cc8fd6e84a3de9c7e81c84d3802235b4bbbd318185580a6a4df17454be36bfff4187333992231895cbf8ff471faaf0e13fc64c8d58606e262b7c0c756311e963412e5ed58412b52ecd7398189e387db2771a4bba1b8676bcce15f9d1a991e412d0fc165188e8aa49b7a16a75781fbb7ded9fd584bb0eb4e3808f880c9c34fc66254448b2b59d6d3ed359f55874a7da312fba8fa0aeae7c6f855d9a584fb62e6cf930ddcba4f813fecbc35554508b2eace94cf1039b71c4540023eb7ed0c7b73334335b6e072b9363604715909b626fc5bda899cb95f26de661489a8b2edc0abca4a4c114d3b017775bd0f7272ec1498dc9e2dc86f2876d71eb9ab78b53e044e519bc07b09268ebd0ad04469e73e39ddfb61bde58dc9dc5999f6349503b1317cbe67787111aefa245e17223b5c1d665f7bc5e166e3911cea37be6658bcc70f3e20e0e77be3bcff9935cc130347babd911e9767a9cbff2842c3908733d8725f90c82d75b8e212bb2dc27d082dee9d2d4cf0f8362930c04cb1755e369c992b8b02d59dc709016c34334c4c8c27594830c3e41bb2eefb9b6d1cf91091ab57e65476207971fbac0178791d9a4225c17a6cbba0cb3f02774c356b4e62e564da35a0795b1221857063ea81d0aee500f19190d93248c16ecbdf1aa55e41373901f609244279ef8d744557dcfb2992c48ecdb7f0b578416c169e4511b2decf399471d0f424fb71d2e9a4508af7496bf4bd10700436a331854a9c06e81b0c040d4d35bb69c7d57ec4f0c6027c27f5e2816180fe7931de59a0dcdb1bbe99040ca6bd810edfb79a656dc3bba7a044ac90c8e3d6c5eb4cf599898d30cfc979a0a14b0d6592295a1b05ec4ca99ba6c38bddc035fbcdaa4b9c458d0e63b95f0ddac25410599c2164632bcf4c614aa8700552a89749399efe39659d90084f97eb0d13e35978de65d6c9080b2f26ed5af332911a8fdfc27be8c53413b3136d455b7d385dbfdfbb9aca6131579002f1d0e6650a3ce5d6ed7f52596a6c365cb2238ac82faec34058f22e77d4edc7a1b308dafd96bf837f991c20eb74fa775b0c4f32d5cf16c0f0b38783c255fbbc97de32cee7341542465b9f88f30baa8a06e9918c350059003883a4476c5911f803d33cec8c660ec4743116445172382417a46991b19d956e222bc9c47eefa6dbde52907ca9777f92d119ea7ee462d4963a93c55af0244607e72417870d70a2b01ceed99abe0a898a46438d8b180093b52802349df821e07267788c11c30d573b0887187630151f7277b918e646ca0f61694b8266d65d0e6fa7885a7fe5b5495a8fa18563fe105b9d170afcfc3d72d40a5868b1ea7a65698dee6f8aa95d7d17266f4130c263aa26faed2cab92018b6118dcb3662e1d02a46871d8c21c1a626cd96a8ffe6f17f089f6f4043d0ee065cf8835beac186ca9eea5d8f6ba9691e620fbf0d529ea75fb90912cab5352c2c4cd48f1032d95b34c0e4ae3bfb6b1aa797c0e7587ba407136f1eb9112b6ed09da25f113a9317d23c56804ce99748f33dfe67e7bf4a09223762b622612e04106eb054521f0056f4ce20bf163c63ee6efb74b78e7c48a0ec5e4e15777ec5abab892bb3fb60409e69ecb58bf45b00b630addf059b8a52a298079826070e1a96a6b64ea3257c7211c83d6d3a0815770b24cb48eca0809902ef79f41e43592d450186f437a29591b25054a1ec12f406417022abf7da5fe2c3dc73b9b655b99ba27efeb8c7adfce4f0a85b7bb80960f910fbdd1d8c26384236b80c59aeda10fd7fc82b8f27428017b0b83fa4a01d55ada0616ec95f6768fb1dfa98738ce6754de7fcaa59a34693530a723d2ba704dc676b5831a55cf39c2e9939ff032e4376212101b17afd8c09812826f20fa324383402dc1f6a2c7a41b842e14e349e79eebb95f032e56428acb2775613a361c15ad95a39601a79d2454beeca36125514c024e31f19a4252627850c00f1ee41ada1c34c614ca8abf12f3f1954cad90ccf15bf45cd6420108fe2136dbc715e8a48c3aa627591240c885e844ca930369a5ba6bd55514214ac85ecd6480533da628084d19e2c0bb205f6903f4d92f8fd46504bdcc7c1896dfe780da9c255ea8ad02dde7ab7e3447279502f7457f20a5293239aff5d7", 0x1000}, {&(0x7f0000001800)="410ee5ebfac98f354175fc8fbdb1cb128216ae657a1cde98610bd1571879eaf6ed5f277a2c441314273df2fe3bfde2cb0a75", 0x32}], 0x6, &(0x7f00000018c0)=[{0xf8, 0x1, 0x5, "323182a0f107954358a3bdfa7f2d7288f01968bf072973f817ee3780922193917fd8855133f0d7038822dd58814b4624294718b4b69c70f2cc63c769005867634a99a051e97139b1ac081003b4f9ab6ea9b7da1cb9c2f6010a762d91093da13abb9e684471155bb5b15e6565eb283bbdc07dfc9eb45a52f3770eb76c7bac125f5861b88a5790ad9ef4cc6bf851c50c6099318ce8dc2a6435941e156308d2747cfbd66472e992a5874e1a150f21d65908ef988daa041c9fe1091ee4865116e21e797e5d2314c956f346aa8aa961428b68973a4b9e13e2990a736bd44a4ca72cf5453cdc31d4"}, {0x78, 0x10f, 0x1000, "9cec8c644267e0786fc1f819ee26895daad9c5a47e4b0cca64b72e08164819a795b6a60c71cc2f31fab294f701e665fc191be4cb8a23bdf9ec491187a80d2888f5673730dd7710d1f076bbd84bf0e158937d485bd96f2b6219293e1f8473bd33845b8ae589626b96"}, {0x60, 0x103, 0x5, "ec9f28e3f1344dfa6dbeca34440160b9ed7285f8a59c4f491fc4ef5692004b4823131695880f8dbc4c1012adbafc7cb57777fbf2d2f041cfba2a43604fb2fcaadda9ec4949506f3a492a1c9cff3b0e"}, {0x70, 0x118, 0xf94a, "11edb9c486cc31878695588aaeab2922e7ff67a1eda7ccbf98001660ff7663d630f508af1e67203f337cb8ee2c0d634c54af3fd00b03fa999fa4856eec01ef2220e87688b2c3ea14e355566c764e354d1f5fa21e44c424753f0413"}, {0x10, 0x117, 0x4}], 0x250}, 0x20000044) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001d80)={r1, &(0x7f0000001b80)="8b380ee374f7d52ebbebce2d76dcac243cd3ff1282b56069a5eeb5244d917acdbb0e54dee95086580074af2956151321fadf6bce8c8f515cb31c87b1ecdd4a8981c87aa8ca6a0a1380da18ffffc0840862ebd7f7bda57875f8539cce9fe9b1ad9eda014483b3d5b209068c1963a0a0ed53bf7d004386cb57589da4523b6b64ebf195b9a46132a8b4d9d80d8c6e1ed8bfa9963d02d336c10a8184a08abf329a46c18c04f968250cd6fd08bddee5d9839cb55d49dfc0c0a1895e23b9212963b18b48b3b4b4a644460adfbaad937ba451a5f332c7dca883596cafcc7c83b6e89bb76a20c9ad74ef924a7bb5a7558f8439e174", &(0x7f0000001c80)=""/241}, 0x20) ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000001dc0)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001e00), 0x10100, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001e40)='ns/mnt\x00') ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001e80)={'vxcan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001ec0), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002140)={0x18, 0x17, &(0x7f0000001f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5, 0xe, 0x8, 0x2, 0xfff}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x3, 0x71, &(0x7f0000002000)=""/113, 0x21780, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002080)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000020c0)=[r1], &(0x7f0000002100)=[{0x1, 0x4, 0xc}, {0x0, 0x1, 0xf, 0x7}, {0x1, 0x4, 0xf, 0xa}, {0x5, 0x4, 0xa, 0x7c16b56a4cc494e2}], 0x10, 0x7}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002200)={r6, r3, 0x4, r7}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002340)={@fallback=r3, 0x0, 0x0, 0x6, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000022c0)=[0x0], &(0x7f0000002300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r7, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000002400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000002480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000024c0), &(0x7f0000002500), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000002540)}}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000029c0)={0x11, 0x20, &(0x7f00000026c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xea, 0x8, 0x1, 0x2, 0xece}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @generic={0x1, 0x6, 0x8, 0xa82f, 0x4}, @exit, @alu={0x7, 0x1, 0x7, 0x7, 0x4, 0x80, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000027c0)='GPL\x00', 0x6, 0xd4, &(0x7f0000002800)=""/212, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002900)={0x4, 0xf, 0xe}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002940)=[0x1, r1, r1, r1, r1, r1], &(0x7f0000002980)=[{0x1, 0x3, 0xb, 0x5}, {0x2, 0x4, 0x0, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002380)={@ifindex=r10, r3, 0x2b, 0x10, 0x0, @void, @value=r11, @void, @void, r9}, 0x20) write$cgroup_pid(r8, &(0x7f0000002a80), 0x12) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002ac0)={0x0, r5}, 0x8) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002d00)={r12, &(0x7f0000002b00)="06b5370a5e3b6b86f68d576120fa87bcff06e362f97c84aef853fb43a8bad17ddff8cd00a0651e97503d2b6c868acff65543136ed8d96b9433c16cd6c006b60940831ad381bc4c1ef35ca07ce6d522289f499908f9140cee163ac012c0228582ab6676615c39110132c84fe8a34c09b0f8059d08d804359d483167a5e425264ca008c3f7f0a20885e185c17f16fcda75abc654002e616becc0f8b5f354943b06d6ca9ffcba8e0488cfc8875bf5d7867218e673bc707827ff491643366333539ea8", &(0x7f0000002c00)=""/241, 0x4}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000002d40)={r4, r7}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002d80)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002dc0)=r13, 0x4) socketpair(0x27, 0xa, 0x2, &(0x7f0000002e00)) recvmsg$kcm(r8, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000002e40)=""/198, 0xc6}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/164, 0xa4}, {&(0x7f0000004000)=""/14, 0xe}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/23, 0x17}, {&(0x7f0000005080)=""/44, 0x2c}, {&(0x7f00000050c0)=""/105, 0x69}], 0x8, &(0x7f00000051c0)=""/1, 0x1}, 0x76c67eb58a673ef4) 912.438577ms ago: executing program 1 (id=5701): perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0xffffffffffffff91) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000340)={0x2, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r4, r2, 0x0, r1}, 0x10) 879.48986ms ago: executing program 2 (id=5702): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x7, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x85ffffff}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x92, &(0x7f0000000280)=""/146}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 676.27571ms ago: executing program 3 (id=5703): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8000) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fc", 0x1}], 0x1}, 0x20040d4) r4 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000540)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x38}, 0x4000010) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="f6", 0x1}], 0x1}, 0x4004045) close(r3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}, {0x0}], 0x2}, 0x0) 662.055432ms ago: executing program 2 (id=5704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x9, 0x3b, 0xfffff028}, {0x16, 0x5, 0x6, 0xfffffffd}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="bf160000000000007962a80000000000150204000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000006c000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x56e781f6977340c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 507.876488ms ago: executing program 1 (id=5705): socket$kcm(0x21, 0x2, 0x2) (async) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x101}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1ff, 0x101}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x4, &(0x7f0000000e00)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x96}]}, &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x4, &(0x7f0000000e00)=@framed={{}, [@generic={0x71, 0x0, 0x1, 0x96}]}, &(0x7f0000000e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x10, &(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000100001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000100001301000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001200), 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x880) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000740)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f01", 0x24}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x6, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r4, &(0x7f0000000a40)={0x0, 0x11, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000b00)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000900)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000900)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r6}, 0x18) 273.000392ms ago: executing program 2 (id=5706): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000540), 0x10}, 0x94) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="183829000065000000000100000001000000f22ba21ea184e207850f8758357a5cfa70f34fddb607da0549c38efa5faab6568a3679319ae761512abc0a5a9976b05355fc71bc48851b99e7c30a71e8b72d8169f887e287364f9f056ff63e1b59d2f563d42e90199147ba87c8ba273ebfe6677339ac4d52dea682437d96d836688dbae57fa579684ef936ff248dd1f97421fa27693d740930325d042d9dd97d26fedfaf1aea9443e78748be9e559b293c69441fad85eabbeb160a4a00a2b1fd8dee2ed019", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x20040840}, 0x810) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x44000) 271.550852ms ago: executing program 3 (id=5707): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 170.728702ms ago: executing program 4 (id=5708): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001103000000000000000000000000000004000300000000000001000004001e00000000000002000000000000000000002e"], 0x0, 0x51}, 0x20) (async) r1 = perf_event_open(&(0x7f0000001dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x0, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000001e40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r3 = socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x2c, 0x3, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001f40)="5c00000014006b030231a6080c000af32c00009d31fc0000f800250f02000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000022c0)=ANY=[@ANYBLOB="fd6a26ac62507e089f252d633e0b62e2daa66bc76f56019f8e5ce917fdf673747276fa2f2c2ff04a965bc47888ace2af7aaf3d1506d0acc2063ce5d73dd6483fe410ddd488", @ANYRESDEC=r4, @ANYRES64=r1, @ANYRESOCT=r3, @ANYRES8=r3, @ANYRESDEC=r2, @ANYRESOCT=r2], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000002000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10d113, 0xac5d, 0xfffffffe, 0x0, 0x2, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x5, 0x0, 0x0, &(0x7f0000002140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002180)={'ip6_vti0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f00000021c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000002200)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000000000000000020000000000000000000000002550675d092c96ec47a57690b6f8a1c59c212b73b5480381945530ece87101869c7838d7eaf53b25207e23bcd2a6637ca8691fe0e56a5772aa62c5031366174c67a0969d093f8875f800"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079192000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, r0, 0x8, &(0x7f0000000640), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r8, 0x0, 0xac, 0x1000, &(0x7f0000000ac0)="ddfcf6a340a2328ff8be2614e1c4777b7c9447bc97658e79c0fd598349aadc71c3a60ebd381f1a82f59eb28f5e9da0a1fc7da80b6a78daa215ca972c8fe7dd2e867dfd5437fc73cb7f78ef0fab06015fb68a8cdb8a1b795326a73983b0b70ac1b6df5ec64a0f7d53e67db14cb5d449fddf94988f7dd34abe4de0fa52daa227735d68020d65546bc8f302337b120549b5873eab38acbb01a31fb191e988a2ca8f320b7f4bde46ee43401c8cbd", &(0x7f0000000b80)=""/4096, 0x81, 0x0, 0xd7, 0xae, &(0x7f0000001b80)="6d4b6079f5cfa3bf2bf0b395b568cbc40d5e7d4c36e1fed1d51bb2e9b7d9fe34ac53eb0c44bd55955fb05b459fdfb7723edbef56648ba9be5dd97bfa24c9e8ad00b4bb0fca92839a0a47f931c09a8f3f15bb916f30564c20aabe7d096d3f480fe8fc292ef4dc8b28e0060ebac50df822ae28601a745eca7ba4612a881cbde8f575f1a14944041b1a16d404fbed4be4b10144335c7f4e984e643b87d4c7cb8117b65ae8c122122dd99d6312af4f054b8285817cde0e8db5412b28484c825d8b376de8c688afc6608c848a82cfcbd47aec617436b544fdec", &(0x7f0000001c80)="4998e1646c708235da8877d82160695db00aa72afd149923b3c49ea7680086a30c622d0fdf85611962771da3b70871b00ba2adf5f3e321a8852e82350769ce3d152099ecf6e2387075aae52d2dd68a0d14d7035ad26fc671ad2c59f6a45c6aab35435c5bf8c973f27916b5a8496a7674076b7c3131dacce9493cbe22aeb5b732baed35da81fe6ccac61574a29c5b47467556f115ea08d86c43ef8d1a1affe1d066f1f550c760f580d84a9e808737", 0x4, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0xe2, 0x60, &(0x7f00000000c0)="c38f0d755c676ecab87a70f34ed0fb1e2addebd1d0fd087ed823a4b2c069b9f1bc6d7989b9f3c2496909394529702f8753bbbe06328c7f49d905d3eb145cdb404e1f2d77a9fc413fa74d8f8841aa56c7093d05064af14950d84fe645f7b18bdafc716a86803d4b33977b0c2835828edc7b985e4e22ab0a1ef75054c0c779b96ebc2b5d9c6acf8ad25bfa24de909fe1d307c88a40f5c6228f266b7ab538892786e0d232c733f79aafe7b3993fa98f8822fbfe4cdc66f7ba08c6a16d4b49d88dc6f55098aab84f7135bfe2b7a6628971aab841bc1856cd652efbb83f938619eadfa47a", &(0x7f00000001c0)=""/96, 0x69, 0x0, 0xae, 0x7e, &(0x7f0000000240)="f186ee9321e1a4ab4ab2b8435cd1c16b572c84e20d6c881e81d3784e1cf9687320a2f80d8a985d4885218ce23a167ea173345fc376ad79e65479ae143fe5864e7641f8badc12d869b733919ebc43ca004b975ac5f53d53a10823ebd31bc2095eb3f720a2b9b219dab061cf3577dbeb8324b176365970fa44ef7c8caae531f618d8dccb82b448b8c035fcf8e27790b885feeb3532cdd912f27dfd79d51bd8fbfb0ea49e6869b3321e79014a99efde", &(0x7f0000000300)="5ac1dd1b7de0352dfe9742996b7e8fcae4b8245ed189b483d127c8988b69376abdc125016374d7bcdc3c058572d1a59aea653d2c5cc9c2c3afcbb4c7b3759e3b24255e1cf43a5452dbd1bfc8753c877bf433174481d1a833302078dd0dbd19fdfaf5346c3cfe3856d87f14d6cf1788d0ca24a6ecebb7316733893f2462af", 0x5, 0x0, 0x865e}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1f, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000ffff001b0000009500"/31], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r7, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@volatile, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x6}}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc}, {0x0, 0x3}, {0xb, 0x2}, {0x4, 0x3}]}, @func={0x7, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xc4a}}]}, {0x0, [0x5f, 0x5f]}}, &(0x7f0000000880)=""/45, 0xa8, 0x2d, 0x1, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r9, 0x752, '\x00', r10, r11, 0x3, 0x1, 0x5}, 0x50) 116.768178ms ago: executing program 0 (id=5709): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x0, 0x36, 0x0, &(0x7f0000000bc0)="52540012345652540012345786dd6000000000003b4000000000000000000000000000000001fff50000000000000000000001000001", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f00000000c0)="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", 0x407}], 0x2}, 0x10049014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000540)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000a80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000580)={r2, r0}) 20.924948ms ago: executing program 1 (id=5710): socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ad, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)}, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={0x0, 0x0, 0x43}, 0x28) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, 0x0, &(0x7f0000000d00)='GPL\x00'}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x3, &(0x7f0000000f40)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a8"], &(0x7f0000000f80)='syzkaller\x00'}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001040)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r1, 0x0, 0x0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x18000) (async) r4 = socket$kcm(0x10, 0x2, 0x4) close(r3) (async) sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc008001900030002000600090000800000005883c64d251e638294ff0051f60a84c9f4d4938037e7000000000000000000d1c566a000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x98010) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, 0x0, 0x0) 0s ago: executing program 2 (id=5711): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x9, &(0x7f0000000c40)=r0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0xc46, 0x5, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44080) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000001b00)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0, 0x4}, 0x800}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x3, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000001a00)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a40)={r3, 0x5, 0x12, 0x0, &(0x7f0000001ac0)="7993ff011900000000a63b00008f20e94d07", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001480)=r5, 0x4) sendmsg$inet(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)="5c00000010006bcc9e3be3206e17aa31076b876c1d0000007ea60864160af36504001a00040002000c0002009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb9864f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x900000000000000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001180)={r6, 0x0, &(0x7f0000001240)=""/236}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001440)={r2, r6}, 0xc) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x30, 0x7, 0x8, 0x4, 0x0, 0x80, 0x0, 0x0, 0xba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000007112107a000000007200000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002b80)=@o_path={&(0x7f0000001b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, 0x4000, r7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) kernel console output (not intermixed with test programs): 0 [ 783.416258][T21870] ? ieee80211_register_hw+0xf01/0x3b00 [ 783.421826][T21870] ? ieee80211_tasklet_handler+0x20/0x20 [ 783.427470][T21870] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 783.433382][T21870] ? __debug_object_init+0xed/0x440 [ 783.438596][T21870] ? memset+0x1e/0x40 [ 783.442592][T21870] ? __hrtimer_init+0x189/0x270 [ 783.451026][T21870] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 783.456782][T21870] ? memcpy+0x3c/0x60 [ 783.460783][T21870] hwsim_new_radio_nl+0xab7/0xc90 [ 783.465854][T21870] genl_family_rcv_msg_doit+0x22f/0x350 [ 783.471434][T21870] ? end_current_label_crit_section+0x170/0x170 [ 783.477711][T21870] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 783.483631][T21870] ? bpf_lsm_capable+0x5/0x10 [ 783.488322][T21870] ? security_capable+0x85/0xb0 [ 783.493202][T21870] genl_rcv_msg+0x601/0x790 [ 783.497762][T21870] ? genl_bind+0x360/0x360 [ 783.502189][T21870] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 783.508546][T21870] netlink_rcv_skb+0x1ef/0x440 [ 783.513329][T21870] ? genl_bind+0x360/0x360 [ 783.517754][T21870] ? netlink_ack+0x1160/0x1160 [ 783.522538][T21870] ? down_read+0x1a8/0x2d0 [ 783.526965][T21870] genl_rcv+0x24/0x40 [ 783.530952][T21870] netlink_unicast+0x7ad/0x920 [ 783.535739][T21870] netlink_sendmsg+0x8ad/0xbd0 [ 783.540523][T21870] ? netlink_getsockopt+0x550/0x550 [ 783.545733][T21870] ? apparmor_socket_sendmsg+0x8a/0x330 [ 783.551296][T21870] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 783.556595][T21870] ? security_socket_sendmsg+0x7c/0xa0 [ 783.562066][T21870] ? netlink_getsockopt+0x550/0x550 [ 783.567277][T21870] ____sys_sendmsg+0x5ed/0x9a0 [ 783.572067][T21870] ? __sys_sendmsg_sock+0x30/0x30 [ 783.577109][T21870] ? __import_iovec+0x306/0x510 [ 783.581985][T21870] ? import_iovec+0x6f/0xa0 [ 783.586502][T21870] ___sys_sendmsg+0x2a2/0x360 [ 783.591196][T21870] ? __sys_sendmsg+0x2a0/0x2a0 [ 783.596008][T21870] ? ktime_get+0x7b/0x270 [ 783.600373][T21870] __se_sys_sendmsg+0x1c3/0x2b0 [ 783.605245][T21870] ? __x64_sys_sendmsg+0x80/0x80 [ 783.610209][T21870] ? lockdep_hardirqs_on+0x94/0x140 [ 783.615429][T21870] do_syscall_64+0x4c/0xa0 [ 783.619851][T21870] ? clear_bhb_loop+0x60/0xb0 [ 783.624530][T21870] ? clear_bhb_loop+0x60/0xb0 [ 783.629218][T21870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.635125][T21870] RIP: 0033:0x7f257b99f559 [ 783.639546][T21870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.659158][T21870] RSP: 002b:00007f257c89f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.667596][T21870] RAX: ffffffffffffffda RBX: 00007f257bc25fa0 RCX: 00007f257b99f559 [ 783.675581][T21870] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 783.683564][T21870] RBP: 00007f257ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 783.691558][T21870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.699536][T21870] R13: 00007f257bc26038 R14: 00007f257bc25fa0 R15: 00007ffd8a4ed7b8 [ 783.707530][T21870] [ 783.723561][T21879] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4051'. [ 783.746686][T21873] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4049'. [ 784.861537][T21915] netlink: 'syz.0.4059': attribute type 10 has an invalid length. [ 784.919677][T21915] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4059'. [ 784.991774][T21913] netlink: 'syz.0.4059': attribute type 10 has an invalid length. [ 786.541575][T21998] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4075'. [ 786.550931][T21998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.828179][T22013] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4078'. [ 786.915923][T22013] bond0: (slave bond_slave_0): Releasing backup interface [ 786.963095][T22013] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 787.324808][T22023] device wlan1 entered promiscuous mode [ 787.353693][T22023] bridge0: port 3(team0) entered blocking state [ 787.360135][T22023] bridge0: port 3(team0) entered forwarding state [ 787.366898][T22023] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.374111][T22023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.381610][T22023] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.388858][T22023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.481474][T22023] device bridge0 entered promiscuous mode [ 787.506943][T22042] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.4082'. [ 787.532279][T22023] netlink: 'syz.2.4081': attribute type 3 has an invalid length. [ 787.554079][T22023] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4081'. [ 788.095254][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 788.386042][T22082] netlink: 'syz.1.4090': attribute type 10 has an invalid length. [ 788.429865][T22088] netlink: 'syz.2.4091': attribute type 11 has an invalid length. [ 788.449700][T22088] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4091'. [ 788.530624][T22087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 788.628016][T22091] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 788.676215][T22095] netlink: 'syz.1.4092': attribute type 10 has an invalid length. [ 788.938185][T22102] netlink: 'syz.1.4094': attribute type 12 has an invalid length. [ 788.965562][T22102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4094'. [ 789.005818][T22108] device wlan1 entered promiscuous mode [ 789.049642][T22108] device bridge0 entered promiscuous mode [ 789.130100][T22108] netlink: 'syz.0.4096': attribute type 3 has an invalid length. [ 789.145702][T22108] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4096'. [ 789.330958][T22123] netlink: 'syz.3.4100': attribute type 10 has an invalid length. [ 789.365403][T22123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4100'. [ 789.380887][T22126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4100'. [ 789.396994][T22123] bridge0: port 3(veth0_vlan) entered blocking state [ 789.421914][T22123] bridge0: port 3(veth0_vlan) entered disabled state [ 789.489259][T22123] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 789.577585][T22126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4100'. [ 790.978476][ T8232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 791.121864][T22170] netlink: 'syz.1.4112': attribute type 3 has an invalid length. [ 791.612404][T22178] rxe_eth0 speed is unknown, defaulting to 1000 [ 792.415801][T22204] sctp: [Deprecated]: syz.3.4120 (pid 22204) Use of int in maxseg socket option. [ 792.415801][T22204] Use struct sctp_assoc_value instead [ 792.491121][T22187] rxe_eth0 speed is unknown, defaulting to 1000 [ 793.131229][T22223] netlink: 'syz.0.4127': attribute type 10 has an invalid length. [ 793.299693][T22223] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.327437][T22223] device bridge_slave_1 left promiscuous mode [ 793.344495][T22223] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.498760][T22238] __nla_validate_parse: 4 callbacks suppressed [ 793.498794][T22238] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4129'. [ 793.534306][T22238] device hsr_slave_0 left promiscuous mode [ 793.750665][T22240] netlink: 'syz.1.4131': attribute type 3 has an invalid length. [ 793.787378][T22234] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4131'. [ 793.812607][T22240] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4131'. [ 794.323660][T22280] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4136'. [ 794.348342][T22280] device hsr_slave_0 left promiscuous mode [ 794.365602][T22280] device hsr_slave_1 left promiscuous mode [ 794.486719][T22279] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4137'. [ 795.019974][T22304] netlink: 'syz.4.4142': attribute type 10 has an invalid length. [ 795.282197][T22314] netlink: 'syz.0.4144': attribute type 29 has an invalid length. [ 795.302728][T22314] netlink: 'syz.0.4144': attribute type 29 has an invalid length. [ 795.394166][T22323] netlink: 'syz.0.4144': attribute type 29 has an invalid length. [ 795.449545][T22322] device sit0 entered promiscuous mode [ 795.676811][T22323] netlink: 'syz.0.4144': attribute type 29 has an invalid length. [ 795.845654][T22333] delete_channel: no stack [ 795.933028][T22340] netlink: 10523 bytes leftover after parsing attributes in process `syz.3.4152'. [ 798.899215][T22351] device syzkaller0 entered promiscuous mode [ 799.061180][T22363] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4157'. [ 800.638820][T22373] netlink: 'syz.4.4156': attribute type 39 has an invalid length. [ 800.738222][T22379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4162'. [ 800.748002][T22379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4162'. [ 800.776408][T22379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4162'. [ 800.818776][T22385] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4162'. [ 800.844373][T22389] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4162'. [ 801.346932][T22392] device syzkaller0 entered promiscuous mode [ 802.243959][T22405] netlink: 10523 bytes leftover after parsing attributes in process `syz.4.4167'. [ 804.015761][T22415] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4170'. [ 804.024979][T22419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4171'. [ 804.025667][T22418] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 804.039699][T22427] netlink: 'syz.2.4172': attribute type 10 has an invalid length. [ 804.063922][T22418] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 804.076664][T22427] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.083597][T22418] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 804.107660][T22427] device bridge_slave_1 left promiscuous mode [ 804.122357][T22427] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.151151][T22427] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 804.395971][T22444] netlink: 'syz.0.4175': attribute type 39 has an invalid length. [ 805.051321][T22467] netlink: 10523 bytes leftover after parsing attributes in process `syz.0.4182'. [ 808.588325][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.594757][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.846396][T22500] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4191'. [ 812.012576][T22522] netlink: 'syz.1.4196': attribute type 3 has an invalid length. [ 812.035266][T22522] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4196'. [ 812.116101][T22523] netlink: 'syz.2.4194': attribute type 39 has an invalid length. [ 812.149338][T22525] netlink: 'syz.3.4197': attribute type 39 has an invalid length. [ 813.793945][T22537] netlink: 10523 bytes leftover after parsing attributes in process `syz.1.4198'. [ 814.017538][T22563] netlink: 'syz.4.4205': attribute type 10 has an invalid length. [ 814.034635][T22563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4205'. [ 814.061454][T22563] bridge0: port 3(veth0_vlan) entered blocking state [ 814.075532][T22563] bridge0: port 3(veth0_vlan) entered disabled state [ 814.103293][T22563] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 814.143621][T22569] netlink: 'syz.1.4209': attribute type 9 has an invalid length. [ 814.163944][T22569] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4209'. [ 814.462930][T22571] rxe_eth0 speed is unknown, defaulting to 1000 [ 814.631616][T22586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4214'. [ 815.450583][T22614] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4220'. [ 816.471475][T22642] : port 1(ip6gretap0) entered blocking state [ 816.529110][T22642] : port 1(ip6gretap0) entered disabled state [ 816.568957][T22642] device ip6gretap0 entered promiscuous mode [ 816.608251][T22648] device ip6gretap0 left promiscuous mode [ 816.629386][T22648] : port 1(ip6gretap0) entered disabled state [ 817.098173][T22665] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4231'. [ 817.433305][T22681] netlink: 'syz.0.4236': attribute type 21 has an invalid length. [ 817.482405][T22681] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4236'. [ 818.187274][T22711] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.4244'. [ 818.229097][T22711] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.4244'. [ 818.279474][T22711] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.4244'. [ 818.676467][T22738] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.4251'. [ 819.005504][T22744] netlink: 'syz.3.4254': attribute type 2 has an invalid length. [ 819.021252][T22744] netlink: 'syz.3.4254': attribute type 1 has an invalid length. [ 819.066603][T22744] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.4254'. [ 820.217417][T22793] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4266'. [ 820.334892][T22796] netlink: 'syz.1.4266': attribute type 10 has an invalid length. [ 820.352901][T22795] netlink: 'syz.4.4267': attribute type 3 has an invalid length. [ 820.363578][T22796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4266'. [ 820.381866][T22795] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4267'. [ 821.048782][T22812] netlink: 'syz.4.4272': attribute type 46 has an invalid length. [ 821.365232][T22825] syz.1.4274[22825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.365347][T22825] syz.1.4274[22825] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 821.612438][T22825] netlink: 'syz.1.4274': attribute type 29 has an invalid length. [ 821.678374][T22825] netlink: 'syz.1.4274': attribute type 29 has an invalid length. [ 821.698042][T22829] netlink: 'syz.1.4274': attribute type 29 has an invalid length. [ 821.834544][T22829] netlink: 'syz.1.4274': attribute type 29 has an invalid length. [ 822.271130][T22850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4281'. [ 822.331314][T22850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4281'. [ 822.425495][T22862] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4281'. [ 822.568623][T22867] netlink: 'syz.1.4284': attribute type 3 has an invalid length. [ 822.597195][T22867] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4284'. [ 823.815547][T22901] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4290'. [ 823.899897][T22909] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4290'. [ 823.938808][T22910] netlink: 'syz.2.4294': attribute type 27 has an invalid length. [ 823.981262][T22910] netlink: 'syz.2.4294': attribute type 25 has an invalid length. [ 824.063834][T22901] netlink: 'syz.3.4290': attribute type 21 has an invalid length. [ 824.085565][T22901] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4290'. [ 824.122474][T22908] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 824.132280][T22908] syzkaller1: linktype set to 773 [ 824.139095][T22919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4295'. [ 824.151431][T22918] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4296'. [ 824.197578][T22919] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4295'. [ 824.245810][T22918] netlink: 'syz.1.4296': attribute type 12 has an invalid length. [ 824.297305][T22920] device syzkaller0 entered promiscuous mode [ 824.442316][T22925] nr0: port 1(hsr0) entered blocking state [ 824.452061][T22925] nr0: port 1(hsr0) entered disabled state [ 824.474097][T22925] device hsr0 entered promiscuous mode [ 824.490040][T22927] rxe_eth0 speed is unknown, defaulting to 1000 [ 824.528954][T22925] nr0: port 1(hsr0) entered blocking state [ 824.534895][T22925] nr0: port 1(hsr0) entered forwarding state [ 824.793731][T22938] netlink: 'syz.2.4299': attribute type 3 has an invalid length. [ 825.146957][T22937] rxe_eth0 speed is unknown, defaulting to 1000 [ 826.773975][T22986] netlink: 'syz.2.4308': attribute type 10 has an invalid length. [ 827.233322][T22993] netlink: 'syz.1.4311': attribute type 10 has an invalid length. [ 827.284003][T22993] device hsr0 entered promiscuous mode [ 827.305318][T22997] netlink: 'syz.1.4311': attribute type 10 has an invalid length. [ 827.440429][T23003] netlink: 'syz.4.4312': attribute type 6 has an invalid length. [ 827.462581][T23003] __nla_validate_parse: 4 callbacks suppressed [ 827.462595][T23003] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4312'. [ 827.842140][T23015] netlink: 'syz.2.4315': attribute type 3 has an invalid length. [ 827.876656][T23015] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4315'. [ 827.909004][T23016] netlink: 'syz.4.4314': attribute type 3 has an invalid length. [ 827.983885][T23016] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4314'. [ 828.262663][T23028] netlink: 'syz.2.4318': attribute type 2 has an invalid length. [ 828.459454][T23028] device 0 entered promiscuous mode [ 828.810749][T23039] netlink: 'syz.0.4322': attribute type 29 has an invalid length. [ 828.819637][T23039] netlink: 'syz.0.4322': attribute type 16 has an invalid length. [ 828.828975][T23039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4322'. [ 828.885422][T23046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4323'. [ 828.968087][T23049] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4326'. [ 829.597870][T23069] netlink: 'syz.4.4329': attribute type 3 has an invalid length. [ 829.618727][T23069] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4329'. [ 829.803060][T23073] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 830.237348][T23081] netlink: 'syz.3.4336': attribute type 1 has an invalid length. [ 830.341483][T23088] netlink: 'syz.2.4337': attribute type 1 has an invalid length. [ 830.454101][T23094] netlink: 'syz.4.4338': attribute type 1 has an invalid length. [ 830.461889][T23094] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.4338'. [ 830.902345][T23099] rxe_eth0 speed is unknown, defaulting to 1000 [ 831.053656][T23101] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4341'. [ 831.549144][T23116] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4346'. [ 832.623807][T23161] __nla_validate_parse: 2 callbacks suppressed [ 832.656740][T23161] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4359'. [ 832.927399][T23177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4362'. [ 833.366247][T23196] validate_nla: 5 callbacks suppressed [ 833.366285][T23196] netlink: 'syz.1.4369': attribute type 10 has an invalid length. [ 833.700149][T23216] netlink: 'syz.3.4372': attribute type 3 has an invalid length. [ 833.718726][T23216] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4372'. [ 834.220759][T23239] netlink: 'syz.0.4381': attribute type 21 has an invalid length. [ 834.232518][T23239] netlink: 'syz.0.4381': attribute type 1 has an invalid length. [ 834.240990][T23239] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4381'. [ 834.560848][T23250] netlink: 'syz.2.4385': attribute type 13 has an invalid length. [ 834.582052][T23250] netlink: 'syz.2.4385': attribute type 14 has an invalid length. [ 834.594084][T23250] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4385'. [ 834.693468][T23261] netlink: 'syz.0.4390': attribute type 21 has an invalid length. [ 835.507125][T23283] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4395'. [ 835.556350][T23283] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 835.591871][T23283] CPU: 1 PID: 23283 Comm: syz.3.4395 Not tainted syzkaller #0 [ 835.599370][T23283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 835.609428][T23283] Call Trace: [ 835.612703][T23283] [ 835.615627][T23283] dump_stack_lvl+0x188/0x24e [ 835.620303][T23283] ? show_regs_print_info+0x12/0x12 [ 835.625493][T23283] ? load_image+0x410/0x410 [ 835.630001][T23283] sysfs_warn_dup+0x8a/0xa0 [ 835.634504][T23283] sysfs_do_create_link_sd+0xc0/0x110 [ 835.639871][T23283] device_add+0x83b/0x1050 [ 835.644289][T23283] wiphy_register+0x1d8b/0x2aa0 [ 835.649153][T23283] ? cfg80211_event_work+0x40/0x40 [ 835.654261][T23283] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 835.660418][T23283] ieee80211_register_hw+0x2e33/0x3b00 [ 835.665883][T23283] ? ieee80211_register_hw+0xf01/0x3b00 [ 835.671421][T23283] ? ieee80211_register_hw+0xf01/0x3b00 [ 835.676968][T23283] ? ieee80211_tasklet_handler+0x20/0x20 [ 835.682598][T23283] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 835.688494][T23283] ? __debug_object_init+0xed/0x440 [ 835.693691][T23283] ? memset+0x1e/0x40 [ 835.697662][T23283] ? __hrtimer_init+0x189/0x270 [ 835.702509][T23283] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 835.708234][T23283] hwsim_new_radio_nl+0xab7/0xc90 [ 835.713259][T23283] genl_family_rcv_msg_doit+0x22f/0x350 [ 835.718797][T23283] ? end_current_label_crit_section+0x170/0x170 [ 835.725041][T23283] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 835.730936][T23283] ? bpf_lsm_capable+0x5/0x10 [ 835.735608][T23283] ? security_capable+0x85/0xb0 [ 835.740456][T23283] genl_rcv_msg+0x601/0x790 [ 835.744953][T23283] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 835.750675][T23283] ? genl_bind+0x360/0x360 [ 835.755086][T23283] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 835.761417][T23283] netlink_rcv_skb+0x1ef/0x440 [ 835.766176][T23283] ? genl_bind+0x360/0x360 [ 835.770588][T23283] ? netlink_ack+0x1160/0x1160 [ 835.775359][T23283] ? down_read+0x1a8/0x2d0 [ 835.779776][T23283] genl_rcv+0x24/0x40 [ 835.783749][T23283] netlink_unicast+0x7ad/0x920 [ 835.788517][T23283] netlink_sendmsg+0x8ad/0xbd0 [ 835.793299][T23283] ? netlink_getsockopt+0x550/0x550 [ 835.798494][T23283] ? apparmor_socket_sendmsg+0x8a/0x330 [ 835.804040][T23283] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 835.809318][T23283] ? security_socket_sendmsg+0x7c/0xa0 [ 835.814770][T23283] ? netlink_getsockopt+0x550/0x550 [ 835.819965][T23283] ____sys_sendmsg+0x5ed/0x9a0 [ 835.824730][T23283] ? __sys_sendmsg_sock+0x30/0x30 [ 835.829747][T23283] ? __import_iovec+0x306/0x510 [ 835.834599][T23283] ? import_iovec+0x6f/0xa0 [ 835.839100][T23283] ___sys_sendmsg+0x2a2/0x360 [ 835.843781][T23283] ? __sys_sendmsg+0x2a0/0x2a0 [ 835.848572][T23283] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 835.854312][T23283] __se_sys_sendmsg+0x1c3/0x2b0 [ 835.859160][T23283] ? __x64_sys_sendmsg+0x80/0x80 [ 835.864105][T23283] ? syscall_enter_from_user_mode+0x2a/0x80 [ 835.869991][T23283] do_syscall_64+0x4c/0xa0 [ 835.874397][T23283] ? clear_bhb_loop+0x60/0xb0 [ 835.879067][T23283] ? clear_bhb_loop+0x60/0xb0 [ 835.883734][T23283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.889624][T23283] RIP: 0033:0x7f257b99f559 [ 835.894031][T23283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.913632][T23283] RSP: 002b:00007f257c89f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.922038][T23283] RAX: ffffffffffffffda RBX: 00007f257bc25fa0 RCX: 00007f257b99f559 [ 835.930005][T23283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 835.937971][T23283] RBP: 00007f257ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 835.945935][T23283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.953897][T23283] R13: 00007f257bc26038 R14: 00007f257bc25fa0 R15: 00007ffd8a4ed7b8 [ 835.961871][T23283] [ 836.084379][T23291] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.4397'. [ 836.202374][T23299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4399'. [ 836.291363][T23299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4399'. [ 836.321102][T23297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4399'. [ 836.517498][T23313] tun0: tun_chr_ioctl cmd 1074812118 [ 837.039915][T23338] netlink: 'syz.1.4411': attribute type 13 has an invalid length. [ 837.204422][T23346] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 837.301411][T23351] tipc: Started in network mode [ 837.306505][T23351] tipc: Node identity 9215a268, cluster identity 4711 [ 837.313413][T23351] tipc: Node number set to 2450891368 [ 838.045507][T23372] netlink: 'syz.4.4422': attribute type 17 has an invalid length. [ 838.062982][T23372] netlink: 'syz.4.4422': attribute type 16 has an invalid length. [ 838.086872][T23372] __nla_validate_parse: 3 callbacks suppressed [ 838.086955][T23372] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4422'. [ 838.193166][T23376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4423'. [ 838.616548][T23383] validate_nla: 2 callbacks suppressed [ 838.616566][T23383] netlink: 'syz.0.4426': attribute type 10 has an invalid length. [ 838.714741][T23383] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4426'. [ 838.829057][T23387] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4426'. [ 839.499258][T23381] device syzkaller0 entered promiscuous mode [ 839.552997][T23392] netlink: 'syz.1.4429': attribute type 7 has an invalid length. [ 839.907136][T23396] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.4430'. [ 840.026786][T23406] netlink: 'syz.1.4432': attribute type 29 has an invalid length. [ 841.901360][T23406] netlink: 'syz.1.4432': attribute type 29 has an invalid length. [ 841.909386][T23408] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4432'. [ 841.930478][T23396] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 841.968129][T23416] netlink: 'syz.4.4433': attribute type 21 has an invalid length. [ 841.994200][T23416] netlink: 'syz.4.4433': attribute type 20 has an invalid length. [ 842.009905][T23417] netlink: 'syz.4.4433': attribute type 21 has an invalid length. [ 842.020468][T23417] netlink: 'syz.4.4433': attribute type 20 has an invalid length. [ 842.493068][T23438] netlink: 'syz.3.4436': attribute type 17 has an invalid length. [ 842.537253][T23438] netlink: 'syz.3.4436': attribute type 16 has an invalid length. [ 842.574670][T23438] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4436'. [ 842.902290][T23442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4437'. [ 843.451639][T23459] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4442'. [ 843.514167][T23461] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4443'. [ 843.544146][T23462] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4443'. [ 843.772231][T23479] delete_channel: no stack [ 843.875857][T23486] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.4447'. [ 843.926699][T23486] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 844.127511][T23496] validate_nla: 2 callbacks suppressed [ 844.127583][T23496] netlink: 'syz.2.4450': attribute type 17 has an invalid length. [ 844.176077][T23496] netlink: 'syz.2.4450': attribute type 16 has an invalid length. [ 844.228663][T23496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4450'. [ 844.267370][T23498] device pim6reg1 entered promiscuous mode [ 845.658751][T23554] netlink: 'syz.0.4469': attribute type 10 has an invalid length. [ 845.734079][T23554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4469'. [ 846.052061][T23554] rxe_eth0 speed is unknown, defaulting to 1000 [ 846.300704][T23572] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4472'. [ 847.358818][T23596] netlink: 'syz.3.4481': attribute type 10 has an invalid length. [ 848.067036][T23617] netlink: 'syz.1.4485': attribute type 3 has an invalid length. [ 848.095490][T23617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4485'. [ 848.116000][T23619] netlink: 'syz.0.4486': attribute type 40 has an invalid length. [ 848.412587][T23638] netlink: 'syz.0.4488': attribute type 22 has an invalid length. [ 848.412800][T23639] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4490'. [ 848.439916][T23638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'. [ 848.462860][T23635] netlink: 'syz.0.4488': attribute type 22 has an invalid length. [ 848.483941][T23635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4488'. [ 848.510376][T23640] netlink: 'syz.3.4489': attribute type 2 has an invalid length. [ 848.535622][T23640] netlink: 'syz.3.4489': attribute type 8 has an invalid length. [ 848.562939][T23640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4489'. [ 848.690744][T23655] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4494'. [ 848.978869][T23664] tap0: tun_chr_ioctl cmd 1074025677 [ 848.985181][T23664] tap0: linktype set to 1 [ 849.403228][T23674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4501'. [ 849.443967][T23674] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4501'. [ 849.506512][T23681] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4503'. [ 849.551737][T23687] netlink: 'syz.0.4505': attribute type 2 has an invalid length. [ 849.674120][T23687] netlink: 'syz.0.4505': attribute type 1 has an invalid length. [ 849.692691][T23687] netlink: 'syz.0.4505': attribute type 8 has an invalid length. [ 849.731645][T23687] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4505'. [ 850.418085][T23720] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4512'. [ 850.607484][T23720] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4512'. [ 850.938960][T23737] netlink: 'syz.3.4517': attribute type 2 has an invalid length. [ 850.974065][T23737] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.4517'. [ 851.237759][T23747] netlink: 'syz.2.4521': attribute type 25 has an invalid length. [ 851.259547][T23747] netlink: 'syz.2.4521': attribute type 29 has an invalid length. [ 851.687472][T23765] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 851.771454][T23777] netlink: 'syz.2.4529': attribute type 1 has an invalid length. [ 852.085727][T23786] device bridge_slave_1 left promiscuous mode [ 852.092682][T23786] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.113416][T23786] device bridge_slave_0 left promiscuous mode [ 852.123340][T23786] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.638506][T23826] netlink: 'syz.0.4541': attribute type 2 has an invalid length. [ 855.652268][T23834] __nla_validate_parse: 6 callbacks suppressed [ 855.652301][T23834] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.4544'. [ 855.712119][T23834] netlink: 31 bytes leftover after parsing attributes in process `syz.1.4544'. [ 855.825332][T23826] device 0 entered promiscuous mode [ 855.838328][T23838] netlink: 'syz.4.4546': attribute type 7 has an invalid length. [ 855.867832][T23838] netlink: 'syz.4.4546': attribute type 30 has an invalid length. [ 856.389431][T23868] netlink: 'syz.1.4552': attribute type 3 has an invalid length. [ 856.433880][T23868] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4552'. [ 856.690793][T23888] netlink: 'syz.2.4558': attribute type 3 has an invalid length. [ 857.348480][T23892] netlink: 'syz.4.4559': attribute type 10 has an invalid length. [ 857.379204][T23892] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.423718][T23892] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.470235][T23892] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.480416][T23892] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.638185][T23915] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4565'. [ 857.687060][T23916] netlink: 'syz.0.4565': attribute type 3 has an invalid length. [ 857.737758][T23916] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4565'. [ 858.081761][T23946] netlink: 'syz.0.4573': attribute type 41 has an invalid length. [ 858.243654][T23957] tipc: Started in network mode [ 858.262796][T23957] tipc: Node identity 9215a268, cluster identity 4711 [ 858.278858][T23957] tipc: Node number set to 2450891368 [ 858.627245][T23973] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.4579'. [ 858.679004][T23973] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 858.695840][T23973] CPU: 1 PID: 23973 Comm: syz.2.4579 Not tainted syzkaller #0 [ 858.703349][T23973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 858.713421][T23973] Call Trace: [ 858.716713][T23973] [ 858.719653][T23973] dump_stack_lvl+0x188/0x24e [ 858.724345][T23973] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 858.730521][T23973] ? show_regs_print_info+0x12/0x12 [ 858.735741][T23973] ? load_image+0x410/0x410 [ 858.740277][T23973] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 858.746371][T23973] sysfs_warn_dup+0x8a/0xa0 [ 858.750901][T23973] sysfs_do_create_link_sd+0xc0/0x110 [ 858.756301][T23973] device_add+0x83b/0x1050 [ 858.760750][T23973] wiphy_register+0x1d8b/0x2aa0 [ 858.765647][T23973] ? cfg80211_event_work+0x40/0x40 [ 858.770778][T23973] ? minstrel_ht_alloc+0x894/0xa20 [ 858.775926][T23973] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 858.782012][T23973] ieee80211_register_hw+0x2e33/0x3b00 [ 858.787499][T23973] ? lock_chain_count+0x20/0x20 [ 858.792384][T23973] ? ieee80211_register_hw+0xf01/0x3b00 [ 858.797942][T23973] ? ieee80211_register_hw+0xf01/0x3b00 [ 858.803499][T23973] ? ieee80211_tasklet_handler+0x20/0x20 [ 858.809153][T23973] ? check_preemption_disabled+0x1/0x110 [ 858.814804][T23973] ? memset+0x1e/0x40 [ 858.818794][T23973] ? __hrtimer_init+0x189/0x270 [ 858.823663][T23973] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 858.829397][T23973] ? memcpy+0x3c/0x60 [ 858.833391][T23973] hwsim_new_radio_nl+0xab7/0xc90 [ 858.838429][T23973] genl_family_rcv_msg_doit+0x22f/0x350 [ 858.843986][T23973] ? end_current_label_crit_section+0x170/0x170 [ 858.850252][T23973] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 858.856146][T23973] ? lockdep_hardirqs_on+0x94/0x140 [ 858.861365][T23973] ? bpf_lsm_capable+0x5/0x10 [ 858.866063][T23973] ? security_capable+0x85/0xb0 [ 858.870934][T23973] genl_rcv_msg+0x601/0x790 [ 858.875453][T23973] ? genl_bind+0x360/0x360 [ 858.879873][T23973] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 858.886220][T23973] netlink_rcv_skb+0x1ef/0x440 [ 858.890997][T23973] ? genl_bind+0x360/0x360 [ 858.895421][T23973] ? netlink_ack+0x1160/0x1160 [ 858.900207][T23973] ? down_read+0x1a8/0x2d0 [ 858.904640][T23973] genl_rcv+0x24/0x40 [ 858.908622][T23973] netlink_unicast+0x7ad/0x920 [ 858.913395][T23973] netlink_sendmsg+0x8ad/0xbd0 [ 858.918179][T23973] ? netlink_getsockopt+0x550/0x550 [ 858.923401][T23973] ? apparmor_socket_sendmsg+0x8a/0x330 [ 858.928962][T23973] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 858.934259][T23973] ? security_socket_sendmsg+0x7c/0xa0 [ 858.939731][T23973] ? netlink_getsockopt+0x550/0x550 [ 858.944938][T23973] ____sys_sendmsg+0x5ed/0x9a0 [ 858.949716][T23973] ? __sys_sendmsg_sock+0x30/0x30 [ 858.954743][T23973] ? __import_iovec+0x306/0x510 [ 858.959618][T23973] ? import_iovec+0x6f/0xa0 [ 858.964141][T23973] ___sys_sendmsg+0x2a2/0x360 [ 858.968834][T23973] ? __sys_sendmsg+0x2a0/0x2a0 [ 858.973638][T23973] ? ktime_get+0x7b/0x270 [ 858.977996][T23973] __se_sys_sendmsg+0x1c3/0x2b0 [ 858.982864][T23973] ? __x64_sys_sendmsg+0x80/0x80 [ 858.987834][T23973] do_syscall_64+0x4c/0xa0 [ 858.992260][T23973] ? clear_bhb_loop+0x60/0xb0 [ 858.996944][T23973] ? clear_bhb_loop+0x60/0xb0 [ 859.001623][T23973] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.007530][T23973] RIP: 0033:0x7fd4ba59f559 [ 859.011942][T23973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.031558][T23973] RSP: 002b:00007fd4bb462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 859.039974][T23973] RAX: ffffffffffffffda RBX: 00007fd4ba826090 RCX: 00007fd4ba59f559 [ 859.047948][T23973] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 859.055917][T23973] RBP: 00007fd4ba636b20 R08: 0000000000000000 R09: 0000000000000000 [ 859.063890][T23973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.071859][T23973] R13: 00007fd4ba826128 R14: 00007fd4ba826090 R15: 00007ffc6b4b2048 [ 859.079847][T23973] [ 859.213795][T23977] netlink: 'syz.3.4580': attribute type 10 has an invalid length. [ 859.223728][T23977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4580'. [ 859.240487][T23977] device caif0 entered promiscuous mode [ 859.294770][T23977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.477600][T23992] netlink: 'syz.2.4584': attribute type 10 has an invalid length. [ 859.485949][T23992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.460214][T23992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.507045][T23992] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 862.524795][T24001] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4585'. [ 862.551052][T24002] netlink: 279 bytes leftover after parsing attributes in process `syz.3.4585'. [ 862.774905][T24017] netlink: 'syz.2.4589': attribute type 39 has an invalid length. [ 862.925858][T24023] netlink: 'syz.0.4591': attribute type 1 has an invalid length. [ 862.933129][T24026] netlink: 763 bytes leftover after parsing attributes in process `syz.4.4592'. [ 862.935727][T24023] netlink: 'syz.0.4591': attribute type 3 has an invalid length. [ 862.973415][T24023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4591'. [ 863.026362][T24027] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4593'. [ 863.529414][T24045] netlink: 'syz.4.4597': attribute type 11 has an invalid length. [ 863.550810][T24045] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4597'. [ 864.298664][T24044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.855383][T24091] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4609'. [ 868.047318][T24109] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.4611'. [ 868.125572][T24109] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 868.154014][T24109] CPU: 0 PID: 24109 Comm: syz.2.4611 Not tainted syzkaller #0 [ 868.161527][T24109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 868.171603][T24109] Call Trace: [ 868.174900][T24109] [ 868.177845][T24109] dump_stack_lvl+0x188/0x24e [ 868.182555][T24109] ? show_regs_print_info+0x12/0x12 [ 868.187776][T24109] ? load_image+0x410/0x410 [ 868.192320][T24109] sysfs_warn_dup+0x8a/0xa0 [ 868.196847][T24109] sysfs_do_create_link_sd+0xc0/0x110 [ 868.202246][T24109] device_add+0x83b/0x1050 [ 868.206701][T24109] wiphy_register+0x1d8b/0x2aa0 [ 868.211599][T24109] ? cfg80211_event_work+0x40/0x40 [ 868.216752][T24109] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 868.222848][T24109] ieee80211_register_hw+0x2e33/0x3b00 [ 868.228352][T24109] ? ieee80211_register_hw+0xf01/0x3b00 [ 868.233926][T24109] ? ieee80211_register_hw+0xf01/0x3b00 [ 868.239506][T24109] ? ieee80211_tasklet_handler+0x20/0x20 [ 868.245177][T24109] ? __hrtimer_init+0x167/0x270 [ 868.250040][T24109] ? __hrtimer_init+0x189/0x270 [ 868.254893][T24109] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 868.260615][T24109] ? memcpy+0x3c/0x60 [ 868.264597][T24109] hwsim_new_radio_nl+0xab7/0xc90 [ 868.269648][T24109] genl_family_rcv_msg_doit+0x22f/0x350 [ 868.275222][T24109] ? end_current_label_crit_section+0x170/0x170 [ 868.281471][T24109] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 868.287378][T24109] ? bpf_lsm_capable+0x5/0x10 [ 868.292063][T24109] ? security_capable+0x85/0xb0 [ 868.296922][T24109] genl_rcv_msg+0x601/0x790 [ 868.301429][T24109] ? genl_bind+0x360/0x360 [ 868.305847][T24109] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 868.312187][T24109] netlink_rcv_skb+0x1ef/0x440 [ 868.316967][T24109] ? genl_bind+0x360/0x360 [ 868.321390][T24109] ? netlink_ack+0x1160/0x1160 [ 868.326168][T24109] ? down_read+0x1a8/0x2d0 [ 868.330600][T24109] genl_rcv+0x24/0x40 [ 868.334582][T24109] netlink_unicast+0x7ad/0x920 [ 868.339363][T24109] netlink_sendmsg+0x8ad/0xbd0 [ 868.344138][T24109] ? netlink_getsockopt+0x550/0x550 [ 868.349348][T24109] ? apparmor_socket_sendmsg+0x8a/0x330 [ 868.354900][T24109] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 868.360176][T24109] ? security_socket_sendmsg+0x7c/0xa0 [ 868.365652][T24109] ? netlink_getsockopt+0x550/0x550 [ 868.370882][T24109] ____sys_sendmsg+0x5ed/0x9a0 [ 868.375667][T24109] ? __sys_sendmsg_sock+0x30/0x30 [ 868.380692][T24109] ? __import_iovec+0x306/0x510 [ 868.385560][T24109] ? import_iovec+0x6f/0xa0 [ 868.390068][T24109] ___sys_sendmsg+0x2a2/0x360 [ 868.394754][T24109] ? __sys_sendmsg+0x2a0/0x2a0 [ 868.399535][T24109] ? ktime_get+0x7b/0x270 [ 868.403882][T24109] __se_sys_sendmsg+0x1c3/0x2b0 [ 868.408737][T24109] ? perf_trace_preemptirq_template+0x268/0x320 [ 868.414977][T24109] ? __x64_sys_sendmsg+0x80/0x80 [ 868.419929][T24109] ? lockdep_hardirqs_on+0x94/0x140 [ 868.425140][T24109] do_syscall_64+0x4c/0xa0 [ 868.429550][T24109] ? clear_bhb_loop+0x60/0xb0 [ 868.434221][T24109] ? clear_bhb_loop+0x60/0xb0 [ 868.438915][T24109] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.444810][T24109] RIP: 0033:0x7fd4ba59f559 [ 868.449223][T24109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.468841][T24109] RSP: 002b:00007fd4bb462028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.477270][T24109] RAX: ffffffffffffffda RBX: 00007fd4ba826090 RCX: 00007fd4ba59f559 [ 868.485244][T24109] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 000000000000000c [ 868.493221][T24109] RBP: 00007fd4ba636b20 R08: 0000000000000000 R09: 0000000000000000 [ 868.501191][T24109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.509160][T24109] R13: 00007fd4ba826128 R14: 00007fd4ba826090 R15: 00007ffc6b4b2048 [ 868.517147][T24109] [ 868.814673][T24126] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4617'. [ 869.069764][T24138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4622'. [ 869.108420][T24138] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4622'. [ 869.165714][T24139] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4622'. [ 869.512107][T24153] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4629'. [ 869.559326][T24153] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4629'. [ 869.638764][T24157] : port 1(ip6gretap0) entered blocking state [ 869.660223][T24157] : port 1(ip6gretap0) entered disabled state [ 869.701769][T24157] device ip6gretap0 entered promiscuous mode [ 869.737914][T24161] device ip6gretap0 left promiscuous mode [ 869.754587][T24165] netlink: 122880 bytes leftover after parsing attributes in process `syz.4.4631'. [ 869.774542][T24161] : port 1(ip6gretap0) entered disabled state [ 869.794795][T24165] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 869.810381][T24165] CPU: 0 PID: 24165 Comm: syz.4.4631 Not tainted syzkaller #0 [ 869.817881][T24165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 869.827958][T24165] Call Trace: [ 869.831243][T24165] [ 869.834174][T24165] dump_stack_lvl+0x188/0x24e [ 869.838882][T24165] ? show_regs_print_info+0x12/0x12 [ 869.844108][T24165] ? load_image+0x410/0x410 [ 869.848652][T24165] sysfs_warn_dup+0x8a/0xa0 [ 869.853188][T24165] sysfs_do_create_link_sd+0xc0/0x110 [ 869.858594][T24165] device_add+0x83b/0x1050 [ 869.863054][T24165] wiphy_register+0x1d8b/0x2aa0 [ 869.867952][T24165] ? cfg80211_event_work+0x40/0x40 [ 869.873088][T24165] ? minstrel_ht_alloc+0x894/0xa20 [ 869.878237][T24165] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 869.884333][T24165] ieee80211_register_hw+0x2e33/0x3b00 [ 869.889837][T24165] ? ieee80211_register_hw+0xf01/0x3b00 [ 869.895414][T24165] ? ieee80211_register_hw+0xf01/0x3b00 [ 869.900999][T24165] ? ieee80211_tasklet_handler+0x20/0x20 [ 869.906675][T24165] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 869.912594][T24165] ? __debug_object_init+0xed/0x440 [ 869.917814][T24165] ? memset+0x1e/0x40 [ 869.921812][T24165] ? __hrtimer_init+0x189/0x270 [ 869.926673][T24165] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 869.932388][T24165] ? memcpy+0x3c/0x60 [ 869.936362][T24165] hwsim_new_radio_nl+0xab7/0xc90 [ 869.941386][T24165] genl_family_rcv_msg_doit+0x22f/0x350 [ 869.946925][T24165] ? end_current_label_crit_section+0x170/0x170 [ 869.953160][T24165] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 869.959058][T24165] ? bpf_lsm_capable+0x5/0x10 [ 869.963738][T24165] ? security_capable+0x85/0xb0 [ 869.968618][T24165] genl_rcv_msg+0x601/0x790 [ 869.973140][T24165] ? genl_bind+0x360/0x360 [ 869.977558][T24165] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 869.983898][T24165] netlink_rcv_skb+0x1ef/0x440 [ 869.988674][T24165] ? genl_bind+0x360/0x360 [ 869.993077][T24165] ? netlink_ack+0x1160/0x1160 [ 869.997837][T24165] ? down_read+0x1a8/0x2d0 [ 870.002243][T24165] genl_rcv+0x24/0x40 [ 870.006211][T24165] netlink_unicast+0x7ad/0x920 [ 870.010972][T24165] netlink_sendmsg+0x8ad/0xbd0 [ 870.015733][T24165] ? netlink_getsockopt+0x550/0x550 [ 870.020937][T24165] ? apparmor_socket_sendmsg+0x8a/0x330 [ 870.026507][T24165] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 870.028777][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.031791][T24165] ? security_socket_sendmsg+0x7c/0xa0 [ 870.043496][T24165] ? netlink_getsockopt+0x550/0x550 [ 870.044594][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.048701][T24165] ____sys_sendmsg+0x5ed/0x9a0 [ 870.059684][T24165] ? __sys_sendmsg_sock+0x30/0x30 [ 870.064710][T24165] ? __import_iovec+0x306/0x510 [ 870.069580][T24165] ? import_iovec+0x6f/0xa0 [ 870.074100][T24165] ___sys_sendmsg+0x2a2/0x360 [ 870.078798][T24165] ? __sys_sendmsg+0x2a0/0x2a0 [ 870.083566][T24165] ? trace_call_bpf+0xbf/0x6b0 [ 870.088337][T24165] __se_sys_sendmsg+0x1c3/0x2b0 [ 870.093189][T24165] ? ct_nmi_exit+0x145/0x1c0 [ 870.097775][T24165] ? __x64_sys_sendmsg+0x80/0x80 [ 870.102714][T24165] ? lockdep_hardirqs_on+0x94/0x140 [ 870.107912][T24165] do_syscall_64+0x4c/0xa0 [ 870.112318][T24165] ? clear_bhb_loop+0x60/0xb0 [ 870.116993][T24165] ? clear_bhb_loop+0x60/0xb0 [ 870.121684][T24165] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.127576][T24165] RIP: 0033:0x7fcebb19f559 [ 870.131982][T24165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.151584][T24165] RSP: 002b:00007fcebbfdd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.159992][T24165] RAX: ffffffffffffffda RBX: 00007fcebb426090 RCX: 00007fcebb19f559 [ 870.167964][T24165] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 870.175947][T24165] RBP: 00007fcebb236b20 R08: 0000000000000000 R09: 0000000000000000 [ 870.183917][T24165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.191898][T24165] R13: 00007fcebb426128 R14: 00007fcebb426090 R15: 00007fffa5d25bd8 [ 870.199886][T24165] [ 870.233527][T24164] netlink: 'syz.3.4633': attribute type 11 has an invalid length. [ 870.255459][T24164] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4633'. [ 870.269982][T24170] netlink: 'syz.3.4633': attribute type 11 has an invalid length. [ 870.299960][T24171] netlink: 'syz.3.4633': attribute type 11 has an invalid length. [ 870.335305][T24162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.641333][T24200] netlink: 'syz.3.4637': attribute type 2 has an invalid length. [ 871.485748][T24222] rxe_eth0 speed is unknown, defaulting to 1000 [ 871.502636][T24228] netlink: 'syz.1.4645': attribute type 39 has an invalid length. [ 872.186380][T24242] netlink: 'syz.1.4648': attribute type 10 has an invalid length. [ 872.258529][T24245] netlink: 'syz.1.4648': attribute type 10 has an invalid length. [ 873.364114][T24278] tun0: tun_chr_ioctl cmd 21731 [ 873.408647][T24286] netlink: 'syz.0.4658': attribute type 39 has an invalid length. [ 873.482957][T24283] can: request_module (can-proto-0) failed. [ 873.993442][T24317] netlink: 'syz.2.4665': attribute type 2 has an invalid length. [ 874.017648][T24317] netlink: 'syz.2.4665': attribute type 8 has an invalid length. [ 874.038495][T24317] __nla_validate_parse: 4 callbacks suppressed [ 874.038531][T24317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4665'. [ 874.277656][T24329] netlink: 'syz.0.4669': attribute type 29 has an invalid length. [ 874.307915][T24329] netlink: 'syz.0.4669': attribute type 29 has an invalid length. [ 874.328155][T24337] netlink: 'syz.0.4669': attribute type 29 has an invalid length. [ 874.474050][T24344] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.4673'. [ 875.250655][T24341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'. [ 875.286761][T24344] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 875.308151][T24344] CPU: 1 PID: 24344 Comm: syz.1.4673 Not tainted syzkaller #0 [ 875.315671][T24344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 875.325758][T24344] Call Trace: [ 875.329076][T24344] [ 875.332046][T24344] dump_stack_lvl+0x188/0x24e [ 875.336782][T24344] ? show_regs_print_info+0x12/0x12 [ 875.342021][T24344] ? load_image+0x410/0x410 [ 875.346616][T24344] sysfs_warn_dup+0x8a/0xa0 [ 875.351160][T24344] sysfs_do_create_link_sd+0xc0/0x110 [ 875.356580][T24344] device_add+0x83b/0x1050 [ 875.361066][T24344] wiphy_register+0x1d8b/0x2aa0 [ 875.365992][T24344] ? cfg80211_event_work+0x40/0x40 [ 875.371119][T24344] ? minstrel_ht_alloc+0x894/0xa20 [ 875.376260][T24344] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 875.382350][T24344] ieee80211_register_hw+0x2e33/0x3b00 [ 875.387851][T24344] ? ieee80211_register_hw+0xf01/0x3b00 [ 875.393411][T24344] ? ieee80211_register_hw+0xf01/0x3b00 [ 875.398984][T24344] ? ieee80211_tasklet_handler+0x20/0x20 [ 875.404625][T24344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 875.410540][T24344] ? __debug_object_init+0xed/0x440 [ 875.415783][T24344] ? memset+0x1e/0x40 [ 875.419778][T24344] ? __hrtimer_init+0x189/0x270 [ 875.424649][T24344] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 875.430416][T24344] ? memcpy+0x3c/0x60 [ 875.434421][T24344] hwsim_new_radio_nl+0xab7/0xc90 [ 875.439485][T24344] genl_family_rcv_msg_doit+0x22f/0x350 [ 875.445049][T24344] ? end_current_label_crit_section+0x170/0x170 [ 875.451319][T24344] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 875.457242][T24344] ? bpf_lsm_capable+0x5/0x10 [ 875.461928][T24344] ? security_capable+0x85/0xb0 [ 875.466807][T24344] genl_rcv_msg+0x601/0x790 [ 875.471342][T24344] ? genl_bind+0x360/0x360 [ 875.475762][T24344] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 875.482138][T24344] netlink_rcv_skb+0x1ef/0x440 [ 875.486921][T24344] ? genl_bind+0x360/0x360 [ 875.491354][T24344] ? netlink_ack+0x1160/0x1160 [ 875.496156][T24344] ? down_read+0x1a8/0x2d0 [ 875.500587][T24344] genl_rcv+0x24/0x40 [ 875.504574][T24344] netlink_unicast+0x7ad/0x920 [ 875.509381][T24344] netlink_sendmsg+0x8ad/0xbd0 [ 875.514183][T24344] ? netlink_getsockopt+0x550/0x550 [ 875.519407][T24344] ? apparmor_socket_sendmsg+0x8a/0x330 [ 875.524971][T24344] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 875.530276][T24344] ? security_socket_sendmsg+0x7c/0xa0 [ 875.535741][T24344] ? netlink_getsockopt+0x550/0x550 [ 875.540959][T24344] ____sys_sendmsg+0x5ed/0x9a0 [ 875.545758][T24344] ? __sys_sendmsg_sock+0x30/0x30 [ 875.550788][T24344] ? __import_iovec+0x306/0x510 [ 875.555673][T24344] ? import_iovec+0x6f/0xa0 [ 875.560202][T24344] ___sys_sendmsg+0x2a2/0x360 [ 875.564907][T24344] ? __sys_sendmsg+0x2a0/0x2a0 [ 875.569732][T24344] ? rcu_is_watching+0x11/0xa0 [ 875.574588][T24344] __se_sys_sendmsg+0x1c3/0x2b0 [ 875.579457][T24344] ? __x64_sys_sendmsg+0x80/0x80 [ 875.584453][T24344] ? lockdep_hardirqs_on+0x94/0x140 [ 875.589667][T24344] do_syscall_64+0x4c/0xa0 [ 875.594090][T24344] ? clear_bhb_loop+0x60/0xb0 [ 875.598768][T24344] ? clear_bhb_loop+0x60/0xb0 [ 875.603454][T24344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.609360][T24344] RIP: 0033:0x7f172d59f559 [ 875.613786][T24344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.633421][T24344] RSP: 002b:00007f172e396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 875.641843][T24344] RAX: ffffffffffffffda RBX: 00007f172d826090 RCX: 00007f172d59f559 [ 875.649819][T24344] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000009 [ 875.657793][T24344] RBP: 00007f172d636b20 R08: 0000000000000000 R09: 0000000000000000 [ 875.665767][T24344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.673740][T24344] R13: 00007f172d826128 R14: 00007f172d826090 R15: 00007fff2666a318 [ 875.681755][T24344] [ 877.469225][T24438] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4692'. [ 877.484737][T24438] device bridge_slave_1 entered promiscuous mode [ 877.577037][T24445] validate_nla: 2 callbacks suppressed [ 877.577054][T24445] netlink: 'syz.3.4690': attribute type 39 has an invalid length. [ 877.636211][T24446] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4700'. [ 878.197699][T24466] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4698'. [ 878.539775][T24478] netlink: 'syz.2.4699': attribute type 10 has an invalid length. [ 878.549639][T24478] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4699'. [ 878.852214][T24489] netlink: 'syz.2.4705': attribute type 10 has an invalid length. [ 878.880378][T24489] device wlan1 left promiscuous mode [ 878.918090][T24489] device wlan1 entered promiscuous mode [ 878.936228][ T7593] tipc: Subscription rejected, illegal request [ 878.956938][T24489] team0: Port device wlan1 added [ 879.159769][T24502] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.4707'. [ 879.184279][T24502] netlink: zone id is out of range [ 879.189448][T24502] netlink: zone id is out of range [ 879.232501][T24502] netlink: zone id is out of range [ 879.244001][T24502] netlink: zone id is out of range [ 879.255775][T24502] netlink: zone id is out of range [ 879.266057][T24502] netlink: zone id is out of range [ 879.278772][T24502] netlink: zone id is out of range [ 879.302815][T24502] netlink: zone id is out of range [ 879.323918][T24502] netlink: zone id is out of range [ 879.329361][T24502] netlink: zone id is out of range [ 879.870495][T24525] device sit0 entered promiscuous mode [ 880.378772][T24543] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4718'. [ 881.299768][T24580] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4728'. [ 881.618048][T24602] netlink: 'syz.3.4732': attribute type 2 has an invalid length. [ 881.645612][T24602] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4732'. [ 885.373180][T24640] netlink: 'syz.2.4741': attribute type 1 has an invalid length. [ 885.405645][T24640] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4741'. [ 885.596426][T24636] device syzkaller0 entered promiscuous mode [ 886.020402][T24651] netlink: 'syz.2.4746': attribute type 29 has an invalid length. [ 886.868619][T24662] delete_channel: no stack [ 888.595664][T24651] netlink: 'syz.2.4746': attribute type 29 has an invalid length. [ 888.632888][T24671] netlink: 'syz.3.4749': attribute type 21 has an invalid length. [ 888.742118][T24668] device syzkaller0 entered promiscuous mode [ 888.770928][T24677] netlink: 'syz.1.4750': attribute type 29 has an invalid length. [ 890.889243][T24677] netlink: 'syz.1.4750': attribute type 29 has an invalid length. [ 891.456123][T24733] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4765'. [ 894.239322][T24742] netlink: 126632 bytes leftover after parsing attributes in process `syz.3.4766'. [ 894.274058][T24742] netlink: 8192 bytes leftover after parsing attributes in process `syz.3.4766'. [ 894.447259][T24744] device syzkaller0 entered promiscuous mode [ 895.159331][T24761] netlink: 'syz.3.4772': attribute type 27 has an invalid length. [ 895.230166][T24761] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4772'. [ 897.347404][T24764] netlink: 'syz.0.4771': attribute type 25 has an invalid length. [ 897.355845][T24764] netlink: 'syz.0.4771': attribute type 29 has an invalid length. [ 897.366060][T24765] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4771'. [ 897.400455][T24770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4774'. [ 897.411512][T24774] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4774'. [ 897.482177][T24783] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4776'. [ 897.885474][T24795] netlink: 'syz.2.4781': attribute type 5 has an invalid length. [ 899.235328][T24814] rxe_eth0 speed is unknown, defaulting to 1000 [ 899.385761][T24826] netlink: 'syz.1.4790': attribute type 3 has an invalid length. [ 899.439399][T24826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4790'. [ 899.487091][T24826] netlink: 'syz.1.4790': attribute type 3 has an invalid length. [ 899.524017][T24826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4790'. [ 899.552697][T24835] netlink: 'syz.2.4792': attribute type 29 has an invalid length. [ 899.573321][T24835] netlink: 'syz.2.4792': attribute type 29 has an invalid length. [ 899.574345][T24826] netlink: 'syz.1.4790': attribute type 3 has an invalid length. [ 899.590702][T24835] netlink: 'syz.2.4792': attribute type 29 has an invalid length. [ 899.611148][T24835] netlink: 'syz.2.4792': attribute type 29 has an invalid length. [ 899.627182][T24826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4790'. [ 899.670029][T24826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4790'. [ 899.700210][T24826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4790'. [ 899.731132][T24826] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4790'. [ 903.436420][T24874] __nla_validate_parse: 28 callbacks suppressed [ 903.436439][T24874] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4805'. [ 903.512820][T24886] validate_nla: 35 callbacks suppressed [ 903.512838][T24886] netlink: 'syz.2.4810': attribute type 21 has an invalid length. [ 903.535029][T24887] netlink: 'syz.1.4808': attribute type 3 has an invalid length. [ 903.584329][T24887] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4808'. [ 903.634313][T24886] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4810'. [ 903.691295][T24881] netlink: 'syz.1.4808': attribute type 22 has an invalid length. [ 903.702283][T24881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'. [ 903.876740][T24891] device pim6reg1 entered promiscuous mode [ 904.073069][T24893] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.4812'. [ 904.116969][T24906] netlink: 'syz.3.4814': attribute type 2 has an invalid length. [ 904.133968][T24906] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.4814'. [ 904.151249][T24893] net_ratelimit: 45 callbacks suppressed [ 904.151263][T24893] openvswitch: netlink: Flow actions attr not present in new flow. [ 904.221832][T24906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4814'. [ 905.700733][T24916] netlink: 'syz.4.4817': attribute type 10 has an invalid length. [ 905.797244][T24916] device macvlan0 entered promiscuous mode [ 905.845030][T24916] team0: Port device macvlan0 removed [ 905.879853][T24919] netlink: 'syz.1.4818': attribute type 11 has an invalid length. [ 905.903985][T24919] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4818'. [ 906.237883][T24918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.669814][T24966] netlink: 'syz.0.4829': attribute type 10 has an invalid length. [ 906.716318][T24974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4830'. [ 906.776317][T24981] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4831'. [ 906.803549][T24981] netlink: 'syz.4.4831': attribute type 10 has an invalid length. [ 906.850386][T24981] team0: Port device virt_wifi0 added [ 906.896626][T24968] rxe_eth0 speed is unknown, defaulting to 1000 [ 907.413003][T24991] rxe_eth0 speed is unknown, defaulting to 1000 [ 908.223297][T25015] netlink: 'syz.0.4840': attribute type 10 has an invalid length. [ 908.537870][T25033] Dead loop on virtual device ip6_vti0, fix it urgently! [ 909.290584][T25046] netlink: 'syz.2.4846': attribute type 22 has an invalid length. [ 909.329574][T25046] __nla_validate_parse: 1 callbacks suppressed [ 909.329590][T25046] netlink: 14526 bytes leftover after parsing attributes in process `syz.2.4846'. [ 909.366338][T25044] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.4847'. [ 909.377134][T25044] openvswitch: netlink: Key type 386 is out of range max 32 [ 909.481358][T25057] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4849'. [ 909.556845][T25053] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.4850'. [ 909.605325][T25053] netlink: zone id is out of range [ 909.612864][T25053] netlink: zone id is out of range [ 909.618271][T25053] netlink: zone id is out of range [ 909.623662][T25053] netlink: zone id is out of range [ 909.637177][T25053] netlink: zone id is out of range [ 909.646977][T25053] netlink: get zone limit has 8 unknown bytes [ 909.705085][T25057] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 909.817888][T25067] netlink: 'syz.2.4851': attribute type 4 has an invalid length. [ 909.838083][T25067] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4851'. [ 909.851424][T25078] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4853'. [ 909.868309][T25078] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4853'. [ 910.173620][T25092] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4857'. [ 911.204596][T25131] netlink: 'syz.2.4867': attribute type 16 has an invalid length. [ 911.221940][T25131] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4867'. [ 911.769579][T25138] netlink: 'syz.3.4868': attribute type 10 has an invalid length. [ 911.785487][T25138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4868'. [ 911.807373][T25138] device veth0_vlan left promiscuous mode [ 911.813677][T25138] device veth0_vlan entered promiscuous mode [ 911.859758][T25138] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 911.882734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 911.901119][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 911.915557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 912.559034][T25177] netlink: 'syz.1.4883': attribute type 21 has an invalid length. [ 912.700155][T25191] netlink: 'syz.3.4885': attribute type 10 has an invalid length. [ 914.109729][T25218] netlink: 'syz.1.4894': attribute type 2 has an invalid length. [ 914.124553][T25218] netlink: 'syz.1.4894': attribute type 8 has an invalid length. [ 914.281731][T25211] rxe_eth0 speed is unknown, defaulting to 1000 [ 915.137324][T25237] netlink: 'syz.4.4901': attribute type 21 has an invalid length. [ 915.259697][T25240] netlink: 'syz.4.4901': attribute type 10 has an invalid length. [ 915.283198][T25240] __nla_validate_parse: 4 callbacks suppressed [ 915.283215][T25240] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4901'. [ 915.308109][T25240] device veth0_vlan left promiscuous mode [ 915.315481][T25240] device veth0_vlan entered promiscuous mode [ 915.338985][T25240] bridge0: port 3(veth0_vlan) entered blocking state [ 915.352000][T25240] bridge0: port 3(veth0_vlan) entered disabled state [ 915.370704][T25240] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 916.874888][T25252] delete_channel: no stack [ 917.070501][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 917.080716][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.090848][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.118928][T25226] rxe_eth0 speed is unknown, defaulting to 1000 [ 920.812556][T25331] netlink: 'syz.1.4922': attribute type 10 has an invalid length. [ 920.820784][T25331] device netdevsim0 entered promiscuous mode [ 920.829258][T25333] netlink: 'syz.1.4922': attribute type 19 has an invalid length. [ 923.019682][T25391] -1: renamed from syzkaller0 [ 923.414635][T25412] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4941'. [ 923.472125][T25412] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4941'. [ 923.782857][T25427] netlink: 'syz.2.4944': attribute type 1 has an invalid length. [ 923.800063][T25427] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4944'. [ 924.099225][T25436] delete_channel: no stack [ 925.350869][T25466] netlink: 'syz.2.4955': attribute type 10 has an invalid length. [ 925.429713][T25466] bridge0: port 3(team0) entered disabled state [ 925.533960][T25466] bridge0: port 3(team0) entered disabled state [ 925.587836][T25466] device team_slave_0 left promiscuous mode [ 925.644822][T25466] team0 (unregistering): Port device team_slave_0 removed [ 925.665156][T25466] device team_slave_1 left promiscuous mode [ 925.834886][T25466] team0 (unregistering): Port device team_slave_1 removed [ 925.845777][T25466] device geneve1 left promiscuous mode [ 925.942666][T25466] team0 (unregistering): Port device geneve1 removed [ 925.953154][T25466] device wlan1 left promiscuous mode [ 926.055500][T25466] team0 (unregistering): Port device wlan1 removed [ 926.151847][T25476] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4958'. [ 926.503040][T25492] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.4962'. [ 926.589552][T25480] rxe_eth0 speed is unknown, defaulting to 1000 [ 926.931398][T25512] netlink: 'syz.1.4967': attribute type 21 has an invalid length. [ 926.990629][T25512] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4967'. [ 927.604407][T25528] netlink: 'syz.2.4973': attribute type 10 has an invalid length. [ 927.639248][T25528] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4973'. [ 928.137267][T25536] device pim6reg1 left promiscuous mode [ 928.254537][T25546] netlink: 'syz.2.4976': attribute type 10 has an invalid length. [ 928.263554][T25546] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.276521][T25546] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.300927][T25546] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.324301][T25546] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.341505][T25546] device geneve0 entered promiscuous mode [ 928.379883][T25546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.401608][T25546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.422008][T25546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.437863][T25546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.453180][T25546] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 929.609786][T25578] device syzkaller0 entered promiscuous mode [ 930.577886][T25618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4991'. [ 931.466070][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.472407][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.841516][T25618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4991'. [ 932.068264][T25635] netlink: 'syz.0.4993': attribute type 9 has an invalid length. [ 932.718803][T25653] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.5001'. [ 932.738012][T25653] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 932.939107][T25663] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.5003'. [ 932.986579][T25666] netlink: 'syz.0.5005': attribute type 33 has an invalid length. [ 932.995658][T25666] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5005'. [ 933.112620][T25672] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.132839][T25672] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.208157][ T4387] tipc: Subscription rejected, illegal request [ 933.229737][T25670] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.245218][T25670] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.265246][T25670] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.285273][T25680] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.324369][T25670] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.359395][T25679] netlink: 'syz.2.5006': attribute type 29 has an invalid length. [ 933.398206][T25689] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5011'. [ 937.748375][T25772] validate_nla: 1 callbacks suppressed [ 937.748413][T25772] netlink: 'syz.0.5027': attribute type 10 has an invalid length. [ 938.158116][T25782] netlink: 'syz.0.5030': attribute type 21 has an invalid length. [ 938.169835][T25782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5030'. [ 939.348669][T15893] Bluetooth: hci5: unexpected event 0x31 length: 246 > 6 [ 939.564163][T25824] netlink: 'syz.1.5039': attribute type 21 has an invalid length. [ 939.646696][T25824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5039'. [ 939.673399][T25824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5039'. [ 939.714923][T25813] rxe_eth0 speed is unknown, defaulting to 1000 [ 941.059786][T25874] netlink: 'syz.4.5049': attribute type 10 has an invalid length. [ 941.328790][T25874] team0 (unregistering): Port device team_slave_0 removed [ 941.370919][T25874] team0 (unregistering): Port device team_slave_1 removed [ 941.396519][T25874] device veth1_vlan left promiscuous mode [ 941.458578][T25874] team0 (unregistering): Port device macvlan1 removed [ 941.476700][T25874] team0 (unregistering): Port device geneve1 removed [ 941.507121][T25874] team0 (unregistering): Port device virt_wifi0 removed [ 941.537763][T25882] netlink: 'syz.0.5051': attribute type 10 has an invalid length. [ 941.547362][T25890] netlink: 71 bytes leftover after parsing attributes in process `syz.2.5052'. [ 942.081622][T25911] delete_channel: no stack [ 942.248168][T25918] netlink: 'syz.0.5056': attribute type 6 has an invalid length. [ 942.271740][T25920] netlink: 'syz.0.5056': attribute type 6 has an invalid length. [ 942.359494][T25931] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5061'. [ 943.535769][T25960] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5071'. [ 943.688173][T25960] netlink: zone id is out of range [ 943.693329][T25960] netlink: zone id is out of range [ 943.715115][T25971] netlink: 'syz.1.5074': attribute type 7 has an invalid length. [ 943.723473][T25971] netlink: 'syz.1.5074': attribute type 7 has an invalid length. [ 943.742069][T25960] netlink: zone id is out of range [ 943.748157][T25971] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.5074'. [ 943.783007][T25960] netlink: zone id is out of range [ 943.803511][T25960] netlink: zone id is out of range [ 943.829922][T25960] netlink: zone id is out of range [ 943.843869][T25960] netlink: zone id is out of range [ 943.866670][T25960] netlink: zone id is out of range [ 943.871962][T25960] netlink: zone id is out of range [ 943.883939][T25960] netlink: zone id is out of range [ 944.197022][T25984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5079'. [ 944.246507][T25982] netlink: 'syz.3.5079': attribute type 12 has an invalid length. [ 944.281420][T25982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5079'. [ 944.324953][T25984] netlink: 'syz.3.5079': attribute type 12 has an invalid length. [ 944.367011][T25984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5079'. [ 944.408623][T25978] rxe_eth0 speed is unknown, defaulting to 1000 [ 944.456072][T25989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5081'. [ 944.475714][T25989] netlink: 'syz.4.5081': attribute type 1 has an invalid length. [ 944.483703][T25989] netlink: 6 bytes leftover after parsing attributes in process `syz.4.5081'. [ 944.963553][T26001] netlink: 'syz.3.5085': attribute type 3 has an invalid length. [ 944.984404][T26001] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5085'. [ 945.237723][T26009] netlink: 75576 bytes leftover after parsing attributes in process `syz.3.5088'. [ 945.359744][T26014] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5089'. [ 945.434769][T26012] netlink: 'syz.4.5089': attribute type 2 has an invalid length. [ 947.456124][T26067] netlink: 'syz.2.5104': attribute type 2 has an invalid length. [ 947.729655][T26084] netlink: 'syz.1.5107': attribute type 3 has an invalid length. [ 947.983626][T26093] device wlan1 entered promiscuous mode [ 948.089655][T26103] netlink: 'syz.2.5114': attribute type 10 has an invalid length. [ 948.124298][T26103] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.141491][T26103] device bridge0 left promiscuous mode [ 948.190614][T26103] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.198273][T26103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.228309][T26103] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 948.356836][T26106] device macvlan0 entered promiscuous mode [ 948.620609][T26127] __nla_validate_parse: 41 callbacks suppressed [ 948.620629][T26127] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5119'. [ 949.463234][T26160] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5126'. [ 949.509589][T26160] device hsr_slave_0 left promiscuous mode [ 949.570970][T26160] device hsr_slave_1 left promiscuous mode [ 949.632232][T26160] nr0: port 1(hsr0) entered disabled state [ 949.758495][T26160] device hsr0 left promiscuous mode [ 949.774924][T26160] nr0: port 1(hsr0) entered disabled state [ 949.854596][T26159] rxe_eth0 speed is unknown, defaulting to 1000 [ 950.357081][T26168] validate_nla: 2 callbacks suppressed [ 950.357099][T26168] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.414026][T26168] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.536840][T26173] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.569417][T26171] tap0: tun_chr_ioctl cmd 2147767520 [ 950.599255][T26168] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.628728][T26173] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.657041][T26173] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.718614][T26168] netlink: 'syz.0.5129': attribute type 29 has an invalid length. [ 950.770830][T26158] rxe_eth0 speed is unknown, defaulting to 1000 [ 951.649192][T26203] netlink: 'syz.2.5138': attribute type 19 has an invalid length. [ 951.839347][T26208] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5140'. [ 952.033093][T26211] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.5141'. [ 952.054534][T26216] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5143'. [ 952.215719][T26216] device syzkaller0 entered promiscuous mode [ 954.615869][T26261] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5154'. [ 954.639360][T26264] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5155'. [ 954.906890][T26266] netlink: 'syz.3.5157': attribute type 2 has an invalid length. [ 954.990760][T26272] netlink: 'syz.0.5156': attribute type 10 has an invalid length. [ 955.018153][T26272] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5156'. [ 955.402363][T26289] netlink: 'syz.3.5160': attribute type 12 has an invalid length. [ 955.466166][T26289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5160'. [ 955.490116][T26298] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.5162'. [ 955.519397][T26298] netlink: 'syz.1.5162': attribute type 12 has an invalid length. [ 955.537234][T26298] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5162'. [ 956.111885][T26319] netlink: 'syz.4.5168': attribute type 10 has an invalid length. [ 956.797109][T26333] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5171'. [ 956.943210][T26328] netlink: 'syz.2.5170': attribute type 10 has an invalid length. [ 957.068063][T26341] netlink: 'syz.1.5173': attribute type 2 has an invalid length. [ 957.118010][T26341] netlink: 'syz.1.5173': attribute type 8 has an invalid length. [ 957.134271][T26341] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5173'. [ 957.349290][T26352] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.5178'. [ 957.776184][T26358] 81: renamed from syzkaller0 [ 957.862546][T26366] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5180'. [ 957.911893][T26368] FAULT_INJECTION: forcing a failure. [ 957.911893][T26368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.940249][T26368] CPU: 0 PID: 26368 Comm: syz.3.5182 Not tainted syzkaller #0 [ 957.947755][T26368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 957.957824][T26368] Call Trace: [ 957.961120][T26368] [ 957.964071][T26368] dump_stack_lvl+0x188/0x24e [ 957.968770][T26368] ? show_regs_print_info+0x12/0x12 [ 957.973986][T26368] ? load_image+0x410/0x410 [ 957.978510][T26368] ? __lock_acquire+0x7ea0/0x7ea0 [ 957.983550][T26368] should_fail_ex+0x390/0x4c0 [ 957.988241][T26368] _copy_from_user+0x2c/0x170 [ 957.992937][T26368] do_ipv6_setsockopt+0x312/0x3c30 [ 957.998071][T26368] ? perf_trace_buf_alloc+0x300/0x300 [ 958.003550][T26368] ? sk_dst_reset+0xa0/0xa0 [ 958.008076][T26368] ? perf_tp_event+0xa8e/0xc10 [ 958.012874][T26368] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 958.018703][T26368] ? mark_lock+0x94/0x320 [ 958.023077][T26368] ? mark_lock+0x94/0x320 [ 958.027442][T26368] ? aa_label_sk_perm+0x501/0x6b0 [ 958.032486][T26368] ? verify_lock_unused+0x140/0x140 [ 958.037701][T26368] ? aa_sk_perm+0x950/0x950 [ 958.042231][T26368] ? __might_sleep+0xd0/0xd0 [ 958.046817][T26368] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 958.052793][T26368] ? __fget_files+0x28/0x460 [ 958.057381][T26368] ? lock_chain_count+0x20/0x20 [ 958.062227][T26368] ? aa_sk_perm+0x81f/0x950 [ 958.066722][T26368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 958.072865][T26368] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 958.079014][T26368] ? aa_af_perm+0x340/0x340 [ 958.083515][T26368] ? aa_sock_opt_perm+0x74/0x100 [ 958.088451][T26368] ipv6_setsockopt+0x55/0x190 [ 958.093125][T26368] ? sock_common_recvmsg+0x190/0x190 [ 958.098413][T26368] __sys_setsockopt+0x2bf/0x3d0 [ 958.103264][T26368] __x64_sys_setsockopt+0xb1/0xc0 [ 958.108286][T26368] do_syscall_64+0x4c/0xa0 [ 958.112696][T26368] ? clear_bhb_loop+0x60/0xb0 [ 958.117363][T26368] ? clear_bhb_loop+0x60/0xb0 [ 958.122035][T26368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.127928][T26368] RIP: 0033:0x7f257b99f559 [ 958.132338][T26368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.151935][T26368] RSP: 002b:00007f257c89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 958.160341][T26368] RAX: ffffffffffffffda RBX: 00007f257bc25fa0 RCX: 00007f257b99f559 [ 958.168305][T26368] RDX: 0000000000000017 RSI: 0000000000000029 RDI: 0000000000000006 [ 958.176281][T26368] RBP: 00007f257c89f090 R08: 0000000000000004 R09: 0000000000000000 [ 958.184243][T26368] R10: 0000200000000700 R11: 0000000000000246 R12: 0000000000000001 [ 958.192207][T26368] R13: 00007f257bc26038 R14: 00007f257bc25fa0 R15: 00007ffd8a4ed7b8 [ 958.200182][T26368] [ 958.401677][T26375] __sock_release: fasync list not empty! [ 958.606422][T26388] FAULT_INJECTION: forcing a failure. [ 958.606422][T26388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.639184][T26388] CPU: 0 PID: 26388 Comm: syz.0.5199 Not tainted syzkaller #0 [ 958.646702][T26388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 958.656768][T26388] Call Trace: [ 958.660058][T26388] [ 958.663002][T26388] dump_stack_lvl+0x188/0x24e [ 958.667706][T26388] ? show_regs_print_info+0x12/0x12 [ 958.672923][T26388] ? load_image+0x410/0x410 [ 958.677449][T26388] ? __lock_acquire+0x7ea0/0x7ea0 [ 958.682497][T26388] ? snprintf+0xe5/0x140 [ 958.686760][T26388] should_fail_ex+0x390/0x4c0 [ 958.691464][T26388] _copy_to_user+0x2c/0x130 [ 958.695986][T26388] simple_read_from_buffer+0xe3/0x150 [ 958.701381][T26388] proc_fail_nth_read+0x1a6/0x220 [ 958.706426][T26388] ? proc_fault_inject_write+0x310/0x310 [ 958.712078][T26388] ? fsnotify_perm+0x248/0x550 [ 958.716847][T26388] ? proc_fault_inject_write+0x310/0x310 [ 958.722475][T26388] vfs_read+0x2db/0x960 [ 958.726633][T26388] ? kernel_read+0x1e0/0x1e0 [ 958.731223][T26388] ? __fget_files+0x28/0x460 [ 958.735810][T26388] ? __fget_files+0x3fc/0x460 [ 958.740487][T26388] ? __fdget_pos+0x2ae/0x360 [ 958.745071][T26388] ? ksys_read+0x70/0x260 [ 958.749403][T26388] ksys_read+0x14d/0x260 [ 958.753657][T26388] ? vfs_write+0x9a0/0x9a0 [ 958.758075][T26388] ? lockdep_hardirqs_on+0x94/0x140 [ 958.763287][T26388] do_syscall_64+0x4c/0xa0 [ 958.767694][T26388] ? clear_bhb_loop+0x60/0xb0 [ 958.772360][T26388] ? clear_bhb_loop+0x60/0xb0 [ 958.777048][T26388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.782938][T26388] RIP: 0033:0x7f4dc6d5fd8e [ 958.787345][T26388] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 958.806948][T26388] RSP: 002b:00007f4dc7ce2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.815361][T26388] RAX: ffffffffffffffda RBX: 00007f4dc7ce36c0 RCX: 00007f4dc6d5fd8e [ 958.823326][T26388] RDX: 000000000000000f RSI: 00007f4dc7ce30a0 RDI: 0000000000000007 [ 958.831314][T26388] RBP: 00007f4dc7ce3090 R08: 0000000000000000 R09: 0000000000000000 [ 958.839279][T26388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.847242][T26388] R13: 00007f4dc7026038 R14: 00007f4dc7025fa0 R15: 00007ffcc8597898 [ 958.855216][T26388] [ 959.745346][T26445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5203'. [ 959.907504][T26448] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5204'. [ 960.225916][T26458] tap0: tun_chr_ioctl cmd 2147767520 [ 960.638833][T26468] netlink: 'syz.4.5213': attribute type 10 has an invalid length. [ 961.957902][T26487] netlink: 'syz.1.5218': attribute type 20 has an invalid length. [ 962.081194][T26495] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.5220'. [ 962.222931][T26500] netlink: 'syz.2.5221': attribute type 2 has an invalid length. [ 962.347655][T26500] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 962.447867][T26500] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5221'. [ 962.512816][T26517] netlink: 'syz.3.5223': attribute type 2 has an invalid length. [ 962.534905][T26517] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5223'. [ 962.568002][T26500] netlink: 'syz.2.5221': attribute type 2 has an invalid length. [ 962.609253][T26500] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 962.621036][T26500] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5221'. [ 962.663548][T26500] netlink: 'syz.2.5221': attribute type 2 has an invalid length. [ 962.686776][T26500] netlink: 'syz.2.5221': attribute type 1 has an invalid length. [ 962.704059][T26500] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5221'. [ 962.742986][T26500] netlink: 'syz.2.5221': attribute type 2 has an invalid length. [ 962.768329][T26500] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5221'. [ 962.808159][T26500] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5221'. [ 962.855184][T26500] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5221'. [ 963.381083][T26552] device netdevsim0 left promiscuous mode [ 963.420985][T26552] batman_adv: batadv0: Adding interface: netdevsim0 [ 963.443378][T26552] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.496205][T26552] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 964.008103][T26585] device syzkaller0 entered promiscuous mode [ 964.647251][T26615] rxe_eth0 speed is unknown, defaulting to 1000 [ 965.232508][T26629] __nla_validate_parse: 10 callbacks suppressed [ 965.232544][T26629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5256'. [ 966.069180][T26658] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.5262'. [ 966.439920][T26662] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 966.749307][T26692] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5271'. [ 966.770295][T26692] bridge_slave_1: default FDB implementation only supports local addresses [ 967.105085][T26707] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5277'. [ 967.402073][T26717] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.5278'. [ 967.423381][T26716] validate_nla: 20 callbacks suppressed [ 967.423401][T26716] netlink: 'syz.3.5279': attribute type 28 has an invalid length. [ 967.771924][T26724] netlink: 'syz.2.5280': attribute type 49 has an invalid length. [ 967.799200][T26727] netlink: 'syz.1.5281': attribute type 12 has an invalid length. [ 967.810567][T26727] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.5281'. [ 968.283964][T26738] netlink: 'syz.0.5285': attribute type 2 has an invalid length. [ 968.321380][T26738] device 1 entered promiscuous mode [ 969.142498][T26757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.168047][T26761] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.5294'. [ 969.563308][T26777] device syzkaller0 entered promiscuous mode [ 969.824821][T26785] netlink: 'syz.4.5299': attribute type 1 has an invalid length. [ 969.833160][T26785] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.5299'. [ 970.016378][T26792] netlink: 'syz.4.5302': attribute type 21 has an invalid length. [ 970.045937][T26792] netlink: 'syz.4.5302': attribute type 6 has an invalid length. [ 970.069408][T26792] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5302'. [ 970.134002][T26797] netlink: 'syz.0.5303': attribute type 2 has an invalid length. [ 970.362962][T26801] netlink: 'syz.4.5302': attribute type 21 has an invalid length. [ 970.396629][T26801] netlink: 'syz.4.5302': attribute type 6 has an invalid length. [ 970.411593][T26801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5302'. [ 973.317508][T26820] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5306'. [ 973.362886][T26823] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5306'. [ 973.662924][T26855] netlink: 'syz.4.5312': attribute type 2 has an invalid length. [ 973.710716][T26855] netlink: 'syz.4.5312': attribute type 8 has an invalid length. [ 973.772129][T26855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5312'. [ 973.835101][T26859] netlink: 'syz.0.5310': attribute type 10 has an invalid length. [ 973.882089][T26861] rxe_eth0 speed is unknown, defaulting to 1000 [ 974.029985][T26846] rxe_eth0 speed is unknown, defaulting to 1000 [ 974.514970][T26876] netlink: 'syz.1.5316': attribute type 29 has an invalid length. [ 974.559324][T26876] netlink: 'syz.1.5316': attribute type 29 has an invalid length. [ 974.587604][T26879] netlink: 'syz.1.5316': attribute type 29 has an invalid length. [ 974.692515][T26879] netlink: 'syz.1.5316': attribute type 29 has an invalid length. [ 974.727632][T26879] netlink: 'syz.1.5316': attribute type 29 has an invalid length. [ 974.784832][T26876] can: request_module (can-proto-0) failed. [ 976.193456][T26935] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5329'. [ 976.233045][T26932] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5328'. [ 976.807423][T26936] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5329'. [ 977.099556][T26948] rxe_eth0 speed is unknown, defaulting to 1000 [ 977.299590][T26964] netlink: 'syz.4.5336': attribute type 21 has an invalid length. [ 977.326661][T26964] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5336'. [ 977.574472][T26968] netlink: 'syz.1.5337': attribute type 10 has an invalid length. [ 977.965931][T26974] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.5339'. [ 980.359716][T27008] delete_channel: no stack [ 984.808932][T27093] validate_nla: 1 callbacks suppressed [ 984.808976][T27093] netlink: 'syz.1.5367': attribute type 29 has an invalid length. [ 984.837387][T27093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'. [ 984.905360][T27093] netlink: 'syz.1.5367': attribute type 29 has an invalid length. [ 984.934013][T27093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5367'. [ 985.183376][T27111] netlink: 'syz.4.5371': attribute type 2 has an invalid length. [ 985.197676][T27111] netlink: 'syz.4.5371': attribute type 8 has an invalid length. [ 985.206964][T27111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5371'. [ 985.294958][T27115] netlink: 'syz.4.5371': attribute type 2 has an invalid length. [ 985.322792][T27115] netlink: 'syz.4.5371': attribute type 8 has an invalid length. [ 985.357209][T27115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5371'. [ 985.405782][T27113] mac80211_hwsim hwsim43 »»»»»»: renamed from wlan0 [ 985.555542][T27130] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5375'. [ 985.687128][T27139] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5376'. [ 985.736281][T27141] netlink: 'syz.4.5377': attribute type 6 has an invalid length. [ 985.765269][T27141] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5377'. [ 985.819197][T27142] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.5377'. [ 986.132792][T27162] netlink: 'syz.3.5383': attribute type 29 has an invalid length. [ 986.180580][T27162] netlink: 'syz.3.5383': attribute type 29 has an invalid length. [ 986.218255][T27168] netlink: 'syz.3.5383': attribute type 29 has an invalid length. [ 986.235730][T27164] rxe_eth0 speed is unknown, defaulting to 1000 [ 986.268042][T27162] tun0: tun_chr_ioctl cmd 21731 [ 986.433565][T27174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5385'. [ 986.833465][T27179] rxe_eth0 speed is unknown, defaulting to 1000 [ 987.901682][T27225] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5397'. [ 987.955454][T27212] IPv6: NLM_F_CREATE should be specified when creating new route [ 988.898746][T27265] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 988.923433][T27265] CPU: 1 PID: 27265 Comm: syz.2.5411 Not tainted syzkaller #0 [ 988.930948][T27265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 988.941030][T27265] Call Trace: [ 988.944325][T27265] [ 988.947270][T27265] dump_stack_lvl+0x188/0x24e [ 988.951979][T27265] ? show_regs_print_info+0x12/0x12 [ 988.957197][T27265] ? load_image+0x410/0x410 [ 988.961735][T27265] sysfs_warn_dup+0x8a/0xa0 [ 988.966265][T27265] sysfs_do_create_link_sd+0xc0/0x110 [ 988.971666][T27265] device_add+0x83b/0x1050 [ 988.976112][T27265] wiphy_register+0x1d8b/0x2aa0 [ 988.980990][T27265] ? cfg80211_event_work+0x40/0x40 [ 988.986104][T27265] ? minstrel_ht_alloc+0x894/0xa20 [ 988.991219][T27265] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 988.997286][T27265] ieee80211_register_hw+0x2e33/0x3b00 [ 989.002755][T27265] ? ieee80211_register_hw+0xf01/0x3b00 [ 989.008306][T27265] ? ieee80211_register_hw+0xf01/0x3b00 [ 989.013862][T27265] ? ieee80211_tasklet_handler+0x20/0x20 [ 989.019523][T27265] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 989.025419][T27265] ? __debug_object_init+0xed/0x440 [ 989.030616][T27265] ? memset+0x1e/0x40 [ 989.034594][T27265] ? __hrtimer_init+0x189/0x270 [ 989.039443][T27265] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 989.045164][T27265] ? memcpy+0x3c/0x60 [ 989.049145][T27265] hwsim_new_radio_nl+0xab7/0xc90 [ 989.054177][T27265] genl_family_rcv_msg_doit+0x22f/0x350 [ 989.059717][T27265] ? end_current_label_crit_section+0x170/0x170 [ 989.065984][T27265] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 989.071877][T27265] ? bpf_lsm_capable+0x5/0x10 [ 989.076557][T27265] ? security_capable+0x85/0xb0 [ 989.081408][T27265] genl_rcv_msg+0x601/0x790 [ 989.085916][T27265] ? genl_bind+0x360/0x360 [ 989.090323][T27265] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 989.096657][T27265] netlink_rcv_skb+0x1ef/0x440 [ 989.101421][T27265] ? genl_bind+0x360/0x360 [ 989.105830][T27265] ? netlink_ack+0x1160/0x1160 [ 989.110599][T27265] ? down_read+0x1a8/0x2d0 [ 989.115013][T27265] genl_rcv+0x24/0x40 [ 989.118989][T27265] netlink_unicast+0x7ad/0x920 [ 989.123761][T27265] netlink_sendmsg+0x8ad/0xbd0 [ 989.128547][T27265] ? netlink_getsockopt+0x550/0x550 [ 989.133747][T27265] ? apparmor_socket_sendmsg+0x8a/0x330 [ 989.139299][T27265] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 989.144578][T27265] ? security_socket_sendmsg+0x7c/0xa0 [ 989.150036][T27265] ? netlink_getsockopt+0x550/0x550 [ 989.155235][T27265] ____sys_sendmsg+0x5ed/0x9a0 [ 989.160003][T27265] ? __sys_sendmsg_sock+0x30/0x30 [ 989.165027][T27265] ? __import_iovec+0x306/0x510 [ 989.169892][T27265] ? import_iovec+0x6f/0xa0 [ 989.174404][T27265] ___sys_sendmsg+0x2a2/0x360 [ 989.179089][T27265] ? __sys_sendmsg+0x2a0/0x2a0 [ 989.183872][T27265] ? ktime_get+0x7b/0x270 [ 989.188221][T27265] __se_sys_sendmsg+0x1c3/0x2b0 [ 989.193070][T27265] ? perf_trace_preemptirq_template+0x268/0x320 [ 989.199318][T27265] ? __x64_sys_sendmsg+0x80/0x80 [ 989.204265][T27265] ? lockdep_hardirqs_on+0x94/0x140 [ 989.209461][T27265] do_syscall_64+0x4c/0xa0 [ 989.213872][T27265] ? clear_bhb_loop+0x60/0xb0 [ 989.218547][T27265] ? clear_bhb_loop+0x60/0xb0 [ 989.223218][T27265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 989.229108][T27265] RIP: 0033:0x7fd4ba59f559 [ 989.233515][T27265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.253118][T27265] RSP: 002b:00007fd4bb483028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.261531][T27265] RAX: ffffffffffffffda RBX: 00007fd4ba825fa0 RCX: 00007fd4ba59f559 [ 989.269513][T27265] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 989.277477][T27265] RBP: 00007fd4ba636b20 R08: 0000000000000000 R09: 0000000000000000 [ 989.285443][T27265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.293403][T27265] R13: 00007fd4ba826038 R14: 00007fd4ba825fa0 R15: 00007ffc6b4b2048 [ 989.301384][T27265] [ 990.009867][T27299] __nla_validate_parse: 6 callbacks suppressed [ 990.009881][T27299] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.5418'. [ 990.026502][T27299] net_ratelimit: 270 callbacks suppressed [ 990.026513][T27299] netlink: zone id is out of range [ 990.038459][T27299] netlink: get zone limit has 8 unknown bytes [ 990.462528][T27308] validate_nla: 6 callbacks suppressed [ 990.462576][T27308] netlink: 'syz.0.5422': attribute type 10 has an invalid length. [ 990.541144][T27310] netlink: 'syz.1.5423': attribute type 27 has an invalid length. [ 990.551771][T27310] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5423'. [ 990.575610][T27308] bridge0: port 4(hsr0) entered disabled state [ 990.583945][T27308] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.632217][T27308] device bridge0 left promiscuous mode [ 991.396660][T27362] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.5431'. [ 991.610291][T27373] netlink: 'syz.4.5434': attribute type 3 has an invalid length. [ 991.623231][T27373] netlink: 'syz.4.5434': attribute type 1 has an invalid length. [ 991.636859][T27373] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.5434'. [ 992.139803][T27396] netlink: 'syz.0.5440': attribute type 1 has an invalid length. [ 992.177084][T27396] netlink: 'syz.0.5440': attribute type 3 has an invalid length. [ 992.186145][T27396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5440'. [ 992.459678][T27417] netlink: 'syz.2.5446': attribute type 11 has an invalid length. [ 992.538276][T27420] netlink: 'syz.4.5447': attribute type 10 has an invalid length. [ 992.553960][T27420] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5447'. [ 992.727204][T27429] netlink: 'syz.2.5451': attribute type 2 has an invalid length. [ 992.735363][T27429] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5451'. [ 992.900831][T27435] rxe_eth0 speed is unknown, defaulting to 1000 [ 992.906511][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.923458][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.999150][T27458] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5458'. [ 995.016885][T27463] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5459'. [ 995.046721][T27464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5459'. [ 995.194927][T27471] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5461'. [ 995.250679][T27471] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 995.311718][T27471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 995.371599][T27474] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5461'. [ 995.405533][T27474] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 995.441441][T27474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 996.229925][T27503] device syzkaller0 entered promiscuous mode [ 996.272464][T27506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5467'. [ 996.358510][T27503] netlink: 'syz.4.5467': attribute type 17 has an invalid length. [ 996.399162][T27503] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5467'. [ 996.428888][T27503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.439219][T27500] rxe_eth0 speed is unknown, defaulting to 1000 [ 1001.616203][T27545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5479'. [ 1001.647662][T27545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5479'. [ 1001.673028][T27545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5479'. [ 1002.026434][T27555] rxe_eth0 speed is unknown, defaulting to 1000 [ 1002.139876][T27564] netlink: 'syz.1.5483': attribute type 7 has an invalid length. [ 1002.147951][T27564] netlink: 208404 bytes leftover after parsing attributes in process `syz.1.5483'. [ 1002.315466][T27569] netlink: 'syz.1.5484': attribute type 3 has an invalid length. [ 1002.334310][T27569] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1003.080829][T27605] netlink: 'syz.4.5493': attribute type 10 has an invalid length. [ 1003.462471][T27630] netlink: 'syz.1.5500': attribute type 4 has an invalid length. [ 1003.522457][T27632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1003.529743][T27632] IPv6: NLM_F_CREATE should be set when creating new route [ 1003.537031][T27632] IPv6: NLM_F_CREATE should be set when creating new route [ 1003.544271][T27632] IPv6: NLM_F_CREATE should be set when creating new route [ 1003.643840][T27631] netlink: 'syz.1.5500': attribute type 4 has an invalid length. [ 1003.684054][T27630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1003.843052][T27645] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.5505'. [ 1004.046885][T27654] __sock_release: fasync list not empty! [ 1004.778429][T27668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5512'. [ 1004.980592][T15893] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1005.333165][T27688] netlink: 'syz.2.5516': attribute type 3 has an invalid length. [ 1005.408346][T27688] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5516'. [ 1005.818720][T27698] netlink: 'syz.0.5519': attribute type 11 has an invalid length. [ 1005.837681][T27698] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5519'. [ 1007.064087][T27682] Bluetooth: hci3: command 0x2016 tx timeout [ 1007.766286][T27771] netlink: 'syz.4.5538': attribute type 2 has an invalid length. [ 1007.791855][T27771] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5538'. [ 1010.758333][T27809] netlink: 'syz.4.5547': attribute type 21 has an invalid length. [ 1010.793178][T27809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5547'. [ 1010.804626][T27809] netlink: 'syz.4.5547': attribute type 1 has an invalid length. [ 1011.297576][T27830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5552'. [ 1011.710057][T27834] netlink: 'syz.4.5554': attribute type 2 has an invalid length. [ 1011.741825][T27834] netlink: 'syz.4.5554': attribute type 8 has an invalid length. [ 1011.794034][T27834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5554'. [ 1011.813979][T27839] netlink: 'syz.4.5554': attribute type 2 has an invalid length. [ 1011.821737][T27839] netlink: 'syz.4.5554': attribute type 8 has an invalid length. [ 1011.846528][T27839] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5554'. [ 1011.927936][T27844] netlink: 'syz.2.5555': attribute type 33 has an invalid length. [ 1011.938758][T27844] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5555'. [ 1014.679839][T27869] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1014.728542][T27869] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1014.747827][T27869] CPU: 0 PID: 27869 Comm: syz.4.5564 Not tainted syzkaller #0 [ 1014.755344][T27869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1014.765426][T27869] Call Trace: [ 1014.768719][T27869] [ 1014.771660][T27869] dump_stack_lvl+0x188/0x24e [ 1014.776364][T27869] ? show_regs_print_info+0x12/0x12 [ 1014.781585][T27869] ? load_image+0x410/0x410 [ 1014.786122][T27869] sysfs_warn_dup+0x8a/0xa0 [ 1014.790644][T27869] sysfs_do_create_link_sd+0xc0/0x110 [ 1014.796039][T27869] device_add+0x83b/0x1050 [ 1014.800578][T27869] wiphy_register+0x1d8b/0x2aa0 [ 1014.805488][T27869] ? cfg80211_event_work+0x40/0x40 [ 1014.810627][T27869] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1014.816819][T27869] ieee80211_register_hw+0x2e33/0x3b00 [ 1014.822333][T27869] ? ieee80211_register_hw+0xf01/0x3b00 [ 1014.827903][T27869] ? ieee80211_register_hw+0xf01/0x3b00 [ 1014.833478][T27869] ? ieee80211_tasklet_handler+0x20/0x20 [ 1014.839129][T27869] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1014.845047][T27869] ? __debug_object_init+0xed/0x440 [ 1014.850269][T27869] ? memset+0x1e/0x40 [ 1014.854265][T27869] ? __hrtimer_init+0x189/0x270 [ 1014.859139][T27869] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1014.864894][T27869] hwsim_new_radio_nl+0xab7/0xc90 [ 1014.869945][T27869] genl_family_rcv_msg_doit+0x22f/0x350 [ 1014.875508][T27869] ? end_current_label_crit_section+0x170/0x170 [ 1014.881786][T27869] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1014.887705][T27869] ? bpf_lsm_capable+0x5/0x10 [ 1014.892395][T27869] ? security_capable+0x85/0xb0 [ 1014.897285][T27869] genl_rcv_msg+0x601/0x790 [ 1014.901812][T27869] ? genl_bind+0x360/0x360 [ 1014.906243][T27869] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1014.912603][T27869] netlink_rcv_skb+0x1ef/0x440 [ 1014.917391][T27869] ? genl_bind+0x360/0x360 [ 1014.921827][T27869] ? netlink_ack+0x1160/0x1160 [ 1014.926623][T27869] ? down_read+0x1a8/0x2d0 [ 1014.931058][T27869] genl_rcv+0x24/0x40 [ 1014.935053][T27869] netlink_unicast+0x7ad/0x920 [ 1014.939850][T27869] netlink_sendmsg+0x8ad/0xbd0 [ 1014.944646][T27869] ? netlink_getsockopt+0x550/0x550 [ 1014.949911][T27869] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1014.955483][T27869] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1014.960788][T27869] ? security_socket_sendmsg+0x7c/0xa0 [ 1014.966275][T27869] ? netlink_getsockopt+0x550/0x550 [ 1014.971499][T27869] ____sys_sendmsg+0x5ed/0x9a0 [ 1014.976306][T27869] ? __sys_sendmsg_sock+0x30/0x30 [ 1014.981349][T27869] ? __import_iovec+0x306/0x510 [ 1014.986231][T27869] ? import_iovec+0x6f/0xa0 [ 1014.990763][T27869] ___sys_sendmsg+0x2a2/0x360 [ 1014.995468][T27869] ? __sys_sendmsg+0x2a0/0x2a0 [ 1015.000296][T27869] ? ktime_get+0x7b/0x270 [ 1015.004671][T27869] __se_sys_sendmsg+0x1c3/0x2b0 [ 1015.009551][T27869] ? __x64_sys_sendmsg+0x80/0x80 [ 1015.014613][T27869] ? lockdep_hardirqs_on+0x94/0x140 [ 1015.019830][T27869] do_syscall_64+0x4c/0xa0 [ 1015.024263][T27869] ? clear_bhb_loop+0x60/0xb0 [ 1015.028951][T27869] ? clear_bhb_loop+0x60/0xb0 [ 1015.033641][T27869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1015.039556][T27869] RIP: 0033:0x7fcebb19f559 [ 1015.043982][T27869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.063600][T27869] RSP: 002b:00007fcebbffe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1015.072030][T27869] RAX: ffffffffffffffda RBX: 00007fcebb425fa0 RCX: 00007fcebb19f559 [ 1015.080013][T27869] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1015.088000][T27869] RBP: 00007fcebb236b20 R08: 0000000000000000 R09: 0000000000000000 [ 1015.095989][T27869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.103971][T27869] R13: 00007fcebb426038 R14: 00007fcebb425fa0 R15: 00007fffa5d25bd8 [ 1015.111972][T27869] [ 1015.244091][T27878] netlink: 'syz.0.5565': attribute type 11 has an invalid length. [ 1015.266402][T27878] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5565'. [ 1015.347841][T27877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1015.445197][T27885] netlink: 'syz.3.5567': attribute type 2 has an invalid length. [ 1015.452982][T27885] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5567'. [ 1015.615248][T27890] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5570'. [ 1016.213823][T27892] netlink: 'syz.2.5568': attribute type 3 has an invalid length. [ 1016.233359][T27892] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5568'. [ 1016.585251][T27907] netlink: 'syz.0.5573': attribute type 29 has an invalid length. [ 1016.609887][T27907] netlink: 'syz.0.5573': attribute type 29 has an invalid length. [ 1016.814659][T27912] netlink: 'syz.0.5573': attribute type 29 has an invalid length. [ 1018.839934][T27922] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5577'. [ 1018.902970][T27925] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5578'. [ 1020.187743][T27961] netlink: 'syz.4.5586': attribute type 4 has an invalid length. [ 1022.236375][T27989] netlink: 'syz.2.5593': attribute type 3 has an invalid length. [ 1022.259828][T27989] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5593'. [ 1023.173332][T27682] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1023.184145][T27682] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1023.195222][T27682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1023.204839][T27682] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1023.212540][T27682] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1023.224132][T27682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1023.628181][ T4274] Bluetooth: hci2: unexpected event 0x31 length: 246 > 6 [ 1023.759331][T28049] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5608'. [ 1023.816685][ T9723] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.900316][T28035] rxe_eth0 speed is unknown, defaulting to 1000 [ 1023.983048][ T9723] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.132017][ T9723] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.186090][T28065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5611'. [ 1024.268960][ T9723] batman_adv: batadv0: Removing interface: netdevsim0 [ 1024.300355][ T9723] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.322231][T28073] netlink: 'syz.2.5612': attribute type 21 has an invalid length. [ 1024.330326][T28073] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5612'. [ 1024.339706][T28073] netlink: 'syz.2.5612': attribute type 5 has an invalid length. [ 1024.347519][T28073] netlink: 'syz.2.5612': attribute type 6 has an invalid length. [ 1024.356079][T28073] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5612'. [ 1024.391887][T28075] netlink: 'syz.4.5613': attribute type 10 has an invalid length. [ 1024.692417][ T9723] tipc: Left network mode [ 1024.920134][T28101] netlink: 'syz.2.5620': attribute type 29 has an invalid length. [ 1025.169321][T28035] chnl_net:caif_netlink_parms(): no params data found [ 1025.190475][T28112] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5621'. [ 1025.199263][T28101] netlink: 'syz.2.5620': attribute type 29 has an invalid length. [ 1025.228663][T28106] tipc: Started in network mode [ 1025.278464][T28106] tipc: Node identity 9215a268, cluster identity 4711 [ 1025.289406][T28106] tipc: Node number set to 2450891368 [ 1025.304009][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 1025.324810][T28108] netlink: 'syz.4.5621': attribute type 10 has an invalid length. [ 1025.468442][T28103] netlink: 'syz.2.5620': attribute type 29 has an invalid length. [ 1025.589257][T28120] netlink: 'syz.0.5623': attribute type 3 has an invalid length. [ 1025.613096][T28120] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1025.804087][T28119] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5623'. [ 1025.944679][T28125] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5625'. [ 1026.353468][T28035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.384450][T28035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.417498][T28035] device bridge_slave_0 entered promiscuous mode [ 1026.448850][T28035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.476425][T28035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.506055][T28035] device bridge_slave_1 entered promiscuous mode [ 1026.651273][T28035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.679645][T28140] rxe_eth0 speed is unknown, defaulting to 1000 [ 1026.728601][T28035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.907984][T28035] team0: Port device team_slave_0 added [ 1026.951879][T28165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5632'. [ 1027.078937][T28035] team0: Port device team_slave_1 added [ 1027.149437][T28035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.158704][T28035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.198781][T28035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.247071][T28035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.265304][T28035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.357897][T28035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.383989][T27682] Bluetooth: hci4: command 0x041b tx timeout [ 1027.518484][T28035] device hsr_slave_0 entered promiscuous mode [ 1027.578779][T28035] device hsr_slave_1 entered promiscuous mode [ 1028.251223][T28035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.264536][T28035] Cannot create hsr debugfs directory [ 1029.152375][ T9723] device hsr_slave_0 left promiscuous mode [ 1029.173618][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.191619][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.209460][ T9723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.222728][ T9723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.316903][T28225] netlink: 'syz.0.5644': attribute type 29 has an invalid length. [ 1029.330472][T28227] netlink: 'syz.0.5644': attribute type 29 has an invalid length. [ 1029.464008][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 1030.411894][T28254] delete_channel: no stack [ 1030.421554][T28254] delete_channel: no stack [ 1030.784835][ T9723] device veth1_vlan left promiscuous mode [ 1030.790800][ T9723] device veth0_vlan left promiscuous mode [ 1031.421298][T28225] netlink: 'syz.0.5644': attribute type 29 has an invalid length. [ 1031.561265][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 1031.632774][T28263] netlink: 'syz.3.5649': attribute type 28 has an invalid length. [ 1031.647165][T28263] netlink: 'syz.3.5649': attribute type 29 has an invalid length. [ 1031.659272][T28263] __nla_validate_parse: 1 callbacks suppressed [ 1031.659309][T28263] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1031.879136][T28267] netlink: 'syz.0.5650': attribute type 3 has an invalid length. [ 1031.904254][T28273] netlink: 'syz.2.5652': attribute type 15 has an invalid length. [ 1031.923653][T28273] netlink: 'syz.2.5652': attribute type 7 has an invalid length. [ 1031.964028][T28267] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5650'. [ 1032.277490][T28276] netlink: 'syz.0.5650': attribute type 10 has an invalid length. [ 1032.299579][T28296] netlink: 'syz.4.5655': attribute type 2 has an invalid length. [ 1032.341865][T28296] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5655'. [ 1032.372823][T28299] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5655'. [ 1032.436469][T28299] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1032.525960][T28035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1032.554143][T28035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.568051][T28035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.578643][T28035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.800315][T28035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.828763][T28324] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1034.880646][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1034.903823][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1034.924771][T28035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.957097][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.971706][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.982519][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.989700][ T9742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.027208][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1035.046046][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1035.064188][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1035.085891][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.093051][ T9742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.121678][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1035.142720][T28351] validate_nla: 1 callbacks suppressed [ 1035.142737][T28351] netlink: 'syz.2.5668': attribute type 2 has an invalid length. [ 1035.215575][T28351] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.5668'. [ 1035.306204][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1035.315424][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1035.325226][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1035.333975][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1035.342828][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1035.375763][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1035.409748][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1035.442766][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.467116][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1035.478258][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.489302][T28035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1036.081399][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1036.092859][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1036.115742][T28035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.140854][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1036.155363][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1036.223263][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1036.251466][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1036.281612][T28035] device veth0_vlan entered promiscuous mode [ 1036.295432][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.318120][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.349663][T28035] device veth1_vlan entered promiscuous mode [ 1036.435261][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1036.467428][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1036.482621][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1036.511009][ T9723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1036.535565][T28035] device veth0_macvtap entered promiscuous mode [ 1036.568133][T28035] device veth1_macvtap entered promiscuous mode [ 1036.621712][T28035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1036.661904][T28035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.698533][T28035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.728767][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1036.740096][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1036.758245][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1036.781049][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1036.817545][T28035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.839792][T28035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.860159][T28035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.881028][T28035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.926822][T28035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.946651][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1036.964458][T20067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1036.993993][T28425] netlink: 'syz.2.5681': attribute type 10 has an invalid length. [ 1037.229454][T28035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.288043][T28035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.333836][T28035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.334300][T28441] netlink: 'syz.4.5684': attribute type 2 has an invalid length. [ 1037.342711][T28035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.390448][T28437] netlink: 'syz.0.5682': attribute type 25 has an invalid length. [ 1037.415288][T28437] netlink: 'syz.0.5682': attribute type 9 has an invalid length. [ 1037.423354][T28437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5682'. [ 1037.552729][T28441] device 0 entered promiscuous mode [ 1040.195064][ T9729] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.202894][ T9729] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.247625][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1040.264832][T28460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5685'. [ 1040.373686][ T7607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1040.381687][ T7607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.415353][ T7607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1040.639902][T28487] netlink: 'syz.4.5690': attribute type 3 has an invalid length. [ 1040.683977][T28487] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5690'. [ 1040.871480][T28502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.354876][T28510] netlink: 'syz.1.5695': attribute type 3 has an invalid length. [ 1041.384735][T28510] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5695'. [ 1042.064247][T28542] netlink: 'syz.3.5703': attribute type 10 has an invalid length. [ 1042.261736][T28548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5705'. [ 1042.312002][T28554] netlink: 'syz.2.5706': attribute type 11 has an invalid length. [ 1042.363833][T28554] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1042.644448][T28570] netlink: 'syz.1.5710': attribute type 25 has an invalid length. [ 1042.683932][T28574] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.5709'. [ 1042.709560][T28570] netlink: 'syz.1.5710': attribute type 9 has an invalid length. [ 1042.799171][T28570] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1042.812028][T28556] ================================================================== [ 1042.820136][T28556] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1042.827944][T28556] Write of size 80 at addr ffff888054d4de10 by task syz.3.5707/28556 [ 1042.835999][T28556] [ 1042.838314][T28556] CPU: 0 PID: 28556 Comm: syz.3.5707 Not tainted syzkaller #0 [ 1042.845762][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1042.855809][T28556] Call Trace: [ 1042.859081][T28556] [ 1042.862001][T28556] dump_stack_lvl+0x188/0x24e [ 1042.866680][T28556] ? __lock_acquire+0x7ea0/0x7ea0 [ 1042.871701][T28556] ? show_regs_print_info+0x12/0x12 [ 1042.876891][T28556] ? load_image+0x410/0x410 [ 1042.881393][T28556] ? __virt_addr_valid+0x467/0x540 [ 1042.886524][T28556] ? __bpf_get_stackid+0x6c9/0x920 [ 1042.891634][T28556] print_report+0xa8/0x210 [ 1042.896052][T28556] kasan_report+0x10b/0x140 [ 1042.900557][T28556] ? __bpf_get_stackid+0x6c9/0x920 [ 1042.905663][T28556] kasan_check_range+0x235/0x290 [ 1042.910597][T28556] ? __bpf_get_stackid+0x6c9/0x920 [ 1042.915701][T28556] memcpy+0x3c/0x60 [ 1042.919503][T28556] __bpf_get_stackid+0x6c9/0x920 [ 1042.924436][T28556] bpf_get_stackid_pe+0x33f/0x400 [ 1042.929454][T28556] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1042.934903][T28556] bpf_overflow_handler+0x50b/0x790 [ 1042.940095][T28556] ? bpf_overflow_handler+0xd9/0x790 [ 1042.945369][T28556] ? perf_swevent_overflow+0x230/0x230 [ 1042.950817][T28556] ? ct_irq_exit_irqson+0x113/0x170 [ 1042.956011][T28556] ? kernel_text_address+0x9c/0xd0 [ 1042.961121][T28556] ? __perf_event_account_interrupt+0x187/0x280 [ 1042.967358][T28556] __perf_event_overflow+0x457/0x630 [ 1042.972643][T28556] perf_swevent_event+0x315/0x570 [ 1042.977664][T28556] ? perf_tp_event+0xc10/0xc10 [ 1042.982467][T28556] ___perf_sw_event+0x498/0x6d0 [ 1042.987328][T28556] ? ___perf_sw_event+0x184/0x6d0 [ 1042.992346][T28556] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1042.998758][T28556] ? __lock_acquire+0x142d/0x7ea0 [ 1043.003805][T28556] ? verify_lock_unused+0x140/0x140 [ 1043.008998][T28556] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1043.014975][T28556] ? lock_chain_count+0x20/0x20 [ 1043.019817][T28556] ? lock_chain_count+0x20/0x20 [ 1043.024660][T28556] __perf_sw_event+0x135/0x260 [ 1043.029418][T28556] do_user_addr_fault+0x497/0xb20 [ 1043.034441][T28556] ? trace_hardirqs_off_finish+0x86/0x180 [ 1043.040155][T28556] exc_page_fault+0x60/0x100 [ 1043.044739][T28556] asm_exc_page_fault+0x22/0x30 [ 1043.049578][T28556] RIP: 0010:copy_user_short_string+0x22/0x40 [ 1043.055554][T28556] Code: e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 [ 1043.075150][T28556] RSP: 0018:ffffc90003887ac8 EFLAGS: 00050202 [ 1043.081207][T28556] RAX: ffffffff8416c501 RBX: 0000000000000004 RCX: 0000000000000004 [ 1043.089191][T28556] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffc90003887c10 [ 1043.097152][T28556] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1043.105109][T28556] R10: dffffc0000000000 R11: fffff52000710f82 R12: 00007fffffffeffc [ 1043.113069][T28556] R13: dffffc0000000000 R14: ffffc90003887c10 R15: 0000000000000000 [ 1043.121036][T28556] ? _copy_from_user+0xa1/0x170 [ 1043.125891][T28556] _copy_from_user+0xf4/0x170 [ 1043.130560][T28556] dev_ethtool+0xc2/0x12f0 [ 1043.134967][T28556] ? copy_regset_to_user+0x1f0/0x1f0 [ 1043.140247][T28556] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1043.146481][T28556] ? apparmor_capable+0x12c/0x190 [ 1043.151499][T28556] ? bpf_lsm_capable+0x5/0x10 [ 1043.156169][T28556] ? security_capable+0x85/0xb0 [ 1043.161007][T28556] ? capable+0x84/0xe0 [ 1043.165072][T28556] ? dev_load+0x1d/0x1e0 [ 1043.169304][T28556] dev_ioctl+0x474/0xe80 [ 1043.173541][T28556] sock_do_ioctl+0x245/0x320 [ 1043.178123][T28556] ? sock_show_fdinfo+0xb0/0xb0 [ 1043.182966][T28556] sock_ioctl+0x48a/0x700 [ 1043.187290][T28556] ? sock_poll+0x420/0x420 [ 1043.191702][T28556] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1043.196633][T28556] ? security_file_ioctl+0x7c/0xa0 [ 1043.201733][T28556] ? sock_poll+0x420/0x420 [ 1043.206161][T28556] __se_sys_ioctl+0xfa/0x170 [ 1043.210746][T28556] do_syscall_64+0x4c/0xa0 [ 1043.215151][T28556] ? clear_bhb_loop+0x60/0xb0 [ 1043.219814][T28556] ? clear_bhb_loop+0x60/0xb0 [ 1043.224480][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.230367][T28556] RIP: 0033:0x7f257b99f559 [ 1043.234773][T28556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1043.254368][T28556] RSP: 002b:00007f257c89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1043.262771][T28556] RAX: ffffffffffffffda RBX: 00007f257bc25fa0 RCX: 00007f257b99f559 [ 1043.270732][T28556] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 000000000000000a [ 1043.278719][T28556] RBP: 00007f257ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1043.286678][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.294637][T28556] R13: 00007f257bc26038 R14: 00007f257bc25fa0 R15: 00007ffd8a4ed7b8 [ 1043.302615][T28556] [ 1043.305622][T28556] [ 1043.307930][T28556] Allocated by task 28556: [ 1043.312328][T28556] kasan_set_track+0x4b/0x70 [ 1043.316911][T28556] __kasan_kmalloc+0x8e/0xa0 [ 1043.321491][T28556] __kmalloc_node+0xb2/0x240 [ 1043.326068][T28556] bpf_map_area_alloc+0x47/0xe0 [ 1043.330909][T28556] prealloc_elems_and_freelist+0x86/0x1c0 [ 1043.336614][T28556] stack_map_alloc+0x386/0x510 [ 1043.341363][T28556] map_create+0x524/0xff0 [ 1043.345680][T28556] __sys_bpf+0x38b/0x780 [ 1043.349910][T28556] __x64_sys_bpf+0x78/0x90 [ 1043.354318][T28556] do_syscall_64+0x4c/0xa0 [ 1043.358717][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.364621][T28556] [ 1043.366932][T28556] The buggy address belongs to the object at ffff888054d4de00 [ 1043.366932][T28556] which belongs to the cache kmalloc-cg-64 of size 64 [ 1043.381059][T28556] The buggy address is located 16 bytes inside of [ 1043.381059][T28556] 64-byte region [ffff888054d4de00, ffff888054d4de40) [ 1043.394146][T28556] [ 1043.396456][T28556] The buggy address belongs to the physical page: [ 1043.402859][T28556] page:ffffea0001535340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54d4d [ 1043.413026][T28556] memcg:ffff8880795aae01 [ 1043.417267][T28556] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1043.424830][T28556] raw: 00fff00000000200 ffffea0001653380 dead000000000002 ffff888018442780 [ 1043.433399][T28556] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880795aae01 [ 1043.441961][T28556] page dumped because: kasan: bad access detected [ 1043.448364][T28556] page_owner tracks the page as allocated [ 1043.454062][T28556] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 18378, tgid 18378 (syz-executor), ts 948807487223, free_ts 948807074649 [ 1043.472628][T28556] post_alloc_hook+0x173/0x1a0 [ 1043.477388][T28556] get_page_from_freelist+0x206b/0x2180 [ 1043.482923][T28556] __alloc_pages+0x1ec/0x4f0 [ 1043.487503][T28556] alloc_slab_page+0x5d/0x180 [ 1043.492171][T28556] new_slab+0x87/0x2d0 [ 1043.496229][T28556] ___slab_alloc+0xbc5/0x1240 [ 1043.500896][T28556] __kmem_cache_alloc_node+0x126/0x270 [ 1043.506343][T28556] kmalloc_trace+0x26/0xe0 [ 1043.510743][T28556] alloc_fdtable+0xca/0x2c0 [ 1043.515235][T28556] dup_fd+0x743/0xa20 [ 1043.519205][T28556] copy_files+0x72/0xe0 [ 1043.523350][T28556] copy_process+0x180e/0x4070 [ 1043.528029][T28556] kernel_clone+0x24b/0x900 [ 1043.532518][T28556] __x64_sys_clone+0x1a7/0x220 [ 1043.537273][T28556] do_syscall_64+0x4c/0xa0 [ 1043.541676][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.547559][T28556] page last free stack trace: [ 1043.552219][T28556] free_unref_page_prepare+0x8e5/0x9e0 [ 1043.557672][T28556] free_unref_page+0x2e/0x3f0 [ 1043.562340][T28556] __vunmap+0x874/0xa40 [ 1043.566485][T28556] __do_replace+0x86d/0x980 [ 1043.570988][T28556] do_ip6t_set_ctl+0xb3d/0xe10 [ 1043.575743][T28556] nf_setsockopt+0x25f/0x280 [ 1043.580323][T28556] __sys_setsockopt+0x2bf/0x3d0 [ 1043.585164][T28556] __x64_sys_setsockopt+0xb1/0xc0 [ 1043.590177][T28556] do_syscall_64+0x4c/0xa0 [ 1043.594578][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.600463][T28556] [ 1043.602773][T28556] Memory state around the buggy address: [ 1043.608406][T28556] ffff888054d4dd00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1043.616451][T28556] ffff888054d4dd80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1043.624498][T28556] >ffff888054d4de00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1043.632542][T28556] ^ [ 1043.637893][T28556] ffff888054d4de80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1043.645938][T28556] ffff888054d4df00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1043.653991][T28556] ================================================================== [ 1043.662045][T28556] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1043.669222][T28556] CPU: 0 PID: 28556 Comm: syz.3.5707 Not tainted syzkaller #0 [ 1043.676667][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1043.686710][T28556] Call Trace: [ 1043.689988][T28556] [ 1043.692907][T28556] dump_stack_lvl+0x188/0x24e [ 1043.697574][T28556] ? memcpy+0x3c/0x60 [ 1043.701543][T28556] ? show_regs_print_info+0x12/0x12 [ 1043.706730][T28556] ? load_image+0x410/0x410 [ 1043.711230][T28556] panic+0x2d3/0x710 [ 1043.715120][T28556] ? bpf_jit_dump+0xd0/0xd0 [ 1043.719618][T28556] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1043.725501][T28556] ? _raw_spin_unlock+0x40/0x40 [ 1043.730342][T28556] ? print_memory_metadata+0x314/0x400 [ 1043.735794][T28556] check_panic_on_warn+0x80/0xa0 [ 1043.740741][T28556] ? __bpf_get_stackid+0x6c9/0x920 [ 1043.745857][T28556] end_report+0x66/0x110 [ 1043.750102][T28556] kasan_report+0x118/0x140 [ 1043.754606][T28556] ? __bpf_get_stackid+0x6c9/0x920 [ 1043.759714][T28556] kasan_check_range+0x235/0x290 [ 1043.764648][T28556] ? __bpf_get_stackid+0x6c9/0x920 [ 1043.769753][T28556] memcpy+0x3c/0x60 [ 1043.773554][T28556] __bpf_get_stackid+0x6c9/0x920 [ 1043.778487][T28556] bpf_get_stackid_pe+0x33f/0x400 [ 1043.783502][T28556] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1043.788951][T28556] bpf_overflow_handler+0x50b/0x790 [ 1043.794146][T28556] ? bpf_overflow_handler+0xd9/0x790 [ 1043.799419][T28556] ? perf_swevent_overflow+0x230/0x230 [ 1043.804863][T28556] ? ct_irq_exit_irqson+0x113/0x170 [ 1043.810051][T28556] ? kernel_text_address+0x9c/0xd0 [ 1043.815154][T28556] ? __perf_event_account_interrupt+0x187/0x280 [ 1043.821386][T28556] __perf_event_overflow+0x457/0x630 [ 1043.826665][T28556] perf_swevent_event+0x315/0x570 [ 1043.831687][T28556] ? perf_tp_event+0xc10/0xc10 [ 1043.836446][T28556] ___perf_sw_event+0x498/0x6d0 [ 1043.841295][T28556] ? ___perf_sw_event+0x184/0x6d0 [ 1043.846315][T28556] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1043.852722][T28556] ? __lock_acquire+0x142d/0x7ea0 [ 1043.857747][T28556] ? verify_lock_unused+0x140/0x140 [ 1043.862936][T28556] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1043.868913][T28556] ? lock_chain_count+0x20/0x20 [ 1043.873760][T28556] ? lock_chain_count+0x20/0x20 [ 1043.878607][T28556] __perf_sw_event+0x135/0x260 [ 1043.883366][T28556] do_user_addr_fault+0x497/0xb20 [ 1043.888385][T28556] ? trace_hardirqs_off_finish+0x86/0x180 [ 1043.894096][T28556] exc_page_fault+0x60/0x100 [ 1043.898681][T28556] asm_exc_page_fault+0x22/0x30 [ 1043.903517][T28556] RIP: 0010:copy_user_short_string+0x22/0x40 [ 1043.909494][T28556] Code: e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 <8a> 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 [ 1043.929089][T28556] RSP: 0018:ffffc90003887ac8 EFLAGS: 00050202 [ 1043.935146][T28556] RAX: ffffffff8416c501 RBX: 0000000000000004 RCX: 0000000000000004 [ 1043.943102][T28556] RDX: 0000000000000004 RSI: 0000000000000000 RDI: ffffc90003887c10 [ 1043.951059][T28556] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1043.959018][T28556] R10: dffffc0000000000 R11: fffff52000710f82 R12: 00007fffffffeffc [ 1043.966985][T28556] R13: dffffc0000000000 R14: ffffc90003887c10 R15: 0000000000000000 [ 1043.974955][T28556] ? _copy_from_user+0xa1/0x170 [ 1043.979804][T28556] _copy_from_user+0xf4/0x170 [ 1043.984473][T28556] dev_ethtool+0xc2/0x12f0 [ 1043.988880][T28556] ? copy_regset_to_user+0x1f0/0x1f0 [ 1043.994175][T28556] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1044.000423][T28556] ? apparmor_capable+0x12c/0x190 [ 1044.005460][T28556] ? bpf_lsm_capable+0x5/0x10 [ 1044.010131][T28556] ? security_capable+0x85/0xb0 [ 1044.014976][T28556] ? capable+0x84/0xe0 [ 1044.019037][T28556] ? dev_load+0x1d/0x1e0 [ 1044.023268][T28556] dev_ioctl+0x474/0xe80 [ 1044.027504][T28556] sock_do_ioctl+0x245/0x320 [ 1044.032084][T28556] ? sock_show_fdinfo+0xb0/0xb0 [ 1044.036928][T28556] sock_ioctl+0x48a/0x700 [ 1044.041256][T28556] ? sock_poll+0x420/0x420 [ 1044.045673][T28556] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1044.050602][T28556] ? security_file_ioctl+0x7c/0xa0 [ 1044.055704][T28556] ? sock_poll+0x420/0x420 [ 1044.060112][T28556] __se_sys_ioctl+0xfa/0x170 [ 1044.064725][T28556] do_syscall_64+0x4c/0xa0 [ 1044.069128][T28556] ? clear_bhb_loop+0x60/0xb0 [ 1044.073793][T28556] ? clear_bhb_loop+0x60/0xb0 [ 1044.078458][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.084345][T28556] RIP: 0033:0x7f257b99f559 [ 1044.088752][T28556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1044.108348][T28556] RSP: 002b:00007f257c89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1044.116751][T28556] RAX: ffffffffffffffda RBX: 00007f257bc25fa0 RCX: 00007f257b99f559 [ 1044.124710][T28556] RDX: 00002000000001c0 RSI: 0000000000008946 RDI: 000000000000000a [ 1044.132668][T28556] RBP: 00007f257ba36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1044.140625][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1044.148602][T28556] R13: 00007f257bc26038 R14: 00007f257bc25fa0 R15: 00007ffd8a4ed7b8 [ 1044.156568][T28556] [ 1044.159702][T28556] Kernel Offset: disabled [ 1044.164016][T28556] Rebooting in 86400 seconds..