last executing test programs: 8.060039976s ago: executing program 3 (id=2667): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1c, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0x2, 0x3, 0x2) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000080), 0x0}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8088, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x400200, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xd}, 0x10c202, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socketpair(0x26, 0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@fwd, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{}, {}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @ptr={0xa, 0x0, 0x0, 0x2, 0x1}]}}, 0x0, 0x5a}, 0x28) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000007c0), 0x9c) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000800)=r3, 0x21) (async) close(r0) (async) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) (async) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 7.263566395s ago: executing program 3 (id=2670): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000100), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/11, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000440)="7807f55fc2ee5a2928adf3286b3b0bf078bd86704601c2504650a835c8d022d642576d1b8fd39bff8804137c4746c2b011651b1901e0682d24b879578a73e6937ff40a238f1f9597ef9bc85a86f99ccbbf532f32b842df0550168161aed1311f886d138a8b57f51afd4a2be350", &(0x7f00000004c0)=""/55}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xa, &(0x7f00000005c0)=@framed={{}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3f}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000100), &(0x7f0000000540)='%pB \x00'}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"/11, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r1, &(0x7f0000000440)="7807f55fc2ee5a2928adf3286b3b0bf078bd86704601c2504650a835c8d022d642576d1b8fd39bff8804137c4746c2b011651b1901e0682d24b879578a73e6937ff40a238f1f9597ef9bc85a86f99ccbbf532f32b842df0550168161aed1311f886d138a8b57f51afd4a2be350", &(0x7f00000004c0)=""/55}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xa, &(0x7f00000005c0)=@framed={{}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3f}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) 7.141929468s ago: executing program 1 (id=2671): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000fbff000000000000000000001400000000000053203ba03d24405c6397f642ac9787375d29f90682"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f00)={r1, &(0x7f0000000f40), 0x0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135, 0x0, 0x2e}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="400bfc466400010000000000004dbe0bbf8b0200e28de908029919ccaad18f5de3f660d40144eae25350d5627ea862e396a7a2f3bdf9fba5bb1874ae7e9f9598c7ee6d13e45aa2dd732e417cf371afa194dda2f2cb9bd9b71d62667401b16e16fea64a95a729032b3dff1d8f92d442d44336f8e39df105ce2126b6e09209a7bc29268f3f6bfbcbc672afafe354ee33f035d4d3b751b4885787575801f54536edde562a6cdc1a8b1c667c19c5b2ea2c4a995bf2568bf7280df331a4bff3d71d132757ed9435f40ef32b651f397af5779bebe5cf60c8ab4a041bc9d0b6e244b73d66367d7a64a52d4f803fc0647dda537e095db66755", @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000300"/28], 0x50) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)) close(r3) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f0000001000)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001100)=@l2tp6={0xa, 0x0, 0xfffffffc, @dev, 0x805, 0x10000}, 0x80, 0x0, 0xfffffffffffffd67}, 0x50a0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6b, &(0x7f0000001180)=r7, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r8, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000011c0)=""/4103, 0x1007}, {&(0x7f0000002200)=""/4113, 0x1011}, {&(0x7f0000003240)=""/49, 0x31}, {&(0x7f0000003280)=""/75, 0x4b}, {&(0x7f0000003300)=""/32, 0x20}], 0x5}, 0x2163) gettid() perf_event_open(&(0x7f0000000c80)={0x5, 0x80, 0x10, 0x5, 0x3, 0x0, 0x0, 0x3ff, 0x40000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000c40)}, 0x10009, 0x401, 0xffff, 0x9, 0x6, 0x2, 0x80, 0x0, 0xe69, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000980)={r8}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) r9 = socket$kcm(0xa, 0x5, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000380), 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x1e, &(0x7f00000003c0)=r10, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1}, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x3, 0x10}, 0xc) 6.923235723s ago: executing program 3 (id=2673): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10000) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYRESOCT=r2], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000680)={'veth1_to_bond\x00', 0x200}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000c40), 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r6, 0x10000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0), &(0x7f0000000e00), 0xde9, r7}, 0x38) socketpair(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000700)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0xf, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0xf}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r9}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 6.768152367s ago: executing program 4 (id=2674): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001c0081064e81f782db44b9040a1d080403000000f70002a11800ff000607002603600e12080b0f0000810401a800160520000140020000082f3d4e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9851627504575107ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100001340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff00e0b42a9ecbee5de6ccd40dd6e4edef5d2defd5cc9b8d3fb7c27a1059ae31c60e", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0xc, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x22, 0x2, 0x21) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x4, &(0x7f0000000ec0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x5, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x7, 0xc, &(0x7f0000001140)=ANY=[], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x0, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000004a00000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f00000006c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r9}, 0xc) openat$cgroup_ro(r6, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x60ff, 0x8cffffff) 6.546565863s ago: executing program 1 (id=2677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10, 0x110, 0xd}}], 0x10}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0x14, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001400)={r3}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b80)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000000)="0c007f00e0ffffff007fb6adc76cec7fdfa1098fa281c909dfa2c76c", 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.420180495s ago: executing program 4 (id=2678): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000300)=""/209, 0x0, 0xd1, 0x2}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000f80)=ANY=[@ANYRES64=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5, 0x8000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10000}, 0x10}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000000c0)=@in6={0xa, 0x23, 0x100000, @loopback, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="80", 0x1}], 0x1, &(0x7f0000000280)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) (async) r2 = syz_clone(0x6480, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 5.930818178s ago: executing program 1 (id=2682): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000300)="b9ff03316844268cb89e14f086dd65e0ffff00123c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x36) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080300002000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938ba3495169ea70948047ec4a5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d00004ef5d6d9342484286f95728886fffcc44841a6db702f071f468430dfe1d9d322fe7c0acfa5fefec64193071e9f00feffff16ac9609f4fb00"/216, 0xd8}], 0x1}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000000000071180b000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x5, '\x00', 0x0, @sk_skb=0x33a8f7a265777319, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f00000006c0)=0x1) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000004c0)=ANY=[@ANYRESHEX], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000008c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x308, 0x3, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r5}, &(0x7f0000000b80), &(0x7f0000000bc0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r5, 0xffffffffffffffff}, 0x4a) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0x1d, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000008500000073000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.909361308s ago: executing program 4 (id=2683): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0xfffffffffffffffc, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x0, @perf_bp={0x0}, 0x3040, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffe16) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffec0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\x00'/10], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000008000000000000001ada04000c18c0fffcffff030000000000000000"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x7f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mkdir(&(0x7f0000000a40)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000ac0)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20029, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, @perf_bp={0x0, 0x1}, 0x100722, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80000006}, 0x0, 0x1, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000b80)=0x1, 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000bc0), 0x12) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c00), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000c40)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000c80)=0x1, 0x12) close(0xffffffffffffffff) (async) socket$kcm(0x10, 0x3, 0x10) (async) close(0xffffffffffffffff) (async) socket$kcm(0x21, 0x2, 0x2) (async, rerun: 64) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000480)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.625714045s ago: executing program 4 (id=2686): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x33, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20840, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001c80)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000001cc0)={0x1, &(0x7f0000001d00)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x3, &(0x7f0000000c00)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40}, @exit], &(0x7f0000000c40)='GPL\x00', 0x2, 0x1000, &(0x7f0000000c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @jmp={0x5, 0x0, 0x1, 0x5, 0xd, 0x1}, @jmp={0x5, 0x0, 0x1, 0x8, 0x0, 0xffffffffffffffc0, 0x10}, @ringbuf_query, @jmp={0x5, 0x0, 0x4, 0xb, 0x4, 0xfffffffffffffffe, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x3, 0xda, &(0x7f0000000300)=""/218, 0x40f00, 0x5, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000800)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xd, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r4, r6, r7, r8, r9], 0x0, 0x10, 0x9}, 0x94) 5.372840611s ago: executing program 4 (id=2687): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x1, 0x9, 0x8000, 0x11, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x3, 0x18}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000001010000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000f6000000b7040000050000008500000033000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x36, 0xfffffff8, 0x9, 0x9, 0x2804, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="181d0800fc573478ee6552ea04cad216514663b17b5c407c73158c1e3d8bdf1de50fc281ab267b827c786e33e2f0cbadc02f35385b6802b242c45090d949d24185ad7705788363a8c07c2c2adda9eca44232b68110a3b8b84efd53bba3b05dedef1af097862bfbc6c2a3bcf56c37441c154bda695a", @ANYRES32=r4, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r6 = perf_event_open(&(0x7f0000001300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000001380)={0x5, 0x80, 0x0, 0x98, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x100000000001}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffbfac, 0x0, 0x0, 0x20, 0x6, 0x0, 0x300000000000000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r0, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000d00)=[0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], 0x0, 0x53, &(0x7f0000000d80)=[{}, {}], 0x10, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000fc0), 0x8) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040)={0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000b40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @alu={0x4, 0x0, 0x4, 0x6, 0x7290786ce8fbc250, 0xfffffffffffffffc}, @generic={0x7, 0xa, 0x0, 0xa78d}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xfffffc01}, @jmp={0x5, 0x0, 0x3, 0x9, 0x9, 0xfffffffffffffff8, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}], &(0x7f0000000c00)='GPL\x00', 0xffff, 0x54, &(0x7f0000000c40)=""/84, 0x41100, 0x1, '\x00', r7, 0x17, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x3, 0xa, 0x7, 0x2}, 0x10, 0xbe35, r9, 0x5, &(0x7f0000001100)=[r10], &(0x7f0000001140)=[{0x4, 0x4, 0x5, 0x6}, {0x5, 0x4, 0xb, 0x6}, {0x0, 0x9, 0x10}, {0x0, 0x5, 0x7, 0xb}, {0x3, 0x2, 0xd, 0x8}], 0x10, 0x1}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r11, 0x0, 0x2146, 0x0, &(0x7f0000000600), 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110ae000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.370051531s ago: executing program 0 (id=2688): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x20000000) 5.228538114s ago: executing program 0 (id=2689): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) (async) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0xa, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbf8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x6, &(0x7f0000000300)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffe}, @exit, @call={0x85, 0x0, 0x0, 0x4d}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbf8}, 0x94) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r3, 0x0, 0x1000, 0xad, &(0x7f0000001340)="07c3fdf5e96263dd452acfad3eb5ab6d0d313222a4b809d6b1b962c6fa6867cc935008e355bf5580e9e4e411310fdd359ad19f046c634d29718f22caf1e553f0649c38dc3d02152963a482db6315a90bd7f14847265482497898b25866b4c60a48b06865caa340fd159077b5e7f1d9fae85f48a278b30701411573aafc6b729c1febffd74ae4dba9d8e8513f8b5a4d0da6b89a3445aaa4d2609a5a26c40f81ce463d4c436c2d17ee496a7063a4a115f5a74ba3bb7544dc9fad0ddd2118d581981b8051498dd6fc3d1387630d61369fafcdac00f340c2fdab9c4c32bf00f94fadb235b362cac135845b107b54e230666c38aab158bf0f0591c6f50561f76aad2d21f1103f96b79b33460edcd44744b264a927b12d98ba39984339fcf3656b57004dcde7afc919d144da4413c965573585cfb4a06c1fc6ada08e5a3ac707673f22e861c98d75ee3a12898393534b4893c757b21b9deecf51896d754ab6d896dfec44cf25d02f6ce182e93c3c3baa349fb6b3396f05ea848b94a3b020c878ddb895deba7fe1a50fba4113f801f3a30fd3e20f7688db5c44019fd349a79af26c147f0bd35caab17b461ec6ea905d5fb58fee29a2cd5143a397f08749c5ab0311d92a21b2aa540c1ad138d4396c61a0495aa8d282b81be04ba6253389d18ad239313bc813c8a27164bddcea8820f9407a10afa5a4d9561ac5b6693f2be5dc13a530c27791fec65de7577f4f022e6b78cf7cb6e726dc6101c199467be8434f52ef6bd4cb331ce6cc172bc55de894c6c3187e7fa5f1bed618a5f1c16ac4fe61f7880a547da77b242df94090e70ebeec6d27202d36b797d36b6fdfbdfb9cefff4782079b8b55a8040052ac96b43d22896b8404ed1e76f1c9893843923b4b0237a312013306bc1cc4c43f04757888c151d7561252667dbfec45f2392bd036c2f3d9f6ff377f4752c6de726e654355250baf9b78eb71531a82ff33c4bfb77843f61125bfd89f920797f584a1ad80fffeac9cdc0bc28969552207141c124d48e469cc12e67a94d15a03ffbcf47e0e85c95de51f46d7f462470d4d16371d7644aee508c24956ecf2e8458332b4ffd3b08e8a7e289bd80d1a4d740b3987058d2c244741fa68973739706938fdffadcddef5a585f29f3980cb265da9c9c3c8118fa794bf13c531b4585388974d294dd1e619e1915df543fe2f003b33338b0685ec6fb5561b54421f46f72e8a06a226cbd8713744fae7b1c23d8240bf39ebf0d0b03088f5c38551bb0525bae35a7c1dd64e15688fd997d1e7a6283c8a72df93cfb350c9b91779fbb4300b35db7f05c2af63890d3c6cbe57e99ae541952ffcdcda8e0cfea18f87bcbb962449efe1b6adfbf4b3ed2bb1dc73120e98f11b8018455ea1c777895572ea7d094afa32c1552f0b4f3c88789ff5f5f01cadb647015cc8c8b51fbbc9f99f52aa510df8899434fd0807a10e9a98b072f8ba442ce91b223b49985b919b5753bd8bb76e598fdd725c3ef98dc4909ba33b1af05450b5df2233369f68c8deb72e674c496e97c266a6ad503288e80fcfc26bd58daf6e4e4db76978b7c22c86c2206cd5fcf55d228bb2da09b458e785d3d13b68fba8f8f0244c1d0e0f27c326b0ceb2e4df234f58eaff48d86577f4a074422b4379db3e60d51ce7e2d5b00cf1992e157863cb5636cb02c6a28e9fbdf0da45b0b34c0376a4bb3c015f9f63d18f43074aac919fe59342c6b019fd187883a57da533ad60ae823273f1f9fe2c57002de4e32f2fd25c3120f691cd20f39fcd9ca8d8673cf68fed6bed2565cd42157f77d7753d43e38b29b6669f1eeec0cf5641e511a5c5d40d2c4e53ec764bfeb3335a715005005139b08bc9a33a4745f86ea71add26e0da766eabefc0a522625ad77715370d74f3530daa5e31b8fffc4de8248f23c99457bcadf9841cf1fe1791aa5826af5ebed332a0024d8a1906414055229a2e8722710097aa9040072dfb99e2ee6a0974d864e1f6efd11afc04b4adb6c5e94f7e0b3ccc181bb210d780fa370766a5f6849702738b8a22edcdfbb6416ae6dd2c44799eff89c1d188b31143f6d8451c64f7aa7b8e7c47e108dad0d7a8cb77f5ca872fd25e1e7e3297614a850d3b08f738ab59684308ff504a400e66bb3197fecc8a576b5dcf11b4c6441ee9acb747975c097271d10ff22e9d89efdb7e823dcfc010228478bb2592412e2aec625fdefea0a7ca0fc4eee2fb4fe12a392a650fcd835e9df26cbac9d0274402bfcf4de09197e671da0c38c3dbfa0fe1aadaf9cd6c0654ba2b3a55697227e6d8bbc64788763974d78de050e2f68d24930cb2295bcb1f69a2eabd4ec23e96237598dc98a8df25e5f57c00dd0906cf3995f18c35852985f9c92919c0192208b965cd9265e42d3699eda2fe33bfc902435f680a07cad17b84330550c143f39ba590283d038a53b32939d7c18a3c9cdb3c0bf9c9c9aa8185609fa36bb3c965f0180194fd589a29daa9aa7e2a491dc60afdd93e25817d333bb18697c81824e63220f01b57555fad762f55ada228d2d85654e3dbd987fcf74aa90de8168c4cf48e3cedc06bc28a887b52af0818ba82d5ac3e46a36f08dc84314e087891f661d4f54d0d82395749f3fcb231fa238cb15a9e4738a28d6bf6b9f8d3dd01c77826e940c852f72952d142a94a374654f0bc099015a7a712072c991cff49e4b92ea3cf6dd82246400c9aabd11fbbdb9b48176678de686e0783b2850605c06ceaabcdc9abf29befc8034bbc37f9ec1d36c41e4adb07b6b2b6b7f407f6caf0a950f7b8dbba015af113632d7930395865a5530ecd0da2e6d07d609eb8dad59a3a6e6b1b7ca40837a5dbb834b3f65dc581995b84e361f5cdaf4ac341eaa8e5e6779746fb2e9e8bf710468c2674b8d2b4f923523b12b42ed632863e338cf1f0cd543764fa5a8b6798dab41fa461eef4249c655d6d55ce5e13958ce2b8540fab250e2797ec1937f6c353de78ff15308ab64c819047ac1504b3c8b3d055167d541e8ec93541779fbc30e559d40253c36a45ae10baa7c37230a4d17967219152cccfaf027a83fd37ba010907f105cc41e60e0dd29c2af2b097114cac50d91d0a6e12279664193eab7b9d37bce714496c78e0cda4ae87c8d98d9c76e9966f5110f12527729f364531b3c37cf93e2d2e7cce58d0fa32ee45ff4e0e0c1a6f2f4de3d22315b46891a4f0833bc368253fc39ed0529b187872ebb639fac4da60e1b9adbf87df41b27e8c9cc6c25f142ff178839587e4ab560ffe71fef30218105da2f8ebd704bb6646d7b7445614361091e6b52bc78fdf7300d597976062a35fa029c18e988f4f2ec25e6dd0f311ee270c92feba2a4f57455ef7161035e9d55cac3ac7b6217f64a6777acc05200b1e137dcc45d201c0b79b0d97cc82980a6c56cb4cfcd0535b3b5dae35ff60f10f9304f09de402d4e769844f2f3c7e5e7111e375361b4a5ea00434702040bd194aa4f643d6d03b6835b447bfb786e31e2ba2b2a10d1d4979a745ca97c7912b84c6c8bad8199c47387a182ea8c65bd85bd58326d84a2dc6b211ff9e015c1e22954e19b51a006d9faebe5dcbcf0a8259f142471bab46c95f3c3d47e6411ddd5128c3c7251c18b399dcbda360fd5994527978170837e843733fd8dc6432caffccef0765468a8ddb51517d57c93354799e14d374d4c96cbc506536fafbf0a5ddcf3d3b1ad7129687870f31ebd41124533a7f3ed52f11b477e432c2965373fc820e217b75fcd1640d7bb044d2a0b82ba8a338a649519f6fbc13273924b1f699fe645c4d2a11b7ba41206db8b9a9b27c9412f67df24b59ff480910fb7e569d872500d13de911f9a5c1d196e0314ce08525f486cd1bf90cc02aeeca326bf5be5e74b7c87700a505647862f88a62ec8e0af735fcfe2ee94c2be66bf63af49b2ce0815ce262c689f21a303cd484ae2991b2f3306f419ff3d3256e7fc64423760a7a852091ad295c6417beaa2ce1ebceaf1baa7ac8115937772d0ad8c04f5dd9a62e0d58ce73b74536b4b69b443a0acbaa32180ed90a7694936e60ff6605e5e86d24d7b5627df9b398683c0eeb7eae6ce6a6ded893179cfc91bf550e6651e46960aeea169a946dc6a8944affc9de19a551e5fa76113a8cd39eca4fe47f6baa1877706ffeb76fb7db37559a84a207ac25868e315fc700acca3a7848d9b0bce77c071f4c8723e4a4ffde57ba73596840dd4db4985be9a799954cc05ce251fa86a8c6ad8b45ffa4e199c551932cae81ce788d8be10dc235cdcbf10135cbbe33e710228d6be84590021e87302dba5360be43cb685edfcef4463cc00e648fdcd9b91e49d16f0d7b1337e2c9a360d7b57b8be22e905ea34b3360cb698261385271ac839640472e4091cb315013744352d87d06a00107682d5299908f647a68ad43d80c27c855ad5cf2bf9195010d0ebec3d0b5f3f07dc9f7a998a5fa62c7794c3265f08ac4f8069b5b3cb915445932cc09b1e2c3f500648fb19da5aeeb088ad7a6424c6f51b2ea7d768017617a1ba162d735de6cf10f84d22b438048f3a500ba9c039dca645d6e9be1d8bf60c100570b9c90f8a05b5accc6f914b6b3553cec35efbbb4d9cfc3bad75fa46af95a3b0d26239b3fd46e50c4eb49f581088264bb65d332c4118cf03e5aec4684863322a28477dc9a8db6a0616638dc5c1ecf3a3db6d2b65ccbf168301cb7063fe281dffa6f0e2599a46ec5f6db960d43a3f4922a0920714a41a348271b4bd86630e2e559c2b45e3a8e8d76432d6f7a185c367f6b7d4674aae6215eeacaf4dc8caabfa04fec5b6d69be1bf9c4eefce593b60480d453e23adb2f78100e762105fdbcb80cf35a3701140b343ec018f492b4e6201d1a812ae35811d04dcfd746f6d35964864cc4e271ed7e885f8bf4f30b1485c27a81a648c0a20244a67102cbdfdce98402917e6809ea43a83cf18538dd697fb6d066a8f005f1a68b71f56033bfbc4afe5405ca4f950c9ad445d4f463334234493ebb79d13c13af446d0833a3252dd6a30606c312f9b95342ebb73e06b681fdce0cd35f6bf3e3bada3ec3450b37bab3d94394a5f7af0411634c52d7b64d53ff3e6331f5f6b6ec4730b4c59bbd30d394372040abd799ffd622b10a5ce917ca6865aea38caac580c7f976bcd4308e02488af1d2cc3c8a3f1245012cdf10309c9a0e4f7d28a57ab63b2e2974d826deaf3616db3650dfc5696b8e1c5b42d7ec6f801ef05e6507bb975452637e51e426e3c75b6370f3ff30835919397b2271d78538d4cc348f9cef99b5d335bc7db384a01593d0394577fdb392800d9e1a9b70d93fb0fd4ec3e35893ae3bafd84cc2f1f3aed8e99d705ad2c9e7a7ef00a6fdd96ea752882cac0d9b045d4cbec34b747a95bd4feaa192aeafa905bfc93f3477236d207ca3c0a3c7afc31db1b1879816c61743fe25186ff064943e14a704bd59c1eb10f0c5798460ac89d4d41d23b27b2146ad3b4c8a5490358b5b98f4a00f903e3955f9f28614de9caa8bc6600bf6a36e9dfd8a08321b68445337685addf4b18cadd183c8a8a5839956307b751de3e54f121d7a09bf8b4e3f1e250125040be56982a3c841e457c229060db3b537a61b3d1c516577b313c3414924cb9691eeccfc831a47c7e1b767aa17a5b803036ffefd8145d823b98ffc06aeb4af9824b863463aa49567241b7f522d2ca28f84bf20992d924ba35886c4f864c8ecfcc8cddf76d813cbf26ac753b2e49a3577c7479dd132d22e9f4c0e1efa1a8cbdd8b2b65688005738d190e95350b1edab30cb0b14530df2230d", &(0x7f0000002340)=""/173, 0x1000, 0x0, 0x80, 0xff, &(0x7f0000002400)="45ce1364ce0975e20a1fb00908387c150ce965f590c8196d465d1aa91286e6be5690ebf6c55b91a4e4cfc9a1274334be15dc5cffb6980d98efed777d9f12ad246c6b0a5d679e0f4cff2d762ca0e92c6c408615176d9f5487aaba7cce4dd431384f5181abfeb5423b874edac7c0c23bb8feb9c309edbcf0c1ff28bebe1221bee6", &(0x7f0000002480)="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", 0x1, 0x0, 0x7f}, 0x50) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 4.16925395s ago: executing program 3 (id=2692): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x596, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9f}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc2, &(0x7f000000cf3d)=""/194, 0x0, 0x1, '\x00', 0x0, @sk_skb}, 0x94) 4.054966083s ago: executing program 3 (id=2693): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x1c, &(0x7f0000000b80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xd, 0x1c, &(0x7f0000000b80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYRES8=r3], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYRES8=r3], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r5}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xa, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x401c5820, &(0x7f00000001c0)=0x8000) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xa, 0x0, 0x5d31, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100), 0x129) r8 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xc, 0xf7, 0x64, 0x39, 0x0, 0xa9f, 0xc0008, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x8200, 0xc3, 0xbe2, 0x2, 0xfffffffffffffffe, 0x2d7, 0x3ff, 0x0, 0x6, 0x0, 0xdad}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000580)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xee941, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xee941, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x20, 0x488ba3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x0, @perf_bp={0x0, 0x8}, 0x7202, 0x403, 0x6, 0x0, 0x34d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x0, 0x0, 0xfe, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x1}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.027059401s ago: executing program 1 (id=2695): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x4, &(0x7f0000000680)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6c}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000700)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000800), 0xb5, 0x10, &(0x7f0000000840), 0x7}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40010102) sendmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040080}, 0x20000040) sendmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) close(r2) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x29, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7, &(0x7f0000000100), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="8e7e", 0x2}], 0x1}, 0x20000040) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 2.025118701s ago: executing program 0 (id=2696): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x19) (async) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006d10a3000000000204000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xe, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [], {0x95, 0x0, 0x74}}, &(0x7f0000000380)='GPL\x00', 0x2, 0xce, &(0x7f00000005c0)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback=0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x10050, 0x1c, 0x4, 0x9, 0x2, 0xffff0000, 0x5, 0x0, 0x5ff, 0x0, 0x7f}, 0x0, 0x5, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.008173312s ago: executing program 3 (id=2697): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000140)="6eee773f1c8e29", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe3}, 0x50) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000300), 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000380)=@llc={0x1a, 0x307, 0xb, 0x3, 0x9, 0x2, @broadcast}, 0xbd, &(0x7f0000000400)=[{&(0x7f0000004580)="27030200590214000600002fb96dbcf706e10500000086d5ffff1144ee1638d4b8bf4a31accbe1ba0777cfdb6ae77256da82f6184b8a3401015cc99e570000002b21c90b00000000000000000000000000006e7c2179c9b5b24722b5e2ad95b121fbeb230720e6be5ccfc9465d1388232c9857f57a0999fcc203724c03a3b63ae92af2d5180a69e53c999f6f1bbdffdfff2ece6cc2d5f724c1ff6d28b73d089dce0dcc04588788d08a9407b8def51fd11c42168fc138928252c45b8aed5ebaf7402f90a17fd5dd77a4118adc84b8ea46c0c95df099b5adaa7a07f8a0fca21787cab555a245d0bed3bce123de667ea73566d4", 0x72}, {&(0x7f00000044c0)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000004680)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741def09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d456874b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87c7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade78385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c10131947360a076d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc616710d1a7df7a9d363aabc56b4fe818c7fea0702f2663c19836d0fc670170054e7e4bff39f5c3d1d398823ccb6f8fb7cb", 0xa91}], 0x53}, 0x4004041) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000043c0), 0x401, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000004400)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000004440)={0x3, &(0x7f0000004480)=[{0x6}, {0x35, 0x0, 0x3, 0x4}, {0x44, 0x9, 0x0, 0x5}]}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x10, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000001240)='GPL\x00', 0x2, 0xfd90, &(0x7f0000001280)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r5}, &(0x7f0000001400), &(0x7f0000001440)=r4}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002640)={r4, 0x0, 0x57, 0x1000, &(0x7f0000001480)="f384de080b1d35d20370e7d216250ca3754f9e02ac8f1580a8c7f71a258b3f14524c4fbfa9a0d9d0a67ad051f153470707a74ee245aab7d12d163708e387190865b14688be49cc1ebd2fb3159216111d1ed9dd5e829e99", &(0x7f0000001500)=""/4096, 0x9, 0x0, 0x42, 0x87, &(0x7f0000002500)="6383620d8f95d10e3255f30c340cca35567e1190ce881c006992449fc0a8987388ff64f2e0a462b732e62292d0e698f76330111f1fb6fa788fa08f1d16a0e3255679", &(0x7f0000002580)="e590d2e20b22b0076230b497ffe90d876c711a3bb54d7d35661bc2761b4f4426eb94a5db50ca51cf4641e931021a35921013f25a1c9e96eaf139a526b6fde09c249eee6711e1bae13c75882fb96dc92854ec35c4b4f05ccb9ff83d00b2772011f1a817c4fc75bc6e381fdcaaf3bf4260991f2526c047f09c13646a95f4bae8b146475b0c25b929", 0x0, 0x0, 0x10001}, 0x50) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="3e8bbce90da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efa978944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb022614681c9e3762a3ad5f84751ca94e35039796705cadae08ee170149049bca1061336755d0e4ab0454262699a2e46cd90a2374f0e7201efe43a4d614461f3e841523b7bbbe662815d57", 0xd1}], 0x1}, 0x547052430a225ce3) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd0e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x8, 0x3, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb32086d2943e2d01, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0xc, &(0x7f0000004380)=ANY=[@ANYRESDEC=r2], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x501001, 0x0) r6 = perf_event_open(&(0x7f0000003580)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0xe, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"], &(0x7f0000004200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000004240), 0x200000, 0x10, &(0x7f0000004280), 0x143}, 0x48) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000042c0)={{r7}, &(0x7f0000004300), &(0x7f0000004340)=r6}, 0x20) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f00000026c0)={&(0x7f0000002700)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000002740)=[{&(0x7f0000002780)="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", 0xd49}, {&(0x7f0000003500)='z?r)', 0x4}], 0x2, 0x0, 0x0, 0x41024}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) 1.796233937s ago: executing program 0 (id=2698): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95f24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x2, 0x3, 0x0, 0x6, 0x0, 0xffffffff, 0x838, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xf61, 0x2, @perf_config_ext={0x40000000000000, 0x5}, 0x11000, 0x1, 0x401, 0x2, 0xa386, 0x41e0, 0x5, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x8) 1.780002067s ago: executing program 2 (id=2699): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x3e1, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081084e81f782db44b9040220080006007c06e8fe55a1bc0006400100142603600e120800060000000201a80016000900014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.706593939s ago: executing program 1 (id=2700): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={&(0x7f0000000500)="15f0e2a3e862a489739b6f344899a2b90431fda286d1bde3030940351fd9e34a78325e3e9b330b7cdeb2d329e2e52f2e33f82735f770d61d2876c34b505b555761ba9f297c0ca144e9ab4591a992e0cc643105487e07b8fdd9e22d493d5e40155d90e04984711de6ef925dad5bfc36d2f45d1a0e9dded29bed5d622adc74000105c2ce56fcf7ca5f299e97e7f8320c5a84fd945bbb5db4fa90", &(0x7f00000005c0)=""/240, &(0x7f00000006c0)="7a6ecd57ad8c9472bcf1a5eebbb4359757be2937da0822567208dc741bdf5a8c0b0c6d6a34e348e11b4e469a2710aaa4fc21d937d0212e9237ba60241d429808ed8a55e9bc9b4d1cf6d293515646af3b12380dcf49a93c2de0f0d279f47058b00d8a263a7203caa873975997c1f3ea7021910a60c5f0fd", &(0x7f0000000740)="ed05bbf11f75e30a38fdfbe8ddb518969d9e808168b2e94bb9ccc2e393151636e9bafcf13a", 0x0, r1}, 0x38) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x7, '\x00', 0x0, r2, 0x1, 0x4, 0x5}, 0x50) (async, rerun: 32) r3 = socket$kcm(0x2b, 0x1, 0x0) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000cc0)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000d00)) (async) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x11, 0x2, 0x0) (async) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000e40)={&(0x7f0000000e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x106) (async) recvmsg(r6, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x42) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000001000), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000001040)={&(0x7f0000001080)=@caif=@rfm={0x25, 0x8, "fb95785b587f2fba61bfb990191a2af1"}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async, rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001180), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000011c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f0000000410000004ea000012000ce819005db21590359011b8fb616bc23d8d7e1982fa88", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.528117923s ago: executing program 0 (id=2701): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b000000080000000c0000000008000001000000", @ANYRES32, @ANYBLOB="f0ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009d636429797516fed0e8d945be4aaaafa95318b38a1a7a966d3471f31b0d523fdcc9af4cb81803f4fb0b71273c6adf6248c70f81548e177a90df78c34cd88f0a678373a3961529cf65efddb5cdd276df79d89b90699a03517f6f97c2460692ab0925449fee395436058d08a9a7fa74b44b4b525ca0977a1e49b265c39867f53383cc38"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000400)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000006c0)="630b008646dc3f0adf398151d900", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r1, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000000940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x18, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x26, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x7}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @ldst={0x1, 0x2, 0x1, 0x9, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}, @alu={0x3, 0x0, 0x0, 0x4, 0x4, 0xfffffffffffffff0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x24}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x10000, 0xa7, &(0x7f0000000d00)=""/167, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000e00)={0x2, 0xf, 0x571, 0x61}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e40)=[r0, r0], &(0x7f0000000e80)=[{0x3, 0x1, 0xe, 0x6}, {0x2, 0x1, 0x8}, {0x2, 0x2, 0xd, 0x6}, {0x4, 0x2, 0x1, 0x1}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1c, 0x19, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x150}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x72, &(0x7f0000000700)=""/114, 0x40f00, 0x20, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x2, 0x38a, 0x5}, 0x10, r4, r5, 0x0, &(0x7f0000000f80)=[r0, r0], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000a000000000000000000000061127800000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x9}, 0x94) 1.527908403s ago: executing program 2 (id=2702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r0, &(0x7f0000000440), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="12000000020000000800000001"], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x1}, 0x4}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="5a2685a1d53fb6b8a84a52", 0xb}, {&(0x7f00000000c0)="fc17176bd5cd3733b048bbd6f3d006bff4e59e46ba3d443f51979188dcf1b466638887c120a0dea3298fb53193a4ad3bd27fc89565edde116c1ece104982bc59d87c9eff5c2316ae979dadab433b333c268fcc4009d54e8e00f31aae111c45e98aab47c26e493589dba3666b3676301fa85a0e2b6d", 0x75}, {&(0x7f0000000140)="98334cd3037972cc679c1e", 0xb}], 0x3, &(0x7f00000002c0)="1f3dbad626794fc226db0347709b6652ebc404cc42cfc14c531e466448491ad59740bd3c814d22d8671536213f4275a20f791fa28d57805b9c96106df129d1e9a51cb4b2cf983ae1391dfa956e15a662e647d9c1f895183ae325fd5bec20a91ceb7c35202d6bc2264176ba1f48e5e2e98c7867a9860170c6", 0x78, 0x8000}, 0xc810) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f00000004000000040000000c"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001580)=""/4096}, 0x42) 1.444180235s ago: executing program 1 (id=2703): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000100)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, 0x0, &(0x7f0000000200)=""/53}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000001"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.364262897s ago: executing program 2 (id=2704): socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6d1da08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d80000001e0081054e81f782db020000071d080006007c09e8fe08a104000e000a003d0003600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) recvmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000340)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/244, 0xf4}, {&(0x7f00000004c0)=""/45, 0x2d}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/70, 0x46}], 0x4, &(0x7f0000000600)=""/46, 0x2e}, 0x12140) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f9, &(0x7f0000000080)) 1.363103617s ago: executing program 0 (id=2705): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) (async) r0 = socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x29, 0xa, 0x0) recvmsg(r0, 0x0, 0x10120) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1.156275872s ago: executing program 2 (id=2706): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfdef) write$cgroup_subtree(r1, &(0x7f0000000240), 0xfdef) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r1, 0xc, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}, 0x40) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1.001338236s ago: executing program 4 (id=2707): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00', 0x5, 0xc3, &(0x7f0000000a80)=""/195}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b80)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x0, 0x5, 0x0, 0x4, 0x0, 0x2, 0xc2dfc, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x400006, 0x12}, 0x2, 0xffffffff, 0x9, 0x7, 0x81, 0x25, 0x3, 0x0, 0xfffffffe, 0x0, 0x8}, 0x0, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000c80)) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0xffef}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x103980, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'gretap0\x00', 0x1000}) 265.740784ms ago: executing program 2 (id=2708): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x4, 0x9, 0x80, 0x9, 0x0, 0x3, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x32, 0x4}, 0x10010, 0x6, 0x4aa, 0x2, 0x8, 0xae, 0x7b6c, 0x0, 0x1ff, 0x0, 0x54}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0xf8, 0xb, 0x5, 0x7, 0x0, 0x8, 0x40000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1d3467cd, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x10, 0x5, 0x3, 0x5, 0x6, 0x7fff, 0x0, 0x0, 0x3, 0x0, 0x5}, r0, 0x10, r1, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r3, &(0x7f0000000240)="7f1f6b795f475dfacd56d001a27c48b25499f879ab77bb7f442534bcc051dcb090bea16364b58a2939e3d0ec293c3b9dd8cc20b07adb350533627e9d84efe1da2932cdd7e8da06603e7511f2041e648d4f03d1b6cacb095307659b1aa3cb5dc5a9adeb2aefd270bdd657c548e37fcd081abe44f88b08fc2d743c8f426c194e7133c92d6527e374e2c1d37814438d5f3401a84a691f55f9c49a476a43bd26b2eca35319e4f8f3cb889942e4f4302e1596b9212e63ac411417e61afa7cfc601f29ed44eabadd0c874f168e9285cfdcd4d5a2e583fd78bc8c062cd8b1b6be8b3911b46964b83453413954ed08397b", &(0x7f0000000340)=""/183}, 0x20) unlink(&(0x7f0000000440)='./file0\x00') ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x6b88) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r4}, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000500)={r5}) mkdirat$cgroup(r0, &(0x7f0000000540)='syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000580)='\x00') r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000600)='cgroup.threads\x00', 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000940)={&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000900)=[{&(0x7f00000006c0)="b2b3d67008723a55cc9e433d62d36703434038aedb3c6f9ba019bd1e13348be18151c2f71f345c4c124bd642f01784c23c0c29d53fe6ac0a0bd0208f75fd541c147c7b31386c717c6e4b14a2600cc56879e5518ec4c78de65d9ae213994d48f89929fd9411bec2596d8ad84eab18df704c3193ac6088c5149cf0d10ea0ebd5fa53ce6ab8027926a8e0563dfa4c603b4596b3db3511a504c8710fa5660fec9f9533a3", 0xa2}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="ec0c8178bf7f2ee1a249c09f96b9a361f7297d884a1846e512f43d69d05a04fdce63091c4d9fd920db1e0e912e092d7cd740fd5375ead3", 0x37}, {&(0x7f0000000800)="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", 0xfd}], 0x4, 0x0, 0x0, 0x10}, 0x20048001) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000980)={r5}, 0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c80)={&(0x7f00000009c0)="acd6959f222cc03aedefee94f2b66d6c029303e392a3a22bb3c0652c26b6f21953a4e57aa1b15545af2587ddbc902d10746e85ceff58c23d9ee9e8219621516bc3b98bd7d4b850978b4a1b2daccc2657b7b9a7f2750cd3f62235bb9f37a32190a9dcdc64492e87f58fa6a9d1c6f97572b0e5e51257e14235d54377b506237b038915534a1cc8370734", &(0x7f0000000a80)=""/248, &(0x7f0000000b80)="7cb67eb77d4ed6a52fc56d69a24fc80a06614e475ff073f94d44a97b00176811af1f87b83c871e02c686daa7c5a7637df1ef453905dbd25261c10c76b538e7cd31", &(0x7f0000000c00)="15264c954795fc9e72cb1303217bf6a2cc0d22af4df4f9b7225e4f8f6f6ea626376a7adb3f68a9b393bd4390fa189458edef97b46b13c10dd71dffc744a2f3bba8945f969195f2ecbdf8fbd3", 0x8, r7}, 0x38) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@generic={&(0x7f0000000cc0)='./file1\x00'}, 0x18) close(r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000d40)='syz0\x00') write$cgroup_int(r7, &(0x7f0000000d80)=0x7, 0x12) r9 = syz_clone(0x800000, &(0x7f0000000dc0)="58ec723625d4046f49fe0c18b639a182e0107a32bef820001592f16e4de740348f95380fd015b8e97d9554310bcb8c13b2ad00410b0d81f640ede03c86a0959806ca867e9f7fdf82573d380ac6305c7556b75775e46bb3b08ed7879ebfe9f12995f4febad50e81fd55d767a3", 0x6c, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)="cb663f9ff6ccd13ea8881da59134c80052da71678b006101c437969fcae297763d217520ce30110447a42042f28dc0c63dc20319f6c2d03e9692f0cffbcd2c092395ae7c5d96634b9d85d97b6c872666c2c6cd168e194135fc583def29bfe52fe666cda611f907ed9e00cf5356175b0105f1bd57634d3487f0c1fedbb20f") syz_open_procfs$namespace(r9, &(0x7f0000000f40)='ns/pid_for_children\x00') bpf$OBJ_GET_PROG(0x7, &(0x7f0000000fc0)=@generic={&(0x7f0000000f80)='./file1\x00', 0x0, 0x10}, 0x18) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_lsm={0x1d, 0x6, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, @alu={0x7, 0x1, 0x4, 0x1, 0x9, 0x50, 0xfffffffffffffff0}]}, &(0x7f0000001040)='syzkaller\x00', 0x1, 0x95, &(0x7f0000001080)=""/149, 0x41000, 0x0, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000001140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x5, 0x0, 0x101, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[0x1, r5, r8, r8], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@map=r8, 0x36, 0x1, 0x8, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@cgroup=r0, r10, 0x3, 0x10, r7, @void, @value=r7, @void, @void, r11}, 0x20) 0s ago: executing program 2 (id=2709): socketpair(0x26, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="9d9b7be105404ad788e7444b4249286c2f841446027efcda228a13e5174da0592e908814100f4da9280176015bd92d0efcabf869c3ce2c97ded31fb66829fc65d461969b3f89fa64b2526e0dad31746e7c0b6f6459983318c9bc537e2dd5799298867aa012a95fd5b8dce85095226715b55c51441651149ba00df258f67fd27685d6642e36f5f5d58456d02668820ce10f4c01b3b9440780efe5140619ab9df2d755b75da5ec5ba647d72a77216899919da716e0b00b80e161e1a08cca09d7de8873e01868a82d569a204f9ec23e05ac1c8bb8ab821d5bf99bddc5e3d2ab2d98403f593bdc97fe9a8905964d4891a9bca3bea822c60f8d8ba418", 0xfa}, {&(0x7f0000000140)="585d8f9fea2ec5c7c3e459a6bcc47aaef2c08863f9eb985ba0a7d5b23c9a94d473bcacace514cc681248bd48fad466003af5dde9d117fd486c2e8e47234ab788e00e05d5665e44dbbfb0b549fadbec72081538ac0e4ffe7408801cbf0715dfc2b11572daf3839b8bbeea3c0657d3e4", 0x6f}, {&(0x7f00000001c0)="6daf578137ff0e2ca97047703aed46252039c0c02471c41a5466fca371dcca9d0abc81ba69c6aa4fc214e868a348747c15e0d189b6b0087bc82dcf703da976ef38a26aba85da74cb4a757bd7ca96aaedb2ba67a81b94ad0ed46adc9d26fcb3e9ea4c529346772db78cb2ed6a2ca70da3cc015485f57f2a9f1cb1fbb6d6d84c1ab279ecf4780a4eed17e00fb674a49dd756eb3dd850b1be441ebb76f31b18284e7ac634b85b51a3bef60400b0bb7f9f6c10eb678e1953e970a06cde7213d14ef30e6a46dd6127c0c2003b05f8cb6133da5d34111f95a94a9c6e8cc39fa9ce21bc8eb857b04d2f", 0xe6}, {&(0x7f00000002c0)="5802e99c461902b3d328f0553ebedf080304535728eb1e44f6ee39851a87990cc71a3deb32dff615fd386c92464cb855aae648cb131b5522cc312983f29d5bf82785b20b9ad92f726b521cfaf2c00e021483f616d5bde3f8204f35e34ee3214484804d9e12220987be1d0acd2e3a4a83265dcc6dedfdc0a30f0bacbe6ca849afe15d3594a6ce2a6ec0b181c93c6d033be28213d2aeb3efb31802083e3a86ab8e01c502d081763ff207314a996465f535ee0a87d8dd3e2f74fe021e895b", 0xbd}, {&(0x7f0000000380)="005c02be24f007d7eea74d20047ffa5917539f73fa854b889ba3121036aee20b7d31c244bfffe6344dc381b9f9265a4b05d153405c0bf07e1cdc34e6a536d5418699080e022bb05b79e61d7711137251791d7d978f06a265adbfc04bf5e69492459e9827cbe598cb290bbaa2976244e1069b803d2528bcdfe61535b4ff75dbff78f49dd1ac22202a882a760543a253a5f203712513b011dc80bb50900273ddce0a2a62b9c8ea", 0xa6}], 0x5, &(0x7f00000004c0)=[{0x78, 0x119, 0x5, "8c3bf98fb9df40540adb5be3baca9798b9b3131ef963cf301d8386fcafab84cf115e44d9e6f07b1b48748c2f17244b265b462bc9d084a2b9b847b64fd85d7203ab4670aee15cc1b6250e30b06ab1c5d51d82caf0e9dca61db2366a050b839d83ff720dda54"}, {0x58, 0x108, 0x2, "819e524ddd2099913bd6ca930734089b91dab16020423b8c08e63d3b5bbc46f7de3461dcbbf52de5a4ea5591b77ab4203751a6779032426e1bcf0a76522ad9fc36fc178dcd3b"}], 0xd0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r2, &(0x7f00000006c0)="ff67e271ff85f0f105abdfff9ce368c3189e6bf269b1d9823978a51def60aca8dca0b83f1663e40570118f4fe27be1d25d818ba4e62f26ac252905483b45e742d943976c310e8df14bd29a5793b08ea11363abd50835eb2b8c5222bbdf7f24355d9069ea8eb645390c750e09838e449b1a62fb182a23ea20ba86079c69fad458ab1016ce50f86dff668ee55f58b3d7c87d32c31b426d00f588658a5b7f19e768b93129cd9d7c9b06ab4b293251f6ef2e59532ffa71516b50e55fd318e664cc5909048a11d1ccb8916adca0f2fd1c2b46e29423350da860ded97e8917449155eeba38d9103f2894", &(0x7f00000007c0)=""/83}, 0x20) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000008c0)="92c06508bda669523a3fc3ee617da1cd25ec5116d5dd6a02cb26a097a3c52ac09fb089b89040dac925742fbfe17c10a4c5bc0775e374c17f6a854c703cb1593167c7c1688d1d4c82c31669c02811f5a22700d210329329833fe410cdf533be16a19196c50e857127a782a31afc6b3601899d7881e751986efdd32be648e70e8e0b7b283fbc91972cbe384c0f5e09d8ae53716a4043137e6e6037e6d6393cd0cf25a5e810582ec56c37ca906da6846c1622f4bfb562691a3a55b59a5ac441d50e099da78968be", 0xc6}], 0x1}, 0x800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r2}, &(0x7f0000000a40), &(0x7f0000000a80)='%pI4 \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r2, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pI4 \x00'}, 0x20) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x0, 0x1, 0xa3, &(0x7f0000000b80)="f9", &(0x7f0000000bc0)=""/163, 0x0, 0x0, 0x62, 0x6e, &(0x7f0000000c80)="d3ca7187e58dab77383acf8d4c1abd1383021ec84c45f8012598321ef8503e3996fa0b903b6b6795e4b7eb5ef23d1a555d020dcc58c3069304a322aa2bd66e494c7cd9f16cfbe4e67832d4fb0b633fc3609d492a1bcc0d044be9a68869461902fb4d", &(0x7f0000000d00)="f39b564121aad7797ecfb5f78f47af8526bb2d4dc75fc1ba7de170a71218ed5afdc824f6ef887711156e9334b711c36484a4d3717056a47d1eebfb2481eec8fef0d1b492d10b0cef0b25685d224860c88f7c6422fca1b51e23ecbd798c30fd4344a604349d51cdc47dae61909410", 0x1, 0x0, 0x6}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x0, 0x1, 0xa3, &(0x7f0000000b80)="f9", &(0x7f0000000bc0)=""/163, 0x0, 0x0, 0x62, 0x6e, &(0x7f0000000c80)="d3ca7187e58dab77383acf8d4c1abd1383021ec84c45f8012598321ef8503e3996fa0b903b6b6795e4b7eb5ef23d1a555d020dcc58c3069304a322aa2bd66e494c7cd9f16cfbe4e67832d4fb0b633fc3609d492a1bcc0d044be9a68869461902fb4d", &(0x7f0000000d00)="f39b564121aad7797ecfb5f78f47af8526bb2d4dc75fc1ba7de170a71218ed5afdc824f6ef887711156e9334b711c36484a4d3717056a47d1eebfb2481eec8fef0d1b492d10b0cef0b25685d224860c88f7c6422fca1b51e23ecbd798c30fd4344a604349d51cdc47dae61909410", 0x1, 0x0, 0x6}, 0x50) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000e40)={'wlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e80), &(0x7f0000000ec0)=r4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r3, 0x58, &(0x7f0000001000)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r3, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001140), &(0x7f0000001180)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000fc0)='GPL\x00', 0x34, 0x0, 0x0, 0x41100, 0xa, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0x5, 0x40, 0xffffffff}, 0x10, 0x19e21, r4, 0x3, &(0x7f0000001200)=[r8], &(0x7f0000001240)=[{0x2, 0x1, 0x10, 0xc}, {0x4, 0x2, 0x6, 0x1}, {0x0, 0x3, 0x7}], 0x10, 0x6}, 0x94) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000fc0)='GPL\x00', 0x34, 0x0, 0x0, 0x41100, 0xa, '\x00', r7, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0x5, 0x40, 0xffffffff}, 0x10, 0x19e21, r4, 0x3, &(0x7f0000001200)=[r8], &(0x7f0000001240)=[{0x2, 0x1, 0x10, 0xc}, {0x4, 0x2, 0x6, 0x1}, {0x0, 0x3, 0x7}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r8}, &(0x7f0000001340), &(0x7f0000001380)=r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r8, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r9}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe49, '\x00', r7, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={r2, 0x58, &(0x7f00000015c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={r2, 0x58, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={r3}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001700)={r3, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x10, &(0x7f0000001480)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], &(0x7f0000001500)='GPL\x00', 0x4, 0x5e, &(0x7f0000001540)=""/94, 0x40f00, 0x0, '\x00', r13, 0x0, r2, 0x8, &(0x7f0000001680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x3, 0xc, 0x5, 0x2993}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001740)=[r3, r14], &(0x7f0000001780)=[{0x0, 0x4, 0x10, 0x1}, {0x1, 0x4, 0x2, 0x5}], 0x10, 0xffffffff}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={r12, 0xc0000000, 0x8}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001880)={r12, 0xc0000000, 0x8}, 0xc) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r16 = openat$cgroup_ro(r9, &(0x7f00000018c0)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001a00)={@ifindex=r13, 0x1f, 0x0, 0x80000000, &(0x7f0000001900)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001940)=[0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001a40)={@fallback=r15, r4, 0x22, 0x2010, 0x0, @value=r16, @void, @void, @void, r17}, 0x20) r18 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001a80)={0xffffffffffffffff}, 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000001ac0)=r18) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001b40)=@generic={&(0x7f0000001b00)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r19}, &(0x7f0000001b80), &(0x7f0000001bc0)=r9}, 0x20) kernel console output (not intermixed with test programs): 8079] raw_sendmsg: syz.4.847 forgot to set AF_INET. Fix it! [ 223.548804][ T8078] team0: Device nlmon0 is of different type [ 224.506759][ T8090] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 224.695329][ T8096] netlink: 'syz.1.854': attribute type 2 has an invalid length. [ 225.208087][ T8118] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.856'. [ 225.249403][ T8090] device veth0_vlan left promiscuous mode [ 225.301762][ T8090] device veth0_vlan entered promiscuous mode [ 225.319005][ T8090] team0: Device veth0_vlan failed to register rx_handler [ 225.489726][ T8092] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.852'. [ 225.672238][ T8128] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 225.770177][ T8138] netlink: 'syz.2.861': attribute type 10 has an invalid length. [ 225.880198][ T8138] team0: Port device geneve1 added [ 225.890175][ T8142] device syzkaller0 entered promiscuous mode [ 226.279724][ T8158] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.866'. [ 226.425647][ T8143] delete_channel: no stack [ 226.609560][ T8166] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 226.768037][ T8168] netlink: 'syz.2.868': attribute type 3 has an invalid length. [ 226.854348][ T8168] netlink: 'syz.2.868': attribute type 16 has an invalid length. [ 226.938540][ T8168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.868'. [ 227.129035][ T8180] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.871'. [ 227.271301][ T8178] netlink: 'syz.1.873': attribute type 2 has an invalid length. [ 227.286218][ T8178] netlink: 'syz.1.873': attribute type 8 has an invalid length. [ 227.302317][ T8178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.873'. [ 227.669346][ T8194] netlink: 'syz.4.876': attribute type 3 has an invalid length. [ 227.681108][ T8194] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.876'. [ 227.740567][ T8194] netlink: 'syz.4.876': attribute type 2 has an invalid length. [ 227.770583][ T8194] netlink: 164 bytes leftover after parsing attributes in process `syz.4.876'. [ 227.820079][ T8206] netlink: 'syz.4.876': attribute type 2 has an invalid length. [ 227.837639][ T8210] netlink: 'syz.3.881': attribute type 2 has an invalid length. [ 227.847912][ T8206] netlink: 164 bytes leftover after parsing attributes in process `syz.4.876'. [ 227.866689][ T8210] netlink: 'syz.3.881': attribute type 1 has an invalid length. [ 227.887737][ T8194] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 227.905229][ T8210] netlink: 152 bytes leftover after parsing attributes in process `syz.3.881'. [ 228.058744][ T8203] device syzkaller0 entered promiscuous mode [ 228.589402][ T8229] netlink: 156 bytes leftover after parsing attributes in process `syz.1.885'. [ 228.754111][ T8230] netlink: 132 bytes leftover after parsing attributes in process `syz.0.884'. [ 229.891767][ T8256] netlink: 'syz.1.890': attribute type 11 has an invalid length. [ 229.907037][ T8256] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.890'. [ 230.244154][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.317028][ T8310] device wlan1 entered promiscuous mode [ 231.508379][ T8317] bridge0: port 3(dummy0) entered disabled state [ 231.551746][ T8317] device dummy0 left promiscuous mode [ 231.572750][ T8317] bridge0: port 3(dummy0) entered disabled state [ 231.616388][ T8317] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.899606][ T8314] validate_nla: 9 callbacks suppressed [ 231.899628][ T8314] netlink: 'syz.3.902': attribute type 2 has an invalid length. [ 231.941552][ T8328] netlink: 'syz.1.906': attribute type 49 has an invalid length. [ 232.036207][ T8328] netlink: 'syz.1.906': attribute type 21 has an invalid length. [ 232.064854][ T8328] __nla_validate_parse: 6 callbacks suppressed [ 232.064873][ T8328] netlink: 128 bytes leftover after parsing attributes in process `syz.1.906'. [ 232.115388][ T8328] netlink: 'syz.1.906': attribute type 5 has an invalid length. [ 232.133437][ T8328] netlink: 'syz.1.906': attribute type 6 has an invalid length. [ 232.173963][ T8328] netlink: 3 bytes leftover after parsing attributes in process `syz.1.906'. [ 232.230039][ T8330] netlink: 'syz.1.906': attribute type 21 has an invalid length. [ 232.241833][ T8330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.906'. [ 232.459214][ T8349] netlink: 'syz.1.910': attribute type 7 has an invalid length. [ 232.652623][ T8353] netlink: 'syz.4.911': attribute type 10 has an invalid length. [ 232.908250][ T8370] sctp: [Deprecated]: syz.3.916 (pid 8370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.908250][ T8370] Use struct sctp_sack_info instead [ 233.425667][ T8387] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 234.126965][ T8395] netlink: 'syz.0.922': attribute type 2 has an invalid length. [ 234.160907][ T4282] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 234.226514][ T8390] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 234.280650][ T8395] device 0 entered promiscuous mode [ 238.246571][ T8448] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.933'. [ 238.266656][ T8448] openvswitch: netlink: Key type 386 is out of range max 32 [ 239.862710][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.948'. [ 239.945587][ T8474] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.940'. [ 240.356745][ T8484] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.955'. [ 241.025984][ T8502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.947'. [ 241.047077][ T8499] validate_nla: 1 callbacks suppressed [ 241.047150][ T8499] netlink: 'syz.1.944': attribute type 2 has an invalid length. [ 241.086098][ T8499] netlink: 'syz.1.944': attribute type 8 has an invalid length. [ 241.112266][ T8499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.944'. [ 241.520386][ T8520] netlink: 'syz.0.951': attribute type 16 has an invalid length. [ 241.540373][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.952'. [ 241.543936][ T8520] netlink: 132 bytes leftover after parsing attributes in process `syz.0.951'. [ 241.847035][ T8534] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.956'. [ 242.275455][ T8546] netlink: 'syz.2.961': attribute type 21 has an invalid length. [ 242.397863][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.442847][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.468954][ T8551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.488713][ T8551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.653849][ T8563] netlink: 'syz.4.965': attribute type 3 has an invalid length. [ 242.689899][ T8563] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.965'. [ 242.929532][ T8575] netlink: 'syz.0.968': attribute type 39 has an invalid length. [ 242.978988][ T8575] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 243.714274][ T8588] __nla_validate_parse: 1 callbacks suppressed [ 243.714747][ T8588] netlink: 124728 bytes leftover after parsing attributes in process `syz.4.972'. [ 243.897684][ T8602] tap0: tun_chr_ioctl cmd 21731 [ 244.057276][ T8613] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.978'. [ 244.267398][ T8613] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 248.122337][ T8649] netlink: 'syz.4.988': attribute type 16 has an invalid length. [ 248.134522][ T8649] netlink: 164 bytes leftover after parsing attributes in process `syz.4.988'. [ 248.263961][ T8651] netlink: 'syz.3.989': attribute type 1 has an invalid length. [ 248.289373][ T8651] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.989'. [ 248.317141][ T8652] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.989'. [ 248.377768][ T8652] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 248.442507][ T8652] CPU: 1 PID: 8652 Comm: syz.3.989 Not tainted syzkaller #0 [ 248.449883][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.459996][ T8652] Call Trace: [ 248.463305][ T8652] [ 248.466263][ T8652] dump_stack_lvl+0x188/0x24e [ 248.470999][ T8652] ? show_regs_print_info+0x12/0x12 [ 248.476232][ T8652] ? load_image+0x410/0x410 [ 248.480783][ T8652] sysfs_warn_dup+0x8a/0xa0 [ 248.485337][ T8652] sysfs_do_create_link_sd+0xc0/0x110 [ 248.490758][ T8652] device_add+0x83b/0x1050 [ 248.495213][ T8652] wiphy_register+0x1d8b/0x2aa0 [ 248.500113][ T8652] ? cfg80211_event_work+0x40/0x40 [ 248.505259][ T8652] ? minstrel_ht_alloc+0x894/0xa20 [ 248.510412][ T8652] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 248.516521][ T8652] ieee80211_register_hw+0x2e33/0x3b00 [ 248.522030][ T8652] ? ieee80211_register_hw+0xeb1/0x3b00 [ 248.527605][ T8652] ? ieee80211_register_hw+0xeb1/0x3b00 [ 248.533200][ T8652] ? ieee80211_tasklet_handler+0x20/0x20 [ 248.538864][ T8652] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 248.544793][ T8652] ? __debug_object_init+0xed/0x440 [ 248.550028][ T8652] ? memset+0x1e/0x40 [ 248.554064][ T8652] ? __hrtimer_init+0x189/0x270 [ 248.558947][ T8652] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 248.564702][ T8652] ? memcpy+0x3c/0x60 [ 248.568725][ T8652] hwsim_new_radio_nl+0xab7/0xc90 [ 248.573800][ T8652] genl_family_rcv_msg_doit+0x22f/0x350 [ 248.579391][ T8652] ? end_current_label_crit_section+0x170/0x170 [ 248.585759][ T8652] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 248.591697][ T8652] ? bpf_lsm_capable+0x5/0x10 [ 248.596401][ T8652] ? security_capable+0x85/0xb0 [ 248.601283][ T8652] genl_rcv_msg+0x601/0x790 [ 248.605824][ T8652] ? genl_bind+0x360/0x360 [ 248.610293][ T8652] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 248.616673][ T8652] netlink_rcv_skb+0x1ef/0x440 [ 248.621552][ T8652] ? genl_bind+0x360/0x360 [ 248.625992][ T8652] ? netlink_ack+0x1160/0x1160 [ 248.630800][ T8652] ? down_read+0x1a8/0x2d0 [ 248.635247][ T8652] genl_rcv+0x24/0x40 [ 248.639257][ T8652] netlink_unicast+0x7ad/0x920 [ 248.644066][ T8652] netlink_sendmsg+0x8ad/0xbd0 [ 248.648873][ T8652] ? netlink_getsockopt+0x550/0x550 [ 248.654097][ T8652] ? apparmor_socket_sendmsg+0x8a/0x330 [ 248.659670][ T8652] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 248.664972][ T8652] ? security_socket_sendmsg+0x7c/0xa0 [ 248.670445][ T8652] ? netlink_getsockopt+0x550/0x550 [ 248.675662][ T8652] ____sys_sendmsg+0x5ed/0x9a0 [ 248.680447][ T8652] ? __sys_sendmsg_sock+0x30/0x30 [ 248.685488][ T8652] ? __import_iovec+0x306/0x510 [ 248.690383][ T8652] ? import_iovec+0x6f/0xa0 [ 248.694919][ T8652] ___sys_sendmsg+0x2a2/0x360 [ 248.699622][ T8652] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.704464][ T8652] __se_sys_sendmsg+0x1c3/0x2b0 [ 248.709334][ T8652] ? __x64_sys_sendmsg+0x80/0x80 [ 248.714316][ T8652] ? lockdep_hardirqs_on+0x94/0x140 [ 248.719538][ T8652] do_syscall_64+0x4c/0xa0 [ 248.723971][ T8652] ? clear_bhb_loop+0x60/0xb0 [ 248.728666][ T8652] ? clear_bhb_loop+0x60/0xb0 [ 248.733378][ T8652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.739306][ T8652] RIP: 0033:0x7f2f6ed9e1d9 [ 248.743782][ T8652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.763411][ T8652] RSP: 002b:00007f2f6cfd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.771855][ T8652] RAX: ffffffffffffffda RBX: 00007f2f6f026090 RCX: 00007f2f6ed9e1d9 [ 248.779842][ T8652] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 248.787833][ T8652] RBP: 00007f2f6ee35888 R08: 0000000000000000 R09: 0000000000000000 [ 248.795993][ T8652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.803994][ T8652] R13: 00007f2f6f026128 R14: 00007f2f6f026090 R15: 00007ffdafa240b8 [ 248.812015][ T8652] [ 249.023131][ T8660] device wg2 entered promiscuous mode [ 250.398039][ T8691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.998'. [ 250.443216][ T8691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.998'. [ 250.485467][ T8691] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 250.548585][ T8693] netlink: 128 bytes leftover after parsing attributes in process `syz.3.998'. [ 250.610340][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 250.649851][ T8693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 250.930048][ T8708] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 250.961702][ T8711] netlink: 'syz.3.1005': attribute type 9 has an invalid length. [ 250.984066][ T8708] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 250.988593][ T8711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1005'. [ 251.171493][ T8722] netlink: 'syz.1.1008': attribute type 7 has an invalid length. [ 251.199021][ T8722] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1008'. [ 251.839913][ T8739] netlink: 'syz.4.1012': attribute type 46 has an invalid length. [ 251.898357][ T8739] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1012'. [ 254.370978][ T8767] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1018'. [ 254.470437][ T8766] netlink: 'syz.3.1019': attribute type 7 has an invalid length. [ 254.481898][ T8768] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1016'. [ 254.515159][ T8766] netlink: 'syz.3.1019': attribute type 7 has an invalid length. [ 254.547670][ T8766] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.1019'. [ 254.555858][ T8769] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1017'. [ 254.762197][ T8785] netlink: 'syz.0.1021': attribute type 11 has an invalid length. [ 254.832733][ T8787] netlink: 'syz.1.1022': attribute type 29 has an invalid length. [ 254.852939][ T8787] netlink: 'syz.1.1022': attribute type 29 has an invalid length. [ 254.918050][ T8789] netlink: 'syz.1.1022': attribute type 29 has an invalid length. [ 254.941114][ T8784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.636878][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643290][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.651102][ T8807] __nla_validate_parse: 2 callbacks suppressed [ 255.651117][ T8807] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1027'. [ 256.557201][ T8831] netlink: 'syz.0.1034': attribute type 7 has an invalid length. [ 256.569963][ T8831] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1034'. [ 256.670129][ T8837] netlink: 'syz.2.1047': attribute type 2 has an invalid length. [ 256.684330][ T8837] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1047'. [ 256.740538][ T8837] netlink: 'syz.2.1047': attribute type 3 has an invalid length. [ 256.750744][ T8837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1047'. [ 257.073488][ T8856] device wg2 entered promiscuous mode [ 258.113577][ T8895] netlink: 'syz.0.1049': attribute type 39 has an invalid length. [ 260.533216][ T8906] netlink: 'syz.1.1052': attribute type 3 has an invalid length. [ 260.568754][ T8906] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1052'. [ 260.752008][ T8912] device wg2 left promiscuous mode [ 261.303662][ T8914] device sit0 left promiscuous mode [ 261.396885][ T8915] device sit0 entered promiscuous mode [ 261.522804][ T8908] device wg2 entered promiscuous mode [ 261.748398][ T8929] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 261.790298][ T8931] netlink: 'syz.4.1058': attribute type 1 has an invalid length. [ 261.799253][ T8931] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1058'. [ 262.131802][ T8939] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1060'. [ 262.643715][ T8962] netlink: 'syz.0.1067': attribute type 46 has an invalid length. [ 262.657641][ T8962] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1067'. [ 262.771046][ T8955] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1064'. [ 263.086125][ T8976] netlink: 'syz.1.1069': attribute type 10 has an invalid length. [ 263.108743][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1069'. [ 263.141149][ T8976] device team0 entered promiscuous mode [ 263.184252][ T8976] device team_slave_0 entered promiscuous mode [ 263.191120][ T8976] device team_slave_1 entered promiscuous mode [ 263.255212][ T8976] bridge0: port 3(team0) entered blocking state [ 263.314391][ T8976] bridge0: port 3(team0) entered disabled state [ 263.362962][ T8977] netlink: 'syz.1.1069': attribute type 10 has an invalid length. [ 263.403223][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1069'. [ 263.723632][ T8983] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1070'. [ 263.748519][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 263.777635][ T8983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.951285][ T9009] netlink: 'syz.3.1077': attribute type 11 has an invalid length. [ 263.978230][ T9009] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1077'. [ 264.261966][ T9018] netlink: 'syz.1.1079': attribute type 3 has an invalid length. [ 264.311307][ T9018] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1079'. [ 264.517147][ T9026] netlink: 'syz.2.1080': attribute type 10 has an invalid length. [ 264.555713][ T9026] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1080'. [ 264.646857][ T9026] device dummy0 entered promiscuous mode [ 264.735903][ T9026] bond0: (slave dummy0): Releasing backup interface [ 264.852620][ T9026] bridge0: port 3(dummy0) entered blocking state [ 264.863807][ T9026] bridge0: port 3(dummy0) entered disabled state [ 265.279747][ T9047] netlink: 'syz.3.1086': attribute type 21 has an invalid length. [ 265.682497][ T9058] validate_nla: 1 callbacks suppressed [ 265.682530][ T9058] netlink: 'syz.3.1090': attribute type 2 has an invalid length. [ 265.723581][ T9058] netlink: 'syz.3.1090': attribute type 8 has an invalid length. [ 266.807842][ T9086] __nla_validate_parse: 4 callbacks suppressed [ 266.807896][ T9086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1100'. [ 267.078055][ T9093] netlink: 'syz.1.1102': attribute type 15 has an invalid length. [ 267.092351][ T9093] netlink: 'syz.1.1102': attribute type 7 has an invalid length. [ 267.167978][ T9093] : port 1(syz_tun) entered blocking state [ 267.204623][ T9093] : port 1(syz_tun) entered disabled state [ 267.235965][ T9093] device syz_tun entered promiscuous mode [ 267.330855][ T9099] device sit0 left promiscuous mode [ 267.594508][ T9100] device sit0 entered promiscuous mode [ 268.290514][ T9125] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1111'. [ 268.475315][ T9134] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1115'. [ 268.702868][ T9141] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.1117'. [ 271.697013][ T9154] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1120'. [ 271.732403][ T9154] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 271.760202][ T9154] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.807975][ T9160] netlink: 'syz.3.1121': attribute type 21 has an invalid length. [ 271.827783][ T9160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1121'. [ 272.137191][ T9175] netlink: 'syz.4.1124': attribute type 3 has an invalid length. [ 272.171722][ T9175] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1124'. [ 272.188766][ T9180] netlink: 'syz.4.1124': attribute type 16 has an invalid length. [ 272.211608][ T9180] netlink: 'syz.4.1124': attribute type 3 has an invalid length. [ 272.238130][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1124'. [ 272.494131][ T9184] device syzkaller0 entered promiscuous mode [ 273.071793][ T9206] sctp: [Deprecated]: syz.4.1132 (pid 9206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.071793][ T9206] Use struct sctp_sack_info instead [ 275.559118][ T9233] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1137'. [ 276.359016][ T9233] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1137'. [ 276.719358][ T9240] : port 1(ip6gretap0) entered blocking state [ 276.746027][ T9240] : port 1(ip6gretap0) entered disabled state [ 276.789273][ T9240] device ip6gretap0 entered promiscuous mode [ 277.401914][ T9275] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1149'. [ 277.434388][ T9275] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.491005][ T9282] tap0: tun_chr_ioctl cmd 2147767519 [ 277.526194][ T9282] netlink: 'syz.0.1150': attribute type 21 has an invalid length. [ 277.564393][ T9282] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1150'. [ 278.103255][ T9308] netlink: 'syz.3.1157': attribute type 21 has an invalid length. [ 278.113647][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1157'. [ 278.370955][ T9312] device syzkaller0 entered promiscuous mode [ 278.411067][ T9316] netlink: 'syz.3.1161': attribute type 10 has an invalid length. [ 278.439563][ T9316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1161'. [ 278.470177][ T9316] device dummy0 entered promiscuous mode [ 278.490464][ T9316] bridge0: port 2(dummy0) entered blocking state [ 278.512641][ T9316] bridge0: port 2(dummy0) entered disabled state [ 281.370591][ T9336] netlink: 'syz.0.1165': attribute type 3 has an invalid length. [ 281.378606][ T9336] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.1165'. [ 281.577012][ T9357] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1170'. [ 282.176039][ T9373] netlink: 'syz.0.1172': attribute type 10 has an invalid length. [ 282.190901][ T9373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1172'. [ 282.203393][ T9373] device veth0_vlan entered promiscuous mode [ 282.222267][ T9373] bridge0: port 3(veth0_vlan) entered blocking state [ 282.239303][ T9373] bridge0: port 3(veth0_vlan) entered disabled state [ 282.280704][ T9373] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 282.302423][ T9375] netlink: 'syz.0.1172': attribute type 10 has an invalid length. [ 282.310924][ T9375] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1172'. [ 282.324900][ T9375] bridge0: port 3(veth0_vlan) entered blocking state [ 282.331851][ T9375] bridge0: port 3(veth0_vlan) entered disabled state [ 282.343848][ T9375] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 282.401250][ T5127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 285.406469][ T9418] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1185'. [ 285.613806][ T9421] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1185'. [ 285.849047][ T9423] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1186'. [ 286.305878][ T9427] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 286.417849][ T9433] netlink: 'syz.3.1190': attribute type 39 has an invalid length. [ 286.489492][ T9433] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1190'. [ 287.099908][ T9442] netlink: 'syz.2.1192': attribute type 21 has an invalid length. [ 287.133062][ T9442] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1192'. [ 287.172906][ T9442] netlink: 'syz.2.1192': attribute type 4 has an invalid length. [ 287.351294][ T9447] netlink: 'syz.2.1193': attribute type 39 has an invalid length. [ 288.290646][ T9477] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1198'. [ 288.342226][ T9472] device syzkaller0 entered promiscuous mode [ 288.583370][ T9496] netlink: 'syz.3.1204': attribute type 1 has an invalid length. [ 288.614797][ T9496] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1204'. [ 290.400914][ T9493] : port 1(ip6gretap0) entered blocking state [ 290.407377][ T9493] : port 1(ip6gretap0) entered disabled state [ 290.414836][ T9493] device ip6gretap0 entered promiscuous mode [ 290.422392][ T9499] netlink: 'syz.2.1201': attribute type 16 has an invalid length. [ 290.430647][ T9499] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1201'. [ 290.440103][ T9484] netlink: 'syz.2.1201': attribute type 16 has an invalid length. [ 290.449316][ T9484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1201'. [ 290.482837][ T9498] device ip6gretap0 left promiscuous mode [ 290.497366][ T9498] : port 1(ip6gretap0) entered disabled state [ 290.588263][ T9522] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 291.570404][ T9549] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 291.614350][ T9549] netlink: 'syz.4.1218': attribute type 4 has an invalid length. [ 291.628726][ T9531] delete_channel: no stack [ 291.643706][ T9549] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1218'. [ 291.721748][ T9555] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1219'. [ 291.787474][ T9560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1221'. [ 291.810008][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1219'. [ 292.038916][ T9576] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1226'. [ 292.087123][ T9576] delete_channel: no stack [ 292.091655][ T9581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1228'. [ 292.091742][ T9581] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1228'. [ 292.101248][ T9576] delete_channel: no stack [ 292.141942][ T9582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1228'. [ 292.546105][ T9595] netlink: 'syz.0.1232': attribute type 3 has an invalid length. [ 292.951721][ T9605] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 293.188539][ T9605] bond0: (slave wlan1): Opening slave failed [ 293.744477][ T9600] delete_channel: no stack [ 296.071184][ T9651] netlink: 'syz.3.1244': attribute type 21 has an invalid length. [ 297.238114][ T9674] __nla_validate_parse: 78 callbacks suppressed [ 297.238249][ T9674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1247'. [ 298.281423][ T9667] : port 1(ip6gretap0) entered blocking state [ 298.453175][ T9667] : port 1(ip6gretap0) entered disabled state [ 298.610756][ T9667] device ip6gretap0 entered promiscuous mode [ 298.772855][ T9701] netlink: 'syz.3.1253': attribute type 10 has an invalid length. [ 301.466983][ T9739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1260'. [ 302.374622][ T9724] delete_channel: no stack [ 303.195809][ T9759] netlink: 'syz.3.1263': attribute type 10 has an invalid length. [ 303.256926][ T9759] device geneve0 entered promiscuous mode [ 303.548600][ T9764] netlink: 'syz.2.1264': attribute type 2 has an invalid length. [ 303.597395][ T9764] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1264'. [ 303.822405][ T9759] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 307.366046][ T9786] netlink: 'syz.0.1269': attribute type 10 has an invalid length. [ 309.757878][ T9818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1278'. [ 309.842805][ T9818] device hsr_slave_0 left promiscuous mode [ 309.851868][ T4282] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 309.978085][ T9818] device hsr_slave_1 left promiscuous mode [ 310.727023][ T9827] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 310.746554][ T9827] syzkaller1: linktype set to 773 [ 311.977729][ T9844] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1282'. [ 312.072415][ T9844] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 312.114440][ T9844] CPU: 0 PID: 9844 Comm: syz.4.1282 Not tainted syzkaller #0 [ 312.121888][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.131988][ T9844] Call Trace: [ 312.135300][ T9844] [ 312.138246][ T9844] dump_stack_lvl+0x188/0x24e [ 312.142962][ T9844] ? show_regs_print_info+0x12/0x12 [ 312.148192][ T9844] ? load_image+0x410/0x410 [ 312.152730][ T9844] sysfs_warn_dup+0x8a/0xa0 [ 312.157266][ T9844] sysfs_do_create_link_sd+0xc0/0x110 [ 312.162679][ T9844] device_add+0x83b/0x1050 [ 312.167126][ T9844] wiphy_register+0x1d8b/0x2aa0 [ 312.171994][ T9844] ? cfg80211_event_work+0x40/0x40 [ 312.177108][ T9844] ? minstrel_ht_alloc+0x894/0xa20 [ 312.182223][ T9844] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 312.188298][ T9844] ieee80211_register_hw+0x2e33/0x3b00 [ 312.193754][ T9844] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 312.199917][ T9844] ? ieee80211_register_hw+0xeb1/0x3b00 [ 312.205459][ T9844] ? ieee80211_register_hw+0xeb1/0x3b00 [ 312.211024][ T9844] ? ieee80211_tasklet_handler+0x20/0x20 [ 312.216653][ T9844] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 312.222544][ T9844] ? __debug_object_init+0xed/0x440 [ 312.227757][ T9844] ? memset+0x1e/0x40 [ 312.231733][ T9844] ? __hrtimer_init+0x189/0x270 [ 312.236583][ T9844] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 312.242308][ T9844] ? memcpy+0x3c/0x60 [ 312.246290][ T9844] hwsim_new_radio_nl+0xab7/0xc90 [ 312.251319][ T9844] genl_family_rcv_msg_doit+0x22f/0x350 [ 312.256869][ T9844] ? end_current_label_crit_section+0x170/0x170 [ 312.263117][ T9844] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 312.269009][ T9844] ? lockdep_hardirqs_on+0x94/0x140 [ 312.274218][ T9844] ? bpf_lsm_capable+0x5/0x10 [ 312.278895][ T9844] ? security_capable+0x85/0xb0 [ 312.283748][ T9844] genl_rcv_msg+0x601/0x790 [ 312.288262][ T9844] ? genl_bind+0x360/0x360 [ 312.292682][ T9844] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 312.299019][ T9844] netlink_rcv_skb+0x1ef/0x440 [ 312.303786][ T9844] ? genl_bind+0x360/0x360 [ 312.308205][ T9844] ? netlink_ack+0x1160/0x1160 [ 312.312973][ T9844] ? down_read+0x1a8/0x2d0 [ 312.317393][ T9844] genl_rcv+0x24/0x40 [ 312.321383][ T9844] netlink_unicast+0x7ad/0x920 [ 312.326151][ T9844] netlink_sendmsg+0x8ad/0xbd0 [ 312.330906][ T9844] ? lockdep_hardirqs_on+0x94/0x140 [ 312.336109][ T9844] ? netlink_getsockopt+0x550/0x550 [ 312.341307][ T9844] ? security_socket_sendmsg+0x56/0xa0 [ 312.346768][ T9844] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 312.352046][ T9844] ? security_socket_sendmsg+0x7c/0xa0 [ 312.357505][ T9844] ? netlink_getsockopt+0x550/0x550 [ 312.362700][ T9844] ____sys_sendmsg+0x5ed/0x9a0 [ 312.367472][ T9844] ? __sys_sendmsg_sock+0x30/0x30 [ 312.372495][ T9844] ? __import_iovec+0x306/0x510 [ 312.377362][ T9844] ? import_iovec+0x6f/0xa0 [ 312.381872][ T9844] ___sys_sendmsg+0x2a2/0x360 [ 312.386552][ T9844] ? __sys_sendmsg+0x2a0/0x2a0 [ 312.391350][ T9844] __se_sys_sendmsg+0x1c3/0x2b0 [ 312.396193][ T9844] ? ct_nmi_exit+0x145/0x1c0 [ 312.400785][ T9844] ? __x64_sys_sendmsg+0x80/0x80 [ 312.405732][ T9844] ? lockdep_hardirqs_on+0x94/0x140 [ 312.410931][ T9844] do_syscall_64+0x4c/0xa0 [ 312.415340][ T9844] ? clear_bhb_loop+0x60/0xb0 [ 312.420011][ T9844] ? clear_bhb_loop+0x60/0xb0 [ 312.424683][ T9844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.430579][ T9844] RIP: 0033:0x7f40c6f9e1d9 [ 312.434990][ T9844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.454590][ T9844] RSP: 002b:00007f40c7eaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.462994][ T9844] RAX: ffffffffffffffda RBX: 00007f40c7225fa0 RCX: 00007f40c6f9e1d9 [ 312.470964][ T9844] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 312.478933][ T9844] RBP: 00007f40c7035888 R08: 0000000000000000 R09: 0000000000000000 [ 312.486906][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.494869][ T9844] R13: 00007f40c7226038 R14: 00007f40c7225fa0 R15: 00007ffd13f1a768 [ 312.502877][ T9844] [ 312.683454][ T9852] netlink: 'syz.2.1287': attribute type 10 has an invalid length. [ 312.730882][ T9852] device geneve0 entered promiscuous mode [ 312.754021][ T9859] netlink: 'syz.1.1285': attribute type 3 has an invalid length. [ 312.840121][ T9859] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1285'. [ 312.858551][ T9852] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 313.958626][ T9893] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 314.401122][ T9897] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1293'. [ 314.599647][ T9893] team0: Port device geneve1 added [ 317.070050][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.076482][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.451775][ T9915] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1297'. [ 317.479719][ T9922] netlink: 'syz.2.1300': attribute type 21 has an invalid length. [ 317.509104][ T9922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1300'. [ 317.510511][ T9927] netlink: 'syz.0.1297': attribute type 2 has an invalid length. [ 317.528615][ T9922] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 317.554318][ T9927] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1297'. [ 317.590255][ T9917] netlink: 'syz.3.1299': attribute type 39 has an invalid length. [ 317.897108][ T9942] netlink: 'syz.1.1304': attribute type 10 has an invalid length. [ 318.073713][ T9942] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 319.840471][ T9985] netlink: 'syz.4.1314': attribute type 29 has an invalid length. [ 319.860650][ T9985] netlink: 'syz.4.1314': attribute type 29 has an invalid length. [ 320.195016][ T9992] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 320.447988][T10001] netlink: 'syz.1.1318': attribute type 49 has an invalid length. [ 320.464861][T10001] netlink: 'syz.1.1318': attribute type 49 has an invalid length. [ 321.429175][T10031] netlink: 'syz.2.1324': attribute type 29 has an invalid length. [ 321.462266][T10031] netlink: 'syz.2.1324': attribute type 29 has an invalid length. [ 321.989425][T10054] netlink: 'syz.2.1329': attribute type 41 has an invalid length. [ 322.263698][T10059] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1330'. [ 322.283663][T10059] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 323.996281][T10062] netlink: 'syz.0.1331': attribute type 46 has an invalid length. [ 325.503644][T10099] tap0: tun_chr_ioctl cmd 1074025675 [ 325.517895][T10099] tap0: persist enabled [ 325.602752][T10103] device ip6gretap0 left promiscuous mode [ 325.612637][T10103] : port 1(ip6gretap0) entered disabled state [ 325.637283][T10105] tap0: tun_chr_ioctl cmd 1074025677 [ 325.674410][T10105] tap0: linktype set to 32 [ 325.859559][T10122] netlink: 'syz.2.1344': attribute type 2 has an invalid length. [ 325.931620][T10127] netlink: 'syz.1.1345': attribute type 10 has an invalid length. [ 325.962516][T10127] device wlan1 entered promiscuous mode [ 325.985044][T10127] team0: Port device wlan1 added [ 327.218495][T10163] netlink: 'syz.4.1354': attribute type 28 has an invalid length. [ 327.953920][T10183] netlink: 'syz.4.1361': attribute type 3 has an invalid length. [ 327.992319][T10183] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1361'. [ 330.310413][T10203] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1364'. [ 331.205456][T10232] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 331.590282][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1370'. [ 331.695335][T10249] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1372'. [ 331.847707][T10255] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 331.881579][T10255] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1373'. [ 331.919957][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.849003][T10275] netlink: 'syz.4.1379': attribute type 3 has an invalid length. [ 332.865322][T10275] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1379'. [ 332.981757][T10273] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1378'. [ 333.953468][T10313] netlink: 'syz.3.1387': attribute type 15 has an invalid length. [ 333.988618][T10313] netlink: 'syz.3.1387': attribute type 7 has an invalid length. [ 334.012203][T10313] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1387'. [ 334.430558][T10325] netlink: 'syz.4.1390': attribute type 29 has an invalid length. [ 334.461953][T10330] netlink: 'syz.1.1391': attribute type 2 has an invalid length. [ 334.498216][T10330] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1391'. [ 334.511396][T10332] netlink: 91092 bytes leftover after parsing attributes in process `syz.3.1392'. [ 334.944818][T10352] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1398'. [ 334.954109][T10351] netlink: 'syz.2.1394': attribute type 21 has an invalid length. [ 334.962364][T10351] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1394'. [ 335.730365][T10388] netlink: 'syz.4.1406': attribute type 10 has an invalid length. [ 335.751632][T10388] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1406'. [ 335.789604][T10390] netlink: 'syz.0.1407': attribute type 3 has an invalid length. [ 335.806113][T10386] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1406'. [ 335.815455][T10390] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1407'. [ 335.835677][T10392] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1407'. [ 335.848881][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 335.894589][T10389] delete_channel: no stack [ 335.920684][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 335.969873][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 336.021755][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 336.062452][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 336.071576][T10360] delete_channel: no stack [ 336.096035][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 336.137754][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 336.170370][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 336.190856][T10388] netlink: 'syz.4.1406': attribute type 11 has an invalid length. [ 337.134248][T10435] netlink: 'syz.1.1412': attribute type 3 has an invalid length. [ 337.185086][T10435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1412'. [ 338.157423][T10450] netlink: 'syz.0.1414': attribute type 3 has an invalid length. [ 338.442018][T10453] netlink: 'syz.2.1415': attribute type 1 has an invalid length. [ 338.872627][T10455] netlink: 'syz.1.1416': attribute type 25 has an invalid length. [ 338.915880][T10455] netlink: 'syz.1.1416': attribute type 25 has an invalid length. [ 339.510273][T10485] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 339.537225][T10485] __nla_validate_parse: 2 callbacks suppressed [ 339.537243][T10485] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1421'. [ 340.460805][T10497] device syzkaller0 entered promiscuous mode [ 340.629134][T10511] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1424'. [ 340.655351][T10511] netlink: zone id is out of range [ 340.660637][T10511] netlink: zone id is out of range [ 340.690835][T10511] netlink: del zone limit has 4 unknown bytes [ 342.234518][T10549] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.1433'. [ 344.161096][T10536] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 344.171078][T10537] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1427'. [ 344.224955][T10537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.243417][T10537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.261504][T10537] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 344.270381][T10567] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 344.286505][T10537] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 344.297169][T10537] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 344.311696][T10537] bond0 (unregistering): Released all slaves [ 344.367016][T10567] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 344.383961][T10568] netlink: 'syz.4.1438': attribute type 29 has an invalid length. [ 344.525532][T10578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1440'. [ 344.617552][T10580] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1443'. [ 344.632692][T10578] netlink: 'syz.0.1440': attribute type 1 has an invalid length. [ 344.654518][T10578] netlink: 'syz.0.1440': attribute type 3 has an invalid length. [ 344.681691][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1440'. [ 345.350045][T10596] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1447'. [ 345.359565][T10600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.366885][T10600] IPv6: NLM_F_CREATE should be set when creating new route [ 345.374267][T10600] IPv6: NLM_F_CREATE should be set when creating new route [ 345.381515][T10600] IPv6: NLM_F_CREATE should be set when creating new route [ 345.639580][T10613] netlink: 'syz.1.1450': attribute type 27 has an invalid length. [ 345.649559][T10613] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1450'. [ 345.675903][T10613] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.691966][T10618] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1452'. [ 347.616481][T10612] netlink: 'syz.0.1452': attribute type 10 has an invalid length. [ 347.630555][T10612] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1452'. [ 347.639906][T10624] netlink: 'syz.1.1454': attribute type 49 has an invalid length. [ 347.991819][T10627] bond0: (slave macvlan0): Releasing backup interface [ 348.138578][T10637] device syzkaller0 entered promiscuous mode [ 348.602317][T10664] delete_channel: no stack [ 349.119380][T10684] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1466'. [ 351.288491][T10687] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 352.939382][T10708] device sit0 entered promiscuous mode [ 353.032382][T10713] device ipvlan1 left promiscuous mode [ 353.101403][T10713] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 353.193215][T10713] team0: Device nlmon0 is of different type [ 354.699504][T10776] netlink: 'syz.4.1486': attribute type 9 has an invalid length. [ 354.733109][T10776] netlink: 90128 bytes leftover after parsing attributes in process `syz.4.1486'. [ 357.878709][T10815] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 358.785987][T10815] device dummy0 left promiscuous mode [ 358.791657][T10815] bridge0: port 2(dummy0) entered disabled state [ 358.950878][T10818] netlink: 'syz.1.1498': attribute type 25 has an invalid length. [ 358.969346][T10818] netlink: 'syz.1.1498': attribute type 28 has an invalid length. [ 359.308150][T10842] netlink: 'syz.0.1505': attribute type 46 has an invalid length. [ 359.510997][T10849] netlink: 'syz.3.1506': attribute type 39 has an invalid length. [ 360.457724][T10876] netlink: 'syz.1.1512': attribute type 3 has an invalid length. [ 360.482873][T10879] netlink: 'syz.0.1516': attribute type 21 has an invalid length. [ 360.521707][T10879] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1516'. [ 360.565286][T10876] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1512'. [ 360.610875][T10882] netlink: 'syz.1.1512': attribute type 21 has an invalid length. [ 360.713941][T10882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1512'. [ 360.783162][T10882] netlink: 'syz.1.1512': attribute type 4 has an invalid length. [ 360.801413][T10882] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1512'. [ 363.698679][T10915] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 363.724342][T10915] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 363.739323][T10915] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1524'. [ 363.954493][T10930] Â: renamed from pim6reg1 [ 364.260309][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 364.398564][T10951] netlink: 'syz.0.1537': attribute type 10 has an invalid length. [ 364.428728][T10951] bond0: (slave wlan1): Opening slave failed [ 365.154651][T10977] netlink: 'syz.4.1545': attribute type 2 has an invalid length. [ 365.162443][T10977] netlink: 'syz.4.1545': attribute type 8 has an invalid length. [ 365.227146][T10977] netlink: 'syz.4.1545': attribute type 9 has an invalid length. [ 365.240042][T10977] netlink: 'syz.4.1545': attribute type 10 has an invalid length. [ 365.264617][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 365.280844][T10984] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1547'. [ 365.368058][T10995] netlink: 'syz.2.1549': attribute type 2 has an invalid length. [ 365.419391][T10995] device 0 entered promiscuous mode [ 365.603452][T10995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1549'. [ 367.458865][T11049] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1564'. [ 367.533480][T11056] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1563'. [ 367.803733][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1569'. [ 367.817398][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1569'. [ 367.839330][T11081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1569'. [ 367.867681][T11081] netlink: 'syz.3.1569': attribute type 29 has an invalid length. [ 367.889107][T11081] netlink: 'syz.3.1569': attribute type 29 has an invalid length. [ 367.911680][T11081] netlink: 'syz.3.1569': attribute type 29 has an invalid length. [ 367.944383][T11081] netlink: 'syz.3.1569': attribute type 10 has an invalid length. [ 367.953529][T11081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1569'. [ 367.974261][T11081] device veth0_vlan left promiscuous mode [ 367.989899][T11081] device veth0_vlan entered promiscuous mode [ 368.030071][T11081] bridge0: port 2(veth0_vlan) entered blocking state [ 368.041567][T11081] bridge0: port 2(veth0_vlan) entered disabled state [ 368.062627][T11081] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 368.086884][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 368.099950][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 368.108908][T10423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 368.117542][T11088] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1569'. [ 368.290087][T11096] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1574'. [ 368.357803][T11096] team0: Port device team_slave_0 removed [ 368.364387][T11096] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 368.401887][T11094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1573'. [ 368.433235][T11094] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 369.042454][T11122] : renamed from bond_slave_1 [ 371.918955][T11142] delete_channel: no stack [ 372.115367][T11147] __nla_validate_parse: 2 callbacks suppressed [ 372.115488][T11147] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1587'. [ 372.166389][T11147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.839436][T11150] delete_channel: no stack [ 372.844797][T11150] delete_channel: no stack [ 373.196185][T11186] can: request_module (can-proto-0) failed. [ 373.621156][T11212] validate_nla: 3 callbacks suppressed [ 373.621194][T11212] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 373.652733][T11212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'. [ 373.672006][T11212] device caif0 entered promiscuous mode [ 373.679443][T11217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'. [ 373.714624][T11212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.843599][T11217] nla_validate_range_unsigned: 24 callbacks suppressed [ 373.843639][T11217] netlink: 'syz.0.1601': attribute type 11 has an invalid length. [ 374.494611][T11216] device syzkaller0 entered promiscuous mode [ 374.526645][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.554528][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.575242][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.614243][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.635375][T11226] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1605'. [ 374.703985][T11226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.806572][T11234] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1605'. [ 374.864335][T11234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.920024][T11256] netlink: 'syz.3.1613': attribute type 12 has an invalid length. [ 376.928384][T11261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1613'. [ 376.944526][T11277] bridge0: port 3(team0) entered disabled state [ 376.955908][T11277] device bridge_slave_1 left promiscuous mode [ 376.962172][T11277] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.975629][T11277] device bridge_slave_0 left promiscuous mode [ 376.981900][T11277] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.019277][T11277] bond0: (slave bridge0): Releasing backup interface [ 377.043221][T11282] netlink: 'syz.0.1616': attribute type 13 has an invalid length. [ 377.186729][T11284] netlink: 'syz.2.1617': attribute type 3 has an invalid length. [ 377.204485][T11284] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1617'. [ 377.329214][T11295] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1621'. [ 377.400156][T11295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.465023][T11295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.624074][T11297] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1621'. [ 378.371198][T11326] netlink: 'syz.2.1628': attribute type 10 has an invalid length. [ 378.382981][T11326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1628'. [ 378.403497][T11326] device team0 entered promiscuous mode [ 378.414474][T11326] device team_slave_0 entered promiscuous mode [ 378.431447][T11326] device team_slave_1 entered promiscuous mode [ 378.454801][T11326] device geneve1 entered promiscuous mode [ 378.476305][T11326] bridge0: port 4(team0) entered blocking state [ 378.491212][T11326] bridge0: port 4(team0) entered disabled state [ 378.513762][T11334] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1631'. [ 378.517053][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530378][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.547817][T11326] bridge0: port 4(team0) entered blocking state [ 378.554400][T11326] bridge0: port 4(team0) entered forwarding state [ 378.588314][T11333] netlink: 'syz.1.1632': attribute type 19 has an invalid length. [ 379.113565][T11348] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1636'. [ 379.380790][T11365] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1640'. [ 379.702955][T11369] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1641'. [ 379.903494][T11379] netlink: 'syz.3.1644': attribute type 15 has an invalid length. [ 379.945850][T11379] netlink: 'syz.3.1644': attribute type 16 has an invalid length. [ 379.974388][T11379] netlink: 'syz.3.1644': attribute type 6 has an invalid length. [ 379.998320][T11379] netlink: 'syz.3.1644': attribute type 15 has an invalid length. [ 380.050620][T11369] bond0: (slave bond_slave_0): Releasing backup interface [ 380.051487][T11379] netlink: 'syz.3.1644': attribute type 16 has an invalid length. [ 380.133757][T11379] netlink: 'syz.3.1644': attribute type 20 has an invalid length. [ 380.161657][T11379] netlink: 'syz.3.1644': attribute type 21 has an invalid length. [ 380.181588][T11369] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 380.189639][T11379] netlink: 'syz.3.1644': attribute type 23 has an invalid length. [ 380.264405][T11379] netlink: 'syz.3.1644': attribute type 25 has an invalid length. [ 380.272287][T11379] netlink: 'syz.3.1644': attribute type 27 has an invalid length. [ 380.331036][T11379] netlink: 13226 bytes leftover after parsing attributes in process `syz.3.1644'. [ 380.863301][T11407] device sit0 entered promiscuous mode [ 381.717323][T11435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.732766][T11435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.763095][T11435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.776978][T11435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.656170][T11445] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1662'. [ 382.688350][T11457] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1664'. [ 382.791670][T11460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'. [ 382.807407][T11460] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1665'. [ 382.818996][T11462] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1666'. [ 382.854811][T11460] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1665'. [ 382.881548][T11460] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1665'. [ 383.210636][T11488] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1673'. [ 383.265788][T11489] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.1672'. [ 384.564416][T11517] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1680'. [ 384.659769][T11525] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 384.969857][T11532] validate_nla: 9 callbacks suppressed [ 384.969892][T11532] netlink: 'syz.3.1681': attribute type 29 has an invalid length. [ 384.987609][T11531] netlink: 'syz.2.1682': attribute type 10 has an invalid length. [ 385.010374][T11531] bridge0: port 3(dummy0) entered blocking state [ 385.016938][T11531] bridge0: port 3(dummy0) entered forwarding state [ 385.076786][T11532] netlink: 'syz.3.1681': attribute type 29 has an invalid length. [ 385.122751][T11529] netlink: 'syz.3.1681': attribute type 29 has an invalid length. [ 385.197848][T11534] netlink: 'syz.3.1681': attribute type 29 has an invalid length. [ 385.232463][T11529] netlink: 'syz.3.1681': attribute type 29 has an invalid length. [ 385.927151][T11560] sctp: [Deprecated]: syz.2.1689 (pid 11560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.927151][T11560] Use struct sctp_sack_info instead [ 386.661868][T11577] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 386.694589][T11577] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 386.741168][T11576] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 386.780493][T11579] netlink: 'syz.4.1693': attribute type 29 has an invalid length. [ 388.963604][T11650] team0: Port device geneve1 added [ 391.228099][T11718] validate_nla: 34 callbacks suppressed [ 391.228134][T11718] netlink: 'syz.1.1725': attribute type 10 has an invalid length. [ 391.269169][T11718] __nla_validate_parse: 3 callbacks suppressed [ 391.269205][T11718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1725'. [ 391.557538][T11723] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1727'. [ 391.843271][T11741] netlink: 'syz.0.1731': attribute type 11 has an invalid length. [ 391.859143][T11741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1731'. [ 392.580523][T11761] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.1737'. [ 392.619471][T11761] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 392.648539][T11762] delete_channel: no stack [ 392.668047][T11761] CPU: 0 PID: 11761 Comm: syz.0.1737 Not tainted syzkaller #0 [ 392.675573][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.685659][T11761] Call Trace: [ 392.688962][T11761] [ 392.691914][T11761] dump_stack_lvl+0x188/0x24e [ 392.696633][T11761] ? show_regs_print_info+0x12/0x12 [ 392.701864][T11761] ? load_image+0x410/0x410 [ 392.706402][T11761] sysfs_warn_dup+0x8a/0xa0 [ 392.710924][T11761] sysfs_do_create_link_sd+0xc0/0x110 [ 392.716314][T11761] device_add+0x83b/0x1050 [ 392.720855][T11761] wiphy_register+0x1d8b/0x2aa0 [ 392.725754][T11761] ? cfg80211_event_work+0x40/0x40 [ 392.730887][T11761] ? minstrel_ht_alloc+0x894/0xa20 [ 392.736031][T11761] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 392.742139][T11761] ieee80211_register_hw+0x2e33/0x3b00 [ 392.747648][T11761] ? ieee80211_register_hw+0xeb1/0x3b00 [ 392.753220][T11761] ? ieee80211_register_hw+0xeb1/0x3b00 [ 392.758796][T11761] ? ieee80211_tasklet_handler+0x20/0x20 [ 392.764447][T11761] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 392.770367][T11761] ? __debug_object_init+0xed/0x440 [ 392.775592][T11761] ? memset+0x1e/0x40 [ 392.779590][T11761] ? __hrtimer_init+0x189/0x270 [ 392.784459][T11761] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 392.790216][T11761] ? memcpy+0x3c/0x60 [ 392.794224][T11761] hwsim_new_radio_nl+0xab7/0xc90 [ 392.799290][T11761] genl_family_rcv_msg_doit+0x22f/0x350 [ 392.804861][T11761] ? end_current_label_crit_section+0x170/0x170 [ 392.811138][T11761] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 392.817069][T11761] ? bpf_lsm_capable+0x5/0x10 [ 392.821768][T11761] ? security_capable+0x85/0xb0 [ 392.826651][T11761] genl_rcv_msg+0x601/0x790 [ 392.831182][T11761] ? perf_trace_preemptirq_template+0x268/0x320 [ 392.837448][T11761] ? genl_bind+0x360/0x360 [ 392.841893][T11761] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 392.848262][T11761] netlink_rcv_skb+0x1ef/0x440 [ 392.853056][T11761] ? genl_bind+0x360/0x360 [ 392.857499][T11761] ? netlink_ack+0x1160/0x1160 [ 392.862295][T11761] ? down_read+0x1a8/0x2d0 [ 392.866741][T11761] genl_rcv+0x24/0x40 [ 392.870757][T11761] netlink_unicast+0x7ad/0x920 [ 392.875556][T11761] netlink_sendmsg+0x8ad/0xbd0 [ 392.880361][T11761] ? lockdep_hardirqs_on+0x94/0x140 [ 392.885591][T11761] ? netlink_getsockopt+0x550/0x550 [ 392.890821][T11761] ? netlink_getsockopt+0x550/0x550 [ 392.896053][T11761] ____sys_sendmsg+0x5ed/0x9a0 [ 392.900855][T11761] ? __sys_sendmsg_sock+0x30/0x30 [ 392.905904][T11761] ? __import_iovec+0x306/0x510 [ 392.910775][T11761] ? import_iovec+0x6f/0xa0 [ 392.915286][T11761] ___sys_sendmsg+0x2a2/0x360 [ 392.919971][T11761] ? __sys_sendmsg+0x2a0/0x2a0 [ 392.924746][T11761] ? ktime_get+0x7b/0x270 [ 392.929092][T11761] __se_sys_sendmsg+0x1c3/0x2b0 [ 392.933937][T11761] ? perf_trace_preemptirq_template+0x268/0x320 [ 392.940181][T11761] ? __x64_sys_sendmsg+0x80/0x80 [ 392.945125][T11761] ? lockdep_hardirqs_on+0x94/0x140 [ 392.950325][T11761] do_syscall_64+0x4c/0xa0 [ 392.954735][T11761] ? clear_bhb_loop+0x60/0xb0 [ 392.959411][T11761] ? clear_bhb_loop+0x60/0xb0 [ 392.964083][T11761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.969975][T11761] RIP: 0033:0x7fc39ed9e1d9 [ 392.974391][T11761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.994011][T11761] RSP: 002b:00007fc39fd37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.002454][T11761] RAX: ffffffffffffffda RBX: 00007fc39f026090 RCX: 00007fc39ed9e1d9 [ 393.010429][T11761] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000008 [ 393.018398][T11761] RBP: 00007fc39ee35888 R08: 0000000000000000 R09: 0000000000000000 [ 393.026362][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.034327][T11761] R13: 00007fc39f026128 R14: 00007fc39f026090 R15: 00007fff38ec5bf8 [ 393.042311][T11761] [ 393.206753][T11788] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1742'. [ 393.255332][T11788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.308137][T11791] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1742'. [ 393.326335][T11789] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 393.341927][T11789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1742'. [ 393.682322][T11818] netlink: 'syz.3.1745': attribute type 11 has an invalid length. [ 393.801122][T11822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1746'. [ 395.206789][T11844] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.1751'. [ 397.392729][T11903] netlink: 'syz.3.1766': attribute type 13 has an invalid length. [ 397.410545][T11903] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1766'. [ 397.503816][T11909] netlink: 'syz.1.1769': attribute type 21 has an invalid length. [ 397.733774][T11909] netlink: 'syz.1.1769': attribute type 39 has an invalid length. [ 399.376431][T11942] device sit0 left promiscuous mode [ 399.455631][T11948] device sit0 entered promiscuous mode [ 399.793607][T11954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1778'. [ 399.828733][T11954] netlink: 'syz.3.1778': attribute type 21 has an invalid length. [ 400.139606][T11963] netlink: 'syz.0.1780': attribute type 2 has an invalid length. [ 400.643190][T11985] netlink: 'syz.3.1786': attribute type 16 has an invalid length. [ 400.660697][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1786'. [ 400.706183][T11980] netlink: 'syz.3.1786': attribute type 10 has an invalid length. [ 400.738865][T11980] device macvlan0 left promiscuous mode [ 400.843751][T11980] team0: Port device macvlan0 added [ 401.558685][T12007] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 401.615698][T12007] syzkaller1: group set to 778 [ 401.620533][T12009] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 402.544944][T12045] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1797'. [ 403.118922][T12022] delete_channel: no stack [ 403.123580][T12022] delete_channel: no stack [ 403.134297][T12022] delete_channel: no stack [ 403.146461][T12022] delete_channel: no stack [ 403.151082][T12022] delete_channel: no stack [ 403.164478][T12022] delete_channel: no stack [ 403.177347][T12022] delete_channel: no stack [ 403.192140][T12022] delete_channel: no stack [ 403.205096][T12022] delete_channel: no stack [ 403.216839][T12022] delete_channel: no stack [ 403.231712][T12022] delete_channel: no stack [ 403.241837][T12022] delete_channel: no stack [ 403.256678][T12022] delete_channel: no stack [ 403.261302][T12022] delete_channel: no stack [ 403.278438][T12022] delete_channel: no stack [ 403.295502][T12022] delete_channel: no stack [ 403.310400][T12022] delete_channel: no stack [ 403.320512][T12022] delete_channel: no stack [ 403.333832][T12022] delete_channel: no stack [ 403.345617][T12022] delete_channel: no stack [ 403.374780][T12022] delete_channel: no stack [ 403.379443][T12022] delete_channel: no stack [ 403.405581][T12022] delete_channel: no stack [ 403.410199][T12022] delete_channel: no stack [ 403.435311][T12022] delete_channel: no stack [ 403.510033][T12022] delete_channel: no stack [ 403.544358][T12022] delete_channel: no stack [ 403.548991][T12022] delete_channel: no stack [ 403.553547][T12022] delete_channel: no stack [ 403.614420][T12022] delete_channel: no stack [ 403.619066][T12022] delete_channel: no stack [ 403.623718][T12022] delete_channel: no stack [ 403.655636][T12022] delete_channel: no stack [ 403.660208][T12022] delete_channel: no stack [ 403.685315][T12022] delete_channel: no stack [ 403.689940][T12022] delete_channel: no stack [ 403.714699][T12022] delete_channel: no stack [ 403.719310][T12022] delete_channel: no stack [ 403.723869][T12022] delete_channel: no stack [ 403.764317][T12022] delete_channel: no stack [ 403.768925][T12022] delete_channel: no stack [ 403.773483][T12022] delete_channel: no stack [ 403.795477][T12022] delete_channel: no stack [ 403.800128][T12022] delete_channel: no stack [ 403.824350][T12022] delete_channel: no stack [ 403.829079][T12022] delete_channel: no stack [ 403.855262][T12022] delete_channel: no stack [ 403.859867][T12022] delete_channel: no stack [ 403.917178][T12022] delete_channel: no stack [ 403.921800][T12022] delete_channel: no stack [ 403.959604][T12022] delete_channel: no stack [ 403.979975][T12022] delete_channel: no stack [ 403.990139][T12022] delete_channel: no stack [ 404.010424][T12022] delete_channel: no stack [ 404.026547][T12022] delete_channel: no stack [ 404.041408][T12022] delete_channel: no stack [ 404.054415][T12022] delete_channel: no stack [ 404.059045][T12022] delete_channel: no stack [ 404.094186][T12022] delete_channel: no stack [ 404.098821][T12022] delete_channel: no stack [ 404.103416][T12022] delete_channel: no stack [ 404.150145][T12022] delete_channel: no stack [ 404.166460][T12022] delete_channel: no stack [ 404.180224][T12022] delete_channel: no stack [ 404.206887][T12022] delete_channel: no stack [ 404.994427][T12076] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.1802'. [ 405.269978][T12099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1806'. [ 405.571274][T12103] netlink: 'syz.1.1804': attribute type 21 has an invalid length. [ 405.664555][T12117] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1811'. [ 408.054483][T12176] netlink: 'syz.4.1825': attribute type 46 has an invalid length. [ 408.084253][T12176] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1825'. [ 408.283651][T12182] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1823'. [ 408.333679][T12184] netlink: 'syz.1.1826': attribute type 10 has an invalid length. [ 408.425600][T12184] device geneve1 entered promiscuous mode [ 408.432282][T12184] team0: Port device geneve1 added [ 409.124435][T12191] netlink: 103 bytes leftover after parsing attributes in process `syz.3.1828'. [ 410.382448][T12224] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 410.878923][T12248] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1840'. [ 410.891336][T12237] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1838'. [ 410.983490][T12237] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1838'. [ 411.011655][T12237] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1838'. [ 411.104601][T12254] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1840'. [ 411.194338][T12237] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1838'. [ 411.363474][T12237] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1838'. [ 411.425953][T12260] delete_channel: no stack [ 411.499912][T12262] netlink: 'syz.0.1842': attribute type 9 has an invalid length. [ 411.640206][T12267] netlink: 'syz.3.1853': attribute type 21 has an invalid length. [ 412.644350][T12291] netlink: zone id is out of range [ 412.666082][T12291] netlink: zone id is out of range [ 412.705742][T12291] netlink: zone id is out of range [ 412.724810][T12291] netlink: zone id is out of range [ 412.770733][T12291] netlink: zone id is out of range [ 412.782057][T12291] netlink: zone id is out of range [ 412.791999][T12291] netlink: zone id is out of range [ 412.804563][T12291] netlink: zone id is out of range [ 412.811584][T12291] netlink: zone id is out of range [ 412.836892][T12291] netlink: zone id is out of range [ 415.964932][T12300] netlink: 'syz.0.1850': attribute type 28 has an invalid length. [ 415.974335][T12300] netlink: 'syz.0.1850': attribute type 29 has an invalid length. [ 415.982629][T12300] __nla_validate_parse: 7 callbacks suppressed [ 415.982643][T12300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1850'. [ 416.066510][T12311] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1851'. [ 416.207323][T12320] netlink: 'syz.3.1857': attribute type 10 has an invalid length. [ 416.237351][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1857'. [ 416.281506][T12320] netlink: 'syz.3.1857': attribute type 10 has an invalid length. [ 416.315410][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1857'. [ 416.598529][T12339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1858'. [ 416.607798][T12339] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1858'. [ 416.633424][T12329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1858'. [ 416.688848][T12343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1859'. [ 416.705312][T12333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1858'. [ 417.066106][T12351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1862'. [ 417.323739][T12357] netlink: 'syz.1.1864': attribute type 11 has an invalid length. [ 417.711392][T12361] netlink: 'syz.4.1867': attribute type 39 has an invalid length. [ 419.008990][T12419] netlink: 'syz.3.1883': attribute type 4 has an invalid length. [ 420.254425][T12444] netlink: 'syz.3.1892': attribute type 2 has an invalid length. [ 420.641363][T12455] can: request_module (can-proto-4) failed. [ 420.803563][T12467] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 420.828117][T12467] device dummy0 entered promiscuous mode [ 421.292002][T12467] bond0: (slave dummy0): Releasing backup interface [ 424.347425][T12467] bridge0: port 3(dummy0) entered blocking state [ 424.361039][T12467] bridge0: port 3(dummy0) entered disabled state [ 424.633766][T12505] __nla_validate_parse: 6 callbacks suppressed [ 424.633784][T12505] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.1902'. [ 424.695260][T12505] net_ratelimit: 11 callbacks suppressed [ 424.695277][T12505] openvswitch: netlink: Flow actions attr not present in new flow. [ 424.733140][T12499] can: request_module (can-proto-0) failed. [ 425.462175][T12521] device syzkaller0 entered promiscuous mode [ 425.731068][T12538] netlink: 'syz.3.1911': attribute type 16 has an invalid length. [ 425.792055][T12538] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1911'. [ 426.110612][T12548] netlink: 'syz.2.1912': attribute type 28 has an invalid length. [ 426.127919][T12549] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1913'. [ 426.166323][T12548] netlink: 'syz.2.1912': attribute type 29 has an invalid length. [ 426.231177][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1912'. [ 429.535105][T12539] netlink: 'syz.3.1911': attribute type 10 has an invalid length. [ 429.547487][T12544] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1912'. [ 430.298722][T12594] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 430.523437][T12594] device wg1 entered promiscuous mode [ 430.536730][T12594] team0: Device wg1 is of different type [ 430.651170][T12597] netlink: 'syz.2.1923': attribute type 10 has an invalid length. [ 430.681745][T12597] team0: Device wg1 is of different type [ 431.132035][T12615] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1932'. [ 431.259396][T12615] netlink: 'syz.2.1932': attribute type 2 has an invalid length. [ 431.306982][T12615] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1932'. [ 431.918788][T12624] netlink: 'syz.0.1934': attribute type 16 has an invalid length. [ 431.932548][T12624] netlink: 'syz.0.1934': attribute type 3 has an invalid length. [ 431.944536][T12624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1934'. [ 431.996065][T12629] netlink: 'syz.4.1936': attribute type 2 has an invalid length. [ 432.003858][T12629] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1936'. [ 432.118095][T12629] netlink: 'syz.4.1936': attribute type 2 has an invalid length. [ 432.223598][T12629] netlink: 'syz.4.1936': attribute type 8 has an invalid length. [ 432.245902][T12629] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1936'. [ 433.359383][T12670] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1945'. [ 433.898625][T12696] netlink: 'syz.2.1950': attribute type 3 has an invalid length. [ 433.936285][T12696] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1950'. [ 433.974794][T12697] delete_channel: no stack [ 434.152479][T12705] device sit0 left promiscuous mode [ 434.672457][T12716] device syzkaller0 entered promiscuous mode [ 438.447328][T12756] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 438.476187][T12756] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1964'. [ 438.524990][T12765] netlink: 'syz.0.1964': attribute type 10 has an invalid length. [ 438.876789][T12778] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1971'. [ 439.668687][T12825] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1982'. [ 439.707022][T12825] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 439.770761][T12826] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1982'. [ 439.801083][T12826] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 439.813733][T12826] CPU: 1 PID: 12826 Comm: syz.1.1982 Not tainted syzkaller #0 [ 439.821237][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.831309][T12826] Call Trace: [ 439.834615][T12826] [ 439.837571][T12826] dump_stack_lvl+0x188/0x24e [ 439.842279][T12826] ? show_regs_print_info+0x12/0x12 [ 439.847517][T12826] ? load_image+0x410/0x410 [ 439.852062][T12826] sysfs_warn_dup+0x8a/0xa0 [ 439.856600][T12826] sysfs_do_create_link_sd+0xc0/0x110 [ 439.861997][T12826] device_add+0x83b/0x1050 [ 439.866446][T12826] wiphy_register+0x1d8b/0x2aa0 [ 439.871334][T12826] ? cfg80211_event_work+0x40/0x40 [ 439.876473][T12826] ? minstrel_ht_alloc+0x894/0xa20 [ 439.881616][T12826] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 439.887715][T12826] ieee80211_register_hw+0x2e33/0x3b00 [ 439.893220][T12826] ? ieee80211_register_hw+0xeb1/0x3b00 [ 439.898794][T12826] ? ieee80211_register_hw+0xeb1/0x3b00 [ 439.904370][T12826] ? ieee80211_tasklet_handler+0x20/0x20 [ 439.910021][T12826] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 439.915938][T12826] ? __debug_object_init+0xed/0x440 [ 439.921160][T12826] ? memset+0x1e/0x40 [ 439.925161][T12826] ? __hrtimer_init+0x189/0x270 [ 439.930038][T12826] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 439.935785][T12826] ? memcpy+0x3c/0x60 [ 439.939790][T12826] hwsim_new_radio_nl+0xab7/0xc90 [ 439.944845][T12826] genl_family_rcv_msg_doit+0x22f/0x350 [ 439.950412][T12826] ? end_current_label_crit_section+0x170/0x170 [ 439.956686][T12826] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 439.962618][T12826] ? bpf_lsm_capable+0x5/0x10 [ 439.967317][T12826] ? security_capable+0x85/0xb0 [ 439.972192][T12826] genl_rcv_msg+0x601/0x790 [ 439.972832][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.976707][T12826] ? genl_bind+0x360/0x360 [ 439.983172][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.987377][T12826] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 439.987416][T12826] netlink_rcv_skb+0x1ef/0x440 [ 439.987437][T12826] ? genl_bind+0x360/0x360 [ 440.009185][T12826] ? netlink_ack+0x1160/0x1160 [ 440.014003][T12826] ? down_read+0x1a8/0x2d0 [ 440.018511][T12826] genl_rcv+0x24/0x40 [ 440.022513][T12826] netlink_unicast+0x7ad/0x920 [ 440.027306][T12826] netlink_sendmsg+0x8ad/0xbd0 [ 440.032103][T12826] ? netlink_getsockopt+0x550/0x550 [ 440.037315][T12826] ? apparmor_socket_sendmsg+0x8a/0x330 [ 440.042887][T12826] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 440.048192][T12826] ? security_socket_sendmsg+0x7c/0xa0 [ 440.053668][T12826] ? netlink_getsockopt+0x550/0x550 [ 440.058882][T12826] ____sys_sendmsg+0x5ed/0x9a0 [ 440.063672][T12826] ? __sys_sendmsg_sock+0x30/0x30 [ 440.068709][T12826] ? __import_iovec+0x306/0x510 [ 440.073600][T12826] ? import_iovec+0x6f/0xa0 [ 440.078139][T12826] ___sys_sendmsg+0x2a2/0x360 [ 440.082848][T12826] ? __sys_sendmsg+0x2a0/0x2a0 [ 440.087686][T12826] __se_sys_sendmsg+0x1c3/0x2b0 [ 440.092556][T12826] ? __x64_sys_sendmsg+0x80/0x80 [ 440.097529][T12826] ? lockdep_hardirqs_on+0x94/0x140 [ 440.102758][T12826] do_syscall_64+0x4c/0xa0 [ 440.107192][T12826] ? clear_bhb_loop+0x60/0xb0 [ 440.111885][T12826] ? clear_bhb_loop+0x60/0xb0 [ 440.116650][T12826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 440.122569][T12826] RIP: 0033:0x7f5aae19e1d9 [ 440.127002][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.146646][T12826] RSP: 002b:00007f5aaf075028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.155087][T12826] RAX: ffffffffffffffda RBX: 00007f5aae426090 RCX: 00007f5aae19e1d9 [ 440.163085][T12826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 440.171077][T12826] RBP: 00007f5aae235888 R08: 0000000000000000 R09: 0000000000000000 [ 440.179095][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.187086][T12826] R13: 00007f5aae426128 R14: 00007f5aae426090 R15: 00007ffe90d99548 [ 440.195101][T12826] [ 440.767161][T12831] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1984'. [ 440.782817][T12831] netlink: zone id is out of range [ 440.791157][T12831] netlink: zone id is out of range [ 440.799723][T12831] netlink: zone id is out of range [ 440.808854][T12831] netlink: zone id is out of range [ 440.828903][T12831] netlink: zone id is out of range [ 440.840863][T12848] netlink: 'syz.1.1988': attribute type 46 has an invalid length. [ 440.849344][T12831] netlink: zone id is out of range [ 440.855879][T12831] netlink: zone id is out of range [ 440.867474][T12831] netlink: zone id is out of range [ 440.883121][T12831] netlink: zone id is out of range [ 440.896383][T12831] netlink: zone id is out of range [ 441.130289][T12855] netlink: 'syz.3.1990': attribute type 49 has an invalid length. [ 441.159811][T12855] netlink: 'syz.3.1990': attribute type 49 has an invalid length. [ 441.345290][T12865] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1992'. [ 441.364032][T12867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1993'. [ 441.395728][T12867] : renamed from caif0 [ 441.459173][T12867] device  left promiscuous mode [ 441.483274][T12870] netlink: 'syz.0.1994': attribute type 10 has an invalid length. [ 441.507310][T12867] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 441.544760][T12867] netlink: 'syz.1.1993': attribute type 2 has an invalid length. [ 441.597792][T12867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1993'. [ 442.612621][T12899] netlink: 'syz.1.2003': attribute type 11 has an invalid length. [ 442.650166][T12901] device sit0 left promiscuous mode [ 443.017034][T12907] device sit0 entered promiscuous mode [ 443.637719][T12921] netlink: 'syz.0.2007': attribute type 3 has an invalid length. [ 443.646953][T12921] netlink: 178156 bytes leftover after parsing attributes in process `syz.0.2007'. [ 443.659384][T12929] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2010'. [ 443.676556][T12924] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 443.702637][T12924] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2008'. [ 444.428823][T12940] netlink: 'syz.1.2012': attribute type 2 has an invalid length. [ 444.471000][T12940] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 447.595253][T12983] netlink: 'syz.0.2019': attribute type 13 has an invalid length. [ 447.603989][T12983] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2019'. [ 447.633763][T13008] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.656491][T13008] net_ratelimit: 6 callbacks suppressed [ 447.656504][T13008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.678154][T13011] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.699567][T13011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.721044][T13024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2031'. [ 447.942900][T13028] netlink: 'syz.0.2034': attribute type 25 has an invalid length. [ 447.958296][T13028] netlink: 'syz.0.2034': attribute type 29 has an invalid length. [ 449.606045][T13084] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2046'. [ 451.629677][T13123] sctp: [Deprecated]: syz.4.2053 (pid 13123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.629677][T13123] Use struct sctp_sack_info instead [ 451.821750][T13140] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 452.392582][T13159] netlink: 'syz.1.2063': attribute type 16 has an invalid length. [ 452.435431][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2063'. [ 452.481052][T13158] netlink: 'syz.1.2063': attribute type 10 has an invalid length. [ 452.869567][T13167] delete_channel: no stack [ 452.909514][T13167] delete_channel: no stack [ 452.926287][T13167] delete_channel: no stack [ 452.960405][T13167] delete_channel: no stack [ 453.007550][T13167] delete_channel: no stack [ 453.012193][T13167] delete_channel: no stack [ 453.080000][T13167] delete_channel: no stack [ 453.133169][T13167] delete_channel: no stack [ 453.152957][T13167] delete_channel: no stack [ 453.164922][T13167] delete_channel: no stack [ 453.187622][T13167] delete_channel: no stack [ 453.192208][T13167] delete_channel: no stack [ 453.225043][T13167] delete_channel: no stack [ 453.242990][T13167] delete_channel: no stack [ 453.259071][T13167] delete_channel: no stack [ 453.263819][T13167] delete_channel: no stack [ 453.271248][T13167] delete_channel: no stack [ 453.279553][T13167] delete_channel: no stack [ 453.284667][T13167] delete_channel: no stack [ 453.289490][T13167] delete_channel: no stack [ 453.294027][T13167] delete_channel: no stack [ 453.302069][T13167] delete_channel: no stack [ 453.319162][T13167] delete_channel: no stack [ 453.328394][T13167] delete_channel: no stack [ 453.351259][T13167] delete_channel: no stack [ 453.356086][T13167] delete_channel: no stack [ 453.360644][T13167] delete_channel: no stack [ 453.368129][T13167] delete_channel: no stack [ 453.374981][T13167] delete_channel: no stack [ 453.408480][T13181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2067'. [ 453.426855][T13167] delete_channel: no stack [ 453.434637][T13167] delete_channel: no stack [ 453.439259][T13167] delete_channel: no stack [ 453.474580][T13167] delete_channel: no stack [ 453.479227][T13167] delete_channel: no stack [ 453.534503][T13167] delete_channel: no stack [ 453.550209][T13167] delete_channel: no stack [ 453.574348][T13167] delete_channel: no stack [ 453.578957][T13167] delete_channel: no stack [ 453.593784][T13167] delete_channel: no stack [ 453.603899][T13167] delete_channel: no stack [ 453.665069][T13167] delete_channel: no stack [ 453.695882][T13167] delete_channel: no stack [ 453.714294][T13167] delete_channel: no stack [ 453.718982][T13167] delete_channel: no stack [ 453.723557][T13167] delete_channel: no stack [ 453.735514][T13167] delete_channel: no stack [ 453.740133][T13167] delete_channel: no stack [ 453.803037][T13190] netlink: 'syz.3.2067': attribute type 39 has an invalid length. [ 453.824709][T13167] delete_channel: no stack [ 453.829363][T13167] delete_channel: no stack [ 453.833953][T13167] delete_channel: no stack [ 453.935944][T13167] delete_channel: no stack [ 453.940588][T13167] delete_channel: no stack [ 453.954338][T13167] delete_channel: no stack [ 453.959039][T13167] delete_channel: no stack [ 453.963617][T13167] delete_channel: no stack [ 453.974390][T13167] delete_channel: no stack [ 454.001252][T13167] delete_channel: no stack [ 454.014419][T13167] delete_channel: no stack [ 454.032108][T13167] delete_channel: no stack [ 454.044361][T13167] delete_channel: no stack [ 454.049025][T13167] delete_channel: no stack [ 454.053599][T13167] delete_channel: no stack [ 454.068764][T13167] delete_channel: no stack [ 454.083895][T13167] delete_channel: no stack [ 454.094316][T13167] delete_channel: no stack [ 454.275203][T13201] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 454.281331][T13201] syzkaller1: linktype set to 825 [ 454.382392][T13202] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 454.446930][T13208] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2072'. [ 454.463100][T13208] device hsr_slave_0 left promiscuous mode [ 454.484430][T13208] device hsr_slave_1 left promiscuous mode [ 454.731048][T13227] netlink: 'syz.3.2075': attribute type 29 has an invalid length. [ 454.745554][T13227] netlink: 'syz.3.2075': attribute type 29 has an invalid length. [ 454.821136][T13227] netlink: 'syz.3.2075': attribute type 29 has an invalid length. [ 455.083937][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2078'. [ 455.196292][T13242] netlink: 'syz.3.2078': attribute type 3 has an invalid length. [ 455.218902][T13242] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2078'. [ 455.440230][T13246] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2079'. [ 457.167780][T13292] netlink: 'syz.0.2088': attribute type 15 has an invalid length. [ 457.187664][T13292] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2088'. [ 457.727214][T13311] netlink: 'syz.2.2096': attribute type 10 has an invalid length. [ 459.341401][T13341] netlink: 'syz.2.2104': attribute type 4 has an invalid length. [ 459.366953][T13341] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2104'. [ 459.412031][T13343] netlink: 'syz.1.2105': attribute type 9 has an invalid length. [ 460.620355][T13375] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2113'. [ 460.722511][T13373] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2112'. [ 460.731506][T13375] netlink: 'syz.1.2113': attribute type 13 has an invalid length. [ 460.766650][T13373] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 460.778777][T13375] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2113'. [ 461.537824][T13387] netlink: 'syz.1.2117': attribute type 3 has an invalid length. [ 462.088170][T13411] netlink: 'syz.1.2123': attribute type 4 has an invalid length. [ 462.109732][T13411] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2123'. [ 463.275499][T13420] netlink: 'syz.2.2127': attribute type 10 has an invalid length. [ 463.319889][T13420] bridge0: port 3(dummy0) entered disabled state [ 463.359073][T13420] device dummy0 left promiscuous mode [ 463.384915][T13420] bridge0: port 3(dummy0) entered disabled state [ 463.426463][T13420] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 463.456873][T13422] netlink: 'syz.1.2128': attribute type 39 has an invalid length. [ 463.609018][T13422] device syz_tun left promiscuous mode [ 463.615739][T13422] : port 1(syz_tun) entered disabled state [ 464.002082][T13447] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.2134'. [ 464.022692][T13446] netlink: 'syz.1.2134': attribute type 2 has an invalid length. [ 464.042329][T13446] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2134'. [ 464.130021][T13452] netlink: 'syz.3.2136': attribute type 27 has an invalid length. [ 464.150803][T13452] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2136'. [ 464.282734][T13458] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2138'. [ 465.260202][T13482] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 465.284694][T13482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2146'. [ 465.308292][T13482] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 465.340897][T13482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2146'. [ 465.375620][T13485] netlink: 'syz.1.2146': attribute type 10 has an invalid length. [ 465.453071][T13499] netlink: 'syz.3.2147': attribute type 10 has an invalid length. [ 466.552790][T13530] tap0: tun_chr_ioctl cmd 1074025676 [ 466.589198][T13530] tap0: owner set to 0 [ 466.887785][T13544] __nla_validate_parse: 1 callbacks suppressed [ 466.887803][T13544] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2160'. [ 468.132527][T13576] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2168'. [ 468.335291][T13584] netlink: 'syz.4.2168': attribute type 2 has an invalid length. [ 468.358602][T13584] netlink: 'syz.4.2168': attribute type 8 has an invalid length. [ 468.374854][T13584] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2168'. [ 468.413886][T13591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2169'. [ 468.451103][T13576] netlink: 'syz.4.2168': attribute type 2 has an invalid length. [ 468.532029][T13576] netlink: 'syz.4.2168': attribute type 8 has an invalid length. [ 468.543090][T13576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2168'. [ 468.571720][T13591] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2169'. [ 468.846876][T13606] netlink: 'syz.1.2175': attribute type 49 has an invalid length. [ 469.009342][T13602] device syzkaller0 entered promiscuous mode [ 469.317435][T13627] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2177'. [ 469.506491][T13629] netlink: 'syz.2.2178': attribute type 29 has an invalid length. [ 469.705362][T13633] netlink: 'syz.2.2178': attribute type 29 has an invalid length. [ 471.093851][T13606] netlink: 'syz.1.2175': attribute type 49 has an invalid length. [ 471.103505][T13601] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2173'. [ 471.123810][T13629] netlink: 'syz.2.2178': attribute type 29 has an invalid length. [ 471.227155][T13640] netlink: 'syz.0.2179': attribute type 3 has an invalid length. [ 471.262700][T13640] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2179'. [ 471.457730][ T4282] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 471.584834][T13660] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2185'. [ 473.464247][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 473.517875][T13714] netlink: 'syz.4.2197': attribute type 10 has an invalid length. [ 473.590429][T13714] team0: Device vxcan1 is of different type [ 474.698534][T13762] __nla_validate_parse: 1 callbacks suppressed [ 474.698578][T13762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2209'. [ 474.843157][T13759] can: request_module (can-proto-0) failed. [ 475.216420][T13788] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2216'. [ 475.266248][T13788] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.342299][T13788] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2216'. [ 475.728637][T13801] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2218'. [ 476.305240][T13811] delete_channel: no stack [ 476.310319][T13811] delete_channel: no stack [ 476.848238][T13830] netlink: 'syz.4.2231': attribute type 7 has an invalid length. [ 476.964616][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2233'. [ 476.985581][T13832] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2232'. [ 477.032946][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2233'. [ 477.352508][T13849] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2236'. [ 477.361909][T13849] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.2236'. [ 477.372408][T13849] netlink: 802 bytes leftover after parsing attributes in process `syz.2.2236'. [ 477.694711][T13852] netlink: 'syz.2.2237': attribute type 7 has an invalid length. [ 478.189993][T13869] tap1: tun_chr_ioctl cmd 1074025677 [ 478.198135][T13869] tap1: linktype set to 6 [ 478.328785][T13873] netlink: 'syz.3.2243': attribute type 10 has an invalid length. [ 478.555647][T13873] team0: Device wg1 is of different type [ 479.638715][T13930] sctp: [Deprecated]: syz.3.2255 (pid 13930) Use of struct sctp_assoc_value in delayed_ack socket option. [ 479.638715][T13930] Use struct sctp_sack_info instead [ 480.713735][T13954] netlink: 'syz.0.2261': attribute type 21 has an invalid length. [ 480.784480][T13954] __nla_validate_parse: 1 callbacks suppressed [ 480.784498][T13954] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2261'. [ 480.954569][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 481.282558][T13978] netlink: 'syz.2.2268': attribute type 4 has an invalid length. [ 481.312213][T13978] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2268'. [ 481.560606][T13980] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2269'. [ 481.695574][T13994] delete_channel: no stack [ 481.747672][T13994] delete_channel: no stack [ 481.787781][T13990] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.2272'. [ 481.946727][T13994] netlink: 'syz.0.2271': attribute type 25 has an invalid length. [ 482.053601][T13994] netlink: 'syz.0.2271': attribute type 9 has an invalid length. [ 482.185672][T13994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2271'. [ 482.910321][T14018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2280'. [ 482.944355][T14018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2280'. [ 482.981257][T14025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2280'. [ 483.214246][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.263739][T14028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.325224][T14028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.400449][T14028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.472668][T14028] batman_adv: batadv0: Removing interface: netdevsim0 [ 484.429274][T14043] netlink: 'syz.1.2285': attribute type 21 has an invalid length. [ 484.475610][T14043] IPv6: NLM_F_CREATE should be specified when creating new route [ 487.273213][T14053] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.2286'. [ 488.456067][T14103] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2299'. [ 489.076955][T14131] netlink: 'syz.2.2303': attribute type 2 has an invalid length. [ 489.132456][T14131] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2303'. [ 489.547168][T14122] netlink: 49915 bytes leftover after parsing attributes in process `syz.1.2302'. [ 489.814939][T14148] netlink: 'syz.1.2307': attribute type 10 has an invalid length. [ 489.847915][T14152] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2308'. [ 490.265862][T14148] device team_slave_0 left promiscuous mode [ 490.538210][T14148] team0 (unregistering): Port device team_slave_0 removed [ 490.547583][T14148] device team_slave_1 left promiscuous mode [ 490.565055][T14148] team0 (unregistering): Port device team_slave_1 removed [ 490.572901][T14148] device wlan1 left promiscuous mode [ 490.602376][T14148] team0 (unregistering): Port device wlan1 removed [ 490.609458][T14148] device geneve1 left promiscuous mode [ 490.635330][T14148] team0 (unregistering): Port device geneve1 removed [ 490.660496][T14156] netlink: 'syz.0.2309': attribute type 10 has an invalid length. [ 490.788804][T14167] netlink: 'syz.2.2313': attribute type 21 has an invalid length. [ 491.140961][T14190] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 491.650756][T14207] netlink: 'syz.2.2319': attribute type 3 has an invalid length. [ 491.671688][T14207] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2319'. [ 492.113774][T14218] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 492.440844][T14231] netlink: 131061 bytes leftover after parsing attributes in process `syz.3.2326'. [ 492.963147][T14252] netlink: 'syz.2.2332': attribute type 2 has an invalid length. [ 492.988338][T14252] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2332'. [ 493.261263][T14270] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2339'. [ 493.297685][T14271] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2339'. [ 493.590053][T14283] netlink: 'syz.0.2344': attribute type 3 has an invalid length. [ 493.613181][T14283] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2344'. [ 493.645764][T14287] netlink: 'syz.1.2345': attribute type 3 has an invalid length. [ 493.653558][T14287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2345'. [ 493.672033][T14293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2344'. [ 493.754484][T14293] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 495.176165][T14330] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2353'. [ 495.275910][T14330] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2353'. [ 495.355866][T14330] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2353'. [ 496.427034][T14375] netlink: 'syz.1.2363': attribute type 12 has an invalid length. [ 497.187735][T14386] bridge0: port 4(team0) entered disabled state [ 497.229264][T14386] device bridge_slave_1 left promiscuous mode [ 497.250775][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.325396][T14386] device bridge_slave_0 left promiscuous mode [ 497.353064][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.895968][T14412] __nla_validate_parse: 3 callbacks suppressed [ 497.895986][T14412] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2372'. [ 498.278252][T14419] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2374'. [ 498.793209][T14448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2380'. [ 498.854550][T14448] netlink: 'syz.3.2380': attribute type 2 has an invalid length. [ 498.883383][T14448] netlink: 'syz.3.2380': attribute type 5 has an invalid length. [ 499.551781][T14470] netlink: 'syz.0.2385': attribute type 9 has an invalid length. [ 499.581567][T14470] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2385'. [ 500.240132][T14485] can: request_module (can-proto-3) failed. [ 501.387220][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.393575][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.420594][T14527] netlink: 'syz.4.2401': attribute type 3 has an invalid length. [ 501.428564][T14527] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2401'. [ 501.598746][T14534] netlink: 'syz.2.2402': attribute type 7 has an invalid length. [ 501.729811][T14541] syz.3.2404[14541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.729918][T14541] syz.3.2404[14541] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.361534][T14556] netlink: 'syz.4.2407': attribute type 29 has an invalid length. [ 502.381742][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 502.393886][T14556] netlink: 'syz.4.2407': attribute type 29 has an invalid length. [ 502.402348][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 502.467818][T14563] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2410'. [ 502.780305][T14570] netlink: 'syz.1.2411': attribute type 9 has an invalid length. [ 503.153445][T14582] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 503.336388][T14582] team0: Device gre0 is of different type [ 505.454654][T14630] netlink: 'syz.3.2424': attribute type 12 has an invalid length. [ 505.462968][T14630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2424'. [ 505.601349][T14634] netlink: 'syz.2.2426': attribute type 2 has an invalid length. [ 505.634190][T14634] netlink: 193088 bytes leftover after parsing attributes in process `syz.2.2426'. [ 505.745573][T14646] netlink: 'syz.1.2429': attribute type 21 has an invalid length. [ 505.753525][T14646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2429'. [ 505.899928][T14650] netlink: 'syz.2.2431': attribute type 20 has an invalid length. [ 506.348605][T14676] netlink: 'syz.1.2436': attribute type 16 has an invalid length. [ 506.366054][T14676] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2436'. [ 506.378304][T14676] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 506.421194][T14682] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2440'. [ 506.455321][T14690] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2441'. [ 506.557414][T14682] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 506.583187][T14682] CPU: 1 PID: 14682 Comm: syz.2.2440 Not tainted syzkaller #0 [ 506.590711][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.600799][T14682] Call Trace: [ 506.604097][T14682] [ 506.607047][T14682] dump_stack_lvl+0x188/0x24e [ 506.611758][T14682] ? show_regs_print_info+0x12/0x12 [ 506.616982][T14682] ? load_image+0x410/0x410 [ 506.621519][T14682] sysfs_warn_dup+0x8a/0xa0 [ 506.626057][T14682] sysfs_do_create_link_sd+0xc0/0x110 [ 506.631465][T14682] device_add+0x83b/0x1050 [ 506.635950][T14682] wiphy_register+0x1d8b/0x2aa0 [ 506.640854][T14682] ? cfg80211_event_work+0x40/0x40 [ 506.645985][T14682] ? minstrel_ht_alloc+0x894/0xa20 [ 506.651122][T14682] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 506.657218][T14682] ieee80211_register_hw+0x2e33/0x3b00 [ 506.662681][T14682] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 506.668859][T14682] ? ieee80211_register_hw+0xeb1/0x3b00 [ 506.674408][T14682] ? ieee80211_register_hw+0xeb1/0x3b00 [ 506.679962][T14682] ? ieee80211_tasklet_handler+0x20/0x20 [ 506.685593][T14682] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.691502][T14682] ? __debug_object_init+0xed/0x440 [ 506.696703][T14682] ? memset+0x1e/0x40 [ 506.700683][T14682] ? __hrtimer_init+0x189/0x270 [ 506.705539][T14682] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 506.711270][T14682] ? memcpy+0x3c/0x60 [ 506.715263][T14682] hwsim_new_radio_nl+0xab7/0xc90 [ 506.720305][T14682] genl_family_rcv_msg_doit+0x22f/0x350 [ 506.725862][T14682] ? end_current_label_crit_section+0x170/0x170 [ 506.732117][T14682] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 506.738025][T14682] ? bpf_lsm_capable+0x5/0x10 [ 506.742701][T14682] ? security_capable+0x85/0xb0 [ 506.747559][T14682] genl_rcv_msg+0x601/0x790 [ 506.752072][T14682] ? genl_bind+0x360/0x360 [ 506.756487][T14682] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 506.762830][T14682] netlink_rcv_skb+0x1ef/0x440 [ 506.767617][T14682] ? genl_bind+0x360/0x360 [ 506.772051][T14682] ? netlink_ack+0x1160/0x1160 [ 506.776837][T14682] ? down_read+0x1a8/0x2d0 [ 506.781267][T14682] genl_rcv+0x24/0x40 [ 506.785257][T14682] netlink_unicast+0x7ad/0x920 [ 506.790040][T14682] netlink_sendmsg+0x8ad/0xbd0 [ 506.794841][T14682] ? netlink_getsockopt+0x550/0x550 [ 506.800048][T14682] ? apparmor_socket_sendmsg+0x8a/0x330 [ 506.805609][T14682] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 506.810893][T14682] ? security_socket_sendmsg+0x7c/0xa0 [ 506.816363][T14682] ? netlink_getsockopt+0x550/0x550 [ 506.821580][T14682] ____sys_sendmsg+0x5ed/0x9a0 [ 506.826364][T14682] ? __sys_sendmsg_sock+0x30/0x30 [ 506.831420][T14682] ? __import_iovec+0x306/0x510 [ 506.836315][T14682] ? import_iovec+0x6f/0xa0 [ 506.840841][T14682] ___sys_sendmsg+0x2a2/0x360 [ 506.845549][T14682] ? __sys_sendmsg+0x2a0/0x2a0 [ 506.850323][T14682] ? perf_trace_preemptirq_template+0xa8/0x320 [ 506.856500][T14682] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 506.862509][T14682] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 506.868697][T14682] ? lockdep_hardirqs_on+0x94/0x140 [ 506.873942][T14682] ? __se_sys_sendmsg+0xee/0x2b0 [ 506.878897][T14682] ? kasan_check_range+0x80/0x290 [ 506.883967][T14682] __se_sys_sendmsg+0x1c3/0x2b0 [ 506.888835][T14682] ? __x64_sys_sendmsg+0x80/0x80 [ 506.893800][T14682] ? lockdep_hardirqs_on+0x94/0x140 [ 506.899015][T14682] do_syscall_64+0x4c/0xa0 [ 506.903434][T14682] ? clear_bhb_loop+0x60/0xb0 [ 506.908115][T14682] ? clear_bhb_loop+0x60/0xb0 [ 506.912798][T14682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.918695][T14682] RIP: 0033:0x7f2057b9e1d9 [ 506.923114][T14682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.942723][T14682] RSP: 002b:00007f2058ad0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.951143][T14682] RAX: ffffffffffffffda RBX: 00007f2057e25fa0 RCX: 00007f2057b9e1d9 [ 506.959238][T14682] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 506.967225][T14682] RBP: 00007f2057c35888 R08: 0000000000000000 R09: 0000000000000000 [ 506.975199][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.983182][T14682] R13: 00007f2057e26038 R14: 00007f2057e25fa0 R15: 00007ffcd3e8d988 [ 506.991187][T14682] [ 507.005894][T14699] netlink: 'syz.0.2442': attribute type 29 has an invalid length. [ 507.020106][T14699] netlink: 'syz.0.2442': attribute type 29 has an invalid length. [ 507.368469][T14703] netlink: 'syz.1.2443': attribute type 11 has an invalid length. [ 507.388122][T14703] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2443'. [ 507.398801][T14705] netlink: 'syz.4.2444': attribute type 17 has an invalid length. [ 507.471138][T14713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2447'. [ 507.481293][T14713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 509.985956][T14730] device sit0 left promiscuous mode [ 510.019830][T14731] device sit0 entered promiscuous mode [ 510.056727][T14737] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2453'. [ 510.069210][T14737] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.107381][T14737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.124562][T14739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.138558][T14739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.157267][T14748] netlink: 'syz.3.2454': attribute type 3 has an invalid length. [ 510.236947][T14756] netlink: 'syz.1.2455': attribute type 2 has an invalid length. [ 510.264700][T14756] netlink: 'syz.1.2455': attribute type 1 has an invalid length. [ 510.724879][T14782] netlink: 'syz.4.2463': attribute type 27 has an invalid length. [ 510.749616][T14782] __nla_validate_parse: 2 callbacks suppressed [ 510.749635][T14782] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2463'. [ 510.947666][T14795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2465'. [ 510.964387][T14795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2465'. [ 511.034253][T14799] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2467'. [ 514.251192][T14827] netlink: 'syz.1.2473': attribute type 3 has an invalid length. [ 514.302191][T14827] netlink: 118424 bytes leftover after parsing attributes in process `syz.1.2473'. [ 514.567655][T14835] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2476'. [ 514.864048][T14842] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2479'. [ 514.876693][T14842] openvswitch: netlink: Key type 386 is out of range max 32 [ 515.303762][T14857] netlink: 'syz.3.2482': attribute type 2 has an invalid length. [ 515.323787][T14857] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2482'. [ 515.789474][T14885] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2489'. [ 515.815346][T14885] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 515.863143][T14885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.873983][T14890] netlink: 'syz.1.2491': attribute type 11 has an invalid length. [ 515.908430][T14890] netlink: 165008 bytes leftover after parsing attributes in process `syz.1.2491'. [ 516.136926][T14896] device wlan1 entered promiscuous mode [ 516.734190][T14923] netlink: 'syz.3.2498': attribute type 10 has an invalid length. [ 516.762757][T14923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2498'. [ 516.775249][T14923] device dummy0 entered promiscuous mode [ 516.795902][T14923] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 516.817077][T14923] bridge0: port 2(dummy0) entered blocking state [ 516.855451][T14923] bridge0: port 2(dummy0) entered disabled state [ 516.907412][T14923] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 517.517835][T14959] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2505'. [ 517.546768][T14960] netlink: 'syz.0.2505': attribute type 12 has an invalid length. [ 517.580756][T14960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2505'. [ 517.663394][T14960] netlink: 'syz.0.2505': attribute type 10 has an invalid length. [ 517.972327][T14975] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2510'. [ 517.987848][T14975] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2510'. [ 518.001890][T14975] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2510'. [ 518.043164][T14975] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2510'. [ 518.070852][T14975] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2510'. [ 518.124914][T14980] netlink: 'syz.1.2512': attribute type 29 has an invalid length. [ 518.150305][T14980] netlink: 'syz.1.2512': attribute type 29 has an invalid length. [ 518.173091][T14980] netlink: 'syz.1.2512': attribute type 29 has an invalid length. [ 518.348890][T14985] netlink: 'syz.4.2514': attribute type 10 has an invalid length. [ 518.406614][T14985] netlink: 'syz.4.2514': attribute type 10 has an invalid length. [ 518.445868][T14985] device wlan1 left promiscuous mode [ 518.529048][T14995] delete_channel: no stack [ 518.571069][T14995] delete_channel: no stack [ 518.722625][T14999] device team0 entered promiscuous mode [ 518.775114][T14999] device team_slave_0 entered promiscuous mode [ 518.795611][T14999] device team_slave_1 entered promiscuous mode [ 518.865470][T14999] device geneve1 entered promiscuous mode [ 518.963095][T14999] bond0: (slave team0): Releasing backup interface [ 519.007696][T14999] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.126471][T15004] delete_channel: no stack [ 519.254133][T15010] IPv6: NLM_F_CREATE should be specified when creating new route [ 519.281242][T15010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.288853][T15010] IPv6: NLM_F_CREATE should be set when creating new route [ 519.296632][T15010] IPv6: NLM_F_CREATE should be set when creating new route [ 519.304188][T15010] IPv6: NLM_F_CREATE should be set when creating new route [ 519.370770][T15012] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 519.390808][T15012] CPU: 0 PID: 15012 Comm: syz.1.2521 Not tainted syzkaller #0 [ 519.398362][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.408464][T15012] Call Trace: [ 519.411783][T15012] [ 519.414774][T15012] dump_stack_lvl+0x188/0x24e [ 519.419500][T15012] ? show_regs_print_info+0x12/0x12 [ 519.424731][T15012] ? load_image+0x410/0x410 [ 519.429261][T15012] sysfs_warn_dup+0x8a/0xa0 [ 519.433788][T15012] sysfs_do_create_link_sd+0xc0/0x110 [ 519.439179][T15012] device_add+0x83b/0x1050 [ 519.443622][T15012] wiphy_register+0x1d8b/0x2aa0 [ 519.448517][T15012] ? cfg80211_event_work+0x40/0x40 [ 519.453641][T15012] ? minstrel_ht_alloc+0x894/0xa20 [ 519.458774][T15012] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 519.464866][T15012] ieee80211_register_hw+0x2e33/0x3b00 [ 519.470359][T15012] ? ieee80211_register_hw+0xeb1/0x3b00 [ 519.475932][T15012] ? ieee80211_register_hw+0xeb1/0x3b00 [ 519.481499][T15012] ? ieee80211_tasklet_handler+0x20/0x20 [ 519.487144][T15012] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 519.493073][T15012] ? __debug_object_init+0xed/0x440 [ 519.498283][T15012] ? memset+0x1e/0x40 [ 519.502268][T15012] ? __hrtimer_init+0x189/0x270 [ 519.507133][T15012] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 519.512877][T15012] ? memcpy+0x3c/0x60 [ 519.516873][T15012] hwsim_new_radio_nl+0xab7/0xc90 [ 519.521924][T15012] genl_family_rcv_msg_doit+0x22f/0x350 [ 519.527480][T15012] ? end_current_label_crit_section+0x170/0x170 [ 519.533741][T15012] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 519.539658][T15012] ? bpf_lsm_capable+0x5/0x10 [ 519.544352][T15012] ? security_capable+0x85/0xb0 [ 519.549223][T15012] genl_rcv_msg+0x601/0x790 [ 519.553752][T15012] ? genl_bind+0x360/0x360 [ 519.558175][T15012] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 519.564533][T15012] netlink_rcv_skb+0x1ef/0x440 [ 519.569305][T15012] ? genl_bind+0x360/0x360 [ 519.573744][T15012] ? netlink_ack+0x1160/0x1160 [ 519.578552][T15012] ? down_read+0x1a8/0x2d0 [ 519.582985][T15012] genl_rcv+0x24/0x40 [ 519.586973][T15012] netlink_unicast+0x7ad/0x920 [ 519.591757][T15012] netlink_sendmsg+0x8ad/0xbd0 [ 519.596540][T15012] ? netlink_getsockopt+0x550/0x550 [ 519.601749][T15012] ? apparmor_socket_sendmsg+0x8a/0x330 [ 519.607313][T15012] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 519.612613][T15012] ? security_socket_sendmsg+0x7c/0xa0 [ 519.618078][T15012] ? netlink_getsockopt+0x550/0x550 [ 519.623286][T15012] ____sys_sendmsg+0x5ed/0x9a0 [ 519.628086][T15012] ? __sys_sendmsg_sock+0x30/0x30 [ 519.633126][T15012] ? __import_iovec+0x306/0x510 [ 519.638034][T15012] ? import_iovec+0x6f/0xa0 [ 519.642553][T15012] ___sys_sendmsg+0x2a2/0x360 [ 519.647269][T15012] ? __sys_sendmsg+0x2a0/0x2a0 [ 519.652114][T15012] __se_sys_sendmsg+0x1c3/0x2b0 [ 519.656976][T15012] ? __x64_sys_sendmsg+0x80/0x80 [ 519.661954][T15012] ? lockdep_hardirqs_on+0x94/0x140 [ 519.667166][T15012] do_syscall_64+0x4c/0xa0 [ 519.671584][T15012] ? clear_bhb_loop+0x60/0xb0 [ 519.676264][T15012] ? clear_bhb_loop+0x60/0xb0 [ 519.680944][T15012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.686841][T15012] RIP: 0033:0x7f5aae19e1d9 [ 519.691261][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.710870][T15012] RSP: 002b:00007f5aaf096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.719296][T15012] RAX: ffffffffffffffda RBX: 00007f5aae425fa0 RCX: 00007f5aae19e1d9 [ 519.727281][T15012] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 519.735264][T15012] RBP: 00007f5aae235888 R08: 0000000000000000 R09: 0000000000000000 [ 519.743240][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.751211][T15012] R13: 00007f5aae426038 R14: 00007f5aae425fa0 R15: 00007ffe90d99548 [ 519.759214][T15012] [ 520.858361][T15049] validate_nla: 3 callbacks suppressed [ 520.858378][T15049] netlink: 'syz.1.2529': attribute type 21 has an invalid length. [ 520.908470][T15049] __nla_validate_parse: 32 callbacks suppressed [ 520.908484][T15049] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2529'. [ 521.216729][T15072] netlink: 'syz.1.2533': attribute type 10 has an invalid length. [ 521.246912][T15072] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2533'. [ 521.281726][T15072] device dummy0 entered promiscuous mode [ 521.332539][T15072] bond0: (slave dummy0): Releasing backup interface [ 521.357249][T15072] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 521.494502][T15090] netlink: 'syz.4.2536': attribute type 29 has an invalid length. [ 521.502745][T15090] netlink: 'syz.4.2536': attribute type 29 has an invalid length. [ 521.540738][T15090] netlink: 'syz.4.2536': attribute type 29 has an invalid length. [ 521.577750][T15092] netlink: 'syz.0.2540': attribute type 11 has an invalid length. [ 521.608047][T15092] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2540'. [ 521.830836][T15105] : mtu less than device minimum [ 522.564329][T15134] netlink: 'syz.0.2550': attribute type 33 has an invalid length. [ 522.614380][T15134] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2550'. [ 522.623518][T15134] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 522.829178][T15146] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2551'. [ 523.115993][T15166] netlink: 'syz.3.2556': attribute type 10 has an invalid length. [ 523.318775][T15166] team0: Port device hsr_slave_0 added [ 523.330387][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.355034][T15174] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2558'. [ 523.428646][T15174] bridge0: port 3(dummy0) entered disabled state [ 524.146336][T15200] delete_channel: no stack [ 524.290465][T15219] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2566'. [ 524.316302][T15221] netlink: 134768 bytes leftover after parsing attributes in process `syz.3.2567'. [ 524.337470][T15219] device hsr_slave_0 left promiscuous mode [ 524.368854][T15219] device hsr_slave_1 left promiscuous mode [ 525.524672][T15268] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 526.273303][T15280] device sit0 left promiscuous mode [ 526.301667][T15275] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2582'. [ 526.457085][T15295] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2586'. [ 526.867167][T15316] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.385408][T15332] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2594'. [ 527.447824][T15335] netlink: 'syz.3.2596': attribute type 10 has an invalid length. [ 527.757472][T15335] device veth0_vlan left promiscuous mode [ 527.773554][T15335] device veth0_vlan entered promiscuous mode [ 527.817207][T15335] team0: Device veth0_vlan failed to register rx_handler [ 533.024702][T15379] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2602'. [ 534.491527][T15410] netlink: 'syz.0.2607': attribute type 2 has an invalid length. [ 534.518077][T15410] netlink: 'syz.0.2607': attribute type 8 has an invalid length. [ 534.543300][T15410] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2607'. [ 534.588160][T15414] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2610'. [ 534.612202][T15414] device hsr_slave_0 left promiscuous mode [ 534.644843][T15414] device hsr_slave_1 left promiscuous mode [ 535.690259][T15460] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2621'. [ 535.705829][T15460] netlink: zone id is out of range [ 535.719495][T15460] netlink: zone id is out of range [ 535.737178][T15460] netlink: del zone limit has 4 unknown bytes [ 536.980519][T15474] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2626'. [ 538.456361][T15508] netlink: 126612 bytes leftover after parsing attributes in process `syz.3.2634'. [ 538.518833][T15508] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2634'. [ 539.255592][T15543] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2640'. [ 539.290026][T15548] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2641'. [ 539.293838][T15543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2640'. [ 539.329900][T15543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2640'. [ 539.351334][T15543] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2640'. [ 539.590104][T15561] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2644'. [ 541.136123][T15606] netlink: 'syz.1.2655': attribute type 3 has an invalid length. [ 541.155875][T15606] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2655'. [ 541.231436][T15609] netlink: 'syz.4.2656': attribute type 10 has an invalid length. [ 541.239983][T15609] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2656'. [ 541.251759][T15609] bridge0: port 3(dummy0) entered blocking state [ 541.258290][T15609] bridge0: port 3(dummy0) entered forwarding state [ 542.163527][T15649] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 543.563658][T15677] __nla_validate_parse: 4 callbacks suppressed [ 543.563685][T15677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2671'. [ 543.662437][T15677] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2671'. [ 543.711403][T15683] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2674'. [ 543.733053][T15686] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2675'. [ 543.756193][T15687] delete_channel: no stack [ 543.788852][T15686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2675'. [ 543.836810][T15686] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2675'. [ 544.598692][T15718] device syzkaller0 entered promiscuous mode [ 544.610524][T15726] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2682'. [ 546.109170][T15750] netlink: 'syz.2.2691': attribute type 3 has an invalid length. [ 546.134019][T15750] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2691'. [ 546.176809][T15755] netlink: 'syz.2.2691': attribute type 3 has an invalid length. [ 546.192979][T15755] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2691'. [ 548.597826][T15782] netlink: 'syz.0.2698': attribute type 3 has an invalid length. [ 548.646115][T15782] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2698'. [ 548.675624][T15784] netlink: 'syz.2.2699': attribute type 6 has an invalid length. [ 551.355177][T15801] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 551.363015][T15801] #PF: supervisor instruction fetch in kernel mode [ 551.369571][T15801] #PF: error_code(0x0010) - not-present page [ 551.375579][T15801] PGD 8704a067 P4D 8704a067 PUD 0 [ 551.380727][T15801] Oops: 0010 [#1] PREEMPT SMP KASAN [ 551.385951][T15801] CPU: 1 PID: 15801 Comm: syz.0.2705 Not tainted syzkaller #0 [ 551.393440][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.403523][T15801] RIP: 0010:0x0 [ 551.407008][T15801] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 551.414384][T15801] RSP: 0018:ffffc9000530f498 EFLAGS: 00010246 [ 551.420470][T15801] RAX: 1ffffffff162e0bb RBX: 1ffff92000a61ea4 RCX: 0000000000000001 [ 551.428465][T15801] RDX: ffffc9000530f540 RSI: 0000000000000001 RDI: ffff888056aa0000 [ 551.436552][T15801] RBP: ffffc9000530f5b0 R08: ffff888056aa003f R09: 1ffff1100ad54007 [ 551.444546][T15801] R10: dffffc0000000000 R11: ffffed100ad54008 R12: ffffe8ffffd480b0 [ 551.452536][T15801] R13: ffffffff8b1705d8 R14: 0000000000000000 R15: ffff888056aa0000 [ 551.460526][T15801] FS: 00007fc39fd586c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 551.469477][T15801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.476072][T15801] CR2: ffffffffffffffd6 CR3: 00000000869e7000 CR4: 00000000003506e0 [ 551.484058][T15801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.492041][T15801] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 551.500030][T15801] Call Trace: [ 551.503318][T15801] [ 551.506259][T15801] bond_xdp_xmit+0x31e/0x550 [ 551.510871][T15801] ? bond_xdp_xmit+0x94/0x550 [ 551.515566][T15801] ? bond_xdp+0x8c0/0x8c0 [ 551.519914][T15801] bq_xmit_all+0xca9/0x1120 [ 551.524439][T15801] ? zone_statistics+0x170/0x170 [ 551.529374][T15801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 551.535351][T15801] ? __dev_flush+0x1b0/0x1b0 [ 551.539933][T15801] ? __alloc_pages_bulk+0x491/0x910 [ 551.545126][T15801] ? xdp_test_run_init_page+0x330/0x430 [ 551.550677][T15801] ? memcpy+0x3c/0x60 [ 551.554667][T15801] ? bq_enqueue+0x2ef/0x3d0 [ 551.559155][T15801] ? rcu_is_watching+0x11/0xa0 [ 551.563917][T15801] ? trace_xdp_redirect+0xb3/0x2b0 [ 551.569047][T15801] __dev_flush+0xbf/0x1b0 [ 551.573369][T15801] xdp_do_flush+0xa/0x20 [ 551.577615][T15801] bpf_test_run_xdp_live+0x1549/0x1a90 [ 551.583090][T15801] ? 0xffffffffa0004340 [ 551.587254][T15801] ? text_poke_copy+0x7b/0x90 [ 551.592015][T15801] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 551.597555][T15801] ? xdp_convert_md_to_buff+0x330/0x330 [ 551.603100][T15801] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 551.609355][T15801] ? bpf_test_init+0x119/0x140 [ 551.614113][T15801] ? xdp_convert_md_to_buff+0x5b/0x330 [ 551.619563][T15801] bpf_prog_test_run_xdp+0x757/0xf80 [ 551.624868][T15801] ? __lock_acquire+0x7ea0/0x7ea0 [ 551.629884][T15801] ? dev_put+0x80/0x80 [ 551.633943][T15801] ? dev_put+0x80/0x80 [ 551.638000][T15801] bpf_prog_test_run+0x31c/0x390 [ 551.642928][T15801] __sys_bpf+0x62b/0x780 [ 551.647159][T15801] ? bpf_link_show_fdinfo+0x380/0x380 [ 551.652522][T15801] ? lock_chain_count+0x20/0x20 [ 551.657362][T15801] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 551.663330][T15801] __x64_sys_bpf+0x78/0x90 [ 551.667734][T15801] do_syscall_64+0x4c/0xa0 [ 551.672162][T15801] ? clear_bhb_loop+0x60/0xb0 [ 551.676824][T15801] ? clear_bhb_loop+0x60/0xb0 [ 551.681499][T15801] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.687376][T15801] RIP: 0033:0x7fc39ed9e1d9 [ 551.691776][T15801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.711389][T15801] RSP: 002b:00007fc39fd58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.719798][T15801] RAX: ffffffffffffffda RBX: 00007fc39f025fa0 RCX: 00007fc39ed9e1d9 [ 551.727755][T15801] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 551.735712][T15801] RBP: 00007fc39ee35888 R08: 0000000000000000 R09: 0000000000000000 [ 551.743667][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.751622][T15801] R13: 00007fc39f026038 R14: 00007fc39f025fa0 R15: 00007fff38ec5bf8 [ 551.759605][T15801] [ 551.762621][T15801] Modules linked in: [ 551.766509][T15801] CR2: 0000000000000000 [ 551.770658][T15801] ---[ end trace 0000000000000000 ]--- [ 551.776096][T15801] RIP: 0010:0x0 [ 551.779564][T15801] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 551.786922][T15801] RSP: 0018:ffffc9000530f498 EFLAGS: 00010246 [ 551.792971][T15801] RAX: 1ffffffff162e0bb RBX: 1ffff92000a61ea4 RCX: 0000000000000001 [ 551.800924][T15801] RDX: ffffc9000530f540 RSI: 0000000000000001 RDI: ffff888056aa0000 [ 551.808879][T15801] RBP: ffffc9000530f5b0 R08: ffff888056aa003f R09: 1ffff1100ad54007 [ 551.816838][T15801] R10: dffffc0000000000 R11: ffffed100ad54008 R12: ffffe8ffffd480b0 [ 551.824813][T15801] R13: ffffffff8b1705d8 R14: 0000000000000000 R15: ffff888056aa0000 [ 551.832776][T15801] FS: 00007fc39fd586c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 551.841701][T15801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 551.848269][T15801] CR2: ffffffffffffffd6 CR3: 00000000869e7000 CR4: 00000000003506e0 [ 551.856230][T15801] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 551.864187][T15801] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 551.872147][T15801] Kernel panic - not syncing: Fatal exception in interrupt [ 551.879621][T15801] Kernel Offset: disabled [ 551.883934][T15801] Rebooting in 86400 seconds..