last executing test programs: 5.471927307s ago: executing program 3 (id=5033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x28, &(0x7f0000000000), 0x4) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000120) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10104, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000faffffff0000000000d80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x2000007, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x100, 0x4}, 0x4869, 0x6, 0x0, 0xf, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8912, &(0x7f0000000000)={'bond_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000ef50000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600140003000012", 0x28}], 0x1}, 0xb28e155800bf4ab) 5.171344504s ago: executing program 3 (id=5038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080)="cf7e65f3505a58c2da849a59d159a35c85", &(0x7f00000000c0)=""/222, 0x4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r0}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xde, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x7, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0xa6, &(0x7f0000000380)=""/166, 0x41000, 0x10, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r0], &(0x7f00000007c0)=[{0x1, 0x1, 0x2, 0x2}, {0x2, 0x3, 0x9, 0x6}], 0x10, 0x1}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000008c0)={r1}) sendmsg(r2, &(0x7f0000000c40)={&(0x7f0000000900)=@caif=@rfm={0x25, 0x80000001, "1af8c866a74bdd8f423d39a3fcdef3fc"}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)="47fc41ad773dfe647b94fafd768f12b0af6f9f69fca37451f5f4fd528d45", 0x1e}], 0x1, &(0x7f0000000a00)=[{0xa0, 0x101, 0x4, "6fd2036261904ce3b5b67ab93ba579251771f695af4fd0f6fb4b65fc80ea7ce09ba2f79404ee28038bc63ce8191897cae28b169d010e0d9b2e74ca1df8b36e24b1ef36ebeae80088440edeb7b4d2597656c39af53e7af27080a3230b2c83c29c3deb8262be31fb7c43915d27c9594d8475889156ff1bcb4d6ae0db8aac6db136df9c35ec1b25d9e81f6be813"}, {0xd0, 0x0, 0x8, "8158582691d53a38e48f5a1fdb5b214ade49901919acc2e263ad03a539fb85a73465fd84bae00b06dd6825ac94deeb72f2e3680e51e4f03f90db40f0926ef9cd969cd76364ec55f5afa87bdfb8d7855ffec3cdc3fb6319764a1260f0c7ea6b738af43ac2cdfc18ae7b43b031f464c9d38a32053d6754974f73852eb38d9f62a7e127171f5fb9f3dca214674915cf3c224a60a2740f8ea49630c5cf1ddbf68a033e3cd5054ebf5e3dac72a677f25e8ac8cab4580e2774aa902bbadb"}, {0xc8, 0x111, 0x9c57, "bccca88bf9171f76832b348867ae2117cd574c251353d036255c936adc789fa8e4c5a1451c36f89f013930cc6ecc213bd91b11f47455691cd73890ca893b7bc324c2ae11a542cd57225ddd0fa592e3e09b51a2db01b932a7a62287ee2352294ee95f1c55ad51d701f43a90514c6fe60307f70eba00cded0a6c3b9dba59c340d8e9ce24077830c063acc20c2ce9bc11bdcddafd1b8ee79465e9b5c58527523834e6d0da5a9a8b235521485d25729c619c8076"}], 0x238}, 0x4008010) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c80)=r5, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@bloom_filter={0x1e, 0xfffffffb, 0x8abb, 0xe, 0x2000, 0xffffffffffffffff, 0xfffffffd, '\x00', r4, r8, 0x5, 0x3, 0x0, 0xd}, 0x50) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d40)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000d80)=r10, 0x4) r11 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001280)={&(0x7f0000000dc0)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000e40)="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", 0xfa}, {&(0x7f0000000f40)="66b80ca94d681e5f9ca183e61ff4fa38f498a25040427d0dbaa2adece00f7cf5fe20e938178bd47699e1f9744a023cf3bac8b7126e806c007df1f2c47258a04453e0b727b743b4c3e3f74fad167c82c0d0e80bc7bdc960ac7ea3e0a7260814e3e3868996d3652d9d19b2b3fa290e156952a9dc", 0x73}, {&(0x7f0000000fc0)="feb1f741fa96c51f3a1ccc789ed5bf5551363a8f7912f3eab10d0615415254aa97d54bda6a7990d5dea743684f6947e5f95f3dcca5f7527b27b1a80f77a9b4c18b20985952280e30b02c3000d8ea64d0e7f12242d90d2dfca082fc01c16e36569c0a779ba4569c71e88100d577ab55a47e75c399341bdbdfd87e8101ae9fa3850788fa3c573bc15ef393254ad5e9d43e2cc6a3f9275337c1b0f450a5ff36ede1369463e966a62065e2c38af177ffa532a3632301210a80d1296452a270096d55639af7821d22c9c920c3c7be61eac61d6ba4812ca96e63201c1234c6357f43ddae89d8fdf408cf336026eecbbe316e92f338cf2f082d00", 0xf7}, {&(0x7f00000010c0)="27d9cfbd48ec21fff1fb19d49bca26021faae6b582f2ed01806989034cab57c626a359", 0x23}, {&(0x7f0000001100)="a8f63a78c0f28cbcacde1801e50046c58b7f5c30c09ba4a5945db8a97b51ea22f380287be4f640e1cfb5007d8f09beb0f346f4dce53d7c5a22ce30799bd81a52ad52f898d4273ec3", 0x48}, {&(0x7f0000001180)="4cc8f32bd6a1818456f1fca6c5bd379b7edd2682509088bf2205d592f789ebc2137c0b33eb3ded661912f6beb12fc3e06ab502298ce7f400fbd4e9f5bad2b4578c6f0e2ce5ce1232dce1bbf314861233417447912f50c4d369d6be19d18fecd7a95edf9f26be70e9e1197963eca08a6eae16cb54a027", 0x76}], 0x6}, 0x10) socketpair(0x18, 0x3, 0xab1a, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x80000, 0x0) ioctl$TUNGETDEVNETNS(r13, 0x54e3, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001440)={r8, 0x20, &(0x7f0000001400)={&(0x7f0000001340)=""/125, 0x7d, 0x0, &(0x7f00000013c0)=""/36, 0x24}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000001480)={0x0, r12}, 0x8) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_ext={0x1c, 0x1c, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x0, 0x6, 0x2, 0x3, 0x0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x7a}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='GPL\x00', 0x68bd, 0x5d, &(0x7f0000001600)=""/93, 0x41000, 0x42, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000001680)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x4, 0xfff, 0x7}, 0x10, 0x1c58e, r6, 0x0, &(0x7f0000001700)=[r8, r0, r9, r9, r0], 0x0, 0x10, 0x9ac6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001800)={@fallback=r10, r14, 0x0, 0x0, r3, @void, @value=r6}, 0x20) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x8000, 0x0) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001880)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r16, &(0x7f00000018c0)='tasks\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(r15, 0x400454e2, &(0x7f0000001900)) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000001940)={r10}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000001980)={0x0, r9}, 0x8) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0xff, 0x5, 0x3, 0x6, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x1ff}, 0x8010, 0x8, 0x8001, 0x3, 0x13c, 0x2, 0xff, 0x0, 0xda0, 0x0, 0x800}, 0xffffffffffffffff, 0x5, r17, 0xb) 4.92275955s ago: executing program 3 (id=5039): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc6000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000001380)=[{0x2d, 0x4}]}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c0000e48d4a9f7bbf004cac00000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000001441405716401010100000000ac14141d00000005000000"], 0x48}, 0x200040c4) 4.54217912s ago: executing program 3 (id=5041): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x94}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x80) 4.425510312s ago: executing program 3 (id=5045): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x486, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1c, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x66}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xcf, &(0x7f0000001b40)=""/207, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x9, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000001c40)={0x5, 0x80, 0x80, 0xa2, 0x2, 0x3, 0x0, 0x8, 0x3400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0xb}, 0x20, 0x2, 0x7, 0x1, 0x1, 0x4, 0x53c, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, r0, 0x5) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xb, 0xc2ba, 0x0, 0x4000001}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='-\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x38e38e3, 0x1, r5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001640)='8', 0x1}], 0x1}, 0x400c0) close(r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r3, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xf5, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xf4, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', r4, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffee6, r8, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r10 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000940)=""/222}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000540)='(pu&00\t||') r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r12 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0xffffffffffffffff) 4.341169434s ago: executing program 1 (id=5046): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="190000000400000004000000ffff573ba8954bea", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="000000000200"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='a\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x400c844) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115a000000000018000000f0ff000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 4.276035636s ago: executing program 2 (id=5047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e47"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x28}], 0x1}, 0x0) 4.226539507s ago: executing program 4 (id=5048): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="83eb010018000000000000000c0000000c00eeff05000000010000000000f50e0300000000615f2e00"], 0x0, 0x29}, 0x20) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x30, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000009600000000000000ffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004000000000020000000000000000000017ffc2ce84217b3f001500000000"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1, 0x48, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x1, 0x4, 0x0, 0x9, 0x0, 0x0, 0xfffd, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) close(r7) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)}, 0x24044811) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000)=r8, 0x8) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af0ff00000000b509020000000000c38af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.11110557s ago: executing program 2 (id=5049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000005ff800030000000300000081304c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4.036993682s ago: executing program 1 (id=5050): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x3, 0x0, 0x0, 0x4000, 0x1a042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(r3) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x0, 0x26, 0x0, 0x0, 0x2, 0x10000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x4, 0x0, 0x0, 0x0, 0xb80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x4a600, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) (async) ioctl$TUNGETVNETLE(r4, 0x800454dd, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x7f, 0x7f, 0x6, 0x40, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0xd}, 0x50) (async, rerun: 32) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xa) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)=0x5) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) 3.979864483s ago: executing program 2 (id=5051): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe00c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe00c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x5, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x9, &(0x7f0000000800), 0x4) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) r1 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa500bb230", 0x8, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000440)="378e3828cb02177921b39c47166df240565bc8c16061e2c7989709253c7552ca95518af43bec2a76f6af1d033f604bb4b79f42a26eaffcc923a29417d2e5d994d811fb229e93bfef4c198a57675e9b973962e8a22a296f6952940ebee7eaf53089862f931c5348dfaeebe82f1f50205848b2") r2 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r2, 0x29, 0x7, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x7, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x8, 0x574e}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x100}, r1, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000100000000000000000000000000000000000000010d1d0ace6843bdcc2fb100c74ff357080e3ee42c47556021c8f3daf4d8b0d47a9c01481ae9b49fd270df42d86b53d9424307363c405c3c742c55bf28e483eba2516ea8ba2f17f555566baf8d87096a250f7750d5fa9bdfae5e40f60b02ec51428dafba6556108fc735faf0b15bef216c0f791b4ac5f93e97be0ff9e4a41806020c3505f3cd88c29dbb0ecf9284feb6d725f247aa67c2952748aeceaa5c66547489d73e5bef5a4ffd0d5c96436a65f7832bdfca80e96b56bb29097aeb086bb55c7237a85aa450b60b65e4cca853b3390f398f592e419e6a6f54b7ae8a64a8e45adbefff40f48fea365cdbf10389b28303c167044ae978c69cce27c1cc03ab7735353d156c4927776f288ce5008099f8b3c9d71c836a0aec85184cbd78ede69667c1a79f621fad9cbc9ffda60bdcb4edfb58dd7c07985351a0d55c8bbd9f57644a9b4815f0d7468827a0ca7db"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="18e41f09e19f201cfb000000000000007a0af0ff0000000018110000aa99072388df0e607ecdcaf084567b7d8dcdc81bdfa6763dbdfbf9e39c03bcdde2b6fea3218563af79a261bceed51257de1755e8f117c2a07958d1a8dd94ca6912641a7e7853cc13cfa71f3ec6df0e3004e18e80e292f2d0f785e83c555814f0b27d67ee266d7e2b2ac854f5bd4f11dbf49735984354560213803366ab784d01738807cbdee239b49f920a8d24e9a9e90340aed90179c12c0dd2675dc4a87e7d18", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="18e41f09e19f201cfb000000000000007a0af0ff0000000018110000aa99072388df0e607ecdcaf084567b7d8dcdc81bdfa6763dbdfbf9e39c03bcdde2b6fea3218563af79a261bceed51257de1755e8f117c2a07958d1a8dd94ca6912641a7e7853cc13cfa71f3ec6df0e3004e18e80e292f2d0f785e83c555814f0b27d67ee266d7e2b2ac854f5bd4f11dbf49735984354560213803366ab784d01738807cbdee239b49f920a8d24e9a9e90340aed90179c12c0dd2675dc4a87e7d18", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb70400000000000085000000020000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e00203003d000b08d25a80648c7494f90324fc600b0002400a000000053582c137153e37000c018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f00000011c0)=ANY=[@ANYRES8=r8, @ANYBLOB="8bc0aa40a99ab6706a8df8e24573a20e7f56576c6db8a0a306f19061014f4c2f26d93097008f0076cdce98786a346f15d9d84f09fb0bc9d73918632f5e911a26e3d3b9f2318738027ed66c17c0c813e6cf5ab26042a51e0b73519266f2e4383e8372e909f32e4bdaa6b72a85b0aa6ac5a951a797476db2d49af2488137"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = socket$kcm(0xa, 0x5, 0x73) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 3.340382049s ago: executing program 0 (id=5052): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="600000004e007f01049e", 0xa}, {&(0x7f0000000680)="78cabf2db10008000000000000892544001100b8f9e6aaeb1ae2f6e8c0cabcb5ee52dc06119798093ca1bca0a90aa7ce904f6e6b788b32190900000007a63e729f9b06f96137c89d03234f008c568104c817e55080e2", 0x56}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c200000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r8, 0x0, 0x0}, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90424fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.331220589s ago: executing program 4 (id=5053): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x6, &(0x7f0000000140), 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af8", 0xe}, {&(0x7f0000000080)}, {&(0x7f0000000140)="9d7fa74553ce3f5d59516d02ede9999f3b073dd99175af73c8a3248a83807167484645540f8749acf5a7b3fe4fbe939939d14b68517342797d181af72c28b57d02234901e359e6a3807d9181abfbd8", 0x4f}, {&(0x7f0000000340)}], 0x4}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3eaa000000000000711066000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r4, 0x10d, 0x2, &(0x7f0000000000)=r7, 0x4) recvmsg$kcm(r4, &(0x7f0000000680)={&(0x7f0000000500)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/62, 0x3e}, {0x0}], 0x2, &(0x7f0000000640)=""/48, 0x30}, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/file0/file0\x00', r7, 0x4000, r0}, 0x18) openat$cgroup_freezer_state(r9, &(0x7f0000000280), 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000300fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x10000000000000d8}, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r3, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r8, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1b, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0xffff, 0x62, &(0x7f0000000a40)=""/98, 0x41000, 0x26, '\x00', r11, @fallback=0x7, r7, 0x8, &(0x7f0000000dc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0xe, 0x6, 0x16}, 0x10, r12, r1, 0x4, &(0x7f0000001140)=[r7, r7, r7, r7, r7], &(0x7f0000001180)=[{0x0, 0x3, 0x8, 0x3}, {0x5, 0x2, 0xb, 0x3}, {0x0, 0x2, 0xe, 0x8}, {0x1, 0x4, 0x6, 0xb}], 0x10, 0x1}, 0x94) mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81) 3.251926141s ago: executing program 1 (id=5054): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0xfff0000000000000, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000000000008400000002000000050040"], 0x20}, 0x4011) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) socket$kcm(0x21, 0x2, 0xa) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) socket$kcm(0x2, 0x922000000001, 0x106) (rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.829805602s ago: executing program 2 (id=5055): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5b, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x801) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (rerun: 64) socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000005c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffff0001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x21}, [@call]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) (async, rerun: 64) r4 = syz_clone(0x800c00, &(0x7f0000000280)="6ad382be7ac31998014872b00c8c7a99abacbf40cd19085645c1fc22b180f41e0d75064510aee0f7d349dbcc0a922716db17f9c3c6e31465e49167ca8420b4da4555d77428d06f0001c06dc45f61157cb78b948c1ca2ccbb7bb9391740cd292a7cecd9f2309342091a588f98c44afade4dd994acdc614b4e2ca787ede24b80b0274e0431bda67ee685205f1820f28cad148379a6defc7ee4783e47ee3d10a8307b9deece47582f2a78ef079e12c4e07ca127eda9876dccdc83d7e69c96ee3cfb1cfed88050a04091177820b779", 0xcd, &(0x7f0000000040), &(0x7f0000000440), &(0x7f0000000040)) (rerun: 64) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="80005b", 0x3}, {0x0}], 0x2, 0x0, 0x0, 0x900}, 0x0) (async) perf_event_open(0x0, r4, 0xa, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x9, 0x0, 0xc9, 0x100000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.510763153s ago: executing program 0 (id=5056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000006, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@generic={0x71, 0x0, 0x1, 0x81}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000200)=""/185, 0x41000, 0x0, '\x00', 0x0, 0xd}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5b4, 0x8}, 0x104101, 0x402, 0x0, 0x9, 0x80, 0xfffffffc, 0x3, 0x0, 0x6}, 0x0, 0x1, r0, 0x0) ioctl$TUNGETVNETLE(r0, 0x8954, &(0x7f0000000040)) 1.24959093s ago: executing program 4 (id=5057): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000240)=r1}, 0x20) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) 1.096915453s ago: executing program 0 (id=5058): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x6, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0xfffffffffffffffe) 1.011076036s ago: executing program 2 (id=5059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40281, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x2, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181400, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 970.725787ms ago: executing program 1 (id=5060): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0x36, 0x0, &(0x7f0000000580)="e460334470b8d480eb20010086ddf80c39e7d34ed50ffb4def8474246fae5bd7fd7fc979c18b04cc038cf6825bc8379d1232f0bf7a53", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="190000000400000004000000ffff573ba8954bea", @ANYRESDEC, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRESHEX=r0, @ANYBLOB="000000000200"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='a\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x400c844) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115a000000000018000000f0ff000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 887.961469ms ago: executing program 0 (id=5061): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080), 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 875.058009ms ago: executing program 4 (id=5062): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a40)="1c0000005e007f829e0b18c9d25a27a69801976ab0a2720f5ed81483", 0x1c}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1}, 0x0) 862.131969ms ago: executing program 3 (id=5063): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000500000000000000eaff00000000000000000000adc947ec09117f223aacde7a8690726442f0788ef6ffcb2e4da66587523b61133c7b847aa692046c8c6c1be43c74cf4914d774f2e8a089c9214d6917d523d0b8d993449f466148447494758be68a089784dae88654a5ad060f9d51473dfc75114240dcb98e982ecbb7507139ef22ad59564d2eb5fd0e7e83986e5afe75631c6bf86e33e561d435161014abfca4bd0ae71614e2b6e755e80d44cc74ee55c2da2a148d26ad6e4ad396c72d08b408426ad24eeda587304b1c53869239fda4f1eb4d8487c98341af0d56"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1f00000001000100400000002219000010050000cba2d517d299d92ae38996f91db2dc93d782a8b3e0befa40901bc5d07f8123d9a6ea6386e0eed6d6434004c52e0eb56df69eb0b421d9188fb132d9769ed4efb6288ddaec511b3d96a0cd5577", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000300"/28], 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000360000008500000007000000950000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xe, 0xfffffffffffffd85, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x7, 0xfffffffffffffe73}, 0x28) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r3, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r6) 792.639711ms ago: executing program 1 (id=5064): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x9) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x4) recvmsg$kcm(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, 0x0, 0x2000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x30, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x111439, 0xc8, 0x6, 0x4, 0x68, 0x3, 0xffc0}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xe, 0x2}, 0x80, &(0x7f00000003c0)=[{0x0}], 0x1, &(0x7f0000000ac0)=ANY=[], 0xd0}, 0x480c4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x0, &(0x7f00000001c0)="b9ff0b078059268cb89e14f088a82de08848200000000002000aac14140ce000000149e832f0", 0x0, 0x292, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=""/39, 0x27}], 0x1}, 0x40000040) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 691.772113ms ago: executing program 4 (id=5065): r0 = socket$kcm(0xa, 0x2, 0x73) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x4}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000027c0)="d8000000100067e56353a3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000000508001a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f6", 0x6d}, {&(0x7f0000000240)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b1094ce81c3876aff89235b78ea0e5c5badfa122797d62d71abfd4b177496261c09ada7441b4f31c0900fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1f7f7b0abcc6eaabeb", 0x6b}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], &(0x7f0000001700)='syzkaller\x00', 0x10, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r5, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000340)='%+9llu \x00'}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001500)={r6, 0x20, &(0x7f00000014c0)={&(0x7f0000001340)=""/97, 0x61, 0x0, &(0x7f00000013c0)=""/236, 0xec}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000070000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x87, 0x0, &(0x7f00000017c0)="07388f97f720db4e5e2ad6a760b295ca5d0ab57b4e44031fe176b003c98c796aa0a205aa118e3480e3cae8db5584ba1beb349096d9cf2d60c7cb5b9a1ddb79f0d252ed574b2b562c9b8906756d68826e3d3d85ec3f8fad497d9bd8bbf4c797f1ce8694f59ad61c98e282d1db5452d4b053604182b62723d3325665b378e7bc1e3ffb5e78000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000000)=r8, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r8}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000001680)='syzkaller\x00') close(r9) setsockopt$sock_attach_bpf(r3, 0x10d, 0xa, &(0x7f0000000040)=r8, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/200, 0xc8}, 0x10001) r10 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="720ac4ff0000000071103100000000009500000000000000c1b838d02c8940c4071f7c903218e887fd1075746d59b990739dc2637d8142c259929c09851501876d42b36ee9642a5be54aea736bba"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a118001500060014fffe0000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x890c, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r8, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], 0x0, 0xa9, &(0x7f0000000f00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1b, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0xffff, 0x62, &(0x7f0000000a40)=""/98, 0x41000, 0x26, '\x00', r11, @fallback=0x7, r7, 0x8, &(0x7f0000000dc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0xe, 0x6, 0x16}, 0x10, r12, r1, 0x4, &(0x7f0000001140)=[r7, r7, r7, r7, r7], &(0x7f0000001180)=[{0x0, 0x3, 0x8, 0x3}, {0x5, 0x2, 0xb, 0x3}, {0x0, 0x2, 0xe, 0x8}, {0x1, 0x4, 0x6, 0xb}], 0x10, 0x1}, 0x94) mkdir(&(0x7f00000000c0)='./cgroup/file0/file0\x00', 0x81) 185.807016ms ago: executing program 4 (id=5069): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8947, &(0x7f0000000080)={'vlan1\x00', @random="00009e0c1100"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000180)=0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x0}, 0xffffffffffffff88) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r6, r8}, 0xc) syz_clone(0x6000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000002040), &(0x7f0000002080), &(0x7f00000020c0)="27946e62a0ee4173b42c70c0b9c68a62f4b25fb726c6382d76da64199233752a6ea4e9943721fe853537b79df7f143d70ad8867d1ee7add3d5e06e27d490b3891ca7b3641802b935ba31b2a2053a8e8d") 0s ago: executing program 2 (id=5070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1981"], 0xffdd) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x992c, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x9, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f00000001c0)='ns/uts\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) kernel console output (not intermixed with test programs): ribute type 2 has an invalid length. [ 812.964494][T18500] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3368'. [ 814.780060][T18522] netlink: 'syz.0.3374': attribute type 3 has an invalid length. [ 814.878814][T18522] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3374'. [ 815.798571][T14714] Bluetooth: hci1: command 0x0406 tx timeout [ 815.901668][T18537] delete_channel: no stack [ 815.906371][T18537] delete_channel: no stack [ 816.295769][T18554] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3380'. [ 816.359672][T18554] bond0: (slave bond_slave_0): Releasing backup interface [ 816.436530][T18554] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 816.754807][T18568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 816.777911][T18560] netlink: 'syz.3.3382': attribute type 21 has an invalid length. [ 816.800912][T18560] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3382'. [ 816.869829][T18568] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 816.899934][T18576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 816.911366][T18562] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 816.925432][T18574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3385'. [ 818.697456][T18621] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3398'. [ 818.942155][T18619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3397'. [ 820.905846][T18619] bond0: (slave bond_slave_0): Releasing backup interface [ 820.925475][T18619] device bond_slave_0 left promiscuous mode [ 820.966282][T18619] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 821.156571][T18638] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3402'. [ 821.187653][T18638] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 821.201199][T18640] netlink: 'syz.2.3400': attribute type 21 has an invalid length. [ 821.229182][T18640] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3400'. [ 821.452876][T18650] tipc: Started in network mode [ 821.466087][T18650] tipc: Node identity 9215a268, cluster identity 4711 [ 821.485584][T18650] tipc: Node number set to 2450891368 [ 821.500467][T18650] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3406'. [ 821.929610][T18665] netlink: 'syz.4.3411': attribute type 10 has an invalid length. [ 821.958214][T18665] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3411'. [ 822.044299][T18665] batman_adv: batadv0: Adding interface: veth0_vlan [ 822.067879][T18665] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.165217][T18665] batman_adv: batadv0: Interface activated: veth0_vlan [ 822.834838][T18697] netlink: 'syz.0.3416': attribute type 21 has an invalid length. [ 822.896510][T18697] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3416'. [ 822.950611][T18696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 822.958229][T18696] IPv6: NLM_F_CREATE should be set when creating new route [ 822.965926][T18696] IPv6: NLM_F_CREATE should be set when creating new route [ 822.973403][T18696] IPv6: NLM_F_CREATE should be set when creating new route [ 823.090480][T18702] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3419'. [ 823.119757][T18702] device hsr_slave_0 left promiscuous mode [ 823.135144][T18704] netlink: 'syz.2.3420': attribute type 29 has an invalid length. [ 823.152656][T18702] device hsr_slave_1 left promiscuous mode [ 823.293056][T18715] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3422'. [ 823.349301][T18704] netlink: 'syz.2.3420': attribute type 29 has an invalid length. [ 823.358599][T18707] bridge0: port 4(batadv0) entered blocking state [ 823.377461][T18707] bridge0: port 4(batadv0) entered disabled state [ 823.394068][T18707] device batadv0 entered promiscuous mode [ 823.414871][T18707] bridge0: port 4(batadv0) entered blocking state [ 823.421695][T18707] bridge0: port 4(batadv0) entered forwarding state [ 823.435357][T18708] netlink: 'syz.2.3420': attribute type 29 has an invalid length. [ 823.759292][ T4476] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 823.769392][ T4476] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 823.861685][T14714] Bluetooth: hci2: ISO packet for unknown connection handle 9 [ 823.933555][T18740] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3431'. [ 824.162287][T18740] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3431'. [ 824.234819][T18748] netlink: 'syz.2.3432': attribute type 3 has an invalid length. [ 824.278238][T18748] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3432'. [ 824.425217][T18748] netlink: 'syz.2.3432': attribute type 3 has an invalid length. [ 824.433722][T18748] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3432'. [ 824.530103][T18748] netlink: 'syz.2.3432': attribute type 3 has an invalid length. [ 824.537921][T18748] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3432'. [ 824.771353][T18770] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 824.793170][T18770] bridge0: port 4(batadv0) entered disabled state [ 824.800088][T18770] bridge0: port 3(dummy0) entered disabled state [ 824.806790][T18770] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.814383][T18770] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.856223][T18770] bridge0: port 4(batadv0) entered blocking state [ 824.863181][T18770] bridge0: port 4(batadv0) entered forwarding state [ 824.871977][T18770] bridge0: port 3(dummy0) entered blocking state [ 824.878530][T18770] bridge0: port 3(dummy0) entered forwarding state [ 824.886344][T18770] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.893652][T18770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.901175][T18770] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.908542][T18770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.972762][T18770] team0: Port device bridge0 added [ 825.843364][T18800] netlink: 175020 bytes leftover after parsing attributes in process `syz.0.3444'. [ 828.256838][T18881] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3459'. [ 828.765212][T18894] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3459'. [ 828.826941][T14714] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 828.836392][T18894] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 829.018189][T18894] CPU: 1 PID: 18894 Comm: syz.3.3459 Not tainted syzkaller #0 [ 829.025922][T18894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.036033][T18894] Call Trace: [ 829.039352][T18894] [ 829.042326][T18894] dump_stack_lvl+0x188/0x24e [ 829.047058][T18894] ? show_regs_print_info+0x12/0x12 [ 829.052311][T18894] ? load_image+0x410/0x410 [ 829.056880][T18894] sysfs_warn_dup+0x8a/0xa0 [ 829.061445][T18894] sysfs_do_create_link_sd+0xc0/0x110 [ 829.066878][T18894] device_add+0x83b/0x1050 [ 829.071405][T18894] wiphy_register+0x1d8b/0x2aa0 [ 829.076332][T18894] ? cfg80211_event_work+0x40/0x40 [ 829.081540][T18894] ? minstrel_ht_alloc+0x894/0xa20 [ 829.086706][T18894] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 829.092833][T18894] ieee80211_register_hw+0x2e33/0x3b00 [ 829.098361][T18894] ? ieee80211_register_hw+0xf61/0x3b00 [ 829.103974][T18894] ? ieee80211_register_hw+0xf61/0x3b00 [ 829.109664][T18894] ? ieee80211_tasklet_handler+0x20/0x20 [ 829.115344][T18894] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 829.121286][T18894] ? __debug_object_init+0xed/0x440 [ 829.126537][T18894] ? memset+0x1e/0x40 [ 829.130557][T18894] ? __hrtimer_init+0x189/0x270 [ 829.135437][T18894] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 829.141196][T18894] ? memcpy+0x3c/0x60 [ 829.145215][T18894] hwsim_new_radio_nl+0xab7/0xc90 [ 829.150288][T18894] genl_family_rcv_msg_doit+0x22f/0x350 [ 829.155889][T18894] ? end_current_label_crit_section+0x170/0x170 [ 829.162170][T18894] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 829.168107][T18894] ? bpf_lsm_capable+0x5/0x10 [ 829.172817][T18894] ? security_capable+0x85/0xb0 [ 829.177704][T18894] genl_rcv_msg+0x601/0x790 [ 829.182250][T18894] ? genl_bind+0x360/0x360 [ 829.186712][T18894] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 829.193097][T18894] netlink_rcv_skb+0x1ef/0x440 [ 829.197917][T18894] ? genl_bind+0x360/0x360 [ 829.202367][T18894] ? netlink_ack+0x1160/0x1160 [ 829.207190][T18894] ? down_read+0x1a8/0x2d0 [ 829.211653][T18894] genl_rcv+0x24/0x40 [ 829.215666][T18894] netlink_unicast+0x7ad/0x920 [ 829.220639][T18894] netlink_sendmsg+0x8ad/0xbd0 [ 829.225444][T18894] ? netlink_getsockopt+0x550/0x550 [ 829.230672][T18894] ? apparmor_socket_sendmsg+0x8a/0x330 [ 829.236336][T18894] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 829.241651][T18894] ? security_socket_sendmsg+0x7c/0xa0 [ 829.247149][T18894] ? netlink_getsockopt+0x550/0x550 [ 829.252382][T18894] ____sys_sendmsg+0x5ed/0x9a0 [ 829.257187][T18894] ? __sys_sendmsg_sock+0x30/0x30 [ 829.262243][T18894] ? __import_iovec+0x306/0x510 [ 829.267164][T18894] ? import_iovec+0x6f/0xa0 [ 829.271711][T18894] ___sys_sendmsg+0x2a2/0x360 [ 829.276445][T18894] ? __sys_sendmsg+0x2a0/0x2a0 [ 829.281287][T18894] __se_sys_sendmsg+0x1c3/0x2b0 [ 829.286166][T18894] ? __x64_sys_sendmsg+0x80/0x80 [ 829.291148][T18894] ? lockdep_hardirqs_on+0x94/0x140 [ 829.296409][T18894] do_syscall_64+0x4c/0xa0 [ 829.300851][T18894] ? clear_bhb_loop+0x60/0xb0 [ 829.305555][T18894] ? clear_bhb_loop+0x60/0xb0 [ 829.310259][T18894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.316187][T18894] RIP: 0033:0x7f2864d9e159 [ 829.320654][T18894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.340480][T18894] RSP: 002b:00007f2865c75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.349122][T18894] RAX: ffffffffffffffda RBX: 00007f2865026630 RCX: 00007f2864d9e159 [ 829.357232][T18894] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 829.365313][T18894] RBP: 00007f2864e3506b R08: 0000000000000000 R09: 0000000000000000 [ 829.373325][T18894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.381523][T18894] R13: 00007f28650266c8 R14: 00007f2865026630 R15: 00007ffec39ff098 [ 829.389546][T18894] [ 830.282909][T18945] validate_nla: 1 callbacks suppressed [ 830.282929][T18945] netlink: 'syz.2.3472': attribute type 13 has an invalid length. [ 830.360687][T18945] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.3472'. [ 830.381759][T18946] netlink: 'syz.1.3471': attribute type 41 has an invalid length. [ 830.610079][T18954] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3476'. [ 830.706792][T18952] netlink: 'syz.3.3475': attribute type 1 has an invalid length. [ 830.717620][T18952] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3475'. [ 830.720838][T18958] netlink: 'syz.1.3477': attribute type 10 has an invalid length. [ 830.809436][T18958] team0: Device vxcan1 is of different type [ 831.735862][T18974] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3479'. [ 831.770883][T18975] device sit0 entered promiscuous mode [ 831.902630][T18978] netlink: 'syz.2.3479': attribute type 40 has an invalid length. [ 832.086472][T18984] netlink: 'syz.4.3483': attribute type 27 has an invalid length. [ 832.148779][T18984] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3483'. [ 832.290119][T18995] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3486'. [ 832.557332][T18990] netlink: 'syz.0.3485': attribute type 29 has an invalid length. [ 832.637268][T18990] netlink: 'syz.0.3485': attribute type 3 has an invalid length. [ 832.674732][T18990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3485'. [ 833.877563][T19014] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3492'. [ 834.474875][T19026] netlink: 'syz.3.3494': attribute type 3 has an invalid length. [ 834.526764][T19027] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3494'. [ 834.548387][T19026] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3494'. [ 835.678424][T19034] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.3506'. [ 835.729864][T19034] openvswitch: netlink: Key type 386 is out of range max 32 [ 835.835988][T19040] netlink: 'syz.4.3498': attribute type 27 has an invalid length. [ 835.871123][T19040] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3498'. [ 836.090163][T19047] netlink: 'syz.3.3500': attribute type 10 has an invalid length. [ 836.093705][T19052] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.3502'. [ 836.114053][T19052] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3502'. [ 836.142179][T19047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3500'. [ 836.191033][T19047] device team0 entered promiscuous mode [ 836.236687][T19058] netlink: 'syz.4.3503': attribute type 29 has an invalid length. [ 836.265236][T19047] device team_slave_0 entered promiscuous mode [ 836.279484][T19047] device team_slave_1 entered promiscuous mode [ 836.286134][T19047] device geneve1 entered promiscuous mode [ 836.300379][T19047] bridge0: port 3(team0) entered blocking state [ 836.307246][T19047] bridge0: port 3(team0) entered disabled state [ 836.324476][T19047] bridge0: port 3(team0) entered blocking state [ 836.330993][T19047] bridge0: port 3(team0) entered forwarding state [ 836.350314][T19050] netlink: 'syz.3.3500': attribute type 10 has an invalid length. [ 836.371353][T19050] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3500'. [ 836.435738][T19044] netlink: 'syz.3.3500': attribute type 12 has an invalid length. [ 836.455534][T19044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3500'. [ 836.510721][T19058] netlink: 'syz.4.3503': attribute type 29 has an invalid length. [ 836.539419][T19062] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 836.716262][T19080] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.723851][T19080] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.908246][T19082] device bridge_slave_1 left promiscuous mode [ 836.914637][T19082] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.965762][T19093] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.3508'. [ 836.975656][T19093] netlink: zone id is out of range [ 837.011684][T19093] netlink: get zone limit has 8 unknown bytes [ 837.044165][T19082] device bridge_slave_0 left promiscuous mode [ 837.097180][T19082] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.851534][T19117] netlink: 'syz.3.3516': attribute type 10 has an invalid length. [ 837.890558][T19117] netlink: 'syz.3.3516': attribute type 19 has an invalid length. [ 837.936981][T19117] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3516'. [ 838.236920][T19137] netlink: 'syz.4.3521': attribute type 29 has an invalid length. [ 838.490209][T19121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3515'. [ 838.567405][T19121] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 838.662000][T19121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.761320][T19137] netlink: 'syz.4.3521': attribute type 29 has an invalid length. [ 838.804298][T19147] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 838.820759][T19147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.398419][ T4291] Bluetooth: hci2: command 0x0406 tx timeout [ 842.855431][T19200] __nla_validate_parse: 3 callbacks suppressed [ 842.855452][T19200] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3538'. [ 842.886357][T19200] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.3538'. [ 842.969046][T19207] validate_nla: 2 callbacks suppressed [ 842.969067][T19207] netlink: 'syz.2.3540': attribute type 10 has an invalid length. [ 843.028206][T19207] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3540'. [ 843.296926][T19215] netlink: 'syz.3.3545': attribute type 10 has an invalid length. [ 843.320072][T19215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3545'. [ 843.357338][T19215] batman_adv: batadv0: Adding interface: veth0_vlan [ 843.388263][T19215] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.461538][T19215] batman_adv: batadv0: Interface activated: veth0_vlan [ 844.239724][T19237] netlink: 'syz.0.3551': attribute type 10 has an invalid length. [ 844.324891][T19237] team0: Port device geneve1 added [ 844.407344][T19239] IPv6: NLM_F_CREATE should be specified when creating new route [ 844.470295][T19239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.477684][T19239] IPv6: NLM_F_CREATE should be set when creating new route [ 844.485061][T19239] IPv6: NLM_F_CREATE should be set when creating new route [ 844.492359][T19239] IPv6: NLM_F_CREATE should be set when creating new route [ 844.512413][T19245] netlink: 'syz.3.3552': attribute type 3 has an invalid length. [ 844.622165][T19245] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 844.750393][T19241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 844.758363][T19245] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3552'. [ 845.065586][T19261] netlink: 'syz.3.3558': attribute type 10 has an invalid length. [ 845.148221][T19261] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3558'. [ 845.242927][T19262] netlink: 'syz.0.3555': attribute type 2 has an invalid length. [ 845.379695][T19261] netlink: 'syz.3.3558': attribute type 2 has an invalid length. [ 845.387834][T19261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3558'. [ 845.414618][T19262] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3555'. [ 845.688916][T19274] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3559'. [ 845.733068][T19274] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 845.776232][T19274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 846.349361][T19305] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3568'. [ 846.952665][T19321] netlink: 'syz.2.3572': attribute type 1 has an invalid length. [ 846.976952][T19325] netlink: 'syz.3.3573': attribute type 15 has an invalid length. [ 847.924229][T19356] __nla_validate_parse: 3 callbacks suppressed [ 847.924250][T19356] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3581'. [ 850.327756][T19354] validate_nla: 2 callbacks suppressed [ 850.327775][T19354] netlink: 'syz.1.3581': attribute type 21 has an invalid length. [ 850.400011][T19354] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3581'. [ 851.419524][ T4291] Bluetooth: hci3: ACL packet too small [ 851.439574][T19397] netlink: 'syz.3.3592': attribute type 29 has an invalid length. [ 851.451305][T19395] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.3591'. [ 851.473338][T19397] netlink: 'syz.3.3592': attribute type 29 has an invalid length. [ 851.630004][T19400] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3593'. [ 852.113433][T19422] netlink: 124861 bytes leftover after parsing attributes in process `syz.4.3597'. [ 852.385465][T19421] netlink: 124861 bytes leftover after parsing attributes in process `syz.4.3597'. [ 852.513677][T19421] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 852.564053][T19421] CPU: 0 PID: 19421 Comm: syz.4.3597 Not tainted syzkaller #0 [ 852.571646][T19421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.581808][T19421] Call Trace: [ 852.585259][T19421] [ 852.588281][T19421] dump_stack_lvl+0x188/0x24e [ 852.593073][T19421] ? show_regs_print_info+0x12/0x12 [ 852.598449][T19421] ? load_image+0x410/0x410 [ 852.603123][T19421] sysfs_warn_dup+0x8a/0xa0 [ 852.607732][T19421] sysfs_do_create_link_sd+0xc0/0x110 [ 852.613217][T19421] device_add+0x83b/0x1050 [ 852.617779][T19421] wiphy_register+0x1d8b/0x2aa0 [ 852.623001][T19421] ? cfg80211_event_work+0x40/0x40 [ 852.628301][T19421] ? minstrel_ht_alloc+0x894/0xa20 [ 852.633549][T19421] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 852.639777][T19421] ieee80211_register_hw+0x2e33/0x3b00 [ 852.645406][T19421] ? ieee80211_register_hw+0xf61/0x3b00 [ 852.651135][T19421] ? ieee80211_register_hw+0xf61/0x3b00 [ 852.656820][T19421] ? ieee80211_tasklet_handler+0x20/0x20 [ 852.662635][T19421] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 852.668747][T19421] ? __debug_object_init+0xed/0x440 [ 852.674074][T19421] ? memset+0x1e/0x40 [ 852.678149][T19421] ? __hrtimer_init+0x189/0x270 [ 852.683122][T19421] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 852.689159][T19421] ? memcpy+0x3c/0x60 [ 852.693303][T19421] hwsim_new_radio_nl+0xab7/0xc90 [ 852.698630][T19421] genl_family_rcv_msg_doit+0x22f/0x350 [ 852.704277][T19421] ? end_current_label_crit_section+0x170/0x170 [ 852.710711][T19421] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 852.716761][T19421] ? bpf_lsm_capable+0x5/0x10 [ 852.721538][T19421] ? security_capable+0x85/0xb0 [ 852.726527][T19421] genl_rcv_msg+0x601/0x790 [ 852.731192][T19421] ? genl_bind+0x360/0x360 [ 852.735702][T19421] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 852.742213][T19421] netlink_rcv_skb+0x1ef/0x440 [ 852.747085][T19421] ? genl_bind+0x360/0x360 [ 852.751626][T19421] ? netlink_ack+0x1160/0x1160 [ 852.756596][T19421] ? down_read+0x1a8/0x2d0 [ 852.761133][T19421] genl_rcv+0x24/0x40 [ 852.765209][T19421] netlink_unicast+0x7ad/0x920 [ 852.770126][T19421] netlink_sendmsg+0x8ad/0xbd0 [ 852.775034][T19421] ? netlink_getsockopt+0x550/0x550 [ 852.780352][T19421] ? apparmor_socket_sendmsg+0x8a/0x330 [ 852.786016][T19421] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 852.791506][T19421] ? security_socket_sendmsg+0x7c/0xa0 [ 852.797069][T19421] ? netlink_getsockopt+0x550/0x550 [ 852.802385][T19421] ____sys_sendmsg+0x5ed/0x9a0 [ 852.807290][T19421] ? __sys_sendmsg_sock+0x30/0x30 [ 852.812615][T19421] ? __import_iovec+0x306/0x510 [ 852.817625][T19421] ? import_iovec+0x6f/0xa0 [ 852.822257][T19421] ___sys_sendmsg+0x2a2/0x360 [ 852.827064][T19421] ? __sys_sendmsg+0x2a0/0x2a0 [ 852.832196][T19421] __se_sys_sendmsg+0x1c3/0x2b0 [ 852.837165][T19421] ? __x64_sys_sendmsg+0x80/0x80 [ 852.842290][T19421] ? lockdep_hardirqs_on+0x94/0x140 [ 852.847621][T19421] do_syscall_64+0x4c/0xa0 [ 852.852124][T19421] ? clear_bhb_loop+0x60/0xb0 [ 852.856879][T19421] ? clear_bhb_loop+0x60/0xb0 [ 852.861666][T19421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.867747][T19421] RIP: 0033:0x7f1e7879e159 [ 852.872268][T19421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.892053][T19421] RSP: 002b:00007f1e79666028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.900574][T19421] RAX: ffffffffffffffda RBX: 00007f1e78a25fa0 RCX: 00007f1e7879e159 [ 852.908644][T19421] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 852.916700][T19421] RBP: 00007f1e7883506b R08: 0000000000000000 R09: 0000000000000000 [ 852.924741][T19421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.933116][T19421] R13: 00007f1e78a26038 R14: 00007f1e78a25fa0 R15: 00007ffcac672438 [ 852.941206][T19421] [ 853.493183][T19440] netlink: 'syz.3.3602': attribute type 27 has an invalid length. [ 853.515114][T19440] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3602'. [ 853.620693][T19449] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3604'. [ 853.680734][T19449] openvswitch: netlink: Message has 6 unknown bytes. [ 853.700032][T19445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 853.813520][T19453] netlink: 'syz.1.3605': attribute type 21 has an invalid length. [ 854.118113][T19461] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3609'. [ 854.658807][T19481] delete_channel: no stack [ 854.667127][T19482] delete_channel: no stack [ 854.674141][T19481] delete_channel: no stack [ 854.687167][T19482] delete_channel: no stack [ 855.230785][T19502] netlink: 'syz.2.3621': attribute type 21 has an invalid length. [ 855.262969][T19502] netlink: 'syz.2.3621': attribute type 20 has an invalid length. [ 855.326320][T19504] netlink: 'syz.2.3621': attribute type 21 has an invalid length. [ 855.358915][T19504] netlink: 'syz.2.3621': attribute type 20 has an invalid length. [ 856.206895][T19524] FAULT_INJECTION: forcing a failure. [ 856.206895][T19524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.268114][T19524] CPU: 0 PID: 19524 Comm: syz.4.3628 Not tainted syzkaller #0 [ 856.275684][T19524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 856.285785][T19524] Call Trace: [ 856.289189][T19524] [ 856.292148][T19524] dump_stack_lvl+0x188/0x24e [ 856.296862][T19524] ? show_regs_print_info+0x12/0x12 [ 856.302100][T19524] ? load_image+0x410/0x410 [ 856.306637][T19524] ? __lock_acquire+0x7ea0/0x7ea0 [ 856.311744][T19524] should_fail_ex+0x390/0x4c0 [ 856.316458][T19524] _copy_from_user+0x2c/0x170 [ 856.321164][T19524] __sys_bpf+0x2ea/0x780 [ 856.325436][T19524] ? bpf_link_show_fdinfo+0x380/0x380 [ 856.330856][T19524] ? lock_chain_count+0x20/0x20 [ 856.335744][T19524] __x64_sys_bpf+0x78/0x90 [ 856.340188][T19524] do_syscall_64+0x4c/0xa0 [ 856.344717][T19524] ? clear_bhb_loop+0x60/0xb0 [ 856.349503][T19524] ? clear_bhb_loop+0x60/0xb0 [ 856.354207][T19524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 856.360124][T19524] RIP: 0033:0x7f1e7879e159 [ 856.364557][T19524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.384184][T19524] RSP: 002b:00007f1e79666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 856.392620][T19524] RAX: ffffffffffffffda RBX: 00007f1e78a25fa0 RCX: 00007f1e7879e159 [ 856.400754][T19524] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000009 [ 856.408748][T19524] RBP: 00007f1e79666090 R08: 0000000000000000 R09: 0000000000000000 [ 856.416747][T19524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.424835][T19524] R13: 00007f1e78a26038 R14: 00007f1e78a25fa0 R15: 00007ffcac672438 [ 856.432844][T19524] [ 856.538976][T19526] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3627'. [ 856.758252][T14714] Bluetooth: hci0: command 0x0406 tx timeout [ 858.836968][T19553] netlink: 'syz.2.3636': attribute type 3 has an invalid length. [ 858.868437][T19553] netlink: 'syz.2.3636': attribute type 1 has an invalid length. [ 858.876518][T19553] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3636'. [ 861.621338][T19543] netlink: 'syz.4.3633': attribute type 10 has an invalid length. [ 861.622902][T19526] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 861.637269][T19543] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3633'. [ 861.648246][T19526] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 861.648315][T19526] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 861.661885][T19543] batman_adv: batadv0: Adding interface: vlan1 [ 861.674158][T19543] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.701552][T19543] batman_adv: batadv0: Interface activated: vlan1 [ 861.710149][T19542] netlink: 'syz.4.3633': attribute type 10 has an invalid length. [ 861.719214][T19542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3633'. [ 861.730132][T19565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3640'. [ 862.295973][T19582] device syzkaller0 entered promiscuous mode [ 862.969897][T19611] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.3652'. [ 863.037357][T19611] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3652'. [ 863.108340][T19616] netlink: 'syz.1.3653': attribute type 9 has an invalid length. [ 863.116287][T19616] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3653'. [ 863.399127][T19624] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3654'. [ 863.419764][T19624] netlink: zone id is out of range [ 863.431162][T19624] netlink: zone id is out of range [ 863.449112][T19624] netlink: zone id is out of range [ 863.576582][T19624] netlink: del zone limit has 4 unknown bytes [ 866.498347][T19636] netlink: 'syz.3.3657': attribute type 10 has an invalid length. [ 866.506341][T19636] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3657'. [ 866.559678][T19638] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3657'. [ 866.806722][T19667] netlink: 'syz.1.3666': attribute type 11 has an invalid length. [ 866.848414][T19667] netlink: 'syz.1.3666': attribute type 2 has an invalid length. [ 866.884089][T19669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3666'. [ 866.903993][T19667] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.3666'. [ 866.934965][T19671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3666'. [ 866.966381][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.989271][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.002556][T19676] netlink: 'syz.0.3667': attribute type 2 has an invalid length. [ 867.018086][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.054225][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.065420][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.077784][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.088204][T19662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.105388][T19662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.124840][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.135898][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.146938][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.160339][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.170956][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.195915][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.206522][T19672] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 867.217653][T19672] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.350534][T19686] netlink: 'syz.0.3671': attribute type 3 has an invalid length. [ 867.388416][T19686] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3671'. [ 867.480967][T19695] netlink: 'syz.2.3673': attribute type 13 has an invalid length. [ 867.515349][T19695] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3673'. [ 867.719372][T19700] netlink: 'syz.4.3675': attribute type 13 has an invalid length. [ 867.746688][T19700] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3675'. [ 868.536309][T19720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3681'. [ 868.735491][T19718] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3683'. [ 868.825540][T19718] openvswitch: netlink: Message has 6 unknown bytes. [ 869.590080][T19730] netlink: 'syz.1.3686': attribute type 3 has an invalid length. [ 869.633881][T19734] bridge: RTM_NEWNEIGH with invalid ether address [ 870.044290][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.050710][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.035338][T19793] sctp: [Deprecated]: syz.4.3703 (pid 19793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.035338][T19793] Use struct sctp_sack_info instead [ 871.328745][T19810] netlink: 'syz.4.3707': attribute type 29 has an invalid length. [ 872.434466][T19828] netlink: 'syz.3.3712': attribute type 5 has an invalid length. [ 872.737636][T19831] netlink: 'syz.3.3712': attribute type 11 has an invalid length. [ 872.766128][T19831] __nla_validate_parse: 6 callbacks suppressed [ 872.766152][T19831] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3712'. [ 874.933225][T19836] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3716'. [ 875.728554][T19860] netlink: 'syz.2.3720': attribute type 9 has an invalid length. [ 875.736555][T19860] netlink: 7679 bytes leftover after parsing attributes in process `syz.2.3720'. [ 876.041701][T19871] netlink: 'syz.1.3723': attribute type 3 has an invalid length. [ 876.080528][T19871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3723'. [ 876.217325][T19875] netlink: 'syz.3.3724': attribute type 10 has an invalid length. [ 876.234040][T19875] team0: Device gre0 is up. Set it down before adding it as a team port [ 876.244616][T19876] netlink: 'syz.3.3724': attribute type 10 has an invalid length. [ 876.253520][T19876] team0: Device gre0 is up. Set it down before adding it as a team port [ 876.564968][T19885] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.3727'. [ 877.348266][T19907] device syzkaller0 entered promiscuous mode [ 881.898074][T19951] netlink: 'syz.4.3746': attribute type 33 has an invalid length. [ 881.906525][T19951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3746'. [ 881.948511][T19953] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3746'. [ 884.608155][T19969] netlink: 'syz.3.3751': attribute type 10 has an invalid length. [ 884.616092][T19969] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3751'. [ 884.626304][T19969] device dummy0 entered promiscuous mode [ 884.634349][T19969] bridge0: port 4(dummy0) entered blocking state [ 884.653512][T19969] bridge0: port 4(dummy0) entered disabled state [ 884.662053][T19969] bridge0: port 4(dummy0) entered blocking state [ 884.668630][T19969] bridge0: port 4(dummy0) entered forwarding state [ 884.685450][T19982] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 884.699242][T19990] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3758'. [ 884.734847][T19982] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 884.766454][T19982] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 885.034750][T19996] netlink: 'syz.3.3760': attribute type 10 has an invalid length. [ 885.296728][T19996] device nlmon0 entered promiscuous mode [ 885.324868][T19996] team0: Device nlmon0 is of different type [ 885.485548][T20020] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 886.468831][T20045] netlink: 'syz.2.3771': attribute type 21 has an invalid length. [ 886.477164][T20045] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3771'. [ 886.515023][T20045] netlink: 'syz.2.3771': attribute type 4 has an invalid length. [ 886.548264][T20045] netlink: 'syz.2.3771': attribute type 5 has an invalid length. [ 886.588276][T20045] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3771'. [ 887.470051][T20077] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3776'. [ 887.508384][T20078] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3776'. [ 887.695050][T20086] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3778'. [ 887.915172][T20095] netlink: 'syz.4.3780': attribute type 39 has an invalid length. [ 888.191211][T20108] netlink: 'syz.4.3780': attribute type 11 has an invalid length. [ 888.272444][T20108] netlink: 169504 bytes leftover after parsing attributes in process `syz.4.3780'. [ 888.974338][T20128] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.3786'. [ 890.102918][T20117] netlink: 'syz.1.3784': attribute type 20 has an invalid length. [ 890.125098][T20119] netlink: 'syz.1.3784': attribute type 20 has an invalid length. [ 890.133821][T20130] netlink: 'syz.0.3785': attribute type 21 has an invalid length. [ 890.165104][T20128] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 890.472160][T20142] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3789'. [ 891.415011][T20173] netlink: 'syz.3.3796': attribute type 3 has an invalid length. [ 891.438148][T20173] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3796'. [ 891.608646][T20175] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3797'. [ 891.674301][T20179] sctp: [Deprecated]: syz.0.3799 (pid 20179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 891.674301][T20179] Use struct sctp_sack_info instead [ 891.794121][T20186] netlink: 'syz.3.3801': attribute type 13 has an invalid length. [ 891.860619][T20189] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3803'. [ 892.035924][T20193] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3804'. [ 892.598024][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 893.668298][T20236] netlink: 'syz.3.3819': attribute type 25 has an invalid length. [ 893.691590][T20236] netlink: 'syz.3.3819': attribute type 29 has an invalid length. [ 893.759170][T20232] -1: renamed from syzkaller0 [ 894.079707][T20257] __nla_validate_parse: 32 callbacks suppressed [ 894.079728][T20257] netlink: 95 bytes leftover after parsing attributes in process `syz.3.3824'. [ 894.285541][T20260] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3825'. [ 894.412059][T20260] netlink: 'syz.2.3825': attribute type 10 has an invalid length. [ 894.446689][T20260] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 897.113914][T20278] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3829'. [ 897.247522][T20278] team0: Port device team_slave_0 removed [ 897.266350][T20278] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 897.649652][T20293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3834'. [ 897.668805][T20295] netlink: 'syz.3.3834': attribute type 10 has an invalid length. [ 897.676755][T20295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3834'. [ 897.936236][T20307] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3837'. [ 897.976429][T20306] netlink: 'syz.3.3838': attribute type 3 has an invalid length. [ 897.979385][T20307] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 898.008207][T20306] netlink: 'syz.3.3838': attribute type 1 has an invalid length. [ 898.016046][T20306] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.3838'. [ 898.421471][T20318] netlink: 'syz.3.3841': attribute type 7 has an invalid length. [ 898.683429][T20326] netlink: 'syz.4.3843': attribute type 10 has an invalid length. [ 898.905422][T20326] device macvlan0 entered promiscuous mode [ 899.590505][T20326] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 899.599659][T20327] netlink: 'syz.0.3839': attribute type 10 has an invalid length. [ 899.636024][T20327] device wlan1 entered promiscuous mode [ 899.655315][T20327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 899.670366][T20342] netlink: 'syz.2.3845': attribute type 7 has an invalid length. [ 899.684978][T20342] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.3845'. [ 899.704752][T20332] netlink: 'syz.4.3843': attribute type 10 has an invalid length. [ 899.716534][T20335] netlink: 'syz.1.3844': attribute type 2 has an invalid length. [ 899.728285][T20335] netlink: 'syz.1.3844': attribute type 8 has an invalid length. [ 899.746834][T20335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3844'. [ 900.319552][T20368] netlink: 'syz.1.3852': attribute type 2 has an invalid length. [ 900.467776][T20368] device 0 entered promiscuous mode [ 900.734263][T20376] delete_channel: no stack [ 900.743462][T20376] delete_channel: no stack [ 901.902839][T20404] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3862'. [ 902.638845][T20428] device syzkaller0 entered promiscuous mode [ 902.653319][T20427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3870'. [ 902.770416][T20427] netlink: 'syz.1.3870': attribute type 10 has an invalid length. [ 902.779460][T20427] device lo left promiscuous mode [ 902.787330][T20427] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 902.876327][T20427] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 903.304925][T20452] netlink: 'syz.1.3877': attribute type 7 has an invalid length. [ 903.651183][T20467] netlink: 'syz.4.3881': attribute type 2 has an invalid length. [ 903.700602][T20467] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3881'. [ 903.754447][T20478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'. [ 903.804597][T20478] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'. [ 903.824566][T20477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3884'. [ 903.837391][T20480] tap0: tun_chr_ioctl cmd 1074025677 [ 903.847326][T20480] tap0: linktype set to 776 [ 903.961179][T20487] netlink: 'syz.3.3885': attribute type 2 has an invalid length. [ 904.068878][T20488] netlink: 'syz.3.3885': attribute type 10 has an invalid length. [ 904.077131][T20488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3885'. [ 905.561011][T20487] device 0 entered promiscuous mode [ 905.566708][T20488] netlink: 'syz.3.3885': attribute type 10 has an invalid length. [ 905.595464][T20488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3885'. [ 905.922975][T20506] netlink: 'syz.4.3889': attribute type 10 has an invalid length. [ 906.381335][T20506] team0 (unregistering): Port device team_slave_0 removed [ 906.447056][T20506] team0 (unregistering): Port device team_slave_1 removed [ 907.178304][T20524] netlink: 'syz.4.3897': attribute type 7 has an invalid length. [ 907.238450][T20530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3898'. [ 907.278334][T20530] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3898'. [ 907.317798][T20531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3898'. [ 907.348434][T20539] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3898'. [ 907.600576][T20546] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3900'. [ 907.726913][T20546] netlink: 'syz.0.3900': attribute type 13 has an invalid length. [ 907.986250][T20553] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3902'. [ 909.456197][T20573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3907'. [ 909.504574][T20573] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.837257][T20598] netlink: 'syz.0.3914': attribute type 39 has an invalid length. [ 909.848446][T20597] netlink: 'syz.4.3913': attribute type 3 has an invalid length. [ 909.856749][T20597] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3913'. [ 910.027304][T20598] device hsr_slave_1 left promiscuous mode [ 910.185618][T20615] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3916'. [ 910.282025][T20620] netlink: 'syz.4.3917': attribute type 10 has an invalid length. [ 910.758853][T20624] netlink: 'syz.2.3920': attribute type 19 has an invalid length. [ 910.795037][T20624] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3920'. [ 911.414590][T20641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3919'. [ 911.678467][T20639] can: request_module (can-proto-0) failed. [ 911.891138][T20655] netlink: 'syz.4.3926': attribute type 27 has an invalid length. [ 911.919336][T20653] netlink: 'syz.4.3926': attribute type 27 has an invalid length. [ 911.927271][T20653] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3926'. [ 912.034682][T20655] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3926'. [ 915.647804][T20690] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.3936'. [ 917.473563][T20735] netlink: 15478 bytes leftover after parsing attributes in process `syz.4.3944'. [ 917.502673][T20735] netlink: 64339 bytes leftover after parsing attributes in process `syz.4.3944'. [ 917.552334][T20735] netlink: 'syz.4.3944': attribute type 4 has an invalid length. [ 917.620674][T20741] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3946'. [ 922.992481][T20831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3971'. [ 923.032153][T20829] netlink: 'syz.2.3970': attribute type 2 has an invalid length. [ 923.057323][T20829] device 0 entered promiscuous mode [ 924.119088][T20860] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.3976'. [ 924.139064][T20863] netlink: 64339 bytes leftover after parsing attributes in process `syz.2.3976'. [ 924.207148][T20860] netlink: 'syz.2.3976': attribute type 4 has an invalid length. [ 924.280132][T20866] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3978'. [ 924.344523][T20865] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3978'. [ 924.992793][T20888] netlink: 'syz.3.3982': attribute type 10 has an invalid length. [ 925.062790][T20888] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 925.273346][T20888] batman_adv: batadv0: Removing interface: veth0_vlan [ 925.337524][T20888] device veth0_vlan left promiscuous mode [ 925.359895][T20888] device veth0_vlan entered promiscuous mode [ 925.395916][T20888] team0: Device veth0_vlan failed to register rx_handler [ 926.814086][T20915] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.3991'. [ 926.831891][T20915] netlink: 64339 bytes leftover after parsing attributes in process `syz.3.3991'. [ 926.900659][T20915] netlink: 'syz.3.3991': attribute type 4 has an invalid length. [ 927.114932][T20927] netlink: 'syz.1.3994': attribute type 27 has an invalid length. [ 927.142448][T20927] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3994'. [ 927.324281][T20930] netlink: 'syz.3.3995': attribute type 10 has an invalid length. [ 927.350722][T20930] device veth0_vlan left promiscuous mode [ 927.431766][T20930] device veth0_vlan entered promiscuous mode [ 927.619517][T20930] team0: Device veth0_vlan failed to register rx_handler [ 927.742618][T20935] netlink: 'syz.3.3995': attribute type 10 has an invalid length. [ 927.751940][T20935] device veth0_vlan left promiscuous mode [ 927.766359][T20935] device veth0_vlan entered promiscuous mode [ 927.796518][T20935] team0: Device veth0_vlan failed to register rx_handler [ 927.937634][T20948] netlink: 'syz.4.3999': attribute type 39 has an invalid length. [ 928.933664][T20982] netlink: 'syz.1.4008': attribute type 3 has an invalid length. [ 928.937209][T20986] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4010'. [ 928.986335][T20982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4008'. [ 929.295189][T20993] netlink: 'syz.0.4012': attribute type 27 has an invalid length. [ 929.326546][T20993] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4012'. [ 929.896307][T21009] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4016'. [ 929.906330][T21009] netlink: 'syz.3.4016': attribute type 1 has an invalid length. [ 929.948227][T21009] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4016'. [ 929.975270][T21009] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 930.144289][T21015] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4017'. [ 930.246668][T21015] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 931.509502][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.515932][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.589190][T21054] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4022'. [ 932.222085][T21075] netlink: 'syz.3.4029': attribute type 27 has an invalid length. [ 932.238044][T21075] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4029'. [ 935.297200][T21103] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4035'. [ 935.859888][T21124] FAULT_INJECTION: forcing a failure. [ 935.859888][T21124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.906867][T21124] CPU: 1 PID: 21124 Comm: syz.2.4041 Not tainted syzkaller #0 [ 935.914503][T21124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 935.924649][T21124] Call Trace: [ 935.927968][T21124] [ 935.930936][T21124] dump_stack_lvl+0x188/0x24e [ 935.935850][T21124] ? show_regs_print_info+0x12/0x12 [ 935.941138][T21124] ? load_image+0x410/0x410 [ 935.945707][T21124] ? __lock_acquire+0x7ea0/0x7ea0 [ 935.950800][T21124] should_fail_ex+0x390/0x4c0 [ 935.955568][T21124] _copy_from_user+0x2c/0x170 [ 935.960395][T21124] copy_from_sockptr+0x69/0x80 [ 935.965250][T21124] packet_setsockopt+0x1e1/0x1230 [ 935.970336][T21124] ? packet_ioctl+0x240/0x240 [ 935.975059][T21124] ? aa_sk_perm+0x81f/0x950 [ 935.979627][T21124] ? aa_af_perm+0x340/0x340 [ 935.984161][T21124] ? __fget_files+0x3fc/0x460 [ 935.988967][T21124] ? aa_sock_opt_perm+0x74/0x100 [ 935.993967][T21124] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 935.999547][T21124] ? security_socket_setsockopt+0x7a/0xa0 [ 936.005306][T21124] ? packet_ioctl+0x240/0x240 [ 936.010043][T21124] __sys_setsockopt+0x2bf/0x3d0 [ 936.014931][T21124] __x64_sys_setsockopt+0xb1/0xc0 [ 936.020014][T21124] do_syscall_64+0x4c/0xa0 [ 936.024465][T21124] ? clear_bhb_loop+0x60/0xb0 [ 936.029304][T21124] ? clear_bhb_loop+0x60/0xb0 [ 936.034016][T21124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 936.039943][T21124] RIP: 0033:0x7f67ba19e159 [ 936.044384][T21124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.064021][T21124] RSP: 002b:00007f67bafea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 936.072470][T21124] RAX: ffffffffffffffda RBX: 00007f67ba425fa0 RCX: 00007f67ba19e159 [ 936.080481][T21124] RDX: 0000000000000013 RSI: 0000000000000107 RDI: 0000000000000005 [ 936.088512][T21124] RBP: 00007f67bafea090 R08: 0000000000000004 R09: 0000000000000000 [ 936.096534][T21124] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001 [ 936.104543][T21124] R13: 00007f67ba426038 R14: 00007f67ba425fa0 R15: 00007ffed0fd8098 [ 936.112658][T21124] [ 936.147837][T21121] netlink: 16143 bytes leftover after parsing attributes in process `syz.4.4037'. [ 936.783590][T21140] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4046'. [ 936.814840][T21136] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4045'. [ 936.850394][T21136] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 936.909337][T21136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 937.013384][T21140] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 938.252634][T21188] FAULT_INJECTION: forcing a failure. [ 938.252634][T21188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.282568][T21188] CPU: 1 PID: 21188 Comm: syz.4.4057 Not tainted syzkaller #0 [ 938.290556][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.300659][T21188] Call Trace: [ 938.303980][T21188] [ 938.306964][T21188] dump_stack_lvl+0x188/0x24e [ 938.311717][T21188] ? show_regs_print_info+0x12/0x12 [ 938.316998][T21188] ? load_image+0x410/0x410 [ 938.321620][T21188] ? __lock_acquire+0x7ea0/0x7ea0 [ 938.326710][T21188] ? snprintf+0xe5/0x140 [ 938.331023][T21188] should_fail_ex+0x390/0x4c0 [ 938.335779][T21188] _copy_to_user+0x2c/0x130 [ 938.340431][T21188] simple_read_from_buffer+0xe3/0x150 [ 938.345870][T21188] proc_fail_nth_read+0x1a6/0x220 [ 938.350961][T21188] ? proc_fault_inject_write+0x310/0x310 [ 938.356695][T21188] ? fsnotify_perm+0x248/0x550 [ 938.361520][T21188] ? proc_fault_inject_write+0x310/0x310 [ 938.367215][T21188] vfs_read+0x2db/0x960 [ 938.371437][T21188] ? kernel_read+0x1e0/0x1e0 [ 938.376099][T21188] ? __fget_files+0x28/0x460 [ 938.380764][T21188] ? __fget_files+0x3fc/0x460 [ 938.385515][T21188] ? __fdget_pos+0x2ae/0x360 [ 938.390173][T21188] ? ksys_read+0x70/0x260 [ 938.394686][T21188] ksys_read+0x14d/0x260 [ 938.399002][T21188] ? vfs_write+0x9a0/0x9a0 [ 938.403483][T21188] ? syscall_enter_from_user_mode+0x2a/0x80 [ 938.409436][T21188] do_syscall_64+0x4c/0xa0 [ 938.413900][T21188] ? clear_bhb_loop+0x60/0xb0 [ 938.418633][T21188] ? clear_bhb_loop+0x60/0xb0 [ 938.423363][T21188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.429370][T21188] RIP: 0033:0x7f1e7875e98e [ 938.433834][T21188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 938.453583][T21188] RSP: 002b:00007f1e79665fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 938.462051][T21188] RAX: ffffffffffffffda RBX: 00007f1e796666c0 RCX: 00007f1e7875e98e [ 938.470079][T21188] RDX: 000000000000000f RSI: 00007f1e796660a0 RDI: 0000000000000006 [ 938.478108][T21188] RBP: 00007f1e79666090 R08: 0000000000000000 R09: 0000000000000000 [ 938.486138][T21188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.494217][T21188] R13: 00007f1e78a26038 R14: 00007f1e78a25fa0 R15: 00007ffcac672438 [ 938.502371][T21188] [ 938.532193][T21179] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.4056'. [ 941.389240][T21272] netlink: 'syz.0.4075': attribute type 3 has an invalid length. [ 941.516077][T21272] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4075'. [ 941.791188][T21284] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4081'. [ 942.239737][T21289] netlink: 'syz.4.4083': attribute type 10 has an invalid length. [ 942.284554][T21289] device veth1_macvtap left promiscuous mode [ 942.462270][T21294] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4083'. [ 942.493112][T21294] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 942.611292][T21284] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 942.775492][T21304] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4086'. [ 942.809369][T21304] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 942.838241][T21304] CPU: 0 PID: 21304 Comm: syz.3.4086 Not tainted syzkaller #0 [ 942.845880][T21304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.855986][T21304] Call Trace: [ 942.859314][T21304] [ 942.862283][T21304] dump_stack_lvl+0x188/0x24e [ 942.867018][T21304] ? show_regs_print_info+0x12/0x12 [ 942.872276][T21304] ? load_image+0x410/0x410 [ 942.876858][T21304] sysfs_warn_dup+0x8a/0xa0 [ 942.881409][T21304] sysfs_do_create_link_sd+0xc0/0x110 [ 942.886825][T21304] device_add+0x83b/0x1050 [ 942.891320][T21304] wiphy_register+0x1d8b/0x2aa0 [ 942.896221][T21304] ? cfg80211_event_work+0x40/0x40 [ 942.901396][T21304] ? minstrel_ht_alloc+0x894/0xa20 [ 942.906626][T21304] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 942.912747][T21304] ieee80211_register_hw+0x2e33/0x3b00 [ 942.918281][T21304] ? ieee80211_register_hw+0xf61/0x3b00 [ 942.923878][T21304] ? ieee80211_register_hw+0xf61/0x3b00 [ 942.929566][T21304] ? ieee80211_tasklet_handler+0x20/0x20 [ 942.935248][T21304] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 942.941210][T21304] ? __debug_object_init+0xed/0x440 [ 942.946669][T21304] ? memset+0x1e/0x40 [ 942.950794][T21304] ? __hrtimer_init+0x189/0x270 [ 942.955702][T21304] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 942.961479][T21304] ? memcpy+0x3c/0x60 [ 942.965519][T21304] hwsim_new_radio_nl+0xab7/0xc90 [ 942.970711][T21304] genl_family_rcv_msg_doit+0x22f/0x350 [ 942.976487][T21304] ? end_current_label_crit_section+0x170/0x170 [ 942.982895][T21304] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 942.988850][T21304] ? bpf_lsm_capable+0x5/0x10 [ 942.993562][T21304] ? security_capable+0x85/0xb0 [ 942.998463][T21304] genl_rcv_msg+0x601/0x790 [ 943.003539][T21304] ? lock_chain_count+0x20/0x20 [ 943.008566][T21304] ? genl_bind+0x360/0x360 [ 943.013066][T21304] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 943.019447][T21304] netlink_rcv_skb+0x1ef/0x440 [ 943.024307][T21304] ? genl_bind+0x360/0x360 [ 943.028803][T21304] ? netlink_ack+0x1160/0x1160 [ 943.033627][T21304] ? down_read+0x1a8/0x2d0 [ 943.038125][T21304] genl_rcv+0x24/0x40 [ 943.042682][T21304] netlink_unicast+0x7ad/0x920 [ 943.047518][T21304] netlink_sendmsg+0x8ad/0xbd0 [ 943.052324][T21304] ? netlink_getsockopt+0x550/0x550 [ 943.057731][T21304] ? apparmor_socket_sendmsg+0x8a/0x330 [ 943.063341][T21304] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 943.068687][T21304] ? security_socket_sendmsg+0x7c/0xa0 [ 943.074392][T21304] ? netlink_getsockopt+0x550/0x550 [ 943.079733][T21304] ____sys_sendmsg+0x5ed/0x9a0 [ 943.084828][T21304] ? __sys_sendmsg_sock+0x30/0x30 [ 943.090216][T21304] ? __import_iovec+0x306/0x510 [ 943.095139][T21304] ? import_iovec+0x6f/0xa0 [ 943.099863][T21304] ___sys_sendmsg+0x2a2/0x360 [ 943.104677][T21304] ? __sys_sendmsg+0x2a0/0x2a0 [ 943.109860][T21304] ? bpf_prog_free_id+0x1d0/0x1d0 [ 943.114956][T21304] __se_sys_sendmsg+0x1c3/0x2b0 [ 943.119961][T21304] ? __x64_sys_sendmsg+0x80/0x80 [ 943.125140][T21304] ? lockdep_hardirqs_on+0x94/0x140 [ 943.130850][T21304] do_syscall_64+0x4c/0xa0 [ 943.135328][T21304] ? clear_bhb_loop+0x60/0xb0 [ 943.140669][T21304] ? clear_bhb_loop+0x60/0xb0 [ 943.145398][T21304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.151513][T21304] RIP: 0033:0x7f2864d9e159 [ 943.156069][T21304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.176429][T21304] RSP: 002b:00007f2865d5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.185517][T21304] RAX: ffffffffffffffda RBX: 00007f2865025fa0 RCX: 00007f2864d9e159 [ 943.195310][T21304] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 943.204473][T21304] RBP: 00007f2864e3506b R08: 0000000000000000 R09: 0000000000000000 [ 943.212497][T21304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.220594][T21304] R13: 00007f2865026038 R14: 00007f2865025fa0 R15: 00007ffec39ff098 [ 943.228810][T21304] [ 945.011649][T21338] netlink: 'syz.1.4093': attribute type 1 has an invalid length. [ 945.041645][T21338] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.4093'. [ 945.365360][T21334] device syzkaller0 entered promiscuous mode [ 950.552594][T21350] netlink: 'syz.2.4098': attribute type 16 has an invalid length. [ 950.560819][T21350] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4098'. [ 950.588237][T21360] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4099'. [ 950.623115][T21365] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4100'. [ 950.909454][T21376] netlink: 'syz.2.4105': attribute type 21 has an invalid length. [ 950.945948][T21381] netlink: 'syz.1.4102': attribute type 19 has an invalid length. [ 950.996706][T21375] netlink: 'syz.4.4104': attribute type 3 has an invalid length. [ 951.050220][T21380] netlink: 'syz.4.4104': attribute type 3 has an invalid length. [ 951.117755][T21375] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4104'. [ 951.156082][T21380] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4104'. [ 951.481169][T21384] netlink: 'syz.0.4106': attribute type 29 has an invalid length. [ 951.534237][T21384] netlink: 'syz.0.4106': attribute type 29 has an invalid length. [ 951.592260][T21385] netlink: 'syz.0.4106': attribute type 29 has an invalid length. [ 951.617112][T21368] delete_channel: no stack [ 951.663029][T21392] device netdevsim0 entered promiscuous mode [ 951.713605][T21393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 952.021611][T21403] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4111'. [ 953.090140][T21437] netlink: 'syz.3.4121': attribute type 3 has an invalid length. [ 953.118128][T21437] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4121'. [ 953.179540][T21441] netlink: 'syz.0.4123': attribute type 46 has an invalid length. [ 954.092848][T21447] device veth0_vlan left promiscuous mode [ 954.254350][T21447] device veth0_vlan entered promiscuous mode [ 954.345182][T21447] team0: Device veth0_vlan failed to register rx_handler [ 954.657436][T21469] device batadv0 entered promiscuous mode [ 955.112463][T21487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4134'. [ 957.186421][T21548] device syzkaller0 entered promiscuous mode [ 960.170732][T21573] validate_nla: 2 callbacks suppressed [ 960.170753][T21573] netlink: 'syz.3.4153': attribute type 1 has an invalid length. [ 960.567268][T21585] netlink: 'syz.1.4157': attribute type 3 has an invalid length. [ 960.600944][T21585] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4157'. [ 961.019406][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.037835][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.047230][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.056788][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.066054][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.075337][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.084570][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.093926][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.103087][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.112279][T21591] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 961.485695][T21600] netlink: 'syz.2.4158': attribute type 16 has an invalid length. [ 961.503406][T21600] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4158'. [ 961.646235][T21608] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4161'. [ 962.107797][T21617] netlink: 'syz.0.4163': attribute type 2 has an invalid length. [ 962.165246][T21617] netlink: 'syz.0.4163': attribute type 11 has an invalid length. [ 962.218402][T21617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4163'. [ 963.662688][T21658] netlink: 'syz.3.4175': attribute type 3 has an invalid length. [ 963.675774][T21658] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.4175'. [ 964.117519][T21680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4180'. [ 964.143243][T21680] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4180'. [ 964.163662][T21680] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.4180'. [ 964.195585][ T4291] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 964.307473][T21673] netlink: 'syz.3.4177': attribute type 275 has an invalid length. [ 964.353836][T21684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4181'. [ 964.969833][T21699] netlink: 'syz.1.4182': attribute type 21 has an invalid length. [ 965.038082][T21699] netlink: 13070 bytes leftover after parsing attributes in process `syz.1.4182'. [ 965.470760][T21709] netlink: 'syz.3.4189': attribute type 3 has an invalid length. [ 965.564488][T21709] netlink: 'syz.3.4189': attribute type 1 has an invalid length. [ 965.615319][T21709] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.4189'. [ 966.091511][T21714] netlink: 'syz.2.4190': attribute type 10 has an invalid length. [ 966.554918][T21714] team0: Port device geneve1 added [ 966.588333][T21723] device sit0 left promiscuous mode [ 966.748472][T21725] device sit0 entered promiscuous mode [ 966.947580][T21733] netlink: 'syz.3.4194': attribute type 39 has an invalid length. [ 967.933584][T21755] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4201'. [ 968.285732][T21761] netlink: 'syz.0.4203': attribute type 2 has an invalid length. [ 968.446461][T21761] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4203'. [ 968.554594][T21767] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4204'. [ 969.200249][T21777] netlink: 'syz.0.4203': attribute type 2 has an invalid length. [ 969.315160][T21777] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4203'. [ 970.071657][T21782] netlink: 'syz.4.4207': attribute type 16 has an invalid length. [ 970.109327][T21782] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4207'. [ 972.004003][T21838] netlink: 'syz.2.4220': attribute type 10 has an invalid length. [ 972.024196][T21838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4220'. [ 972.063084][T21838] bridge0: port 3(veth0_vlan) entered blocking state [ 972.079321][T21838] bridge0: port 3(veth0_vlan) entered disabled state [ 972.137592][T21838] net_ratelimit: 3256 callbacks suppressed [ 972.137634][T21838] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 972.488393][T21842] netlink: 'syz.2.4223': attribute type 10 has an invalid length. [ 973.821192][T21854] netlink: 'syz.2.4226': attribute type 10 has an invalid length. [ 973.848342][T21854] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4226'. [ 973.873510][T21854] device hsr0 entered promiscuous mode [ 973.904196][T21854] bridge0: port 3(hsr0) entered blocking state [ 973.923214][T21854] bridge0: port 3(hsr0) entered disabled state [ 974.082670][T21854] bridge0: port 3(hsr0) entered blocking state [ 974.090734][T21854] bridge0: port 3(hsr0) entered forwarding state [ 974.299279][T21859] bridge0: port 4(dummy0) entered disabled state [ 974.305911][T21859] bridge0: port 3(team0) entered disabled state [ 974.312598][T21859] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.635285][T21858] netlink: 'syz.0.4227': attribute type 10 has an invalid length. [ 974.725279][T21867] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4231'. [ 974.735718][T21871] netlink: 'syz.4.4232': attribute type 10 has an invalid length. [ 974.735749][T21871] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4232'. [ 974.735777][T21871] device dummy0 entered promiscuous mode [ 974.746394][T21871] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 975.147155][T21884] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.4236'. [ 976.306958][T21918] netlink: 'syz.1.4244': attribute type 7 has an invalid length. [ 976.354550][T21922] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4245'. [ 976.400835][T21922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 976.529545][T21927] netlink: 'syz.1.4247': attribute type 4 has an invalid length. [ 976.564509][T21927] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4247'. [ 976.903459][T21941] netlink: 'syz.3.4251': attribute type 3 has an invalid length. [ 976.928397][T21940] netlink: 'syz.3.4251': attribute type 3 has an invalid length. [ 976.952186][T21941] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4251'. [ 976.988933][T21940] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4251'. [ 977.067040][T21953] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.4252'. [ 977.327851][T21964] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.4254'. [ 977.411187][T21964] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 977.676731][T21977] netlink: 'syz.0.4258': attribute type 4 has an invalid length. [ 977.701594][T21977] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4258'. [ 977.720751][T21981] netlink: 'syz.4.4257': attribute type 3 has an invalid length. [ 977.752556][T21981] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4257'. [ 978.547057][T21996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4262'. [ 978.667406][T21986] device syzkaller0 entered promiscuous mode [ 982.091382][T22023] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4269'. [ 987.355635][T22005] netlink: 'syz.2.4266': attribute type 10 has an invalid length. [ 987.363615][T22005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4266'. [ 987.373318][T22005] device dummy0 entered promiscuous mode [ 987.380687][T22005] bridge0: port 4(dummy0) entered blocking state [ 987.387280][T22005] bridge0: port 4(dummy0) entered disabled state [ 987.408344][T22005] bridge0: port 4(dummy0) entered blocking state [ 987.414904][T22005] bridge0: port 4(dummy0) entered forwarding state [ 987.457825][T22022] netlink: 'syz.0.4269': attribute type 1 has an invalid length. [ 987.466408][T22022] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.4269'. [ 987.740929][T22042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4275'. [ 987.780113][T22042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4275'. [ 988.281233][T22070] bridge0: port 4(dummy0) entered disabled state [ 988.627894][T22070] bridge0: port 3(team0) entered disabled state [ 988.698106][T22070] device bridge_slave_1 left promiscuous mode [ 988.761719][T22070] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.812820][T22070] device bridge_slave_0 left promiscuous mode [ 988.834178][T22070] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.541614][T22094] netlink: 184 bytes leftover after parsing attributes in process `syz.0.4287'. [ 989.581031][T22083] netlink: 'syz.4.4286': attribute type 10 has an invalid length. [ 989.628222][T22083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4286'. [ 989.663734][T22083] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 990.219310][ T4291] Bluetooth: hci3: ISO packet for unknown connection handle 255 [ 992.036509][T22168] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4308'. [ 992.090976][T22177] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.4308'. [ 992.141291][T22175] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.4309'. [ 992.928522][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.934963][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.003589][T22190] device syzkaller0 entered promiscuous mode [ 993.669423][T22217] nr0: port 1(hsr0) entered blocking state [ 993.685883][T22217] nr0: port 1(hsr0) entered disabled state [ 993.702694][T22217] device hsr0 entered promiscuous mode [ 994.093637][T22223] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4321'. [ 994.221347][T22223] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 994.537565][T22223] CPU: 0 PID: 22223 Comm: syz.2.4321 Not tainted syzkaller #0 [ 994.545133][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 994.555250][T22223] Call Trace: [ 994.558585][T22223] [ 994.561585][T22223] dump_stack_lvl+0x188/0x24e [ 994.566372][T22223] ? show_regs_print_info+0x12/0x12 [ 994.571801][T22223] ? load_image+0x410/0x410 [ 994.576410][T22223] sysfs_warn_dup+0x8a/0xa0 [ 994.580984][T22223] sysfs_do_create_link_sd+0xc0/0x110 [ 994.586517][T22223] device_add+0x83b/0x1050 [ 994.591079][T22223] wiphy_register+0x1d8b/0x2aa0 [ 994.596021][T22223] ? cfg80211_event_work+0x40/0x40 [ 994.601279][T22223] ? minstrel_ht_alloc+0x894/0xa20 [ 994.606457][T22223] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 994.612607][T22223] ieee80211_register_hw+0x2e33/0x3b00 [ 994.618210][T22223] ? ieee80211_register_hw+0xf61/0x3b00 [ 994.623824][T22223] ? ieee80211_register_hw+0xf61/0x3b00 [ 994.629478][T22223] ? ieee80211_tasklet_handler+0x20/0x20 [ 994.635200][T22223] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 994.641164][T22223] ? __debug_object_init+0xed/0x440 [ 994.646529][T22223] ? memset+0x1e/0x40 [ 994.650582][T22223] ? __hrtimer_init+0x189/0x270 [ 994.655512][T22223] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 994.661317][T22223] ? memcpy+0x3c/0x60 [ 994.665376][T22223] hwsim_new_radio_nl+0xab7/0xc90 [ 994.670493][T22223] genl_family_rcv_msg_doit+0x22f/0x350 [ 994.676206][T22223] ? end_current_label_crit_section+0x170/0x170 [ 994.682540][T22223] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 994.688506][T22223] ? bpf_lsm_capable+0x5/0x10 [ 994.693531][T22223] ? security_capable+0x85/0xb0 [ 994.698635][T22223] genl_rcv_msg+0x601/0x790 [ 994.703235][T22223] ? genl_bind+0x360/0x360 [ 994.707709][T22223] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 994.714127][T22223] netlink_rcv_skb+0x1ef/0x440 [ 994.718962][T22223] ? genl_bind+0x360/0x360 [ 994.723629][T22223] ? netlink_ack+0x1160/0x1160 [ 994.728488][T22223] ? down_read+0x1a8/0x2d0 [ 994.732984][T22223] genl_rcv+0x24/0x40 [ 994.737027][T22223] netlink_unicast+0x7ad/0x920 [ 994.741900][T22223] netlink_sendmsg+0x8ad/0xbd0 [ 994.746822][T22223] ? netlink_getsockopt+0x550/0x550 [ 994.752084][T22223] ? apparmor_socket_sendmsg+0x8a/0x330 [ 994.757720][T22223] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 994.763060][T22223] ? security_socket_sendmsg+0x7c/0xa0 [ 994.768609][T22223] ? netlink_getsockopt+0x550/0x550 [ 994.773966][T22223] ____sys_sendmsg+0x5ed/0x9a0 [ 994.778811][T22223] ? __sys_sendmsg_sock+0x30/0x30 [ 994.783896][T22223] ? __import_iovec+0x306/0x510 [ 994.788905][T22223] ? import_iovec+0x6f/0xa0 [ 994.793480][T22223] ___sys_sendmsg+0x2a2/0x360 [ 994.798223][T22223] ? __sys_sendmsg+0x2a0/0x2a0 [ 994.803077][T22223] ? trace_call_bpf+0xbf/0x6b0 [ 994.808018][T22223] __se_sys_sendmsg+0x1c3/0x2b0 [ 994.812916][T22223] ? perf_trace_preemptirq_template+0x268/0x320 [ 994.819228][T22223] ? __x64_sys_sendmsg+0x80/0x80 [ 994.824237][T22223] ? lockdep_hardirqs_on+0x94/0x140 [ 994.829514][T22223] do_syscall_64+0x4c/0xa0 [ 994.834013][T22223] ? clear_bhb_loop+0x60/0xb0 [ 994.838740][T22223] ? clear_bhb_loop+0x60/0xb0 [ 994.843511][T22223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 994.849466][T22223] RIP: 0033:0x7f67ba19e159 [ 994.853932][T22223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.873773][T22223] RSP: 002b:00007f67bafa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.882284][T22223] RAX: ffffffffffffffda RBX: 00007f67ba426180 RCX: 00007f67ba19e159 [ 994.890324][T22223] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 994.898432][T22223] RBP: 00007f67ba23506b R08: 0000000000000000 R09: 0000000000000000 [ 994.906462][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.914655][T22223] R13: 00007f67ba426218 R14: 00007f67ba426180 R15: 00007ffed0fd8098 [ 994.922814][T22223] [ 995.058948][T22231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4323'. [ 995.421426][T22243] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4326'. [ 995.489591][T22242] delete_channel: no stack [ 995.866576][T22247] netlink: 'syz.4.4328': attribute type 29 has an invalid length. [ 995.918770][T22251] netlink: 'syz.4.4328': attribute type 29 has an invalid length. [ 998.271094][T22249] netlink: 'syz.2.4329': attribute type 10 has an invalid length. [ 998.307263][T22249] device veth0_vlan left promiscuous mode [ 998.319771][T22249] device veth0_vlan entered promiscuous mode [ 998.349039][T22249] team0: Device veth0_vlan failed to register rx_handler [ 998.384163][T22251] netlink: 'syz.4.4328': attribute type 29 has an invalid length. [ 998.436152][T22250] ¥: port 1(team0) entered blocking state [ 998.444333][T22250] ¥: port 1(team0) entered disabled state [ 998.519387][T22252] ¥: port 1(team0) entered disabled state [ 999.186646][T22255] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4331'. [ 999.428324][T22266] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4333'. [ 999.463173][T22273] netlink: 'syz.0.4335': attribute type 10 has an invalid length. [ 999.482014][T22273] device syz_tun entered promiscuous mode [ 999.522608][T22273] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 999.769907][T22279] netlink: 'syz.4.4337': attribute type 2 has an invalid length. [ 999.817984][T22279] netlink: 'syz.4.4337': attribute type 9 has an invalid length. [ 999.859144][T22279] netlink: 'syz.4.4337': attribute type 10 has an invalid length. [ 999.888137][T22279] netlink: 'syz.4.4337': attribute type 11 has an invalid length. [ 999.901012][T22279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4337'. [ 1000.156987][T22286] netlink: 'syz.3.4338': attribute type 10 has an invalid length. [ 1000.996822][T22286] device dummy0 left promiscuous mode [ 1001.014650][T22286] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1001.033870][T22285] netlink: 'syz.0.4340': attribute type 21 has an invalid length. [ 1001.045018][T22285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4340'. [ 1001.101951][T22314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4344'. [ 1001.112272][T22311] netlink: 'syz.4.4343': attribute type 2 has an invalid length. [ 1001.128084][T22311] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1002.005475][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1002.039040][T22339] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1002.080781][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1002.120344][T22339] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1002.177066][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1002.188495][T22339] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1002.273450][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1002.290168][T22339] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4350'. [ 1002.440215][T22355] netlink: 'syz.3.4353': attribute type 3 has an invalid length. [ 1002.508650][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1002.519505][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1002.686076][T22339] netlink: 'syz.4.4350': attribute type 10 has an invalid length. [ 1004.595260][T22391] __nla_validate_parse: 6 callbacks suppressed [ 1004.595282][T22391] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1006.323597][T22388] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1006.348917][T22388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1006.398612][T22388] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1009.086914][T22488] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1009.249033][T22499] validate_nla: 4 callbacks suppressed [ 1009.249059][T22499] netlink: 'syz.4.4376': attribute type 21 has an invalid length. [ 1009.297325][T22499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4376'. [ 1010.609324][T22511] device sit0 left promiscuous mode [ 1010.909515][T22523] device sit0 entered promiscuous mode [ 1011.025264][T22531] netlink: 'syz.4.4383': attribute type 21 has an invalid length. [ 1011.053992][T22532] netlink: 'syz.4.4383': attribute type 21 has an invalid length. [ 1012.450819][T22577] delete_channel: no stack [ 1012.531533][T22583] netlink: 'syz.0.4395': attribute type 17 has an invalid length. [ 1012.549498][T22583] netlink: 'syz.0.4395': attribute type 16 has an invalid length. [ 1012.568681][T22583] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4395'. [ 1012.962317][T22589] netlink: 'syz.2.4396': attribute type 10 has an invalid length. [ 1013.181946][T22598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1013.383257][T22603] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4400'. [ 1013.475745][T22586] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.4393'. [ 1013.486638][T22603] openvswitch: netlink: Message has 6 unknown bytes. [ 1013.497630][T22598] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1013.525345][T22601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1013.862082][T22606] netlink: 'syz.0.4401': attribute type 3 has an invalid length. [ 1013.887991][T22606] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4401'. [ 1014.001296][T22605] device syzkaller0 entered promiscuous mode [ 1014.757711][T22618] netlink: 'syz.3.4402': attribute type 3 has an invalid length. [ 1014.779650][T22617] netlink: 'syz.3.4402': attribute type 3 has an invalid length. [ 1014.826400][T22617] netlink: 'syz.3.4402': attribute type 1 has an invalid length. [ 1014.849765][T22618] netlink: 'syz.3.4402': attribute type 1 has an invalid length. [ 1014.868581][T22617] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1014.898297][T22618] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1018.115093][T22619] netlink: 'syz.2.4404': attribute type 10 has an invalid length. [ 1018.124730][T22619] device veth0_vlan left promiscuous mode [ 1018.133060][T22619] device veth0_vlan entered promiscuous mode [ 1018.146519][T22619] team0: Device veth0_vlan failed to register rx_handler [ 1018.601175][T22642] netlink: 'syz.4.4408': attribute type 12 has an invalid length. [ 1018.738357][T22642] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4408'. [ 1019.569580][T22655] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4412'. [ 1020.093788][T22680] netlink: 'syz.4.4418': attribute type 4 has an invalid length. [ 1020.131480][T22680] netlink: 'syz.4.4418': attribute type 1 has an invalid length. [ 1020.203457][T22680] netlink: 'syz.4.4418': attribute type 26 has an invalid length. [ 1020.276514][T22680] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.4418'. [ 1020.889729][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.931301][T22685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.989896][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1021.024572][T22685] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.076564][T22706] delete_channel: no stack [ 1021.282105][T22703] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4425'. [ 1021.332968][T22708] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.4426'. [ 1021.891459][T22723] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4432'. [ 1022.132373][T22736] netlink: 8192 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1023.015829][T22754] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1025.739564][T22776] netlink: 'syz.3.4440': attribute type 2 has an invalid length. [ 1025.793427][T22776] netlink: 'syz.3.4440': attribute type 8 has an invalid length. [ 1025.848282][T22776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4440'. [ 1026.058103][T22778] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1026.138300][T22783] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1027.645961][T22812] delete_channel: no stack [ 1030.280522][T22868] device syzkaller0 entered promiscuous mode [ 1032.254402][T22878] netlink: 'syz.3.4467': attribute type 10 has an invalid length. [ 1033.517343][T22913] netlink: 'syz.1.4476': attribute type 2 has an invalid length. [ 1033.542537][T22907] can: request_module (can-proto-0) failed. [ 1033.546157][T22913] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1036.095426][T22913] netlink: 'syz.1.4476': attribute type 20 has an invalid length. [ 1036.118160][T22918] netlink: 'syz.1.4476': attribute type 20 has an invalid length. [ 1036.412014][T22929] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4479'. [ 1037.033554][T22947] device syzkaller0 entered promiscuous mode [ 1037.102894][T22946] netlink: 'syz.3.4486': attribute type 19 has an invalid length. [ 1037.132922][T22946] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4486'. [ 1039.319273][T22966] netlink: 'syz.3.4491': attribute type 2 has an invalid length. [ 1041.391545][T22966] device 1 entered promiscuous mode [ 1042.023976][T22997] netlink: 87536 bytes leftover after parsing attributes in process `syz.2.4497'. [ 1043.154315][T22998] netlink: 'syz.4.4494': attribute type 10 has an invalid length. [ 1044.132524][T23033] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.4506'. [ 1044.522842][T23052] netlink: 'syz.4.4512': attribute type 21 has an invalid length. [ 1044.550633][T23052] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4512'. [ 1044.602689][T23060] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.4512'. [ 1044.698793][T23061] netlink: 'syz.3.4511': attribute type 21 has an invalid length. [ 1044.741217][T23061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4511'. [ 1044.774712][T23063] netlink: 'syz.1.4513': attribute type 10 has an invalid length. [ 1045.236225][T23075] netlink: 'syz.0.4516': attribute type 9 has an invalid length. [ 1045.266951][T23075] netlink: 90128 bytes leftover after parsing attributes in process `syz.0.4516'. [ 1045.992490][T23086] device pim6reg1 entered promiscuous mode [ 1046.053126][T23088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1047.030585][T23107] netlink: 'syz.4.4527': attribute type 21 has an invalid length. [ 1047.044805][T23107] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1047.113929][T23107] : port 1(ip6gretap0) entered blocking state [ 1047.121485][T23107] : port 1(ip6gretap0) entered disabled state [ 1047.159502][T23107] device ip6gretap0 entered promiscuous mode [ 1047.196558][T23115] device ip6gretap0 left promiscuous mode [ 1047.213879][T23115] : port 1(ip6gretap0) entered disabled state [ 1048.128953][T23129] netlink: 'syz.0.4533': attribute type 13 has an invalid length. [ 1048.141064][T23129] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1048.159406][T23129] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1048.198923][T23130] netlink: 'syz.0.4533': attribute type 21 has an invalid length. [ 1048.264649][T23130] netlink: 'syz.0.4533': attribute type 6 has an invalid length. [ 1048.288588][T23130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1050.684215][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4552'. [ 1050.820807][T23202] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1054.362505][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.369110][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.827829][T23246] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1054.996555][T23257] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1055.011400][T23255] device syzkaller0 entered promiscuous mode [ 1055.044439][T23253] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1055.084963][T23253] tc_dump_action: action bad kind [ 1055.501542][T23257] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1055.515952][T23252] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1055.544750][T23248] delete_channel: no stack [ 1055.753274][T23274] netlink: 'syz.4.4573': attribute type 29 has an invalid length. [ 1057.899125][T23275] netlink: 'syz.2.4572': attribute type 21 has an invalid length. [ 1057.907536][T23274] netlink: 'syz.4.4573': attribute type 29 has an invalid length. [ 1057.938669][T23277] netlink: 'syz.2.4572': attribute type 21 has an invalid length. [ 1057.946706][T23285] netlink: 'syz.0.4574': attribute type 1 has an invalid length. [ 1057.978311][T23285] netlink: 'syz.0.4574': attribute type 4 has an invalid length. [ 1057.986148][T23285] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4574'. [ 1058.262327][T23298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1058.303159][T23298] : renamed from caif0 [ 1058.390326][T23298] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1059.448710][T23324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1059.927338][T23340] netlink: 'syz.4.4589': attribute type 2 has an invalid length. [ 1059.940810][T23340] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4589'. [ 1060.132465][T23348] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4593'. [ 1061.300869][T23373] netlink: 'syz.0.4598': attribute type 10 has an invalid length. [ 1061.328497][T23374] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1061.353366][T23373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4598'. [ 1061.402386][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.434502][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.473101][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.498622][T23373] device caif0 entered promiscuous mode [ 1061.504258][T23373] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.590119][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.634116][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.680277][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.716891][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.754387][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.765555][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1061.805898][T23375] netlink: 'syz.0.4598': attribute type 11 has an invalid length. [ 1063.753262][T23429] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4610'. [ 1066.522254][ T9] tipc: Subscription rejected, illegal request [ 1068.597473][T23493] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1069.705989][T23514] netlink: 'syz.0.4631': attribute type 10 has an invalid length. [ 1069.712063][T23516] netlink: 'syz.3.4628': attribute type 2 has an invalid length. [ 1069.746468][T23516] netlink: 'syz.3.4628': attribute type 1 has an invalid length. [ 1069.789077][T23516] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.4628'. [ 1070.292967][T23514] team0: Port device macvlan0 added [ 1070.914976][T23527] netlink: 'syz.4.4632': attribute type 21 has an invalid length. [ 1070.936678][T23532] tun0: tun_chr_ioctl cmd 2148553947 [ 1070.962680][T23526] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4634'. [ 1071.169030][T23544] netlink: 'syz.1.4638': attribute type 4 has an invalid length. [ 1071.218753][T23544] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.4638'. [ 1072.285083][T23580] cgroup: fork rejected by pids controller in /syz1 [ 1073.893076][T17323] device syz_tun left promiscuous mode [ 1073.898903][T17323] : port 1(syz_tun) entered disabled state [ 1074.053378][ T4479] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.220424][ T4479] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.392883][ T4479] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.539154][ T4479] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.857379][ T4479] device 0 left promiscuous mode [ 1075.352033][T14714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1075.365598][T23652] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1075.374965][T23652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1075.385376][T23652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1075.393924][T23652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1075.411634][T23652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1076.228419][T23663] netlink: 'syz.2.4668': attribute type 21 has an invalid length. [ 1076.260911][T23663] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.4668'. [ 1076.327935][T23672] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4669'. [ 1077.212700][T23697] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4677'. [ 1077.282190][T23697] openvswitch: netlink: Message has 6 unknown bytes. [ 1077.330968][T23651] chnl_net:caif_netlink_parms(): no params data found [ 1077.478467][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 1077.585867][T23697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1077.593226][T23697] IPv6: NLM_F_CREATE should be set when creating new route [ 1077.600594][T23697] IPv6: NLM_F_CREATE should be set when creating new route [ 1077.607945][T23697] IPv6: NLM_F_CREATE should be set when creating new route [ 1078.672706][ T4479] team0: Port device wlan1 removed [ 1079.558049][T23652] Bluetooth: hci0: command 0x041b tx timeout [ 1079.970354][T23651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.977585][T23651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.999582][T23651] device bridge_slave_0 entered promiscuous mode [ 1080.229613][T23651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.240431][T23651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.269109][T23651] device bridge_slave_1 entered promiscuous mode [ 1080.572597][ T4479] device hsr_slave_0 left promiscuous mode [ 1080.593018][ T4479] device hsr_slave_1 left promiscuous mode [ 1080.601837][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.618421][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.636870][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.644939][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.661775][ T4479] device bridge_slave_1 left promiscuous mode [ 1080.674395][ T4479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.685272][ T4479] device bridge_slave_0 left promiscuous mode [ 1080.699978][ T4479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.794231][ T4479] device veth1_vlan left promiscuous mode [ 1081.443698][ T4479] team0 (unregistering): Port device team_slave_1 removed [ 1081.494298][ T4479] team0 (unregistering): Port device team_slave_0 removed [ 1081.544558][ T4479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.637999][T23652] Bluetooth: hci0: command 0x040f tx timeout [ 1081.978354][ T4479] bond0 (unregistering): Released all slaves [ 1082.050969][T23759] device netdevsim0 entered promiscuous mode [ 1082.133875][T23651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.176719][T23651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.395868][T23651] team0: Port device team_slave_0 added [ 1082.511960][T23651] team0: Port device team_slave_1 added [ 1082.662198][T23651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.705328][T23651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.764458][T23651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.869631][T23651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.876662][T23651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.917589][T23651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.937771][T23788] netlink: 'syz.3.4694': attribute type 21 has an invalid length. [ 1082.946770][T23788] netlink: 9618 bytes leftover after parsing attributes in process `syz.3.4694'. [ 1083.287495][T23651] device hsr_slave_0 entered promiscuous mode [ 1083.305462][T23651] device hsr_slave_1 entered promiscuous mode [ 1083.717980][T23652] Bluetooth: hci0: command 0x0419 tx timeout [ 1084.953830][T23834] netlink: 'syz.0.4702': attribute type 10 has an invalid length. [ 1084.978271][T23834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1085.243126][T23651] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1085.418685][T23834] netlink: 'syz.0.4702': attribute type 10 has an invalid length. [ 1085.450019][T23834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4702'. [ 1085.487382][T23651] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1085.517182][T23651] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1085.554578][T23651] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1085.769792][T23856] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4708'. [ 1085.838514][T23857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4707'. [ 1085.938730][T23651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.023291][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1086.059086][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1086.101264][T23651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.145534][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1086.175558][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1086.228815][ T4487] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.236010][ T4487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.289212][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1086.315701][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1086.375767][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.427645][ T4487] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.434932][ T4487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.518784][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1086.569114][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1086.605824][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1086.668143][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1086.716725][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1086.745396][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1086.807142][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1086.852581][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1086.896262][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1086.933619][T23651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1086.986905][T23651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1087.016531][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1087.036253][ T4487] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1087.316479][T23892] netlink: 'syz.0.4716': attribute type 10 has an invalid length. [ 1087.533118][T23892] team0: Device gre0 is of different type [ 1088.789781][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1088.797544][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1088.878919][T23920] bridge0: port 4(batadv0) entered disabled state [ 1088.887573][T23920] bridge0: port 3(dummy0) entered disabled state [ 1088.894613][T23920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.902902][T23920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.968047][T23924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4723'. [ 1089.147749][T23651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.322390][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1089.356162][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1089.575827][T23651] device veth0_vlan entered promiscuous mode [ 1089.597568][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1089.609466][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1089.701230][T23651] device veth1_vlan entered promiscuous mode [ 1089.719656][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1089.745883][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1089.764221][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1089.894146][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1089.916934][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1090.061187][T23651] device veth0_macvtap entered promiscuous mode [ 1090.120568][T23651] device veth1_macvtap entered promiscuous mode [ 1090.335389][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.408046][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.448039][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.514710][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.567969][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1090.590961][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.620649][T23651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.655558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1090.693822][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1090.728540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1090.763148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1090.799633][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.838175][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.888119][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1090.913863][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1090.964359][T23651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1091.043712][T23651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1091.069729][T23651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.128456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1091.164018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1091.239310][T23651] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.278087][T23651] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.308122][T23651] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.337999][T23651] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.439169][T23970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1091.631972][T23970] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1091.758361][T23968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4731'. [ 1091.824819][ T4486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1091.865986][ T4486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1091.884412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1091.991487][ T4486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.009651][ T4486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.050769][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1092.250349][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.295862][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.348330][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.366776][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.402801][T23991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1092.443233][T23991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1093.750355][T24042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4741'. [ 1094.136844][T24054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1094.673900][T24047] netlink: 'syz.3.4742': attribute type 10 has an invalid length. [ 1094.695341][T24054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1094.730921][T24055] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1095.091221][T24077] netlink: 'syz.3.4749': attribute type 10 has an invalid length. [ 1095.210573][T24077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1095.283683][T24077] device bond0 entered promiscuous mode [ 1095.322054][T24077] device bond_slave_0 entered promiscuous mode [ 1095.346136][T24077] device bond_slave_1 entered promiscuous mode [ 1095.409585][T24077] device dummy0 entered promiscuous mode [ 1095.446189][T24077] team0: Port device bond0 added [ 1095.534041][T24098] netlink: 'syz.4.4752': attribute type 21 has an invalid length. [ 1095.568077][T24098] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.4752'. [ 1095.943485][T24110] syzkaller0: create flow: hash 2579014978 index 1 [ 1095.945089][T24106] device syzkaller0 entered promiscuous mode [ 1095.964785][T11683] syzkaller0: tun_net_xmit 48 [ 1096.114636][T24112] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1096.161008][T24113] netlink: 'syz.4.4757': attribute type 21 has an invalid length. [ 1096.174300][T24113] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.181791][T24113] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.189436][T24113] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.201127][T24105] syzkaller0: delete flow: hash 2579014978 index 1 [ 1098.456254][T24112] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1098.465786][T24112] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1098.492538][T24123] netlink: 'syz.2.4760': attribute type 10 has an invalid length. [ 1098.517286][T24123] bridge0: port 3(hsr0) entered disabled state [ 1098.574760][T24123] device hsr0 left promiscuous mode [ 1098.581253][T24123] bridge0: port 3(hsr0) entered disabled state [ 1098.609359][T24123] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1098.842455][T24137] netlink: 124861 bytes leftover after parsing attributes in process `syz.0.4764'. [ 1098.880782][T24137] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1098.902855][T24143] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1098.967372][T24146] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1099.039711][T24152] netlink: 'syz.3.4767': attribute type 16 has an invalid length. [ 1099.074875][T24152] netlink: 'syz.3.4767': attribute type 3 has an invalid length. [ 1099.150310][T24152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4767'. [ 1099.211985][T24146] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1099.232942][T24147] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4766'. [ 1099.917615][T24159] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4768'. [ 1100.071721][T24170] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4772'. [ 1100.255015][T24180] netlink: 'syz.2.4774': attribute type 10 has an invalid length. [ 1100.278570][T24180] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4774'. [ 1100.316295][T24180] device hsr0 entered promiscuous mode [ 1100.339290][T24180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1100.365492][T24180] bridge0: port 3(hsr0) entered blocking state [ 1100.395304][T24180] bridge0: port 3(hsr0) entered disabled state [ 1100.413727][T24180] bridge0: port 3(hsr0) entered blocking state [ 1100.420159][T24180] bridge0: port 3(hsr0) entered forwarding state [ 1101.392130][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4783'. [ 1101.544105][T24223] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4786'. [ 1101.573840][T24223] openvswitch: netlink: Message has 6 unknown bytes. [ 1102.586071][T24247] device syzkaller0 entered promiscuous mode [ 1104.526828][T24265] netlink: 'syz.0.4793': attribute type 10 has an invalid length. [ 1104.535266][T24265] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.4793'. [ 1104.756212][T24279] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1107.607584][T24272] netlink: 'syz.2.4796': attribute type 10 has an invalid length. [ 1107.615637][T24272] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4796'. [ 1107.635100][T24273] device aaaaaaaaaaaaaaa entered promiscuous mode [ 1107.690671][T24302] netlink: 'syz.0.4800': attribute type 10 has an invalid length. [ 1107.765858][T24302] device dummy0 left promiscuous mode [ 1107.771714][T24302] bridge0: port 3(dummy0) entered disabled state [ 1107.782622][T24302] device dummy0 entered promiscuous mode [ 1107.790668][T24302] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1108.484819][T24321] netlink: 'syz.0.4805': attribute type 10 has an invalid length. [ 1109.760423][T24367] netlink: 'syz.0.4815': attribute type 39 has an invalid length. [ 1109.805371][T24367] netlink: 'syz.0.4815': attribute type 3 has an invalid length. [ 1109.858051][T24367] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1109.969995][T24379] nla_validate_range_unsigned: 23 callbacks suppressed [ 1109.970017][T24379] netlink: 'syz.1.4814': attribute type 11 has an invalid length. [ 1110.072231][T24379] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4814'. [ 1111.680318][T24432] netlink: 'syz.2.4830': attribute type 9 has an invalid length. [ 1111.923447][T24437] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4832'. [ 1112.218597][T24442] netlink: 'syz.1.4833': attribute type 10 has an invalid length. [ 1112.503069][T24442] team0: Device nlmon0 is of different type [ 1113.330270][T24477] netlink: 'syz.2.4837': attribute type 3 has an invalid length. [ 1113.386104][T24477] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1113.443793][T24476] netlink: 'syz.2.4837': attribute type 3 has an invalid length. [ 1113.486388][T24476] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4837'. [ 1115.804187][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.811943][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.380584][T24475] syzkaller1: tun_chr_ioctl cmd 21731 [ 1119.386477][T24474] syzkaller1: tun_chr_ioctl cmd 21731 [ 1119.436849][T24513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4847'. [ 1119.776463][T24520] device syzkaller0 entered promiscuous mode [ 1123.414062][T24582] netlink: 'syz.0.4866': attribute type 10 has an invalid length. [ 1123.435241][T24582] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4866'. [ 1123.466213][T24582] nr0: port 1(hsr0) entered disabled state [ 1123.538857][T24582] bridge0: port 3(hsr0) entered blocking state [ 1123.557469][T24582] bridge0: port 3(hsr0) entered disabled state [ 1124.494070][T24616] netlink: 'syz.0.4873': attribute type 10 has an invalid length. [ 1124.506940][T24616] netlink: 'syz.0.4873': attribute type 16 has an invalid length. [ 1124.521134][T24616] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4873'. [ 1124.543526][T24617] netlink: 'syz.3.4872': attribute type 10 has an invalid length. [ 1124.555010][T24617] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1125.463385][T24638] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1125.578147][T24638] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1128.342944][T24638] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4880'. [ 1129.142374][T24676] netlink: 'syz.2.4890': attribute type 10 has an invalid length. [ 1129.185241][T24676] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4890'. [ 1129.275715][T24676] device ipvlan1 entered promiscuous mode [ 1129.286653][T24681] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4892'. [ 1129.341861][T24676] bridge0: port 5(ipvlan1) entered blocking state [ 1129.354651][T24676] bridge0: port 5(ipvlan1) entered disabled state [ 1129.363584][T24676] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1129.430032][T24696] netlink: 'syz.2.4890': attribute type 10 has an invalid length. [ 1129.467206][T24696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4890'. [ 1129.478725][T24696] bridge0: port 5(ipvlan1) entered blocking state [ 1129.488687][T24696] bridge0: port 5(ipvlan1) entered disabled state [ 1129.497333][T24696] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1129.524968][T24681] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1129.562337][T24690] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4894'. [ 1129.593034][T24702] netlink: 'syz.0.4895': attribute type 1 has an invalid length. [ 1129.971342][T24723] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4901'. [ 1130.034524][T24713] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1130.059310][T24710] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4896'. [ 1130.405303][T24729] netlink: 'syz.2.4902': attribute type 11 has an invalid length. [ 1130.426163][T24729] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4902'. [ 1131.486598][T24757] netlink: 'syz.3.4909': attribute type 1 has an invalid length. [ 1132.153811][T24788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1132.182516][T24788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.199142][T24785] can: request_module (can-proto-0) failed. [ 1132.355343][T24788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.384692][T24788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.007027][T24788] device batadv0 left promiscuous mode [ 1133.012836][T24788] bridge0: port 4(batadv0) entered disabled state [ 1133.088716][T24793] netlink: 'syz.2.4917': attribute type 21 has an invalid length. [ 1133.102969][T24801] ¥: port 1(team0) entered blocking state [ 1133.118007][T24801] ¥: port 1(team0) entered disabled state [ 1133.339684][T24802] ¥: port 1(team0) entered disabled state [ 1133.492095][T24812] netlink: 'syz.2.4924': attribute type 1 has an invalid length. [ 1136.214388][T24840] netlink: 'syz.2.4932': attribute type 3 has an invalid length. [ 1136.258121][T24840] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4932'. [ 1136.886524][T24876] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1137.083992][T24875] netlink: 'syz.4.4941': attribute type 10 has an invalid length. [ 1137.235752][T24885] netlink: 126324 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1137.298196][T24885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1137.334425][T24885] : renamed from caif0 [ 1139.928207][T24885] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1140.593845][T24914] netlink: 'syz.1.4951': attribute type 21 has an invalid length. [ 1140.918599][T24930] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4955'. [ 1141.013110][T24936] netlink: 'syz.4.4957': attribute type 10 has an invalid length. [ 1141.035085][T24936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4957'. [ 1141.073489][T24936] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1141.131299][T24935] netlink: 'syz.2.4956': attribute type 10 has an invalid length. [ 1141.700406][T24951] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1141.878698][T24935] team0 (unregistering): Port device team_slave_1 removed [ 1141.913386][T24935] team0 (unregistering): Port device macvlan0 removed [ 1141.956846][T24935] team0 (unregistering): Port device wlan1 removed [ 1141.966947][T24935] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.977759][T24935] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.987280][T24935] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.000504][T24935] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.025939][T24935] team0 (unregistering): Port device geneve1 removed [ 1142.336092][T24963] device syzkaller0 entered promiscuous mode [ 1142.537644][T24979] netlink: 'syz.0.4968': attribute type 6 has an invalid length. [ 1142.619334][T24979] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1142.712701][T24982] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1142.780314][T24982] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1142.948131][T24998] netlink: 'syz.0.4973': attribute type 10 has an invalid length. [ 1143.083198][T24998] team0 (unregistering): Port device team_slave_0 removed [ 1143.129339][T24998] team0 (unregistering): Port device team_slave_1 removed [ 1143.149147][T24998] team0 (unregistering): Port device bridge0 removed [ 1143.162890][T24998] team0 (unregistering): Port device geneve1 removed [ 1143.205042][T24998] team0 (unregistering): Port device macvlan0 removed [ 1143.383811][T25007] device syzkaller0 entered promiscuous mode [ 1143.702932][T25017] device syzkaller0 entered promiscuous mode [ 1146.294045][T25053] netlink: 'syz.2.4985': attribute type 2 has an invalid length. [ 1149.406659][T25034] netlink: 'syz.4.4982': attribute type 6 has an invalid length. [ 1149.414539][T25034] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4982'. [ 1149.427382][T25053] device 0 entered promiscuous mode [ 1149.448573][T25059] netlink: 'syz.3.4987': attribute type 10 has an invalid length. [ 1149.457689][T25059] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4987'. [ 1149.866887][T25077] netlink: 'syz.1.4992': attribute type 10 has an invalid length. [ 1149.947213][T25077] device vlan0 entered promiscuous mode [ 1150.052861][T25077] team0: Port device vlan0 added [ 1150.457366][T25097] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4993'. [ 1152.532806][T25152] can: request_module (can-proto-0) failed. [ 1152.894242][T25169] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1153.377564][T25175] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.5013'. [ 1153.593154][T25183] netlink: 'syz.1.5014': attribute type 21 has an invalid length. [ 1153.637977][T25183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5014'. [ 1153.674651][T25181] delete_channel: no stack [ 1154.680928][T25266] netlink: 15039 bytes leftover after parsing attributes in process `syz.1.5025'. [ 1154.902606][T25276] netlink: 'syz.1.5029': attribute type 39 has an invalid length. [ 1155.494525][T25301] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.5035'. [ 1155.638706][T25304] netlink: 'syz.2.5037': attribute type 2 has an invalid length. [ 1155.701275][T25304] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.5037'. [ 1156.545842][T25340] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5048'. [ 1156.606861][T25343] netlink: 'syz.4.5048': attribute type 11 has an invalid length. [ 1156.628028][T25343] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5048'. [ 1156.810648][T25348] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1156.931733][T25348] netlink: zone id is out of range [ 1156.936983][T25348] netlink: zone id is out of range [ 1156.994421][T25348] netlink: zone id is out of range [ 1157.037075][T25348] netlink: zone id is out of range [ 1157.095163][T25348] netlink: zone id is out of range [ 1157.143463][T25348] netlink: zone id is out of range [ 1157.192599][T25348] netlink: zone id is out of range [ 1157.203818][T25348] netlink: zone id is out of range [ 1157.218539][T25348] netlink: zone id is out of range [ 1157.232688][T25348] netlink: zone id is out of range [ 1157.723972][T25369] netlink: 87536 bytes leftover after parsing attributes in process `syz.0.5052'. [ 1158.497811][T25366] netlink: 'syz.1.5054': attribute type 3 has an invalid length. [ 1158.914608][T25366] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5054'. [ 1160.122950][T25402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1160.143015][T25408] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5065'. [ 1160.403614][T25412] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5067'. [ 1160.732724][T25415] ================================================================== [ 1160.740933][T25415] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1160.748794][T25415] Write of size 72 at addr ffff88807c732d10 by task syz.4.5069/25415 [ 1160.756987][T25415] [ 1160.759349][T25415] CPU: 0 PID: 25415 Comm: syz.4.5069 Not tainted syzkaller #0 [ 1160.766849][T25415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1160.776955][T25415] Call Trace: [ 1160.780315][T25415] [ 1160.783275][T25415] dump_stack_lvl+0x188/0x24e [ 1160.788089][T25415] ? __lock_acquire+0x7ea0/0x7ea0 [ 1160.793164][T25415] ? show_regs_print_info+0x12/0x12 [ 1160.798409][T25415] ? load_image+0x410/0x410 [ 1160.802966][T25415] ? __virt_addr_valid+0x467/0x540 [ 1160.808130][T25415] ? __bpf_get_stackid+0x6c9/0x920 [ 1160.813631][T25415] print_report+0xa8/0x210 [ 1160.818135][T25415] kasan_report+0x10b/0x140 [ 1160.822692][T25415] ? __bpf_get_stackid+0x6c9/0x920 [ 1160.827860][T25415] kasan_check_range+0x235/0x290 [ 1160.832853][T25415] ? __bpf_get_stackid+0x6c9/0x920 [ 1160.838017][T25415] memcpy+0x3c/0x60 [ 1160.841870][T25415] __bpf_get_stackid+0x6c9/0x920 [ 1160.846864][T25415] bpf_get_stackid_pe+0x33f/0x400 [ 1160.851941][T25415] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1160.857444][T25415] bpf_overflow_handler+0x6d1/0x790 [ 1160.862694][T25415] ? bpf_overflow_handler+0xd9/0x790 [ 1160.868030][T25415] ? perf_swevent_overflow+0x230/0x230 [ 1160.873542][T25415] ? ct_irq_exit_irqson+0x113/0x170 [ 1160.878794][T25415] ? __perf_event_account_interrupt+0x187/0x280 [ 1160.885103][T25415] __perf_event_overflow+0x457/0x630 [ 1160.890453][T25415] perf_swevent_event+0x315/0x570 [ 1160.895534][T25415] ? perf_tp_event+0xc10/0xc10 [ 1160.900349][T25415] ? is_bpf_text_address+0x22/0x2a0 [ 1160.905592][T25415] ___perf_sw_event+0x498/0x6d0 [ 1160.910587][T25415] ? unwind_next_frame+0x1719/0x1fd0 [ 1160.915925][T25415] ? ___perf_sw_event+0x184/0x6d0 [ 1160.921070][T25415] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1160.927633][T25415] ? __lock_acquire+0x142d/0x7ea0 [ 1160.932737][T25415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1160.938819][T25415] ? lock_chain_count+0x20/0x20 [ 1160.943750][T25415] __perf_sw_event+0x135/0x260 [ 1160.948578][T25415] do_user_addr_fault+0x497/0xb20 [ 1160.953669][T25415] ? trace_hardirqs_off_finish+0x86/0x180 [ 1160.959451][T25415] exc_page_fault+0x60/0x100 [ 1160.964095][T25415] ? __might_fault+0xa6/0x120 [ 1160.968817][T25415] asm_exc_page_fault+0x22/0x30 [ 1160.973713][T25415] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1160.980354][T25415] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1161.000015][T25415] RSP: 0018:ffffc90006227958 EFLAGS: 00050206 [ 1161.006138][T25415] RAX: ffffffff8414a101 RBX: ffffc900062f9000 RCX: 000000000000de73 [ 1161.014355][T25415] RDX: 000000000000fe33 RSI: 0000200000002000 RDI: ffffc900062fafc0 [ 1161.022420][T25415] RBP: ffffc90006227a90 R08: ffffc90006308e32 R09: 1ffff92000c611c6 [ 1161.030468][T25415] R10: dffffc0000000000 R11: fffff52000c611c7 R12: 1ffff92000c44f83 [ 1161.038485][T25415] R13: 0000200000000040 R14: 000000000000fe33 R15: 00007ffffffef1cd [ 1161.046513][T25415] ? _copy_from_iter+0x1d1/0x1130 [ 1161.051604][T25415] _copy_from_iter+0x2a9/0x1130 [ 1161.056515][T25415] ? __lock_acquire+0x7ea0/0x7ea0 [ 1161.061596][T25415] ? copyout_mc+0x110/0x110 [ 1161.066156][T25415] ? do_raw_spin_unlock+0x11d/0x230 [ 1161.071447][T25415] ? _raw_spin_unlock+0x24/0x40 [ 1161.076370][T25415] ? find_vmap_area+0xf8/0x110 [ 1161.081195][T25415] ? __phys_addr_symbol+0x2b/0x70 [ 1161.086268][T25415] ? __check_object_size+0x4f6/0xa70 [ 1161.091604][T25415] netlink_sendmsg+0x755/0xbd0 [ 1161.096424][T25415] ? netlink_getsockopt+0x550/0x550 [ 1161.101670][T25415] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1161.107274][T25415] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1161.113047][T25415] ? security_socket_sendmsg+0x7c/0xa0 [ 1161.118574][T25415] sock_write_iter+0x2d5/0x3e0 [ 1161.123388][T25415] ? sock_read_iter+0x3a0/0x3a0 [ 1161.128337][T25415] ? common_file_perm+0x171/0x1c0 [ 1161.133421][T25415] vfs_write+0x482/0x9a0 [ 1161.137727][T25415] ? file_end_write+0x250/0x250 [ 1161.142716][T25415] ? __fget_files+0x3fc/0x460 [ 1161.147536][T25415] ? __fdget_pos+0x1d4/0x360 [ 1161.152179][T25415] ? ksys_write+0x70/0x260 [ 1161.156657][T25415] ksys_write+0x14d/0x260 [ 1161.161043][T25415] ? __ia32_sys_read+0x80/0x80 [ 1161.165914][T25415] ? lockdep_hardirqs_on+0x94/0x140 [ 1161.171165][T25415] do_syscall_64+0x4c/0xa0 [ 1161.175638][T25415] ? clear_bhb_loop+0x60/0xb0 [ 1161.180362][T25415] ? clear_bhb_loop+0x60/0xb0 [ 1161.185085][T25415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.191032][T25415] RIP: 0033:0x7f1e7879e159 [ 1161.195484][T25415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1161.215164][T25415] RSP: 002b:00007f1e79666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1161.223631][T25415] RAX: ffffffffffffffda RBX: 00007f1e78a25fa0 RCX: 00007f1e7879e159 [ 1161.231652][T25415] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000c [ 1161.239730][T25415] RBP: 00007f1e7883506b R08: 0000000000000000 R09: 0000000000000000 [ 1161.247825][T25415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1161.255843][T25415] R13: 00007f1e78a26038 R14: 00007f1e78a25fa0 R15: 00007ffcac672438 [ 1161.263868][T25415] [ 1161.266915][T25415] [ 1161.269267][T25415] Allocated by task 25415: [ 1161.273708][T25415] kasan_set_track+0x4b/0x70 [ 1161.278349][T25415] __kasan_kmalloc+0x8e/0xa0 [ 1161.283065][T25415] __kmalloc_node+0xb2/0x240 [ 1161.287687][T25415] bpf_map_area_alloc+0x47/0xe0 [ 1161.292697][T25415] prealloc_elems_and_freelist+0x86/0x1c0 [ 1161.298458][T25415] stack_map_alloc+0x386/0x510 [ 1161.303257][T25415] map_create+0x524/0xff0 [ 1161.307627][T25415] __sys_bpf+0x38b/0x780 [ 1161.311940][T25415] __x64_sys_bpf+0x78/0x90 [ 1161.316393][T25415] do_syscall_64+0x4c/0xa0 [ 1161.320847][T25415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1161.326808][T25415] [ 1161.329166][T25415] Last potentially related work creation: [ 1161.334908][T25415] kasan_save_stack+0x3a/0x60 [ 1161.339716][T25415] __kasan_record_aux_stack+0xb2/0xc0 [ 1161.345144][T25415] call_rcu+0x14f/0x950 [ 1161.349349][T25415] nf_nat_unregister_fn+0x1d9/0x360 [ 1161.354599][T25415] iptable_nat_net_pre_exit+0x5c/0x90 [ 1161.360021][T25415] cleanup_net+0x58e/0xba0 [ 1161.364476][T25415] process_one_work+0x8ab/0x1160 [ 1161.369455][T25415] worker_thread+0xaf5/0x12a0 [ 1161.374254][T25415] kthread+0x29d/0x330 [ 1161.378349][T25415] ret_from_fork+0x1f/0x30 [ 1161.382806][T25415] [ 1161.385274][T25415] Second to last potentially related work creation: [ 1161.392119][T25415] kasan_save_stack+0x3a/0x60 [ 1161.396859][T25415] __kasan_record_aux_stack+0xb2/0xc0 [ 1161.402273][T25415] call_rcu+0x14f/0x950 [ 1161.406514][T25415] nf_unregister_net_hooks+0xc7/0x130 [ 1161.412055][T25415] nf_defrag_ipv4_disable+0x91/0xe0 [ 1161.417297][T25415] nf_ct_netns_put+0x2d6/0x510 [ 1161.422146][T25415] nf_conncount_destroy+0x3d/0x150 [ 1161.427327][T25415] ovs_ct_exit_finish+0xa1/0x210 [ 1161.432309][T25415] ovs_exit_net+0xe9/0x7a0 [ 1161.436764][T25415] cleanup_net+0x703/0xba0 [ 1161.441674][T25415] process_one_work+0x8ab/0x1160 [ 1161.446659][T25415] worker_thread+0xaf5/0x12a0 [ 1161.451376][T25415] kthread+0x29d/0x330 [ 1161.455480][T25415] ret_from_fork+0x1f/0x30 [ 1161.459936][T25415] [ 1161.462283][T25415] The buggy address belongs to the object at ffff88807c732d00 [ 1161.462283][T25415] which belongs to the cache kmalloc-cg-64 of size 64 [ 1161.476633][T25415] The buggy address is located 16 bytes inside of [ 1161.476633][T25415] 64-byte region [ffff88807c732d00, ffff88807c732d40) [ 1161.489779][T25415] [ 1161.492167][T25415] The buggy address belongs to the physical page: [ 1161.498682][T25415] page:ffffea0001f1cc80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c732 [ 1161.508874][T25415] memcg:ffff888027780401 [ 1161.513177][T25415] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1161.520782][T25415] raw: 00fff00000000200 ffffea0000bbcc40 dead000000000003 ffff888017442780 [ 1161.529592][T25415] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888027780401 [ 1161.538222][T25415] page dumped because: kasan: bad access detected [ 1161.544682][T25415] page_owner tracks the page as allocated [ 1161.550430][T25415] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4713, tgid 4710 (syz.4.79), ts 106260017930, free_ts 106229146479 [ 1161.568547][T25415] post_alloc_hook+0x173/0x1a0 [ 1161.573366][T25415] get_page_from_freelist+0x206b/0x2180 [ 1161.578973][T25415] __alloc_pages+0x1ec/0x4f0 [ 1161.583641][T25415] alloc_slab_page+0x5d/0x180 [ 1161.588368][T25415] new_slab+0x87/0x2d0 [ 1161.592482][T25415] ___slab_alloc+0xbc5/0x1240 [ 1161.597204][T25415] __kmem_cache_alloc_node+0x126/0x270 [ 1161.602712][T25415] __kmalloc_node+0xa2/0x240 [ 1161.607345][T25415] kvmalloc_node+0x6c/0x180 [ 1161.611905][T25415] unix_prepare_fpl+0x269/0x480 [ 1161.616808][T25415] unix_scm_to_skb+0x317/0x4e0 [ 1161.621636][T25415] unix_stream_sendmsg+0x454/0xa70 [ 1161.626889][T25415] ____sys_sendmsg+0x5ed/0x9a0 [ 1161.631705][T25415] ___sys_sendmsg+0x2a2/0x360 [ 1161.636404][T25415] __se_sys_sendmsg+0x1c3/0x2b0 [ 1161.641351][T25415] do_syscall_64+0x4c/0xa0 [ 1161.645792][T25415] page last free stack trace: [ 1161.650472][T25415] free_unref_page_prepare+0x8e5/0x9e0 [ 1161.655970][T25415] free_unref_page+0x2e/0x3f0 [ 1161.660673][T25415] __vunmap+0x874/0xa40 [ 1161.664850][T25415] free_work+0x56/0x80 [ 1161.668940][T25415] process_one_work+0x8ab/0x1160 [ 1161.673902][T25415] worker_thread+0xaf5/0x12a0 [ 1161.678601][T25415] kthread+0x29d/0x330 [ 1161.682681][T25415] ret_from_fork+0x1f/0x30 [ 1161.687119][T25415] [ 1161.689485][T25415] Memory state around the buggy address: [ 1161.695128][T25415] ffff88807c732c00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1161.703315][T25415] ffff88807c732c80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1161.711393][T25415] >ffff88807c732d00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1161.719465][T25415] ^ [ 1161.724850][T25415] ffff88807c732d80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1161.732930][T25415] ffff88807c732e00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1161.741011][T25415] ================================================================== [ 1161.749098][T25415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1161.756304][T25415] CPU: 0 PID: 25415 Comm: syz.4.5069 Not tainted syzkaller #0 [ 1161.763775][T25415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1161.773850][T25415] Call Trace: [ 1161.777143][T25415] [ 1161.780260][T25415] dump_stack_lvl+0x188/0x24e [ 1161.784971][T25415] ? memcpy+0x3c/0x60 [ 1161.788980][T25415] ? show_regs_print_info+0x12/0x12 [ 1161.794199][T25415] ? load_image+0x410/0x410 [ 1161.798763][T25415] panic+0x2d3/0x710 [ 1161.802859][T25415] ? bpf_jit_dump+0xd0/0xd0 [ 1161.807403][T25415] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1161.813338][T25415] ? _raw_spin_unlock+0x40/0x40 [ 1161.818201][T25415] ? print_memory_metadata+0x314/0x400 [ 1161.823681][T25415] check_panic_on_warn+0x80/0xa0 [ 1161.828647][T25415] ? __bpf_get_stackid+0x6c9/0x920 [ 1161.833779][T25415] end_report+0x66/0x110 [ 1161.838048][T25415] kasan_report+0x118/0x140 [ 1161.842589][T25415] ? __bpf_get_stackid+0x6c9/0x920 [ 1161.847727][T25415] kasan_check_range+0x235/0x290 [ 1161.852723][T25415] ? __bpf_get_stackid+0x6c9/0x920 [ 1161.857861][T25415] memcpy+0x3c/0x60 [ 1161.861693][T25415] __bpf_get_stackid+0x6c9/0x920 [ 1161.866830][T25415] bpf_get_stackid_pe+0x33f/0x400 [ 1161.871879][T25415] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1161.877353][T25415] bpf_overflow_handler+0x6d1/0x790 [ 1161.882573][T25415] ? bpf_overflow_handler+0xd9/0x790 [ 1161.887969][T25415] ? perf_swevent_overflow+0x230/0x230 [ 1161.893459][T25415] ? ct_irq_exit_irqson+0x113/0x170 [ 1161.898686][T25415] ? __perf_event_account_interrupt+0x187/0x280 [ 1161.904990][T25415] __perf_event_overflow+0x457/0x630 [ 1161.910761][T25415] perf_swevent_event+0x315/0x570 [ 1161.915818][T25415] ? perf_tp_event+0xc10/0xc10 [ 1161.920612][T25415] ? is_bpf_text_address+0x22/0x2a0 [ 1161.925917][T25415] ___perf_sw_event+0x498/0x6d0 [ 1161.930798][T25415] ? unwind_next_frame+0x1719/0x1fd0 [ 1161.936105][T25415] ? ___perf_sw_event+0x184/0x6d0 [ 1161.941240][T25415] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1161.947679][T25415] ? __lock_acquire+0x142d/0x7ea0 [ 1161.952741][T25415] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1161.958751][T25415] ? lock_chain_count+0x20/0x20 [ 1161.963626][T25415] __perf_sw_event+0x135/0x260 [ 1161.968414][T25415] do_user_addr_fault+0x497/0xb20 [ 1161.973490][T25415] ? trace_hardirqs_off_finish+0x86/0x180 [ 1161.979236][T25415] exc_page_fault+0x60/0x100 [ 1161.983848][T25415] ? __might_fault+0xa6/0x120 [ 1161.988565][T25415] asm_exc_page_fault+0x22/0x30 [ 1161.993439][T25415] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1162.000139][T25415] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1162.019786][T25415] RSP: 0018:ffffc90006227958 EFLAGS: 00050206 [ 1162.025867][T25415] RAX: ffffffff8414a101 RBX: ffffc900062f9000 RCX: 000000000000de73 [ 1162.033859][T25415] RDX: 000000000000fe33 RSI: 0000200000002000 RDI: ffffc900062fafc0 [ 1162.041845][T25415] RBP: ffffc90006227a90 R08: ffffc90006308e32 R09: 1ffff92000c611c6 [ 1162.049835][T25415] R10: dffffc0000000000 R11: fffff52000c611c7 R12: 1ffff92000c44f83 [ 1162.057835][T25415] R13: 0000200000000040 R14: 000000000000fe33 R15: 00007ffffffef1cd [ 1162.065859][T25415] ? _copy_from_iter+0x1d1/0x1130 [ 1162.071020][T25415] _copy_from_iter+0x2a9/0x1130 [ 1162.075924][T25415] ? __lock_acquire+0x7ea0/0x7ea0 [ 1162.080975][T25415] ? copyout_mc+0x110/0x110 [ 1162.085588][T25415] ? do_raw_spin_unlock+0x11d/0x230 [ 1162.090811][T25415] ? _raw_spin_unlock+0x24/0x40 [ 1162.095701][T25415] ? find_vmap_area+0xf8/0x110 [ 1162.100490][T25415] ? __phys_addr_symbol+0x2b/0x70 [ 1162.105544][T25415] ? __check_object_size+0x4f6/0xa70 [ 1162.110850][T25415] netlink_sendmsg+0x755/0xbd0 [ 1162.115647][T25415] ? netlink_getsockopt+0x550/0x550 [ 1162.120864][T25415] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1162.126435][T25415] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1162.131740][T25415] ? security_socket_sendmsg+0x7c/0xa0 [ 1162.137226][T25415] sock_write_iter+0x2d5/0x3e0 [ 1162.142043][T25415] ? sock_read_iter+0x3a0/0x3a0 [ 1162.147023][T25415] ? common_file_perm+0x171/0x1c0 [ 1162.152080][T25415] vfs_write+0x482/0x9a0 [ 1162.156351][T25415] ? file_end_write+0x250/0x250 [ 1162.161317][T25415] ? __fget_files+0x3fc/0x460 [ 1162.166044][T25415] ? __fdget_pos+0x1d4/0x360 [ 1162.170658][T25415] ? ksys_write+0x70/0x260 [ 1162.175189][T25415] ksys_write+0x14d/0x260 [ 1162.179543][T25415] ? __ia32_sys_read+0x80/0x80 [ 1162.184441][T25415] ? lockdep_hardirqs_on+0x94/0x140 [ 1162.189674][T25415] do_syscall_64+0x4c/0xa0 [ 1162.194110][T25415] ? clear_bhb_loop+0x60/0xb0 [ 1162.198816][T25415] ? clear_bhb_loop+0x60/0xb0 [ 1162.203601][T25415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1162.209889][T25415] RIP: 0033:0x7f1e7879e159 [ 1162.214329][T25415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.233952][T25415] RSP: 002b:00007f1e79666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1162.242395][T25415] RAX: ffffffffffffffda RBX: 00007f1e78a25fa0 RCX: 00007f1e7879e159 [ 1162.250386][T25415] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000c [ 1162.258380][T25415] RBP: 00007f1e7883506b R08: 0000000000000000 R09: 0000000000000000 [ 1162.266395][T25415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.274474][T25415] R13: 00007f1e78a26038 R14: 00007f1e78a25fa0 R15: 00007ffcac672438 [ 1162.282647][T25415] [ 1162.285851][T25415] Kernel Offset: disabled [ 1162.290203][T25415] Rebooting in 86400 seconds..