last executing test programs: 6.567168246s ago: executing program 1 (id=1695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb193, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x51}, @jmp={0x5, 0x0, 0x2, 0xb, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xf8, &(0x7f0000000300)=""/248, 0x40f00, 0x5a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x3, 0x7fff, 0x80000001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r0, r1, r1, r0, r1, r1, r0, r1, r0], 0x0, 0x10, 0x3ff}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='memory.events.local\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r3, 0x36, 0x1, 0x8, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0]}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095", @ANYRES32=r1, @ANYRES8=r0, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = openat$cgroup_procs(r4, &(0x7f0000001a00)='cgroup.procs\x00', 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000000900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000a702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000400100008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x24}, 0x94) r8 = syz_clone(0x240800, &(0x7f0000001a40)="31a2a32360426a0368934087f43ca9cdc7db98703e71bf7ee6cfdf907913b78a44e5b6cb839caa2eb219e96e78757c36dd80ec5054b61d3b5f0bab69e71e026655573bbfcd7b0f506c1c1137d16421279649a8d3d372e2f8f3fa398510bee86d4d90e3e8b435b95eb48089ab08047b12f6dd3e1f1f61da1110dedfec10214411cece8519f4edc1127b9f43f0b5f7ab0f96051efe250479debdbd3e83adbc3d087bdaa025aad34f77d5895ce0fae23115e79f1676c06725972b41533bc6c5bbcc888e06796d94f38d51a1ca2848676bacb70aa524", 0xd4, &(0x7f0000001b40), &(0x7f0000001b80), &(0x7f0000001bc0)="c2718f16669d068d7dd5109152cb02f92554d28d6221b59d3c1b1f27468b03a8e5e269c325cbfad94cfee772bab79589ff8e9d052f4b2f23ad1170628c88b8dbc432dd6c38c57e0ca157e302a28aa4cbc5201eb8682e5e33418f0d65d7582c59d40b5a0f2032a9c057848aa9d22e204fbc0271e5efd4f4611cf51fd07030b1587a9490d123dd83ce55273539b8bee57d51df01fd839174b6860b864ba07981db5065e540e17e5f92865e98") r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000002c0)=[{0x15, 0x0, 0x1, 0x9}, {0x1d, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x4000}]}) sendmsg$unix(r3, &(0x7f0000001d00)={&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000700)="c2", 0x1}, {&(0x7f0000000a00)="0cbc531e6bcce76d5881a99634f090bf5c7bdb1291464bdfcbfd22df91989b2047b5464e6edbe5b9c32dbe801775eed944b6284c54dc87788c6d958f202047af126096f8164a50106cbc7f3ae8597b04f2dd303234610436e50e00ddb315269fcd89942379d45890e5303f18a4f3408b7a1102ac7545466f346f480c997a19fb4d0641671dbc81dc2f7fe99aea561b0ac440939fb0f9302cd6ef0e09495056f383e24a4cfa0ca58243e96a72a170fa49e2938879c0a6a53e76f43ea2b9fe661b051fcc1e7d1444bb16730c37792f5d5d64cf84499ce4fd8fcf1956f1c69c265dd875401e33fa5218f393547a592f2260e59a457bd1587773450233ad0e384f772aa48cc1ca1d72d7e223a66671f208a0c00b79ebd96f2b4f20982a7656f9491ee9f0cbe7db3d9e6d1edbe75aa2fdb39f8603b9cd278388af46ae84d0a38f724e080e984e8b01262fbdda6280dc6176d46af2fe9c6e54c475b03f45f53bab5272040ae2c7ebaecbd046cf51b0bdf5de6cb796eaf941bf7e7039870e239f12fc83035bdd1942146f2d14edd109b751f211d78ef277c27258ea69867d36b52c820be30595f53e5b4420fe0177e26b07acd5d04bcff2512ca83a183b635b9a74e1e448b4e29f4a834daf1cf907f0ce31dd1fec71df059c58d36993e1ca4ad2dc1822b90526d1d15dc64f9954a9f3fa8096e6d19d54ae09c6664a42a2affac28117181938f1189389f6e9e7e2142c73a89aae485b5c3aa591e8c7c044d83244cbdef2579b8344078c1f84ca3a85258ecf7fe668d91a0dd8cff19f8e88aa433ebda68f31112bf209bf0391b93bbda192ed95287bd68b14c9b933e177b8db2402b1ed8390be106a6955c11cf759d67ae6cb6aafeedf1c730e368e97cd68aee24959162622fde459d52678419ef70825998eec413a2ca731f5c98cfb9aa97cf12aff0005726e8709c21383c5a7e8c0658f313075e81438ca574292292fffdf2af891a7795f656f49c7a9bd8e6b5853074eda005bf64a6057e591f2811e6406a16ae72d2b252dd9fdc11e3503e87d7bb4a1ede7dd624ca4d7cb018a9d3fa85df343517419c81bea4fbbaf48a934ad15506abdcaf9aca1b1b1be38c76ddd2584cd2bd9c3a0cd1479da4ee94cff3bcd7b5162a12842c2dce51f29051cee9e202b4cc1b52d585ca9f84e072be8e532e3020472611d8b2a768dfc4b81324893ede8ccdae265c0cd079855323b9116051e1e4d170b52ae8e0aaae9d994a5e2b421d02c742fe953a0b9c6f8b1aca4ad73b5c251e0fcf89c2adbca0cdc5dd6bfef22c8abb40bdcf450d27b33331bf84ad5fc295853a1d36af7710af55d87883305ecdefb10e1a33580cadc23792312d8f880af9c20d7fd5e10495fb008461af615797cf3194b5e03b7d364a26b55be066eef6ebef25df904ba18a59c701a099e8965b331e123f9cbe2f842e2330f21889eb68bc9faef264565980e3b7c63ea61e59708afc54ca113ae8e41fc340be7e467e51553ff09f8b012ad1916332252e0e006174e2e7ac3e147e8aeb67def55b542471426cd579cfff5b05802146e752a87e2ddc5858a7a37c31b8f2085426a192ba81a5b747490ad1b29423de71b03515add506318f6fdaa49114eb176f918701c3a465ffcf316522cbbc79fc8a24b33351df9010e868c29ae55ced4cbdfef90faadc35b99493457cbdbe744ec67fd7003b1212c0a4124642908db734b1fa37f8ddc67c4c77a9092149c3eea5a07bae041a762f8f636fd205cf5a334d78187b9ee1e9e1581058c982f5e055a6bf85159afebe198bdf2626c72412168aff3e0b08749cb42621299e2e01bc29a25c53950877ee1835aa16985aad4e1d5e539f255ba389e568ac5a8975e0ee5278d268c06496e87803b2c341eddecabdb3568253b5d5cbab93c1658262eecc079b8088c945ea03b57774171641ae00013b15d18a9d79d334783508426d975cd4d594daf483faf76453438155ec294049126331a3e1ed52fb2054138bf872e3177b692e8b790478607142a4b72fc2409cfcab0877e1638216c632c11b7a03b511955fe28827de2799d3dfe0a015f64311a7f7d7d038e21fe39375defb26ed3f2b508f10158a05d08dbf4b0cd314cdb95ef97feb42d9504f843f5eed327fb26017f92ae4077dbb6c952215dfadc6baa91397564432755d943353a915d59dd7d377eef3827e69d6545db24064719adbc3f3bbd379e32d1371a025a580079cf0a85ea1b003008cf372bb7a2e8c85f6bc2b0517d4c2cfaf5b72c79dd3430ee3683881bf53e07aea1118d9cdc35e13a1e71cff389da902b4be96935479e87d6fd291c7c779cbffd40e04df894246432b51b7101594132172d5503754e2de8270bdbab37b37913fb4436245d2dc92380a835e5af670b482bfea46e535eb02a412354261d3e3fdb0f61f4fda7f6dd64d5d32f5cd75bbf18532b973eed12ceac252ba2a1183582cfd7e0de85162f350739c3bd8568ae21611e93e7bc05ce0a03faec137a5e92e331ea4b8e0507ca8218817dcafbcd5f813f3b249f12639c55b5c6b853ef7ea073d446d877054e765ef58761b9f1839e93b8b4c2042a0c56b4985cb6eba69a437718dfd93430113858785c6f723e5d6ca3b91f266d4cacbd2f81f8be711c1c49cea5dce5d750ea6c3fa1a33057eb380ed6ef8ef86c53efae7517c156e00bf4b9c22b18a92c6cc4d7b02332aadefe01b669f27a35df36d7bd3cbcc2409a42fe28e5477b85b4d53ea1824bc513b6b6e09fd8b47157ffef607385ef516c69af9eb7f3a0a6cb3afce595cf1545222467d87b56e8b2ad943c81f87a043d4aa07db5250b085703a1dd7326272c6eba2f33c84c50c1edad10918a5768f58e68f5353cfa97d8f26619eed1301a7dff1ff5e3440e196148226dfa6934db39b8bccfe450cc8803bc1e9e3d4f62a656152ae96e6ffb1d766268d6b13dab6511635b536ef974a0eb5912cbdf1ebd24e5e5384bdb3d99f8a5aee3d27725ff0b80748370f2d00bad1b95d6f0c06d09b80beda350aa92808cf5fbb6290c8a7bca997f2067d6db7036bc8cf43e4878f6f68ec57e951cc82c57f5fc50c42ec71dd82af33c30c91a01e671c1b16196d9c0869b2884f1ebbf4b55e03d32b12eb373d27182499cd2ac1ea6875582e59bcc9655c00ec33b5d3978481eeb8f356f43831da5136e3ea0de753b542992fa8cd0a55cadb958bba2d6f7572236ac07162ba00e4f384a6566e642604b0524d26dbf537ae89dc44da49c4842c2d797d46d4c825a5ca05345132184ea29c33c2015f14798b10de818a64010e4dc2f545c8b501d0ecc81b7cc02a3f2cbf55741edede072b39ed421e0bb1d1bd5be7e40cfd0ae28c01ed2f9b2aa6d20cbe2f13de9d941a7178dfd3f7e3e51514ae84034e8535dc3bf7ec44192ce4a0555d2cd72bb7882e97051fa3811eb756e29eb7e911f4a9e2d8e5344b0242f5f404437ce3080d5671f963599667b8d35bdba05982ffe0d5408427e5a99a00d358ef032c614839b9bf31476a1da34d4e0820d3480c2d6d54a42ae1616eece3016fca361c818fcfa47f3a74f50f16c3f564867b68a08c9d24a0c621eee549bbacbbc3ed2a8eb8245b8aeecd462ef014505bff6d1a3051432e14443cc550774eb5b8fe8e98d1193ba031c989f7ec4bb1e8e776d9dd65779a10d6c4cd5fbad65cecb4b183ce0d031d0b2774a7d86b1ea944ef3b3b8a367d2774548684106ca561cb6b4f3c825982ea001c9a6bf3dc7dcf7b9878213045e38530e1de1d04acc23cf0ada550707de7237b50419d4a8aeaf01ca687cb73ba424f924e8fad4ad4ea70b5f155982fd4a703d07c212748b908c62c857e6f21aa1a8a5d4739f0bb80a584b98e2d94fdb88f06b170c142f21aa43328ec283ece8f0200e17658c939609b10f45173f9a29be0a4ecb41d17394ab0b975c6ef19fb18c47c318201e9b8c80bb87413db92967eb9fa392d0a88aa2df3f5b05209d7b05591936b88b206e1dffc1ad64ab474c5488a0e0c9360551909164ad64a4aed478c381d63e20c2ab0dbd659993cacb9630d1e449476a19052eb7503cc5236e4ee8e7e75d70c0c682c7eb17d1d7af3fb9dd75d592cbc0310606546ef265f976cb5ff9067b225b25461383dafd7ba3b145502474299aa6ceeeb8627363dfefb6845b646ac255c4d09b8b74b053f4955ed4f92892046cd787cff58d0ac52635d4d7c2cc1a1f66c8e1e56d3e3af9839339d72f047be94dec019d4a3748aa9de3cb1984c3dc4d2fd68ad871b3798e38e395515ea468a3f787b787cca8f4267d6e02be2b4808a97b5a941523b9db6ad7a0a5c0d03161aee3ae55b701070ef145fc42525865f8f4abd54f022443ed75e9f653638f88f5b429cd01c14952d3a23072e0c70e2b5deb22774c1c3f5ec17ba9070576ec74bdc9cae670139d7afcbce2fa80559ffaa32f56a989075ac9721bf903f516396b2d9f0b5c952971c9311c90ce81e2bef1a8b6d70e8d860d7a40ca824de204dcf2b40998bbfba40bcea16974e840889dc9c68295e77cca9c1e313faff82b96558d341c3a9f41574c7509ff47a74e023ccba0d84dd4198e994baac1791afdf970f06d1ce90c881fac4935f38106a73e35675789072fbc4b6a6d065384f3ead2f7f7fb915249aa338721b543f7b59bd0f6839d8c8bf15c64d673b3543cd7f000089c86106b8ece1fa6b01ba3c2bd92c06178d7362283ba0dc15a52a7d31e4c1eda48d11000c00570ad68767b376ce23b53b0970c19b56197cbfa6119b96f0d0a85197a292cf3eae1c84bf61de99ba7b6033338d5e9e981fc9458013ef99c23e8413e9d3600ff342ce79a24783c967ffa7053a1e62a2bcbb228337696c8d81ad56b5fd271eddc5f1d177228a46f31215bc75ec9f22a5a66086171683534407e705981130decafedaa82ed5af6621d46147e3ceaa4dc012209436446e0ae86612b78125d6b997fda1fe2083e0fbaf0e55df3766c90770f539ba28646b097324cf762aa91f22fd61e74aeded1e5423b77463661ba505523e435a73874a9d9558a94f888870a6413c151f1e038da8a10afb3cc23bcedd84d733b5ee1a99f37fb95c2c4dc622523232004440a04f08a9f37d1e1b79600e68b98762426f7af5fccbe41dfbc548e94d13d2d40c021df88bb2d38538ec2f583c0090e9ba3b5cebe8e5b78e865e21b843ea08303a249473b3bee7c4e3932490b4f02596fd40f0e6e8ff90f836508cab32bed1504fcd5a709a99f2901c94bf4e93af89f7cd9edd2ac74a80ed0852794d89a6d03835e2d4a30b4961e6afdb16ab775b64773f40853fa5834807fabdbf601712b94d37480d7ae2f69201d21c8347a2605e89a23d3c05d9df5c250a780044b72b35f6a44efbb99d7bae9c1282c26d9aca1bb92df1e81dd6ed2ccd46a7df5f0977a31abb137bc512858c6609961d5de7da15a9d9ca2b2f5880a1fa33a3fa5f9606c208493d52ba5de39cb2a1c656954df6e8b724b5e89e375712ec8dc48e84a91be2097da6aee65fa9db4c47d49e080f03513a0f4145db678bb36d5d99f2e8451e0b0beb647778c514ebcf0c09c049e3e4c62dd56491d658759c9c52049330910c0afc1e650477b51ca4dc01a72218014c3b81066158e1616b325437bf277e8d31bc1ea72f7d66d542bab41085b107d5a97015c849d26e7549dd75d0734b169eba29ee1986d45ea7a53a4d420910622cd2454c74a0b49afc905d580ef92b511d9441d5ac3c742f27ff9bd20199aaa5fb17b15d0d27a23fb1847146bd53619d6c65623a8", 0x1000}, {&(0x7f0000000740)="9e24825009be0f5af612a1bd96f291e643b254d0d8be04fa54b99d8363dcac5ca3dae5fe9510cab7b44dfc0fa6cb446c5ef1d69c75bb0f954073541c694430a1c45bbca890822d9e0b2ec666580c844444ef8f953d4c87adf3414227f4d9ce9f6e652c885991c6787cf88d3e9268567f732113139953e5bf28bf43916de246d3bd", 0x81}, {&(0x7f0000000800)="805b2130bea287e5d6b996b0143993aa0a14a907f3be42037931469e4a444f06b305717538f2e2b664a041b565c9cc13112424df4f1edd9aa3a5cc", 0x3b}, {&(0x7f0000000840)="d0ec11905140006b451172f0a6dcd5e489d70adceb44320fe329509cf114f24ff2069ecbe47bef0a78c0f7479573b69a8dc94247ae7345ccb5fe74fd1daad89236b2111c3fed8e8d0eca18b141d0d9d3a501fbe5b511cc22a6743217ca3f16acd371f1a1f37e205aa237a6369d09fa989d36a51514152968ac66549686dd4418db98c5a1e2e941e12ee7fc88c50e0f962790130d781d368660721790c8d56c9cb6ef2e9e22662a949ce0c3968bc3287985cfc39836c0d8e81812d26793fb5dadec3d30ffbc3a9f974ab5dccb6b2a492fcb2118c944", 0xd5}], 0x5, &(0x7f0000001c80)=[@rights={{0x34, 0x1, 0x1, [r3, r6, r7, r4, r4, r5, r1, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xffffffffffffffff}}}], 0x58}, 0x20000000) 6.258489581s ago: executing program 1 (id=1700): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x20, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x2, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 5.844865482s ago: executing program 1 (id=1702): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x20, &(0x7f0000001540)={&(0x7f00000004c0)=""/110, 0x6e, 0x0, &(0x7f0000000540)=""/4096, 0x1000}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0x1, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001700)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf74, 0x0, 0x0, 0x0, 0x7f}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x1a20, 0x10, &(0x7f0000000080)=""/16, 0x41100, 0x15, '\x00', r0, 0x1b, r2, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x5, 0x7, 0x67c}, 0x10, r3, 0x0, 0x2, &(0x7f0000001680)=[r4], &(0x7f00000016c0)=[{0x0, 0x4, 0xf, 0xe}, {0x0, 0x3, 0x7, 0x3}], 0x10, 0xffff59ff}, 0x94) (async) r6 = perf_event_open$cgroup(&(0x7f00000017c0)={0x2, 0x80, 0x3, 0x3, 0x0, 0x1, 0x0, 0x7, 0x4008, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x2, 0x7}, 0x810, 0x1, 0x9, 0x4, 0xffffffff80000000, 0xe, 0x3, 0x0, 0x9, 0x0, 0x1}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000001840)={0x1, 0x0, [0x0]}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001980)={@fallback=r6, 0x2e, 0x0, 0x9, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@map=r4, r5, 0x32, 0xc, 0x0, @void, @value=r5, @void, @void, r8}, 0x20) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x8ed, 0x0, r4, 0x5, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a80)=r1, 0x4) (async) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f0000001ac0)) (async) mkdirat$cgroup(r7, &(0x7f0000001b00)='syz0\x00', 0x1ff) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x4, '\x00', 0x0, r7, 0x3, 0x3, 0x5}, 0x50) (async) r11 = syz_clone(0x20000, &(0x7f0000001c40)="bb3ab75de72322db9c364b931dd321f61ff71f2ebbb3a82bfc65ab7cf81495d1581a6fed93d697816ea2a1a02e53c3d94ad868588dc5dce633f70523852b3992b6d0bae9b22d20f2d1256303a718aec940e126ddab5de02ce5d862755add7cb84b68460173cc1d26a3c6831cb60ab756adc8457adbd8bb22997774b61a61646f5f420f69aa681bd91bd28cc579bfa62a371558596db5b0f129d09b42d7880e06d000a5fc17bdb4ec2b1ea26af41adc355334b9ff0356d54eb0ba62fcf0eed15a1c698e6b7539f2e346d3af261723879f227ff01d2fd04997389facade34bffaed63fc947264ecfea1505d5c3b8", 0xed, &(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)="29769da11216b6b5") r12 = perf_event_open(&(0x7f0000001bc0)={0x3, 0x80, 0x8, 0x81, 0x4, 0x71, 0x0, 0x8, 0x8, 0xa, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xda58, 0xdf65f7cec47284ed, @perf_config_ext={0x1ff, 0x7}, 0x100, 0x0, 0x101, 0x8, 0x3, 0x8, 0xfffc, 0x0, 0x9, 0x0, 0xde}, r11, 0xc, r7, 0x9) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001f80)={0x1, &(0x7f0000001e00)="20453193abd7ad4473a5e305a4f82d13fa6b3ae74490e09c96a54aee0e6fe632ef88addfbbc5cb574222e2dd6b3fdb0c8ac76b6cd3c1c809a5b1f7f08be4f8f1007d4d27b791b784063629fd1418e491a901ec9541bfedb26f5e941f3b5a933012a52fb4c99ee2aa527baa6f95de071ac4609b19b37c0e8cd6d94a2326c02f62ac934c7a8dfd0c06963b95c7c12ca2d65d0885bd68bfe86f8923101d267ff3780c83b5935aef1c57691451906b7eab08255c9477275a", &(0x7f0000001ec0)=""/184}, 0x20) (async) r13 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001fc0), 0x4) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000002000)={r13}, 0x8) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002040)={r7, r7, 0x0, r5}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x10, 0xf, &(0x7f0000002080)=@raw=[@call={0x85, 0x0, 0x0, 0x92}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x8d}, @ldst={0x3, 0x1, 0x6, 0x0, 0xc1cc4e8f6426e697, 0xfffffffffffffffc, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}], &(0x7f0000002100)='syzkaller\x00', 0x6, 0x7b, &(0x7f0000002140)=""/123, 0x1e00, 0x8, '\x00', r0, @fallback=0x2, r14, 0x8, &(0x7f00000021c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002200)={0x4, 0x10, 0x2, 0x400}, 0x10, r3, r14, 0x0, &(0x7f0000002240)=[r4, r14, r9, r10, r14, r14, r4, r14], 0x0, 0x10, 0x36}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002340)={r7, r5, 0x4, r15}, 0x10) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000002380)={r13}) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000023c0)=r7, 0x4) (async) syz_clone(0xa100000, &(0x7f0000002400)="b7fdde201bb3d4646fa9572c6d44b8976a7e3b6422ce547612c7fbfd42951b06d0248ba9126eeb7054bf04500cb844affc179e4ded912c5e61b842522e9f0367e0b52f0924ec54e241431f2f2751871eaf153a58ddb2ca5fa9a30b0f562929553a149219d9f023ddec62803ab92354b15f364854fbd27778a29f11ad9c67ac7a871c961173efbd6d7866b79819df07bf6a1fd066809f9a04c0f732d218a4b6762646f148cc3c35d80924dfac891ca01141e9de34af62f1f59f2a55d5a821c72e78e68687514946c308c9e6d41582b843", 0xd0, &(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580)="608bb24478c85e55dc058d778ef4050d9ed34d2efc404aa0e963f9189b642557d2bf4e684555e5733eaa0593e2c6a37fc76396698a735dbcce88ccb2a08e92efd13227ecb4519e275782ff0efe272fc95b1ef977b53f76c73529da4c7c483c772cc63742cc4354efae3aa54421f82034eb6b58ddeca7950d498c6263567d67321ac61f3254ec024ca5078a4b87623062319dd12a433a0ddee26c50d5de8fc46f8283b63f661031faabb8ac673c9ab5703b0db0c67cc02cfb71ed728e38d76e14c5c582e19e68ac8bc068c22e8943") (async) r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_ext={0x1c, 0x5, &(0x7f00000026c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x6, 0xa, 0xb, 0x30}], &(0x7f0000002700)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r0, 0x0, r7, 0x8, &(0x7f0000002740)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000002780)={0x2, 0x5, 0x4d5, 0x6}, 0x10, 0xe59, r7, 0x8, 0x0, &(0x7f00000027c0)=[{0x3, 0x1, 0x10, 0x9}, {0x0, 0x3, 0x8, 0x3}, {0x0, 0x5, 0xb, 0x9}, {0x2, 0x4, 0x6, 0x4}, {0x1, 0x3, 0x0, 0x5}, {0x3, 0x2, 0x2, 0x2}, {0x3, 0x4, 0xf, 0x1}, {0x1, 0x4, 0x9, 0x2}], 0x10, 0x808}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002940)={{r7}, &(0x7f0000002680), &(0x7f0000002900)=r16}, 0x20) (async) syz_clone(0xc0200, &(0x7f0000002980), 0x0, &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)="6f0345e2bbad79f0de4aad4f807be18c6a76116447720b514e647617c4cce4eed467694d2f6bea1928a8b1ca044c702fb7b5e01cb12065d89c08b1ccd335b9bc9dffcef99235a4b898a6cb24e39ed6bc25be74b2f5775c109edc3858613c25a42674172187da5ab3031a35069d2b9f3a9944522a9d26a98bf7eea2aa65d808e05a90752da77ede92aeed0a4aaef50f") (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r12, 0x2405, 0xffffffffffffffff) 5.727800347s ago: executing program 3 (id=1703): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188009ac0f000300", 0x2e}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 5.4564019s ago: executing program 3 (id=1704): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) r8 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r10, r9}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r10, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108d000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2a, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x87}, @cb_func={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc99, 0x0, 0x0, 0x0, 0xffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0xb, 0x3, 0x6, 0x20, 0x10}, @func, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x48, 0x2, 0x5, 0x3ff, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x45}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x7, 0x1000}, 0x10, r11, 0xffffffffffffffff, 0x6, &(0x7f0000000400)=[r12], &(0x7f0000000440)=[{0x2, 0x1, 0x2, 0xa}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x3, 0x9, 0xb}, {0x0, 0x2, 0x7, 0xa}, {0x4, 0x4, 0x7, 0x5}, {0x1, 0x1, 0x2, 0x7}], 0x10, 0x10001}, 0x94) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r10) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r10, r9}, 0xc) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r10, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f00000001c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108d000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r11}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2a, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xf4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x87}, @cb_func={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc99, 0x0, 0x0, 0x0, 0xffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x1, 0xb, 0x3, 0x6, 0x20, 0x10}, @func, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @generic={0x48, 0x2, 0x5, 0x3ff, 0xffffffff}, @call={0x85, 0x0, 0x0, 0x45}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x3, 0x7, 0x1000}, 0x10, r11, 0xffffffffffffffff, 0x6, &(0x7f0000000400)=[r12], &(0x7f0000000440)=[{0x2, 0x1, 0x2, 0xa}, {0x4, 0x1, 0x6, 0x7}, {0x2, 0x3, 0x9, 0xb}, {0x0, 0x2, 0x7, 0xa}, {0x4, 0x4, 0x7, 0x5}, {0x1, 0x1, 0x2, 0x7}], 0x10, 0x10001}, 0x94) (async) 5.320150767s ago: executing program 0 (id=1706): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff, 0x7}, 0x0, 0x0, 0x3f, 0x7, 0x80000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x10}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000a60000000000000080000000850000007500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x48) close(r1) sendmsg$tipc(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)="174a8a1c08079feec019b8c7abf2e5046bd0", 0x12, 0x24000840}, 0x20040089) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) recvmsg$unix(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000018c0)=""/241, 0xf1}, {&(0x7f0000001a00)=""/191, 0xbf}, {&(0x7f0000001ac0)=""/233, 0xe9}, {&(0x7f0000001bc0)=""/26, 0x1a}, {&(0x7f0000001c00)=""/46, 0x2e}, {&(0x7f0000001c40)=""/93, 0x5d}, {&(0x7f0000001cc0)=""/155, 0x9b}, {&(0x7f0000001d80)=""/4, 0x4}], 0x8, &(0x7f0000001e80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x2100) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x3, 0x0, 0x4000005d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8009, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1fffffffffffffd}, r4, 0xffffffffffffffff, r5, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x8f, &(0x7f0000000100)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) 5.104938548s ago: executing program 1 (id=1707): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x400) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x45004400, 0x0, 0x20010, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003740)={0xffffffffffffffff, 0x0, 0x48, 0xd0, &(0x7f00000015c0)="fb4fe6d3028915d5d94525148f21c4a73ca72d31043de37ec31e55612b3ab5ca9598f539e3c7f5bef376979f3575e7d8fabfc03dae260ff6ec4d426b1d1246506d313c5c14ce2171", &(0x7f0000001640)=""/208, 0x100, 0x0, 0x0, 0xfff, 0x0, &(0x7f0000002740)="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", 0x6, 0x0, 0x1}, 0x50) 5.102701878s ago: executing program 3 (id=1709): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x712, @local, 0x14}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) close(r0) close(r1) 4.672753389s ago: executing program 3 (id=1710): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)="d80000001a0081044e81f782db4cb904021d0800fe007c05e81156a10a0015000200142603600e12080010007a010401a8001600200002400400077c035c0400a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7eef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e101ce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9412dd09206da6f7ddef7b39b27ee", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018edff00000000000c0000000c00000002000000030000000000008c000000000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b23d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000003600)={&(0x7f0000000180)=@x25={0x9, @remote}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000200)=""/133, 0x85}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/77, 0x4d}, {&(0x7f00000003c0)=""/9, 0x9}], 0x8, &(0x7f0000003540)=""/154, 0x9a}, 0x40000000) 3.828863251s ago: executing program 0 (id=1712): socketpair(0x2c, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x4}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x4, [@struct={0x8, 0x7, 0x0, 0x4, 0x1, 0xefc5, [{0x4, 0x3, 0x8}, {0x0, 0x1, 0x6}, {0x8, 0x1, 0x1}, {0x7, 0x3, 0x401}, {0xe, 0x0, 0x1}, {0x8, 0x2, 0x3}, {0x3, 0x3, 0x2}]}, @fwd={0x3}, @float={0x3, 0x0, 0x0, 0x10, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xa}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x100}}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000300)=""/69, 0xd0, 0x45, 0x0, 0xffff}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x46, &(0x7f00000002c0)=r4, 0x161) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x0, 0x80000000, 0x4, 0x18080, r2, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @value=r3, @void, @value=r4}, 0x50) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4059, 0xfdb}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x54}}, {}, [], {{}, {0x5}, {0x28, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3.801611932s ago: executing program 0 (id=1713): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a001500040014260500000008000f0000000401a8001600200008801c000100a0e4e8e702ef52a98516277ce06bba519554e2686715dc86e5c9ce8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9a0000d5d9001901df60e1b6649682e1cace81ed0bffece0b42abf", 0xd8}], 0x1}, 0x4040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0xf9c, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1080, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x100e64, 0xc74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000fcffb6080000000000007b8af8ff00000000b7080000020000007b8af0ff0000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x13, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000280)) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0xfffffffffffffeb8, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810003a1180002478800000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) 3.528834076s ago: executing program 3 (id=1715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12118, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x1000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0, 0xa}, 0x11490d, 0x4, 0x400000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={'bond_slave_0\x00', @random='\\\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x82100, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e030023000b02d25a806f8c6394f91d24fc60040f03", 0x17}], 0x1}, 0x2404c880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb5, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYRES32=r1, @ANYBLOB="03000008210000009d7a393f99463c0f2e13f1425107a61df0f40a63c915cb9ddf8ab239342e9cc82f4cf61c2ea966c0af3181df401df8", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r10, @ANYRES64=0x0], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86f46, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xef, 0x2c}, 0x10001, 0x5, 0x82, 0x0, 0x4000000000, 0xffff0000, 0x1, 0x0, 0x1ff, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) 3.517066856s ago: executing program 2 (id=1716): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4081) socket$kcm(0x29, 0x7, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000480)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x16}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40012141) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)) 3.44735406s ago: executing program 2 (id=1717): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4a9}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r3, r2, 0x0, 0x2, &(0x7f0000000040)='{\x00'}, 0x30) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 3.304860977s ago: executing program 0 (id=1718): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0xc0, 0xa, 0x2c, 0x1, 0x0, 0x3, 0x58100, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x18152, 0x5, 0x3, 0x7, 0x5, 0x9, 0x9, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) (async) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0xc0, 0xa, 0x2c, 0x1, 0x0, 0x3, 0x58100, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9d, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x18152, 0x5, 0x3, 0x7, 0x5, 0x9, 0x9, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.303549577s ago: executing program 3 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40042409, 0x1) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg$inet(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ef", 0x1}], 0x1}, 0x48014) sendmsg(r11, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 3.265663028s ago: executing program 0 (id=1720): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x1, @perf_config_ext={0x400, 0x391ce2f7}, 0x1000, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000000080)=[{&(0x7f0000000740)="ed001dc6d5a52121fa7de47999a8a87e640e32536a763128f2b1f5190592594fcda047273762b73cd182b300f96199efa62faff3bdc1b8415b7e7c207cef1ae69562d46820f4be1d8ec9735ae6455462985f481d42f3ca507b9b5743a73a53d6a46ffdaa5315d917e08df085c3842761ced4981f69873825791c74616b0c06db173a55be0d0673c59ba12c5db2860651ec997eb0e2428f0853cc3b9cc1666878dd8a46185d84723919587cbdb60a33e605b71f0080ec4938409253d30d5763ade22e5e0ee83dc8f0ab1479ec35617b4fe2684894e0204124753992f0f2f2b3f4d3b83c486b26472e7907130dcd9b3f", 0xef}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x4a0}, 0x40000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="14000000210081043881c8050000000000030000", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x4f, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x0, 0x6, 0x2, 0x0, 0xb, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r2, 0x33, 0x1, 0xbb84000, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000e00)='syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e80)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="2f00000007000000041200009ef9023fdc8a4779a1735b2f275b8b41fa246b9bf96ea48b7044c0ee592f32da3c07170abff3bee80f82d7e599f0e671cf9f41f786fe6584fbf24147a0edccc33aa048d2c91bf4d9006bb3829b2c5cad3fbd6629ccbcf9ff33945ef310ee822ea33019810e0c0414fa2c23081f9002b56bc47e4756a9a94a8e1ff65bf8e33ee815247570bb73a5a16824578b93bea04673916b286ef415756474a58e0c6eefc3b036692b353ea1d972a3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000e40)={0x951}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)=ANY=[@ANYRESDEC=r1, @ANYRESDEC, @ANYRESHEX=r6, @ANYRES64=r4, @ANYBLOB="00908f04b71b86e4b765098db812cd970fa5d7a314973c24cef09bc24bc73b22936932badb1e4540a7b8524ef3222abe00fb222bd29eeaba372035a130c74d154333852f97882dd8072a1c8d8b0c81db11147a2033d268b75b36e289a879a83ccac20bb57215c386af58ff886271e83e9d89bfa3aad1228f918c441ba7f62431dc11dec76b0e2f34c022400ede6527da4d4af25909ca2cf3c978837e5c50e3eed8f95086944194b4c81bcfecf52aece9962e6b24d6", @ANYRES16=0x0, @ANYRES16, @ANYRESHEX=r4], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESHEX=r8], 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.260140619s ago: executing program 2 (id=1721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b000000000000f5ffffffffff7f000000000000e307fa100712439f648f8dc6e26200b95f1ffceee85b315c756ab442045e36c3f26742005171c1918836b5466c9781edb75d949283c3f2da5ff287cbb41d9f2e9e7d42efeeacbc84e442fb19a76fe2ca322c3a4346f79064b3a25571c7009bc4362e0b9df14d1d630680c3802f7849993c97cbb8ec6f85a8aaf450d0abc2ca372355f7495e4b77073ab1c375f62d065fd87a1ace8ca524badb958e6f610e78229a9058e9f03d61084a51765641e2a9e2844641c5f610e671f6d8e2b236", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="e06921e8682d85ff9782762f86dd", 0x0, 0xc7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.042698609s ago: executing program 1 (id=1722): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0ffffff0000000003000010850000002c00000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x355}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6erspan0\x00', 0x100}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa31086b876c0c0000007ea60264160af3653c001c000d0000008bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.935596625s ago: executing program 2 (id=1723): r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000300)}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000000780)=""/72, 0x48}], 0x7, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}, 0x10165) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040)=r3, 0x4) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x240, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0xae, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x4}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x2600c055) 209.916659ms ago: executing program 1 (id=1724): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) close(r0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800141, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8004745a, &(0x7f0000001200)) 156.657772ms ago: executing program 2 (id=1725): socketpair(0x1f, 0x1, 0xb657, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x424800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0x1000}) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x6, 0xfffffc00, 0x401, 0x5200, r3, 0x15307439, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0xa}, 0x50) sendmsg$unix(r0, &(0x7f0000000ac0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000280)="01c228c69facde4a7ecec71f67166ebc1c1ce1fed7a99ed4a501ebe022c9a6e5504ff3751db265ba06c5aef046898a001e4e0627a7ae0c30c023dd3551f52c764e7c48e0960369cea522769932fb32020db2bc9424edab88e087a456e45510bf5381ccfd94a376b469654b79de5e846e715760e0ceaaf134ee91611ab6f16595179eaa2c479be421c5", 0x89}, {&(0x7f0000000340)="d7a5ef7c61d070accc2bf1b7a4d514d6601bec7237e627fd66eff218c0d73f262c6cf15c5081001a9c8690bdbf82eef49b082579c6af145b418daac442f7cdb65298216430479ea7ef4ea4cbc403b16e4896b4d07cbb2411a37bb00b1c44505ded5431ad0714c22a792679bd47b744d89a74b6baae110338c7cf8c1c5dd592bc6770a7", 0x83}, {&(0x7f0000000400)="b172f2b0705fdc5c7475a29e21d75480ec90cdedb12b70370856d5a339a089fc047c0ab316b8a0bdfa36621519008e02c52bd626766e39be0016b461a76b71cd6d19dac1e2221fadd608ab10e2185a76a5bd6a74651615254a0e74822bd9d23a6f3be4a95c69551b73d689ad883b64241e6820359a7ea706a1f58cc35d76e05930c203222f887a756a5d4da4e553c843530dabfa85cfcced0c45415afaf0d2474d3869bed1769fc2821c1ad7e7caaeeb481f", 0xb2}, {&(0x7f00000004c0)="4f5dc43e4bfb9149c9e07a7c2c5011241ef0458b8a9cf930f0", 0x19}, {&(0x7f0000000500)="708ac7251a7d12971b53a5150095787b97c2f17cf47ff3c61e7622ca4a0363db4330c7ea693b20e0df5c495335575191b356c836930814f2d6a647675cb53e11e253a32f076ab60759e90d08a8474db887325c9d753732598a5b76f5aaeec89312612a802bf3ac10aa254c7922ac06b7db3100974eb833566c99b1eba92e99940dc5b80b60f1e7cd3d1f19cdfe343c757d6608490a1700056dd71a687c28c5af8cee4963622f040bb95f14ada78a6b4cc6162d655aa1853cf3ebb93aabf22839c7c56cf1d4abf00e9d587fa7f20585d878fb568265567044f09a521a4e729f44e1dbe0733adceb3c60", 0xe9}, {&(0x7f0000000600)="58220fcc17c9486207e0bedef43c602661688ba6c4c83533eafdb2c8622f8c7691c10a50b69b7c7ec9f092e8f83740174de7bd75e187b4093ccbbe1af38a687f1acc047d78c9", 0x46}, {&(0x7f0000000680)="eb2a147ce782c219e46bacd241018d798ad6cb456fc8ab98a354e60030f86ff40b1c2450ef9edd84636b5f5c02e267b9b9889047de8c24fcbfb0f20d38dbe8c7e23785ab1edb062834af3f7eaabd1df5234aefbddd41d2415cdf0c86be3617e7bd655c6fdb41f1217e21cd426a1834b9421f57da1011bbf1782d41ba400402041f293b6ecf79143ca94f9622ec8c9b9f19a29cf1549225ab7960421488a78f118181f9baae3b970268ab", 0xaa}, {&(0x7f0000000740)="606d988aa17eb873c62bec88e1da288a374ac9564fc2c50d03daab7d4078ed4c64c70a0d81b46bb89ad607bb994daae6f7beae5f680f160714df3ed51517fbb0214b4ab6fcd729523230e99434f6dea0582aa9fe4edb34cb71322e061523d5a5e20fe26e2975100d314ca3946198fde4661f7dbe1660683e9fb9453c8cc470c85613ed06a23878f5059e73fdde03214e7ed6e6ad80a6076aa8d7285f9af423d5234424e8c317e2f471105e79c5639547e151250916219604449d88806dc2602aee3d829ec5bf457de4e9386f37a8ff9f088d6cec9baab25105bba9ba0c3fa3e5c02ff5b030d360bb499cc042", 0xec}, {&(0x7f0000000840)="2383db54d36f0e36a2403c53450e6d08cc940880f84ebf19d47b3acc3ede28a84b356b8599900e56d2db4254b2386ec972ee9a79ce620922dabbaa6416c9068f1ab1be688f4a759f24f246c930f4601316d8cc699e6e066796ae07e5c3ad8d13513386a2bbfaed727c6c80a288d915d2bf139306943aaf56d311ca543ed22ced1e08eaf0a14d1eb2703493b42e3b25613217501d30867990f4b4317b4f8c425fed471f037fee9a6fb80d52853172c08ad558bba2a5c773316fe9c2a42cdd12bee35bcd304efd3f", 0xc7}, {&(0x7f0000000940)="8bf5c92697a496d45adcfcd55b905fb0dc40dc666ef2589ae2499ec215afe35b694ca4ce94abe206c146f47de2883f76027a5aac19787ece88122c36dbf23cc171d06f81dfd5854078fe9fc32deb777481993351952c3ee47cc5e655be9b5ac59db9ed0b2193c17feeada5f06b1f678eccbb81f4f3afce74f2baa309d1d89beef754b4acecf31cb651d80a2c3bc932499ebf297208e9bba6e94eeb9829b4a32eb0709106f07974bfcb114339b26138a85809846302a00a", 0xb7}], 0xa, 0x0, 0x0, 0x80}, 0x4008014) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000b40)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) recvmsg$kcm(r1, &(0x7f0000000d00)={&(0x7f0000000b80)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000c00)=""/81, 0x51}], 0x1, &(0x7f0000000cc0)=""/1, 0x1}, 0x0) r5 = syz_clone(0x6152000, &(0x7f0000000e00)="427d87f042e9122d77adfb11b262587050b9e20c54d9", 0x16, &(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)="e70b59fdc505dda0557e96e890a3db8541edc65d95e0582cd7e232279d9234e03916a6f81196d9c569a74e93081fbb94b5f950f0f6aae77405d9528b07cf3562c3babaf9890d375c450cc3cd96e8fa6f4d6fbb9d8ce9540c71f71309367efe35a1fbe9825f25b51d3814ca6f58c87fff8f63917b") r6 = perf_event_open(&(0x7f0000000d80)={0x4, 0x80, 0x4, 0x2, 0x2, 0x4, 0x0, 0xfff, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xff, 0x2, @perf_bp={&(0x7f0000000d40), 0x9}, 0x2020, 0x0, 0x1, 0x0, 0xb5, 0xdb, 0x5, 0x0, 0x7f, 0x0, 0xfffffffffffffffa}, r5, 0x2, 0xffffffffffffffff, 0x9) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f40), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f80)={@cgroup=r4, r7, 0x2e, 0x8, 0x0, @void, @value=r4}, 0x20) recvmsg$kcm(r1, &(0x7f0000002380)={&(0x7f0000000fc0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001040)=""/115, 0x73}, {&(0x7f00000010c0)=""/224, 0xe0}, {&(0x7f00000011c0)=""/137, 0x89}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/115, 0x73}], 0x5}, 0x180) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002400)=@o_path={&(0x7f00000023c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r8 = syz_clone(0x0, &(0x7f0000002500)="9864a15dec5ff7514788a5770aad469e9280839414db0d99d7e76e36bb093dbe45c9d953dc9ae45bc7a9c7e10d1d95b4b8bba4a40b228108c1b2cbf57a9b438c5a5ec7b8b8c9048b5d4441ed544481aa0e08a0f9e1", 0x55, &(0x7f0000002580), &(0x7f00000025c0), &(0x7f0000002600)="b6e7bc7325b3d2f95a0db7bdd917a117a2f6e394ac29c37f3978737203275411f02bbf89481a82d59318b5b4b7e97a75bcdf9f711741bfa2484872") r9 = perf_event_open(&(0x7f0000002480)={0x4, 0x80, 0x3, 0x9, 0x8, 0xbe, 0x0, 0x0, 0x1000, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000002440), 0x9}, 0x200281, 0x9, 0x0, 0x5, 0xffffffff, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2}, r8, 0xd, r4, 0x2) sendmsg$sock(r0, &(0x7f0000003900)={&(0x7f0000002640)=@in={0x2, 0x4e24, @private=0xa010102}, 0x80, &(0x7f0000003840)=[{&(0x7f00000026c0)="00cdd1a4c675ede405a728d861873bce626762a3352edd6a5ec2ae020961125295fd9cb182742c9ba814ae03ae7b1ad2cd476ac0c8af4d864d74f2c4f1a5d3bc666bf38b375dc9bc166a5db2ca4cacf8fdd3ad5767a6734bfc21ae8bba06fc0bcb1746c5cf093d9a415d3100a19177286925b1f752b2b60575a7525ed3754fc714ec9a0252d7bf1366a4bccf759ca7eb06cbcadf62c20ef1a9ebc8d86b", 0x9d}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="5870795bd5f9784c0232de3c75a7818cc6758885635cacdd7a1c93747f6e281247691e239f261f7da0c86d36c1098a7511e65d72aacf7ff3543063ab5e33d164c0113b89605d9a47658ba689f67e32de5dc334afab1e8e71fcb0bc290734a21611dce86f5963d7db7b5bcfc869bb696cb807343c0138be4e3343a9557c43dfd330a2648614df543e273ef965a277a76f2a9323219ae4f7ffbd661df966ea151d8ed691a532ec129d80d1ae24710673355820ab2ec8ad7ed6", 0xb8}], 0x3, &(0x7f0000003880)=[@timestamping={{0x14, 0x1, 0x25, 0xbbe}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffeff}}], 0x78}, 0x4000080) syz_clone(0x101157180, &(0x7f0000003940)="000f2b778e9a6e14bb889f2af04b2f4add5f819061c5cdba70927755949c5bb3aa7ae95f9ab12931b59cb1a7eaebab0a2980ce71991ec2e8b1a73c1006bcec263137215e476d2763fa6dddf1315f788493987d55333f8a5df3f2083c2cd72e6ccc31bec2741f61d962b69bcf6f3ca69a5af7e58273bf126b5dc57151", 0x7c, &(0x7f00000039c0), &(0x7f0000003a00), &(0x7f0000003a40)="e1952fc560245f1017e6a99288d23c5e52d73895b340a4b146554bd5120d4ea95559a5e2d60b515b1f1d12d532a566573e77812b3b24ff657d65abcf0607d3d063ba1ee4539b3add25c5ad3dd3471651ac59c9904e4819e5e4b644b55e48e5729205d74e4c87b8801cb965f5f14b64a92e4acccdbf75f1a2815878d1131c420a9a951e43589a28eab7fe655f4e2c5cec87e6a239b2d5c5f9e8c1d662814dc3b9d179244e42dc7b175be1b49c4e1db2de89cc48bde13fe762a2") r10 = gettid() write$cgroup_pid(r4, &(0x7f0000003b00)=r10, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003c40)={@cgroup=r4, 0xf, 0x1, 0x9, &(0x7f0000003b40)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000003b80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003bc0)=[0x0, 0x0], &(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003c80)={@cgroup=r4, r7, 0x2b, 0x1, r4, @void, @value, @void, @void, r12}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003d00)={r8, r4, 0x0, 0x1, &(0x7f0000003cc0)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003d40)={r13}, 0x4) openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000003d80), 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000003e00)=@o_path={&(0x7f0000003dc0)='./file0\x00', 0x0, 0x0, r6}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000003e40)='}\x00') 110.994364ms ago: executing program 0 (id=1726): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454cc, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0xc, 0x0, 0xfd, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x3}, 0x8000, 0xf, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRES32=r2, @ANYRES16=r3, @ANYRES8=r3, @ANYRESOCT, @ANYRESDEC=r3, @ANYRES32=r2, @ANYRES64=r2, @ANYRESOCT=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x28034080, &(0x7f0000000280)="a39e30852c99a467875aac06ea00f84191269af05d43bd3c92e6b49024a53fc37c28349e77b04dc3108470ae7629262b8ea630003b1151aa7ec93cc560796a4b7bf6201c80e1aaa65687e44963f160436dcf42758ae6f41fb38ecb98288cdc7570bbb741e074b88352589ff5f655d7913bd340f3fef9781ed4c08216acdd9225d495ab8109a971364cf8fc29ff33", 0x8e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000004c0)="e1d690c44c851eea84178a1277aeb672f6fad4c9605ff198b44e6e8a54") (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x64) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, &(0x7f0000000080)) 0s ago: executing program 2 (id=1727): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca8, 0x10, &(0x7f0000000000), 0x36}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffca8, 0x10, &(0x7f0000000000), 0x36}, 0x48) (async) kernel console output (not intermixed with test programs): ge0: port 2(bridge_slave_1) entered blocking state [ 72.022168][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.058201][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.114562][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.134911][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.179806][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.187000][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.248376][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.255465][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.294411][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.332336][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.464931][ T5764] veth0_vlan: entered promiscuous mode [ 72.502115][ T5764] veth1_vlan: entered promiscuous mode [ 72.530327][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.558406][ T5765] veth0_vlan: entered promiscuous mode [ 72.581472][ T5765] veth1_vlan: entered promiscuous mode [ 72.664494][ T5764] veth0_macvtap: entered promiscuous mode [ 72.692803][ T5765] veth0_macvtap: entered promiscuous mode [ 72.706359][ T5764] veth1_macvtap: entered promiscuous mode [ 72.720539][ T5766] veth0_vlan: entered promiscuous mode [ 72.730205][ T5765] veth1_macvtap: entered promiscuous mode [ 72.740254][ T5769] Bluetooth: hci0: command tx timeout [ 72.773244][ T5766] veth1_vlan: entered promiscuous mode [ 72.800424][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.817905][ T5769] Bluetooth: hci1: command tx timeout [ 72.823348][ T5769] Bluetooth: hci2: command tx timeout [ 72.829136][ T5779] Bluetooth: hci3: command tx timeout [ 72.832565][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.851953][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.864892][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.877152][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.889959][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.900874][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.912140][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.924489][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.935007][ T5764] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.946709][ T5764] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.955395][ T5764] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.967725][ T5764] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.993986][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.003070][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.011828][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.020854][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.039583][ T5766] veth0_macvtap: entered promiscuous mode [ 73.064751][ T5766] veth1_macvtap: entered promiscuous mode [ 73.135069][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.151040][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.161273][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.174471][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.189255][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.255062][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.263469][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.267511][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.274562][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.291388][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.302196][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.313388][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.339933][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.349337][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.358617][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.367475][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.393512][ T5767] veth0_vlan: entered promiscuous mode [ 73.423188][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.441114][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.458641][ T5767] veth1_vlan: entered promiscuous mode [ 73.496917][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.504753][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.522967][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.544205][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.613387][ T5767] veth0_macvtap: entered promiscuous mode [ 73.630884][ T5767] veth1_macvtap: entered promiscuous mode [ 73.645037][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.672162][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.702384][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.715811][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.735926][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.768714][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.796466][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.816067][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.828849][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.850597][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.866980][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.877337][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.894029][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.915091][ C1] hrtimer: interrupt took 49215 ns [ 73.922032][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.956083][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.979409][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.010265][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.045978][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054721][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.087865][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125254][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.145215][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.315758][ T3486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.356720][ T3486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.455708][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.464316][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.816563][ T5769] Bluetooth: hci0: command tx timeout [ 74.896831][ T5779] Bluetooth: hci3: command tx timeout [ 74.903377][ T5774] Bluetooth: hci1: command tx timeout [ 74.915965][ T5769] Bluetooth: hci2: command tx timeout [ 75.831920][ T5869] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 75.844270][ T5869] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.13'. [ 76.905941][ T5769] Bluetooth: hci0: command tx timeout [ 76.976793][ T5769] Bluetooth: hci2: command tx timeout [ 76.976823][ T5774] Bluetooth: hci1: command tx timeout [ 76.991101][ T5779] Bluetooth: hci3: command tx timeout [ 77.166685][ T5887] netlink: 'syz.1.16': attribute type 10 has an invalid length. [ 77.185214][ T5887] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16'. [ 77.236133][ T5889] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.288940][ T5893] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 77.927400][ T5891] netlink: 'syz.3.17': attribute type 10 has an invalid length. [ 78.812363][ T5891] team0 (unregistering): Port device team_slave_0 removed [ 78.861701][ T5891] team0 (unregistering): Port device team_slave_1 removed [ 78.945404][ T5901] netlink: 'syz.1.19': attribute type 10 has an invalid length. [ 79.008412][ T5901] team0: Port device geneve1 added [ 79.354750][ T5911] Zero length message leads to an empty skb [ 79.858219][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23'. [ 79.990897][ T5916] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23'. [ 80.212551][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.238106][ T5924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23'. [ 80.271492][ T5930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23'. [ 81.247126][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.887501][ T27] cfg80211: failed to load regulatory.db [ 82.455571][ T5977] netlink: 'syz.3.37': attribute type 28 has an invalid length. [ 82.486282][ T5977] netlink: 'syz.3.37': attribute type 29 has an invalid length. [ 82.494074][ T5977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.37'. [ 82.723001][ T5987] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.40'. [ 82.767900][ T5987] tc_dump_action: action bad kind [ 82.883942][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 82.924612][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 82.939819][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 82.969721][ T5998] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 83.114547][ T6004] netlink: 'syz.2.45': attribute type 21 has an invalid length. [ 83.126135][ T6004] netlink: 128 bytes leftover after parsing attributes in process `syz.2.45'. [ 83.140654][ T6004] netlink: 'syz.2.45': attribute type 4 has an invalid length. [ 83.162092][ T6004] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 83.169044][ T6004] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 83.695793][ T6013] syzkaller0: entered promiscuous mode [ 83.704084][ T6013] syzkaller0: entered allmulticast mode [ 83.712848][ T6025] netlink: 180 bytes leftover after parsing attributes in process `syz.1.53'. [ 85.120608][ T6035] netlink: 'syz.1.53': attribute type 17 has an invalid length. [ 85.138631][ T6035] netlink: 152 bytes leftover after parsing attributes in process `syz.1.53'. [ 85.153968][ T6035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.269191][ T6058] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 86.285474][ T6058] syzkaller1: linktype set to 786 [ 86.335336][ T6058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.684942][ T6071] netlink: 'syz.0.65': attribute type 33 has an invalid length. [ 86.695854][ T6071] netlink: 152 bytes leftover after parsing attributes in process `syz.0.65'. [ 86.704930][ T6071] `: renamed from team0 (while UP) [ 86.765365][ T6078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.65'. [ 87.177376][ T6083] delete_channel: no stack [ 87.390813][ T6099] netlink: 'syz.3.74': attribute type 10 has an invalid length. [ 87.514935][ T6101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 88.064006][ T6113] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 88.118985][ T6115] IPv6: …: Disabled Multicast RS [ 88.140324][ T6113] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 88.192959][ T6116] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 88.214481][ T6118] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 88.239452][ T6113] netlink: 'syz.1.77': attribute type 29 has an invalid length. [ 88.369637][ T6123] __nla_validate_parse: 2 callbacks suppressed [ 88.369657][ T6123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.87'. [ 89.406429][ T6131] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.81'. [ 90.100858][ T6157] netlink: 'syz.0.89': attribute type 1 has an invalid length. [ 90.128991][ T6157] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.89'. [ 90.161650][ T6160] syz.1.91[6160] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.147235][ T6182] netlink: 'syz.2.96': attribute type 39 has an invalid length. [ 92.650630][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'. [ 92.884431][ T6201] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 94.125209][ T6199] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'. [ 94.735487][ T6204] netlink: 'syz.3.101': attribute type 33 has an invalid length. [ 94.851046][ T6204] netlink: 152 bytes leftover after parsing attributes in process `syz.3.101'. [ 95.028698][ T6216] sctp: [Deprecated]: syz.1.103 (pid 6216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.028698][ T6216] Use struct sctp_sack_info instead [ 95.162954][ T6219] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.104'. [ 95.176405][ T6219] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 95.257977][ T6219] tun0: tun_chr_ioctl cmd 1074025678 [ 95.263452][ T6219] tun0: group set to 0 [ 95.501540][ T6230] netlink: 'syz.3.108': attribute type 3 has an invalid length. [ 95.535477][ T6230] netlink: 'syz.3.108': attribute type 1 has an invalid length. [ 95.551010][ T6230] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.108'. [ 95.899436][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 95.909083][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 95.937039][ T6243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 95.957869][ T6245] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.114'. [ 96.531293][ T6263] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 96.600564][ T6263] team0: Device wg1 is of different type [ 97.370238][ T6296] netlink: 'syz.3.128': attribute type 29 has an invalid length. [ 97.411456][ T6296] netlink: 'syz.3.128': attribute type 29 has an invalid length. [ 97.464093][ T6304] netlink: 'syz.3.128': attribute type 29 has an invalid length. [ 97.530022][ T6305] netlink: 'syz.3.128': attribute type 29 has an invalid length. [ 97.539934][ T6296] netlink: 'syz.3.128': attribute type 29 has an invalid length. [ 97.552638][ T6307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.560584][ T6307] IPv6: NLM_F_CREATE should be set when creating new route [ 97.568319][ T6307] IPv6: NLM_F_CREATE should be set when creating new route [ 97.575662][ T6307] IPv6: NLM_F_CREATE should be set when creating new route [ 99.195560][ T6347] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 99.400636][ T6351] netlink: 168 bytes leftover after parsing attributes in process `syz.0.141'. [ 99.420818][ T6354] netlink: 168 bytes leftover after parsing attributes in process `syz.0.141'. [ 100.458435][ T6373] raw_sendmsg: syz.0.148 forgot to set AF_INET. Fix it! [ 100.468011][ T6374] validate_nla: 5 callbacks suppressed [ 100.468026][ T6374] netlink: 'syz.0.148': attribute type 22 has an invalid length. [ 100.502185][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 101.076905][ T6397] syz.1.155 (6397) used greatest stack depth: 19400 bytes left [ 102.130195][ T6421] netlink: 'syz.2.162': attribute type 3 has an invalid length. [ 102.147847][ T6421] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.162'. [ 103.394189][ T6458] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 103.426647][ T6458] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.170'. [ 103.465744][ T6462] netlink: 'syz.0.172': attribute type 10 has an invalid length. [ 103.492190][ T6462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.528059][ T6462] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 103.565514][ T6465] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.172'. [ 104.358716][ T6489] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 104.372065][ T6489] netlink: 'syz.1.178': attribute type 8 has an invalid length. [ 104.381701][ T6489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.178'. [ 104.409933][ T6488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.177'. [ 104.790776][ T6506] netlink: 151836 bytes leftover after parsing attributes in process `syz.1.182'. [ 104.800480][ T6508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.183'. [ 104.836063][ T6508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.183'. [ 104.846884][ T6506] netlink: zone id is out of range [ 104.852773][ T6506] netlink: zone id is out of range [ 104.859439][ T6506] netlink: zone id is out of range [ 104.876744][ T6506] netlink: zone id is out of range [ 104.886395][ T6506] netlink: zone id is out of range [ 104.900966][ T6506] netlink: zone id is out of range [ 104.921749][ T6506] netlink: zone id is out of range [ 104.932572][ T6506] netlink: zone id is out of range [ 104.943963][ T6506] netlink: zone id is out of range [ 104.957265][ T6506] netlink: zone id is out of range [ 105.147298][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 105.333282][ T6522] À: port 1(vlan0) entered blocking state [ 105.341113][ T6522] À: port 1(vlan0) entered disabled state [ 105.367828][ T6522] vlan0: entered allmulticast mode [ 105.375007][ T6522] veth0_vlan: entered allmulticast mode [ 105.423253][ T6522] vlan0: entered promiscuous mode [ 105.438433][ T6527] netlink: 200564 bytes leftover after parsing attributes in process `syz.3.190'. [ 105.551050][ T6533] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.191'. [ 105.770472][ T6537] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 105.849032][ T6537] team0 (unregistering): Port device team_slave_0 removed [ 105.892825][ T6537] team0 (unregistering): Port device team_slave_1 removed [ 106.285137][ T6548] netlink: 'syz.2.195': attribute type 2 has an invalid length. [ 106.315560][ T6548] sit0: entered allmulticast mode [ 106.371734][ T6548] sit0: entered promiscuous mode [ 107.629461][ T6577] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 107.807500][ T6577] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 107.920569][ T6580] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 107.942875][ T6587] netlink: 160 bytes leftover after parsing attributes in process `syz.1.205'. [ 107.952687][ T6581] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 107.962363][ T6582] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 107.992858][ T6585] netlink: 'syz.2.202': attribute type 29 has an invalid length. [ 109.371975][ T6623] netlink: 'syz.0.212': attribute type 11 has an invalid length. [ 109.375463][ T6620] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 109.417537][ T6620] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.211'. [ 110.238495][ T6645] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.222'. [ 111.360900][ T6688] syz.1.232 uses obsolete (PF_INET,SOCK_PACKET) [ 111.526232][ T6691] validate_nla: 2 callbacks suppressed [ 111.526249][ T6691] netlink: 'syz.3.231': attribute type 29 has an invalid length. [ 111.547511][ T6691] netlink: 'syz.3.231': attribute type 29 has an invalid length. [ 111.561086][ T6691] netlink: 'syz.3.231': attribute type 29 has an invalid length. [ 115.203262][ T6721] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.239'. [ 116.428676][ T6746] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.245'. [ 117.123374][ T6752] netlink: 'syz.0.247': attribute type 39 has an invalid length. [ 117.368679][ T6756] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.248'. [ 117.397601][ T6756] net_ratelimit: 117 callbacks suppressed [ 117.397616][ T6756] netlink: zone id is out of range [ 117.416388][ T6756] netlink: zone id is out of range [ 117.424654][ T6756] netlink: zone id is out of range [ 117.430771][ T6756] netlink: zone id is out of range [ 117.437688][ T6756] netlink: zone id is out of range [ 117.443129][ T6756] netlink: zone id is out of range [ 117.448889][ T6756] netlink: zone id is out of range [ 117.454379][ T6756] netlink: zone id is out of range [ 117.474193][ T6759] netlink: 'syz.0.250': attribute type 21 has an invalid length. [ 117.483591][ T6759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.250'. [ 117.492964][ T6756] netlink: zone id is out of range [ 117.498289][ T6756] netlink: zone id is out of range [ 120.583764][ T6765] netlink: 'syz.1.252': attribute type 58 has an invalid length. [ 120.600572][ T6765] netlink: 152 bytes leftover after parsing attributes in process `syz.1.252'. [ 121.051357][ T5779] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 121.772730][ T6797] tap0: tun_chr_ioctl cmd 1074025684 [ 122.396279][ T6807] netlink: 'syz.3.265': attribute type 11 has an invalid length. [ 122.404189][ T6807] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 122.414325][ T6807] netlink: 'syz.3.265': attribute type 2 has an invalid length. [ 122.436070][ T6807] netlink: 197832 bytes leftover after parsing attributes in process `syz.3.265'. [ 123.655477][ T6831] netlink: 152 bytes leftover after parsing attributes in process `syz.0.272'. [ 123.666346][ T6831] tc_dump_action: action bad kind [ 123.752555][ T6836] ÿÿÿÿÿÿþ€: renamed from vlan1 (while UP) [ 124.704246][ T6856] delete_channel: no stack [ 124.983742][ T6935] IPv6: Can't replace route, no match found [ 125.032098][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.042872][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.074403][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.095171][ T6938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.186949][ T6938] bond0: (slave batadv0): Releasing backup interface [ 125.295105][ T6944] netlink: 'syz.2.287': attribute type 10 has an invalid length. [ 125.316552][ T6944] veth0_macvtap: left promiscuous mode [ 125.878521][ T6968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.296'. [ 126.288919][ T6983] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 126.379614][ T6983] netlink: 'syz.3.300': attribute type 29 has an invalid length. [ 126.640305][ T6998] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 126.648460][ T6998] syzkaller1: Linktype set failed because interface is up [ 126.965291][ T7007] netlink: 'syz.2.306': attribute type 21 has an invalid length. [ 126.987239][ T7007] netlink: 'syz.2.306': attribute type 6 has an invalid length. [ 127.879470][ T7033] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.314'. [ 127.978117][ T7030] netlink: 'syz.0.315': attribute type 2 has an invalid length. [ 127.989480][ T7030] netlink: 'syz.0.315': attribute type 8 has an invalid length. [ 128.004567][ T7030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.315'. [ 128.300353][ T7042] netlink: 'syz.1.317': attribute type 10 has an invalid length. [ 128.331291][ T7042] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.317'. [ 130.176705][ T7074] netlink: 'syz.2.327': attribute type 10 has an invalid length. [ 131.379614][ T7098] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 131.401674][ T7098] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 131.424088][ T7098] netlink: 'syz.3.334': attribute type 2 has an invalid length. [ 131.443691][ T7098] netlink: 'syz.3.334': attribute type 3 has an invalid length. [ 131.453830][ T7098] netlink: 'syz.3.334': attribute type 4 has an invalid length. [ 131.474384][ T7098] netlink: 'syz.3.334': attribute type 5 has an invalid length. [ 131.486109][ T7098] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.334'. [ 133.065338][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.071831][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.192161][ T7155] netlink: 164 bytes leftover after parsing attributes in process `syz.0.349'. [ 133.420069][ T7157] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.350'. [ 133.831500][ T7173] ÿÿÿÿÿÿþ€: renamed from vlan1 (while UP) [ 136.540583][ T7188] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.360'. [ 136.924166][ T7203] net_ratelimit: 331 callbacks suppressed [ 136.924180][ T7203] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 136.989977][ T7206] netlink: 196 bytes leftover after parsing attributes in process `syz.3.364'. [ 137.026836][ T7206] validate_nla: 6 callbacks suppressed [ 137.026867][ T7206] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 137.061837][ T7206] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 137.083849][ T7207] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 137.104604][ T7206] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 137.188264][ T7206] netlink: 'syz.3.364': attribute type 29 has an invalid length. [ 138.128375][ T7234] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.370'. [ 139.284438][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 139.864136][ T7240] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.374'. [ 140.099731][ T7264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 140.177191][ T7264] netlink: 176 bytes leftover after parsing attributes in process `syz.3.381'. [ 140.208614][ T7264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 140.446535][ T6920] tipc: Subscription rejected, illegal request [ 140.724575][ T7291] ÿÿÿÿÿÿþ€: renamed from vlan1 (while UP) [ 140.893485][ T7300] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.391'. [ 141.953857][ T7331] netlink: 'syz.1.400': attribute type 21 has an invalid length. [ 142.029389][ T7334] netlink: 'syz.0.402': attribute type 29 has an invalid length. [ 142.042956][ T7334] netlink: 'syz.0.402': attribute type 29 has an invalid length. [ 142.057708][ T7333] netlink: 'syz.0.402': attribute type 29 has an invalid length. [ 142.113685][ T7335] netlink: 'syz.0.402': attribute type 29 has an invalid length. [ 142.124266][ T7342] netlink: 'syz.1.404': attribute type 3 has an invalid length. [ 142.125066][ T7334] netlink: 'syz.0.402': attribute type 29 has an invalid length. [ 142.161300][ T7342] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.404'. [ 142.440119][ T7353] netlink: 'syz.0.406': attribute type 25 has an invalid length. [ 142.451639][ T7349] netlink: 'syz.1.405': attribute type 3 has an invalid length. [ 142.460060][ T7353] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.406'. [ 142.474874][ T7349] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.405'. [ 146.196449][ T7390] netlink: 'syz.2.418': attribute type 39 has an invalid length. [ 146.655764][ T7414] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.423'. [ 146.923435][ T7429] netlink: 513 bytes leftover after parsing attributes in process `syz.3.428'. [ 147.047644][ T7430] netlink: 'syz.3.428': attribute type 3 has an invalid length. [ 147.055542][ T7430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.428'. [ 147.076957][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.429'. [ 147.104998][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.429'. [ 147.137467][ T7438] netlink: 60 bytes leftover after parsing attributes in process `syz.1.429'. [ 147.150016][ T7434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.429'. [ 147.428253][ T7443] netlink: 'syz.1.432': attribute type 7 has an invalid length. [ 147.914330][ T7444] netlink: 14 bytes leftover after parsing attributes in process `syz.1.432'. [ 148.455571][ T7457] netlink: 'syz.1.435': attribute type 1 has an invalid length. [ 148.474114][ T7457] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.435'. [ 149.195673][ T7484] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.444'. [ 149.290462][ T5774] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 149.654094][ T7506] netlink: 'syz.2.453': attribute type 39 has an invalid length. [ 149.670319][ T7504] netlink: 'syz.0.452': attribute type 17 has an invalid length. [ 149.678312][ T7504] netlink: 'syz.0.452': attribute type 16 has an invalid length. [ 149.690987][ T7504] netlink: 152 bytes leftover after parsing attributes in process `syz.0.452'. [ 149.827195][ T7514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.455'. [ 149.846112][ T7514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.455'. [ 149.861921][ T7514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.455'. [ 150.224154][ T7531] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.459'. [ 150.394081][ T7538] netlink: 'syz.1.461': attribute type 11 has an invalid length. [ 150.514295][ T7542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.462'. [ 150.534762][ T7542] netlink: 'syz.3.462': attribute type 17 has an invalid length. [ 150.548969][ T7542] netlink: 152 bytes leftover after parsing attributes in process `syz.3.462'. [ 150.577177][ T7542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.663560][ T7544] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 151.044585][ T7564] netlink: 'syz.2.470': attribute type 46 has an invalid length. [ 153.068147][ T6913] wlan1: Trigger new scan to find an IBSS to join [ 153.150162][ T7608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.939850][ T7627] __nla_validate_parse: 5 callbacks suppressed [ 153.939867][ T7627] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.488'. [ 154.418408][ T7635] vcan0: entered allmulticast mode [ 154.690024][ T7644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.496'. [ 154.727958][ T7644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.496'. [ 154.793946][ T7644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.496'. [ 154.839734][ T7644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.496'. [ 155.337508][ T7668] netlink: 'syz.0.503': attribute type 21 has an invalid length. [ 155.385440][ T7668] netlink: 156 bytes leftover after parsing attributes in process `syz.0.503'. [ 157.149255][ T6911] wlan1: Trigger new scan to find an IBSS to join [ 157.357065][ T7728] netlink: 76 bytes leftover after parsing attributes in process `syz.0.521'. [ 157.417787][ T7729] netlink: 'syz.1.522': attribute type 29 has an invalid length. [ 157.456340][ T7729] netlink: 'syz.1.522': attribute type 29 has an invalid length. [ 157.474131][ T7735] netlink: 'syz.1.522': attribute type 29 has an invalid length. [ 157.517075][ T7729] netlink: 'syz.1.522': attribute type 29 has an invalid length. [ 158.260243][ T6908] wlan1: Creating new IBSS network, BSSID 5a:b3:78:0d:c7:81 [ 159.717031][ T7745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.890687][ T7755] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.528'. [ 159.908168][ T7753] pimreg0: tun_chr_ioctl cmd 1074812118 [ 159.920353][ T7753] pimreg0: tun_chr_ioctl cmd 35111 [ 161.112673][ T7784] netlink: 'syz.1.538': attribute type 21 has an invalid length. [ 161.131591][ T7784] netlink: 176 bytes leftover after parsing attributes in process `syz.1.538'. [ 162.455665][ T7813] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.548'. [ 163.590283][ T7825] syzkaller0: entered promiscuous mode [ 163.595804][ T7825] syzkaller0: entered allmulticast mode [ 166.056179][ T7837] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.554'. [ 166.161898][ T7849] netlink: 'syz.2.557': attribute type 9 has an invalid length. [ 166.171518][ T7849] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.557'. [ 166.217311][ T7852] syzkaller0: entered allmulticast mode [ 166.371621][ T7856] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.559'. [ 166.386890][ T7856] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.559'. [ 167.584821][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 168.239825][ T7903] netlink: 'syz.0.574': attribute type 3 has an invalid length. [ 168.279440][ T7903] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.574'. [ 171.195169][ T7918] netlink: 112 bytes leftover after parsing attributes in process `syz.1.581'. [ 171.294562][ T7926] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.583'. [ 172.572380][ T7953] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.590'. [ 172.919058][ T7968] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.595'. [ 172.935380][ T7968] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 172.954441][ T7968] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 174.393694][ T8003] netlink: 152 bytes leftover after parsing attributes in process `syz.2.606'. [ 174.435067][ T8007] netlink: 'syz.0.607': attribute type 27 has an invalid length. [ 174.464535][ T8007] netlink: 164 bytes leftover after parsing attributes in process `syz.0.607'. [ 176.550560][ T8044] tap0: tun_chr_ioctl cmd 1074025677 [ 176.567002][ T8044] tap0: linktype set to 6 [ 177.962792][ T8079] netlink: 'syz.2.627': attribute type 10 has an invalid length. [ 178.004662][ T8079] bond0: (slave bond_slave_0): Releasing backup interface [ 178.715580][ T8113] netlink: 68 bytes leftover after parsing attributes in process `syz.0.636'. [ 178.854451][ T8113] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 179.246038][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.640'. [ 179.312912][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.640'. [ 179.348561][ T8129] netlink: 60 bytes leftover after parsing attributes in process `syz.2.640'. [ 179.538314][ T8138] netlink: 'syz.2.645': attribute type 39 has an invalid length. [ 179.700546][ T8139] netlink: 'syz.2.645': attribute type 21 has an invalid length. [ 179.732242][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.645'. [ 179.756325][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.645'. [ 181.176149][ T8185] bridge0: port 3(team0) entered blocking state [ 181.187417][ T8185] bridge0: port 3(team0) entered disabled state [ 181.201723][ T8185] team0: entered allmulticast mode [ 181.221158][ T8185] team_slave_0: entered allmulticast mode [ 181.240608][ T8185] team_slave_1: entered allmulticast mode [ 181.250049][ T8185] geneve1: entered allmulticast mode [ 181.263484][ T8185] team0: entered promiscuous mode [ 181.269984][ T8185] team_slave_0: entered promiscuous mode [ 181.276795][ T8185] team_slave_1: entered promiscuous mode [ 181.282581][ T8185] geneve1: entered promiscuous mode [ 181.292804][ T8185] bridge0: port 3(team0) entered blocking state [ 181.299593][ T8185] bridge0: port 3(team0) entered forwarding state [ 181.407016][ T8199] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.662'. [ 181.409372][ T8184] team0: left allmulticast mode [ 181.429911][ T8184] team_slave_0: left allmulticast mode [ 181.439961][ T8184] team_slave_1: left allmulticast mode [ 181.445704][ T8184] geneve1: left allmulticast mode [ 181.452120][ T8184] team0: left promiscuous mode [ 181.462256][ T8184] team_slave_0: left promiscuous mode [ 181.469202][ T8184] team_slave_1: left promiscuous mode [ 181.475689][ T8184] geneve1: left promiscuous mode [ 181.484571][ T8184] bridge0: port 3(team0) entered disabled state [ 182.356858][ T8225] netlink: 'syz.1.669': attribute type 21 has an invalid length. [ 182.365073][ T8225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.669'. [ 182.687355][ T8235] netlink: 'syz.3.673': attribute type 10 has an invalid length. [ 183.611016][ T8262] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 183.701802][ T8269] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.683'. [ 183.764822][ T8269] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.683'. [ 184.097885][ T8280] netlink: 'syz.2.684': attribute type 7 has an invalid length. [ 184.220277][ T8280] netlink: 176 bytes leftover after parsing attributes in process `syz.2.684'. [ 184.266648][ T8283] netlink: 'syz.2.684': attribute type 10 has an invalid length. [ 184.438425][ T8284] netlink: 'syz.0.686': attribute type 2 has an invalid length. [ 185.302252][ T8304] netlink: 14 bytes leftover after parsing attributes in process `syz.1.692'. [ 185.464406][ T8307] netlink: 'syz.0.693': attribute type 12 has an invalid length. [ 185.484326][ T8307] netlink: 120 bytes leftover after parsing attributes in process `syz.0.693'. [ 185.526853][ T8308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.754755][ T8317] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.698'. [ 185.764205][ T8317] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 186.118374][ T8329] netlink: 'syz.0.700': attribute type 10 has an invalid length. [ 186.333587][ T8329] ` (unregistering): Port device team_slave_0 removed [ 186.379072][ T8329] ` (unregistering): Port device team_slave_1 removed [ 186.864789][ T8347] netlink: 'syz.2.704': attribute type 10 has an invalid length. [ 186.893872][ T8347] macvlan1: entered allmulticast mode [ 187.044012][ T8354] netlink: 763 bytes leftover after parsing attributes in process `syz.2.707'. [ 187.402305][ T8362] netlink: 196 bytes leftover after parsing attributes in process `syz.2.710'. [ 187.444391][ T8362] netlink: 196 bytes leftover after parsing attributes in process `syz.2.710'. [ 187.470845][ T8362] netlink: 196 bytes leftover after parsing attributes in process `syz.2.710'. [ 187.493950][ T8362] netlink: 196 bytes leftover after parsing attributes in process `syz.2.710'. [ 187.980151][ T8373] netlink: 'syz.2.712': attribute type 21 has an invalid length. [ 188.777029][ T8393] netlink: 'syz.1.720': attribute type 3 has an invalid length. [ 188.790771][ T8393] __nla_validate_parse: 63 callbacks suppressed [ 188.790802][ T8393] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.720'. [ 189.172167][ T8401] netlink: 122228 bytes leftover after parsing attributes in process `syz.1.723'. [ 190.595749][ T8400] netlink: 'syz.1.723': attribute type 21 has an invalid length. [ 190.603667][ T8400] netlink: 132 bytes leftover after parsing attributes in process `syz.1.723'. [ 190.763117][ T8410] Q±6ã`Ò˜: renamed from lo (while UP) [ 191.051105][ T8416] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.729'. [ 191.458491][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 191.464705][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 191.471048][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 191.476136][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 191.936663][ T8426] netlink: 132 bytes leftover after parsing attributes in process `syz.2.732'. [ 192.293199][ T8437] netlink: 'syz.1.734': attribute type 14 has an invalid length. [ 192.304360][ T8437] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.734'. [ 192.963218][ T8442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.329548][ T5779] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 193.733909][ T8465] netlink: 156 bytes leftover after parsing attributes in process `syz.3.742'. [ 193.758920][ T8466] netlink: 156 bytes leftover after parsing attributes in process `syz.3.742'. [ 194.054834][ T8468] syzkaller0: entered promiscuous mode [ 194.065660][ T8468] syzkaller0: entered allmulticast mode [ 194.348782][ T8478] delete_channel: no stack [ 194.518246][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.524697][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.246738][ T8513] IPv6: Can't replace route, no match found [ 197.375672][ T8534] ÿÿÿÿÿÿþ€: renamed from vlan1 (while UP) [ 197.417386][ T8533] netlink: 'syz.3.758': attribute type 39 has an invalid length. [ 201.193842][ T8576] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 201.223528][ T8576] netlink: 55 bytes leftover after parsing attributes in process `syz.2.772'. [ 202.224900][ T8590] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.775'. [ 202.362707][ T8594] netlink: 'syz.1.775': attribute type 21 has an invalid length. [ 202.405013][ T8594] netlink: 156 bytes leftover after parsing attributes in process `syz.1.775'. [ 204.636003][ T8655] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.793'. [ 204.688848][ T8652] syzkaller0: entered promiscuous mode [ 204.705496][ T8652] syzkaller0: entered allmulticast mode [ 206.492581][ T8682] netlink: 188 bytes leftover after parsing attributes in process `syz.2.801'. [ 207.122456][ T8706] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.806'. [ 207.148367][ T8704] netlink: 'syz.0.805': attribute type 10 has an invalid length. [ 207.175445][ T8704] netlink: 55 bytes leftover after parsing attributes in process `syz.0.805'. [ 207.304133][ T8708] netlink: 'syz.0.805': attribute type 2 has an invalid length. [ 207.312875][ T8708] netlink: 'syz.0.805': attribute type 11 has an invalid length. [ 207.323962][ T8708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.805'. [ 207.343543][ T8715] pimreg: tun_chr_ioctl cmd 1074025677 [ 207.356418][ T8715] pimreg: linktype set to 780 [ 207.378139][ T8715] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 207.392860][ T8715] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 207.448173][ T8722] netlink: 'syz.3.812': attribute type 29 has an invalid length. [ 207.456650][ T8722] netlink: 'syz.3.812': attribute type 29 has an invalid length. [ 207.467748][ T8722] netlink: 'syz.3.812': attribute type 29 has an invalid length. [ 207.476968][ T8722] netlink: 'syz.3.812': attribute type 29 has an invalid length. [ 207.485351][ T8722] netlink: 'syz.3.812': attribute type 29 has an invalid length. [ 207.859955][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 208.128572][ T8744] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.819'. [ 208.268144][ T8753] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.821'. [ 208.310811][ T8753] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present! [ 208.397676][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.405554][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.414686][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.423165][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.431550][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.440149][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.448506][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.456635][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.464514][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.472496][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.480554][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.489792][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.498290][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.506173][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.514529][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.526008][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.533864][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.541917][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.550104][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.558256][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.566180][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.574097][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.582374][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.590271][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.598337][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.606247][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.614500][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.623003][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.630964][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.639131][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.647092][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.654928][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.664340][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.672263][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.680190][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.688088][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.695992][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.703833][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.711823][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.720132][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.728099][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.736149][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.743993][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.752016][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.759883][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.768160][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.776066][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.783895][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.791869][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.799780][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.807759][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.815597][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.823964][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.832024][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.840050][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.848111][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.856067][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.864000][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.872620][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.881842][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.890204][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.898753][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.906839][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.914664][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 208.923028][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 209.759694][ T8772] delete_channel: no stack [ 210.285716][ T8803] C: renamed from team_slave_0 [ 210.304803][ T8803] netlink: 'syz.0.835': attribute type 3 has an invalid length. [ 210.325255][ T8803] netlink: 152 bytes leftover after parsing attributes in process `syz.0.835'. [ 210.848842][ T8815] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.839'. [ 211.664966][ T8844] netlink: 'syz.1.848': attribute type 10 has an invalid length. [ 211.673091][ T8844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.848'. [ 211.682279][ T8844] team0: entered promiscuous mode [ 211.688019][ T8844] team_slave_0: entered promiscuous mode [ 211.693948][ T8844] team_slave_1: entered promiscuous mode [ 211.700181][ T8844] geneve1: entered promiscuous mode [ 211.706354][ T8844] team0: entered allmulticast mode [ 211.711567][ T8844] team_slave_0: entered allmulticast mode [ 211.718075][ T8844] team_slave_1: entered allmulticast mode [ 211.723899][ T8844] geneve1: entered allmulticast mode [ 211.730573][ T8844] bridge0: port 3(team0) entered blocking state [ 211.737289][ T8844] bridge0: port 3(team0) entered disabled state [ 211.745204][ T8844] bridge0: port 3(team0) entered blocking state [ 211.751929][ T8844] bridge0: port 3(team0) entered forwarding state [ 211.949367][ T8851] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.850'. [ 212.325216][ T8867] validate_nla: 1 callbacks suppressed [ 212.325319][ T8867] netlink: 'syz.3.854': attribute type 9 has an invalid length. [ 212.348746][ T8867] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.854'. [ 212.352625][ T8870] netlink: 'syz.0.856': attribute type 21 has an invalid length. [ 212.380006][ T8873] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.854'. [ 212.386085][ T8870] netlink: 164 bytes leftover after parsing attributes in process `syz.0.856'. [ 212.390178][ T8873] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 212.713094][ T8883] netlink: 830 bytes leftover after parsing attributes in process `syz.0.859'. [ 212.726881][ T8883] bond_slave_0: entered promiscuous mode [ 212.732927][ T8883] bond_slave_1: entered promiscuous mode [ 212.925359][ T8896] bridge_slave_1: left allmulticast mode [ 212.946358][ T8896] bridge_slave_1: left promiscuous mode [ 212.953581][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.029936][ T8896] bridge_slave_0: left allmulticast mode [ 213.049045][ T8896] bridge_slave_0: left promiscuous mode [ 213.070709][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.916094][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 214.548648][ T8937] netlink: 'syz.2.872': attribute type 10 has an invalid length. [ 216.051982][ T8973] netlink: 'syz.2.883': attribute type 27 has an invalid length. [ 216.066287][ T8973] netlink: 'syz.2.883': attribute type 4 has an invalid length. [ 216.076120][ T8973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.883'. [ 216.527039][ T8988] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.886'. [ 216.600343][ T8988] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 217.395590][ T9007] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.890'. [ 217.465971][ T9006] netlink: 'syz.0.890': attribute type 21 has an invalid length. [ 217.488266][ T9006] netlink: 'syz.0.890': attribute type 6 has an invalid length. [ 217.577529][ T9011] netlink: 'syz.3.892': attribute type 27 has an invalid length. [ 217.605708][ T9011] netlink: 152 bytes leftover after parsing attributes in process `syz.3.892'. [ 217.634870][ T9011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 218.504020][ T9031] FAULT_INJECTION: forcing a failure. [ 218.504020][ T9031] name failslab, interval 1, probability 0, space 0, times 1 [ 218.528333][ T9031] CPU: 0 PID: 9031 Comm: syz.1.900 Not tainted syzkaller #0 [ 218.535686][ T9031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.545823][ T9031] Call Trace: [ 218.549147][ T9031] [ 218.552112][ T9031] dump_stack_lvl+0x18c/0x250 [ 218.556853][ T9031] ? show_regs_print_info+0x20/0x20 [ 218.562114][ T9031] ? load_image+0x400/0x400 [ 218.566685][ T9031] ? __might_sleep+0xe0/0xe0 [ 218.571317][ T9031] ? __lock_acquire+0x7d40/0x7d40 [ 218.576391][ T9031] should_fail_ex+0x39d/0x4d0 [ 218.581145][ T9031] should_failslab+0x9/0x20 [ 218.585700][ T9031] slab_pre_alloc_hook+0x59/0x310 [ 218.590775][ T9031] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 218.596542][ T9031] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 218.602297][ T9031] __kmem_cache_alloc_node+0x53/0x250 [ 218.607726][ T9031] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 218.613476][ T9031] __kmalloc+0xa4/0x230 [ 218.617681][ T9031] tomoyo_realpath_from_path+0xe3/0x5d0 [ 218.623287][ T9031] tomoyo_path_number_perm+0x248/0x620 [ 218.628791][ T9031] ? tomoyo_path_number_perm+0x217/0x620 [ 218.634464][ T9031] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 218.639969][ T9031] ? ksys_write+0x1c4/0x260 [ 218.644583][ T9031] ? __fget_files+0x28/0x4b0 [ 218.649210][ T9031] ? __fget_files+0x28/0x4b0 [ 218.653954][ T9031] security_file_ioctl+0x70/0xa0 [ 218.658941][ T9031] __se_sys_ioctl+0x48/0x170 [ 218.663582][ T9031] do_syscall_64+0x55/0xa0 [ 218.668038][ T9031] ? clear_bhb_loop+0x40/0x90 [ 218.672748][ T9031] ? clear_bhb_loop+0x40/0x90 [ 218.677471][ T9031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.683396][ T9031] RIP: 0033:0x7f4cbbf9c799 [ 218.687878][ T9031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.707524][ T9031] RSP: 002b:00007f4cbce81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.716000][ T9031] RAX: ffffffffffffffda RBX: 00007f4cbc215fa0 RCX: 00007f4cbbf9c799 [ 218.724018][ T9031] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 218.732032][ T9031] RBP: 00007f4cbce81090 R08: 0000000000000000 R09: 0000000000000000 [ 218.740137][ T9031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.748160][ T9031] R13: 00007f4cbc216038 R14: 00007f4cbc215fa0 R15: 00007ffd76b36fc8 [ 218.756200][ T9031] [ 218.820803][ T9031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.933908][ T9068] netlink: 'syz.0.909': attribute type 2 has an invalid length. [ 219.954728][ T9068] netlink: 'syz.0.909': attribute type 8 has an invalid length. [ 219.973520][ T9068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'. [ 220.816038][ T9073] netlink: 'syz.3.912': attribute type 22 has an invalid length. [ 220.825999][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 221.186782][ T9082] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.914'. [ 221.246272][ T9086] netlink: 830 bytes leftover after parsing attributes in process `syz.0.915'. [ 221.713743][ T9107] netlink: 'syz.0.922': attribute type 10 has an invalid length. [ 221.722520][ T9107] netlink: 55 bytes leftover after parsing attributes in process `syz.0.922'. [ 221.880246][ T9113] Dead loop on virtual device ip6_vti0, fix it urgently! [ 222.190142][ T9126] netlink: 'syz.1.927': attribute type 10 has an invalid length. [ 222.234692][ T9126] wg1: entered promiscuous mode [ 222.245227][ T9126] wg1: entered allmulticast mode [ 222.265475][ T9126] team0: Device wg1 is of different type [ 222.305699][ T9131] sock: sock_set_timeout: `syz.0.929' (pid 9131) tries to set negative timeout [ 223.559085][ T9159] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 223.586656][ T9159] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.936'. [ 223.885286][ T9166] FAULT_INJECTION: forcing a failure. [ 223.885286][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 223.905620][ T9166] CPU: 1 PID: 9166 Comm: syz.3.938 Not tainted syzkaller #0 [ 223.912971][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.923064][ T9166] Call Trace: [ 223.926377][ T9166] [ 223.929317][ T9166] dump_stack_lvl+0x18c/0x250 [ 223.934008][ T9166] ? show_regs_print_info+0x20/0x20 [ 223.939213][ T9166] ? load_image+0x400/0x400 [ 223.943733][ T9166] ? __might_sleep+0xe0/0xe0 [ 223.948326][ T9166] ? __lock_acquire+0x7d40/0x7d40 [ 223.953362][ T9166] ? lock_chain_count+0x20/0x20 [ 223.958215][ T9166] should_fail_ex+0x39d/0x4d0 [ 223.962917][ T9166] should_failslab+0x9/0x20 [ 223.967432][ T9166] slab_pre_alloc_hook+0x59/0x310 [ 223.972466][ T9166] ? _raw_spin_unlock+0x40/0x40 [ 223.977319][ T9166] ? string+0x26d/0x2b0 [ 223.981481][ T9166] ? __request_module+0x2d1/0x600 [ 223.986506][ T9166] __kmem_cache_alloc_node+0x53/0x250 [ 223.991885][ T9166] ? __request_module+0x2d1/0x600 [ 223.996916][ T9166] kmalloc_trace+0x2a/0xe0 [ 224.001339][ T9166] __request_module+0x2d1/0x600 [ 224.006201][ T9166] ? module_enforce_rwx_sections+0x150/0x150 [ 224.012189][ T9166] ? dev_load+0x21/0x1f0 [ 224.016452][ T9166] ? bpf_lsm_capable+0x9/0x10 [ 224.021148][ T9166] ? dev_load+0x21/0x1f0 [ 224.025389][ T9166] dev_load+0x18b/0x1f0 [ 224.029574][ T9166] dev_ioctl+0x59f/0x1140 [ 224.033927][ T9166] sock_do_ioctl+0x239/0x310 [ 224.038540][ T9166] ? sock_show_fdinfo+0xb0/0xb0 [ 224.043461][ T9166] sock_ioctl+0x5ba/0x7e0 [ 224.047807][ T9166] ? sock_poll+0x3e0/0x3e0 [ 224.052338][ T9166] ? bpf_lsm_file_ioctl+0x9/0x10 [ 224.057276][ T9166] ? security_file_ioctl+0x80/0xa0 [ 224.062436][ T9166] ? sock_poll+0x3e0/0x3e0 [ 224.066854][ T9166] __se_sys_ioctl+0xfd/0x170 [ 224.072319][ T9166] do_syscall_64+0x55/0xa0 [ 224.076741][ T9166] ? clear_bhb_loop+0x40/0x90 [ 224.081512][ T9166] ? clear_bhb_loop+0x40/0x90 [ 224.086195][ T9166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.092089][ T9166] RIP: 0033:0x7fec0e19c799 [ 224.096506][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.116127][ T9166] RSP: 002b:00007fec0f114028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.124544][ T9166] RAX: ffffffffffffffda RBX: 00007fec0e415fa0 RCX: 00007fec0e19c799 [ 224.132515][ T9166] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 224.140577][ T9166] RBP: 00007fec0f114090 R08: 0000000000000000 R09: 0000000000000000 [ 224.148549][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.156544][ T9166] R13: 00007fec0e416038 R14: 00007fec0e415fa0 R15: 00007fffdfd9bad8 [ 224.164563][ T9166] [ 224.374209][ T9176] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.941'. [ 224.526098][ T9178] wg2: entered promiscuous mode [ 224.540055][ T9178] wg2: entered allmulticast mode [ 224.570440][ T9180] netlink: 173740 bytes leftover after parsing attributes in process `syz.2.942'. [ 224.584369][ T9180] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 224.955418][ T9195] netlink: 'syz.2.946': attribute type 11 has an invalid length. [ 224.983565][ T9195] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 225.015161][ T9195] netlink: 'syz.2.946': attribute type 2 has an invalid length. [ 225.032360][ T9195] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.946'. [ 225.084051][ T9199] netlink: 'syz.1.948': attribute type 11 has an invalid length. [ 225.102346][ T9199] netlink: 168 bytes leftover after parsing attributes in process `syz.1.948'. [ 225.483898][ T9212] FAULT_INJECTION: forcing a failure. [ 225.483898][ T9212] name failslab, interval 1, probability 0, space 0, times 0 [ 225.507202][ T9212] CPU: 1 PID: 9212 Comm: syz.1.951 Not tainted syzkaller #0 [ 225.514573][ T9212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 225.524672][ T9212] Call Trace: [ 225.528001][ T9212] [ 225.530974][ T9212] dump_stack_lvl+0x18c/0x250 [ 225.535714][ T9212] ? show_regs_print_info+0x20/0x20 [ 225.540959][ T9212] ? load_image+0x400/0x400 [ 225.545524][ T9212] ? __might_sleep+0xe0/0xe0 [ 225.550163][ T9212] ? __lock_acquire+0x7d40/0x7d40 [ 225.555254][ T9212] should_fail_ex+0x39d/0x4d0 [ 225.560002][ T9212] should_failslab+0x9/0x20 [ 225.564544][ T9212] slab_pre_alloc_hook+0x59/0x310 [ 225.569619][ T9212] ? __request_module+0x2ed/0x600 [ 225.574685][ T9212] ? __request_module+0x2ed/0x600 [ 225.579748][ T9212] __kmem_cache_alloc_node+0x53/0x250 [ 225.585165][ T9212] ? __request_module+0x2ed/0x600 [ 225.590215][ T9212] __kmalloc_node_track_caller+0xa2/0x230 [ 225.595978][ T9212] kstrdup+0x3b/0x80 [ 225.599901][ T9212] __request_module+0x2ed/0x600 [ 225.604774][ T9212] ? module_enforce_rwx_sections+0x150/0x150 [ 225.610770][ T9212] ? dev_load+0x21/0x1f0 [ 225.615072][ T9212] ? bpf_lsm_capable+0x9/0x10 [ 225.619784][ T9212] ? dev_load+0x21/0x1f0 [ 225.624037][ T9212] dev_load+0x18b/0x1f0 [ 225.628209][ T9212] dev_ioctl+0x59f/0x1140 [ 225.632560][ T9212] sock_do_ioctl+0x239/0x310 [ 225.637258][ T9212] ? sock_show_fdinfo+0xb0/0xb0 [ 225.642180][ T9212] sock_ioctl+0x5ba/0x7e0 [ 225.646527][ T9212] ? sock_poll+0x3e0/0x3e0 [ 225.650986][ T9212] ? bpf_lsm_file_ioctl+0x9/0x10 [ 225.655938][ T9212] ? security_file_ioctl+0x80/0xa0 [ 225.661069][ T9212] ? sock_poll+0x3e0/0x3e0 [ 225.665492][ T9212] __se_sys_ioctl+0xfd/0x170 [ 225.670113][ T9212] do_syscall_64+0x55/0xa0 [ 225.674541][ T9212] ? clear_bhb_loop+0x40/0x90 [ 225.679230][ T9212] ? clear_bhb_loop+0x40/0x90 [ 225.683924][ T9212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.689821][ T9212] RIP: 0033:0x7f4cbbf9c799 [ 225.694244][ T9212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.713866][ T9212] RSP: 002b:00007f4cbce81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.722915][ T9212] RAX: ffffffffffffffda RBX: 00007f4cbc215fa0 RCX: 00007f4cbbf9c799 [ 225.730896][ T9212] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 225.738967][ T9212] RBP: 00007f4cbce81090 R08: 0000000000000000 R09: 0000000000000000 [ 225.746950][ T9212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.754931][ T9212] R13: 00007f4cbc216038 R14: 00007f4cbc215fa0 R15: 00007ffd76b36fc8 [ 225.762947][ T9212] [ 226.156341][ T9227] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 226.175099][ T9227] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 226.190511][ T9227] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 226.241064][ T9227] netlink: 'syz.0.955': attribute type 29 has an invalid length. [ 226.300855][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 226.441658][ T9234] pimreg0: tun_chr_ioctl cmd 1074812118 [ 226.466970][ T9234] pimreg0: tun_chr_ioctl cmd 35111 [ 226.523860][ T9234] netlink: 'syz.2.958': attribute type 11 has an invalid length. [ 226.535989][ T9234] netlink: 126332 bytes leftover after parsing attributes in process `syz.2.958'. [ 226.943048][ T9248] FAULT_INJECTION: forcing a failure. [ 226.943048][ T9248] name failslab, interval 1, probability 0, space 0, times 0 [ 226.963709][ T9248] CPU: 1 PID: 9248 Comm: syz.1.963 Not tainted syzkaller #0 [ 226.971181][ T9248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.981299][ T9248] Call Trace: [ 226.984609][ T9248] [ 226.987585][ T9248] dump_stack_lvl+0x18c/0x250 [ 226.992304][ T9248] ? show_regs_print_info+0x20/0x20 [ 226.997543][ T9248] ? load_image+0x400/0x400 [ 227.002073][ T9248] ? __might_sleep+0xe0/0xe0 [ 227.006682][ T9248] ? __lock_acquire+0x7d40/0x7d40 [ 227.011749][ T9248] should_fail_ex+0x39d/0x4d0 [ 227.016476][ T9248] should_failslab+0x9/0x20 [ 227.021018][ T9248] slab_pre_alloc_hook+0x59/0x310 [ 227.026083][ T9248] ? call_usermodehelper_setup+0x8e/0x260 [ 227.031840][ T9248] __kmem_cache_alloc_node+0x53/0x250 [ 227.037266][ T9248] ? call_usermodehelper_setup+0x8e/0x260 [ 227.043030][ T9248] kmalloc_trace+0x2a/0xe0 [ 227.047480][ T9248] call_usermodehelper_setup+0x8e/0x260 [ 227.053039][ T9248] ? __request_module+0x600/0x600 [ 227.058076][ T9248] __request_module+0x3bb/0x600 [ 227.062969][ T9248] ? module_enforce_rwx_sections+0x150/0x150 [ 227.068961][ T9248] ? dev_load+0x21/0x1f0 [ 227.073223][ T9248] ? bpf_lsm_capable+0x9/0x10 [ 227.077921][ T9248] ? dev_load+0x21/0x1f0 [ 227.082164][ T9248] dev_load+0x18b/0x1f0 [ 227.086323][ T9248] dev_ioctl+0x59f/0x1140 [ 227.090660][ T9248] sock_do_ioctl+0x239/0x310 [ 227.095262][ T9248] ? sock_show_fdinfo+0xb0/0xb0 [ 227.100231][ T9248] sock_ioctl+0x5ba/0x7e0 [ 227.104589][ T9248] ? sock_poll+0x3e0/0x3e0 [ 227.109020][ T9248] ? bpf_lsm_file_ioctl+0x9/0x10 [ 227.113967][ T9248] ? security_file_ioctl+0x80/0xa0 [ 227.119150][ T9248] ? sock_poll+0x3e0/0x3e0 [ 227.123568][ T9248] __se_sys_ioctl+0xfd/0x170 [ 227.128167][ T9248] do_syscall_64+0x55/0xa0 [ 227.132594][ T9248] ? clear_bhb_loop+0x40/0x90 [ 227.137274][ T9248] ? clear_bhb_loop+0x40/0x90 [ 227.142001][ T9248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.147891][ T9248] RIP: 0033:0x7f4cbbf9c799 [ 227.152331][ T9248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.171966][ T9248] RSP: 002b:00007f4cbce81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.180479][ T9248] RAX: ffffffffffffffda RBX: 00007f4cbc215fa0 RCX: 00007f4cbbf9c799 [ 227.188460][ T9248] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 227.196431][ T9248] RBP: 00007f4cbce81090 R08: 0000000000000000 R09: 0000000000000000 [ 227.204401][ T9248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.212545][ T9248] R13: 00007f4cbc216038 R14: 00007f4cbc215fa0 R15: 00007ffd76b36fc8 [ 227.220630][ T9248] [ 228.339594][ T9289] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.976'. [ 228.391675][ T9291] netlink: 152 bytes leftover after parsing attributes in process `syz.1.977'. [ 228.718413][ T9306] validate_nla: 3 callbacks suppressed [ 228.718429][ T9306] netlink: 'syz.2.981': attribute type 21 has an invalid length. [ 228.740444][ T9306] netlink: 'syz.2.981': attribute type 6 has an invalid length. [ 228.750897][ T9306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.981'. [ 228.953361][ T9319] netlink: 10 bytes leftover after parsing attributes in process `syz.3.984'. [ 230.319144][ T9344] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.991'. [ 230.383759][ T9344] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 230.413133][ T9344] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.991'. [ 230.490209][ T9344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.497698][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 230.505456][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 230.513060][ T9344] IPv6: NLM_F_CREATE should be set when creating new route [ 231.044749][ T9376] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 231.055703][ T9376] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 231.066615][ T9376] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 231.075072][ T9376] netlink: 'syz.3.997': attribute type 29 has an invalid length. [ 231.237804][ T9382] netlink: 'syz.2.1002': attribute type 10 has an invalid length. [ 231.246361][ T9382] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1002'. [ 231.370927][ T9385] C: renamed from team_slave_0 [ 231.382007][ T9385] netlink: 'syz.2.1003': attribute type 2 has an invalid length. [ 231.395352][ T9385] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1003'. [ 231.404806][ T9385] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 231.692252][ T9397] netlink: 'syz.0.1007': attribute type 10 has an invalid length. [ 231.703304][ T9397] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1007'. [ 231.715500][ T9397] hsr0: entered promiscuous mode [ 231.723925][ T9397] bridge0: port 3(hsr0) entered blocking state [ 231.732456][ T9397] bridge0: port 3(hsr0) entered disabled state [ 231.739805][ T9397] hsr0: entered allmulticast mode [ 231.745010][ T9397] hsr_slave_0: entered allmulticast mode [ 231.752860][ T9397] hsr_slave_1: entered allmulticast mode [ 231.761837][ T9397] bridge0: port 3(hsr0) entered blocking state [ 231.768169][ T9397] bridge0: port 3(hsr0) entered forwarding state [ 233.474665][ T9407] syzkaller0: entered promiscuous mode [ 233.482238][ T9407] syzkaller0: entered allmulticast mode [ 233.566667][ T9417] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1012'. [ 235.517299][ T9430] validate_nla: 2 callbacks suppressed [ 235.517310][ T9430] netlink: 'syz.2.1012': attribute type 39 has an invalid length. [ 235.824466][ T9445] netlink: 'syz.3.1018': attribute type 21 has an invalid length. [ 235.833527][ T9445] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1018'. [ 235.912171][ T9442] netlink: 'syz.1.1016': attribute type 10 has an invalid length. [ 235.978179][ T9442] team0: Device ipvlan1 failed to register rx_handler [ 236.443215][ T9464] netlink: 'syz.1.1025': attribute type 21 has an invalid length. [ 236.467707][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 236.701311][ T9471] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1027'. [ 236.727035][ T9471] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1027'. [ 237.275665][ T9482] netlink: 'syz.1.1031': attribute type 10 has an invalid length. [ 237.284393][ T9482] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1031'. [ 237.849046][ T9485] C: renamed from team_slave_0 (while UP) [ 237.874528][ T9485] netlink: 'syz.1.1032': attribute type 2 has an invalid length. [ 237.886254][ T9485] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1032'. [ 237.903056][ T9485] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 238.014713][ T9490] syzkaller0: entered promiscuous mode [ 238.027604][ T9490] syzkaller0: entered allmulticast mode [ 238.072724][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1035'. [ 240.174162][ T9504] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1039'. [ 240.245497][ T9504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.284275][ T9504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.317290][ T9504] bond0 (unregistering): Released all slaves [ 240.475765][ T9514] netlink: 'syz.0.1042': attribute type 12 has an invalid length. [ 240.516873][ T9514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1042'. [ 240.546067][ T9515] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 240.710558][ T9517] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.875743][ T9519] ÿ: renamed from bond_slave_0 [ 241.028221][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.104123][ T9522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.176429][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.255599][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.336676][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.406690][ T9524] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.480448][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.521060][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.550744][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.566744][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1045'. [ 241.580860][ T9519] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 241.593655][ T9519] CPU: 1 PID: 9519 Comm: syz.2.1044 Not tainted syzkaller #0 [ 241.601067][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.611148][ T9519] Call Trace: [ 241.614436][ T9519] [ 241.617388][ T9519] dump_stack_lvl+0x18c/0x250 [ 241.622091][ T9519] ? show_regs_print_info+0x20/0x20 [ 241.627308][ T9519] ? load_image+0x400/0x400 [ 241.631859][ T9519] sysfs_warn_dup+0x8e/0xa0 [ 241.636387][ T9519] sysfs_do_create_link_sd+0xc0/0x110 [ 241.641774][ T9519] device_add_class_symlinks+0x1cf/0x240 [ 241.647431][ T9519] device_add+0x507/0xc20 [ 241.651778][ T9519] wiphy_register+0x1dad/0x2ae0 [ 241.656661][ T9519] ? cfg80211_event_work+0x40/0x40 [ 241.661780][ T9519] ? minstrel_ht_alloc+0x88a/0x990 [ 241.666914][ T9519] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 241.673007][ T9519] ieee80211_register_hw+0x3464/0x4250 [ 241.678505][ T9519] ? ieee80211_tasklet_handler+0x20/0x20 [ 241.684158][ T9519] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 241.690074][ T9519] ? __debug_object_init+0xec/0x450 [ 241.695292][ T9519] ? __asan_memset+0x22/0x40 [ 241.699992][ T9519] ? __hrtimer_init+0x186/0x270 [ 241.704862][ T9519] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 241.710628][ T9519] ? mac80211_hwsim_free+0x220/0x220 [ 241.716015][ T9519] ? rcu_is_watching+0x15/0xb0 [ 241.720828][ T9519] ? kstrndup+0xbd/0x140 [ 241.725092][ T9519] hwsim_new_radio_nl+0xdc9/0x1a90 [ 241.730229][ T9519] ? __nla_validate+0x50/0x50 [ 241.734944][ T9519] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 241.741302][ T9519] ? __nla_parse+0x40/0x50 [ 241.745730][ T9519] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 241.752157][ T9519] genl_family_rcv_msg_doit+0x211/0x310 [ 241.757713][ T9519] ? end_current_label_crit_section+0x170/0x170 [ 241.763969][ T9519] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 241.769884][ T9519] ? bpf_lsm_capable+0x9/0x10 [ 241.774570][ T9519] ? security_capable+0x89/0xb0 [ 241.779438][ T9519] genl_rcv_msg+0x619/0x7a0 [ 241.783969][ T9519] ? genl_bind+0x360/0x360 [ 241.788403][ T9519] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 241.794751][ T9519] ? ref_tracker_free+0x690/0x840 [ 241.799802][ T9519] netlink_rcv_skb+0x241/0x4d0 [ 241.804587][ T9519] ? genl_bind+0x360/0x360 [ 241.809013][ T9519] ? netlink_ack+0x1180/0x1180 [ 241.813813][ T9519] ? __lock_acquire+0x7d40/0x7d40 [ 241.818858][ T9519] ? down_read+0x1ac/0x2e0 [ 241.823286][ T9519] genl_rcv+0x28/0x40 [ 241.827285][ T9519] netlink_unicast+0x751/0x8d0 [ 241.832120][ T9519] netlink_sendmsg+0x8d0/0xbf0 [ 241.837006][ T9519] ? netlink_getsockopt+0x590/0x590 [ 241.842227][ T9519] ? aa_sock_msg_perm+0x94/0x150 [ 241.847182][ T9519] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.852483][ T9519] ? security_socket_sendmsg+0x80/0xa0 [ 241.857960][ T9519] ? netlink_getsockopt+0x590/0x590 [ 241.863261][ T9519] ____sys_sendmsg+0x5ba/0x960 [ 241.868042][ T9519] ? __asan_memset+0x22/0x40 [ 241.872642][ T9519] ? __sys_sendmsg_sock+0x30/0x30 [ 241.877676][ T9519] ? __import_iovec+0x5f2/0x850 [ 241.882593][ T9519] ? import_iovec+0x73/0xa0 [ 241.887118][ T9519] ___sys_sendmsg+0x2a6/0x360 [ 241.891824][ T9519] ? __sys_sendmsg+0x2a0/0x2a0 [ 241.896618][ T9519] ? debug_mutex_init+0x38/0x70 [ 241.901513][ T9519] __se_sys_sendmsg+0x1c2/0x2b0 [ 241.906440][ T9519] ? __x64_sys_sendmsg+0x80/0x80 [ 241.911411][ T9519] ? lockdep_hardirqs_on+0x98/0x150 [ 241.916624][ T9519] do_syscall_64+0x55/0xa0 [ 241.921052][ T9519] ? clear_bhb_loop+0x40/0x90 [ 241.925746][ T9519] ? clear_bhb_loop+0x40/0x90 [ 241.930434][ T9519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.936356][ T9519] RIP: 0033:0x7f0fee19c799 [ 241.940812][ T9519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.960433][ T9519] RSP: 002b:00007f0feef8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.968880][ T9519] RAX: ffffffffffffffda RBX: 00007f0fee415fa0 RCX: 00007f0fee19c799 [ 241.976871][ T9519] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 241.984855][ T9519] RBP: 00007f0fee232c99 R08: 0000000000000000 R09: 0000000000000000 [ 241.992837][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.000816][ T9519] R13: 00007f0fee416038 R14: 00007f0fee415fa0 R15: 00007ffc522da3e8 [ 242.008831][ T9519] [ 242.656660][ T9535] bond_slave_0: left promiscuous mode [ 242.662770][ T9535] bond_slave_1: left promiscuous mode [ 242.871490][ T9542] netlink: 'syz.3.1050': attribute type 9 has an invalid length. [ 242.961292][ T9535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.003092][ T9535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.042058][ T9535] bond0 (unregistering): Released all slaves [ 243.131691][ T9530] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 243.202749][ T9530] team0: Device ipvlan1 failed to register rx_handler [ 243.253530][ T9539] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 243.359724][ T9543] netlink: 'syz.3.1050': attribute type 9 has an invalid length. [ 243.398958][ T9530] syz.1.1047 (9530) used greatest stack depth: 19184 bytes left [ 243.915604][ T9558] wg2: entered promiscuous mode [ 243.930878][ T9558] wg2: entered allmulticast mode [ 246.172389][ T9591] __nla_validate_parse: 5 callbacks suppressed [ 246.172415][ T9591] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1064'. [ 246.201292][ T9590] netlink: 'syz.3.1064': attribute type 153 has an invalid length. [ 246.276006][ T9590] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 246.339085][ T9590] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1064'. [ 250.036758][ T9603] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.043562][ T9603] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.065209][ T9602] delete_channel: no stack [ 250.925859][ T9629] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 251.022209][ T9629] team0: Device wg1 is of different type [ 251.256616][ T9629] syz.1.1077 (9629) used greatest stack depth: 17960 bytes left [ 256.001769][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.009196][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.581570][ T9705] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 256.592201][ T9705] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 256.712838][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1099'. [ 258.940552][ T9751] netlink: 'syz.2.1110': attribute type 10 has an invalid length. [ 258.948976][ T9751] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1110'. [ 258.987381][ T9751] netlink: 'syz.2.1110': attribute type 4 has an invalid length. [ 259.690448][ T9766] netlink: 'syz.0.1112': attribute type 7 has an invalid length. [ 260.218119][ T9780] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 260.241285][ T9780] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 260.328940][ T9781] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 260.346129][ T9781] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 260.355532][ T9783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1118'. [ 260.388142][ T9786] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1119'. [ 260.403754][ T9786] netlink: zone id is out of range [ 260.409410][ T9786] netlink: zone id is out of range [ 260.414970][ T9786] netlink: zone id is out of range [ 260.430759][ T9786] netlink: zone id is out of range [ 260.464430][ T9786] netlink: zone id is out of range [ 260.488269][ T9786] netlink: zone id is out of range [ 260.511641][ T9786] netlink: zone id is out of range [ 260.571589][ T9786] netlink: zone id is out of range [ 260.609410][ T9786] netlink: zone id is out of range [ 260.656549][ T9786] netlink: zone id is out of range [ 260.708233][ T9785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.808742][ T9801] bridge0: port 3(team0) entered disabled state [ 260.884261][ T9801] bridge_slave_1: left allmulticast mode [ 260.896625][ T9801] bridge_slave_1: left promiscuous mode [ 260.917822][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.975797][ T9801] bridge_slave_0: left allmulticast mode [ 260.981814][ T9801] bridge_slave_0: left promiscuous mode [ 261.002868][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.534051][ T9807] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1125'. [ 262.137048][ T9807] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1125'. [ 262.155371][ T9807] tipc: Started in network mode [ 262.182098][ T9807] tipc: Node identity d, cluster identity 56 [ 262.211123][ T9807] tipc: Node number set to 13 [ 262.605552][ T9820] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1135'. [ 262.630094][ T9820] batadv_slave_1: entered promiscuous mode [ 263.449516][ T9828] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1130'. [ 263.947166][ T9830] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1131'. [ 263.976254][ T9842] netlink: 'syz.2.1134': attribute type 10 has an invalid length. [ 264.009947][ T9842] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1134'. [ 264.054440][ T9830] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 264.422735][ T9861] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1138'. [ 264.437056][ T9861] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.1138'. [ 264.463341][ T9860] netlink: 'syz.0.1140': attribute type 10 has an invalid length. [ 264.550528][ T9862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.871232][ T9872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 265.046175][ T9889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1149'. [ 266.210883][ T9903] pimreg0: tun_chr_ioctl cmd 1074812118 [ 266.229591][ T9903] pimreg0: tun_chr_ioctl cmd 35111 [ 267.134830][ T9915] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1156'. [ 268.026813][ T9922] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1158'. [ 268.040721][ T9922] netlink: 'syz.1.1158': attribute type 12 has an invalid length. [ 268.048702][ T9922] netlink: 'syz.1.1158': attribute type 15 has an invalid length. [ 268.077894][ T9921] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1159'. [ 268.126502][ T9921] net_ratelimit: 216 callbacks suppressed [ 268.126516][ T9921] netlink: zone id is out of range [ 270.681256][ T9978] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 270.693554][ T9978] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1172'. [ 270.721971][ T5779] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 271.036199][ T9989] netlink: 'syz.2.1175': attribute type 21 has an invalid length. [ 271.086121][ T9989] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1175'. [ 271.095275][ T9989] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 271.148506][ T9989] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1175'. [ 272.803878][T10019] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 273.406353][T10028] netlink: 'syz.1.1185': attribute type 39 has an invalid length. [ 276.563969][T10055] netlink: 'syz.1.1194': attribute type 4 has an invalid length. [ 276.599319][T10055] netlink: 161460 bytes leftover after parsing attributes in process `syz.1.1194'. [ 277.173596][T10071] netlink: 'syz.0.1199': attribute type 21 has an invalid length. [ 278.103188][T10101] netlink: 'syz.1.1206': attribute type 2 has an invalid length. [ 278.111928][T10101] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1206'. [ 278.471439][T10108] netlink: 'syz.1.1208': attribute type 5 has an invalid length. [ 278.734752][T10118] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1210'. [ 279.423191][T10143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1217'. [ 279.678247][T10151] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 279.754943][T10155] netlink: 'syz.1.1220': attribute type 9 has an invalid length. [ 279.767816][T10155] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1220'. [ 279.976095][T10156] netlink: 'syz.1.1220': attribute type 9 has an invalid length. [ 279.984205][T10156] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1220'. [ 280.113945][ T5779] Bluetooth: hci2: ISO packet for unknown connection handle 15 [ 281.269978][T10187] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1229'. [ 281.279736][T10189] netlink: 'syz.1.1229': attribute type 15 has an invalid length. [ 281.290353][T10189] netlink: 'syz.1.1229': attribute type 7 has an invalid length. [ 282.783562][T10212] netlink: 'syz.3.1235': attribute type 21 has an invalid length. [ 282.796848][T10212] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1235'. [ 282.825433][T10212] netlink: 'syz.3.1235': attribute type 4 has an invalid length. [ 282.834851][T10212] netlink: 'syz.3.1235': attribute type 5 has an invalid length. [ 282.843395][T10212] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1235'. [ 282.854087][T10214] netlink: 'syz.2.1236': attribute type 10 has an invalid length. [ 282.871977][T10214] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1236'. [ 283.065798][T10220] netlink: 'syz.3.1238': attribute type 21 has an invalid length. [ 283.084162][T10220] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1238'. [ 283.109233][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1237'. [ 283.390100][T10236] netlink: 'syz.2.1241': attribute type 21 has an invalid length. [ 283.418863][T10236] netlink: 14284 bytes leftover after parsing attributes in process `syz.2.1241'. [ 283.418877][T10238] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1242'. [ 283.480005][T10238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.514279][T10238] pim6reg1: entered promiscuous mode [ 283.519672][T10238] pim6reg1: entered allmulticast mode [ 283.726667][T10245] syzkaller0: entered promiscuous mode [ 283.732341][T10245] syzkaller0: entered allmulticast mode [ 284.482721][T10283] netlink: 'syz.0.1254': attribute type 29 has an invalid length. [ 285.716703][T10283] netlink: 'syz.0.1254': attribute type 29 has an invalid length. [ 285.953155][T10299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.962741][T10299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.972712][T10299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.987046][T10299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.148224][T10311] netlink: 'syz.0.1262': attribute type 39 has an invalid length. [ 286.318010][T10321] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1264'. [ 286.593833][T10330] netlink: 'syz.0.1268': attribute type 12 has an invalid length. [ 286.601946][T10330] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1268'. [ 287.384022][T10349] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1274'. [ 287.394605][T10349] bridge_slave_1: default FDB implementation only supports local addresses [ 288.373482][T10374] __nla_validate_parse: 2 callbacks suppressed [ 288.373499][T10374] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1280'. [ 288.547442][T10378] validate_nla: 2 callbacks suppressed [ 288.547476][T10378] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 288.587380][T10378] hsr0: entered promiscuous mode [ 288.666966][T10378] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 288.716241][T10378] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 288.755343][T10378] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 288.816701][T10378] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 288.824446][T10374] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 288.843716][T10374] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1280'. [ 289.595209][T10392] netlink: 'syz.1.1287': attribute type 6 has an invalid length. [ 289.600082][T10390] netlink: 'syz.3.1286': attribute type 2 has an invalid length. [ 289.636276][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1287'. [ 289.665404][T10394] sit0: entered promiscuous mode [ 289.673337][T10394] sit0: entered allmulticast mode [ 289.703076][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1287'. [ 289.703601][T10394] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.1288'. [ 289.756047][T10397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1287'. [ 289.948581][T10408] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 289.965608][T10408] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1290'. [ 289.981680][T10408] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1290'. [ 290.028039][T10411] netlink: 'syz.1.1293': attribute type 12 has an invalid length. [ 290.046132][T10411] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1293'. [ 290.065620][T10413] netlink: 'syz.1.1293': attribute type 12 has an invalid length. [ 290.090042][T10413] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1293'. [ 290.253134][T10408] netlink: 'syz.3.1290': attribute type 21 has an invalid length. [ 290.821329][T10433] netlink: 'syz.0.1300': attribute type 29 has an invalid length. [ 290.829324][T10433] netlink: 'syz.0.1300': attribute type 3 has an invalid length. [ 291.828270][T10446] erspan0: refused to change device tx_queue_len [ 291.834670][T10446] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 292.565026][T10494] veth1_macvtap: entered allmulticast mode [ 294.094622][T10543] validate_nla: 3 callbacks suppressed [ 294.094666][T10543] netlink: 'syz.1.1331': attribute type 9 has an invalid length. [ 295.107486][T10549] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 295.114421][T10549] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 295.176678][T10552] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 295.200245][T10552] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 295.504610][T10578] netlink: 'syz.0.1338': attribute type 21 has an invalid length. [ 295.515153][T10578] __nla_validate_parse: 9 callbacks suppressed [ 295.515166][T10578] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1338'. [ 295.977905][T10601] FAULT_INJECTION: forcing a failure. [ 295.977905][T10601] name failslab, interval 1, probability 0, space 0, times 0 [ 295.995767][T10601] CPU: 1 PID: 10601 Comm: syz.3.1346 Not tainted syzkaller #0 [ 296.003273][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.013342][T10601] Call Trace: [ 296.016624][T10601] [ 296.019549][T10601] dump_stack_lvl+0x18c/0x250 [ 296.024254][T10601] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.030510][T10601] ? show_regs_print_info+0x20/0x20 [ 296.035717][T10601] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.041883][T10601] should_fail_ex+0x39d/0x4d0 [ 296.046565][T10601] should_failslab+0x9/0x20 [ 296.051244][T10601] slab_pre_alloc_hook+0x59/0x310 [ 296.056273][T10601] kmem_cache_alloc+0x5a/0x2d0 [ 296.061034][T10601] ? prepare_creds+0x30/0x5d0 [ 296.065713][T10601] prepare_creds+0x30/0x5d0 [ 296.070208][T10601] ? dup_task_struct+0x166/0x7c0 [ 296.075144][T10601] copy_creds+0x105/0xa70 [ 296.079470][T10601] copy_process+0x953/0x3d80 [ 296.084071][T10601] ? __pidfd_prepare+0x140/0x140 [ 296.089008][T10601] kernel_clone+0x24b/0x8a0 [ 296.093517][T10601] ? create_io_thread+0x190/0x190 [ 296.098542][T10601] __x64_sys_clone+0x1b7/0x230 [ 296.103297][T10601] ? __ia32_sys_vfork+0x140/0x140 [ 296.108333][T10601] ? lock_chain_count+0x20/0x20 [ 296.113172][T10601] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 296.119150][T10601] ? lockdep_hardirqs_on+0x98/0x150 [ 296.124448][T10601] do_syscall_64+0x55/0xa0 [ 296.128864][T10601] ? clear_bhb_loop+0x40/0x90 [ 296.133533][T10601] ? clear_bhb_loop+0x40/0x90 [ 296.138212][T10601] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.144100][T10601] RIP: 0033:0x7fec0e19c799 [ 296.148510][T10601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.168105][T10601] RSP: 002b:00007fec0f113fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 296.176509][T10601] RAX: ffffffffffffffda RBX: 00007fec0e415fa0 RCX: 00007fec0e19c799 [ 296.184471][T10601] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000045004400 [ 296.192443][T10601] RBP: 00007fec0f114090 R08: 0000000000000000 R09: 0000000000000000 [ 296.200491][T10601] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 296.208464][T10601] R13: 00007fec0e416038 R14: 00007fec0e415fa0 R15: 00007fffdfd9bad8 [ 296.216455][T10601] [ 296.834984][ T5779] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 299.042435][T10639] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1359'. [ 299.275613][T10645] FAULT_INJECTION: forcing a failure. [ 299.275613][T10645] name failslab, interval 1, probability 0, space 0, times 0 [ 299.373637][T10645] CPU: 1 PID: 10645 Comm: syz.3.1358 Not tainted syzkaller #0 [ 299.381185][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.391283][T10645] Call Trace: [ 299.394600][T10645] [ 299.397572][T10645] dump_stack_lvl+0x18c/0x250 [ 299.402304][T10645] ? show_regs_print_info+0x20/0x20 [ 299.407543][T10645] ? load_image+0x400/0x400 [ 299.412101][T10645] ? __lock_acquire+0x7d40/0x7d40 [ 299.417274][T10645] should_fail_ex+0x39d/0x4d0 [ 299.422007][T10645] should_failslab+0x9/0x20 [ 299.426552][T10645] slab_pre_alloc_hook+0x59/0x310 [ 299.431624][T10645] ? kernel_clone+0x24b/0x8a0 [ 299.436337][T10645] ? __x64_sys_clone+0x1b7/0x230 [ 299.441304][T10645] ? do_syscall_64+0x55/0xa0 [ 299.445940][T10645] kmem_cache_alloc_node+0x60/0x320 [ 299.451180][T10645] ? alloc_vmap_area+0x1b4/0x1e30 [ 299.456289][T10645] alloc_vmap_area+0x1b4/0x1e30 [ 299.461256][T10645] ? vm_map_ram+0xcb0/0xcb0 [ 299.465807][T10645] ? rcu_is_watching+0x15/0xb0 [ 299.470627][T10645] __get_vm_area_node+0x162/0x370 [ 299.475716][T10645] __vmalloc_node_range+0x36e/0x1330 [ 299.481043][T10645] ? copy_process+0x586/0x3d80 [ 299.485926][T10645] ? free_vm_area+0x50/0x50 [ 299.490473][T10645] ? arch_dup_task_struct+0x57/0xd0 [ 299.495717][T10645] ? __asan_memcpy+0x40/0x70 [ 299.500354][T10645] dup_task_struct+0x3d0/0x7c0 [ 299.505243][T10645] ? copy_process+0x586/0x3d80 [ 299.510045][T10645] ? lockdep_hardirqs_on+0x98/0x150 [ 299.515294][T10645] copy_process+0x586/0x3d80 [ 299.519921][T10645] ? __might_fault+0xaa/0x120 [ 299.524707][T10645] ? get_pid_task+0x20/0x1e0 [ 299.529352][T10645] ? __pidfd_prepare+0x140/0x140 [ 299.534375][T10645] kernel_clone+0x24b/0x8a0 [ 299.538942][T10645] ? create_io_thread+0x190/0x190 [ 299.544080][T10645] __x64_sys_clone+0x1b7/0x230 [ 299.548882][T10645] ? __fget_files+0x43d/0x4b0 [ 299.553608][T10645] ? __ia32_sys_vfork+0x140/0x140 [ 299.558723][T10645] ? lock_chain_count+0x20/0x20 [ 299.563640][T10645] ? lockdep_hardirqs_on+0x98/0x150 [ 299.568888][T10645] do_syscall_64+0x55/0xa0 [ 299.573339][T10645] ? clear_bhb_loop+0x40/0x90 [ 299.578050][T10645] ? clear_bhb_loop+0x40/0x90 [ 299.582768][T10645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.588707][T10645] RIP: 0033:0x7fec0e19c799 [ 299.593159][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.612984][T10645] RSP: 002b:00007fec0f0f2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 299.621443][T10645] RAX: ffffffffffffffda RBX: 00007fec0e416090 RCX: 00007fec0e19c799 [ 299.629447][T10645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000045004400 [ 299.637627][T10645] RBP: 00007fec0f0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 299.645629][T10645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 299.653635][T10645] R13: 00007fec0e416128 R14: 00007fec0e416090 R15: 00007fffdfd9bad8 [ 299.661696][T10645] [ 300.284756][T10645] syz.3.1358: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 300.328730][T10645] CPU: 1 PID: 10645 Comm: syz.3.1358 Not tainted syzkaller #0 [ 300.336358][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.346451][T10645] Call Trace: [ 300.349764][T10645] [ 300.352730][T10645] dump_stack_lvl+0x18c/0x250 [ 300.357466][T10645] ? show_regs_print_info+0x20/0x20 [ 300.362707][T10645] ? load_image+0x400/0x400 [ 300.367268][T10645] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 300.373730][T10645] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 300.380297][T10645] warn_alloc+0x246/0x340 [ 300.384690][T10645] ? slab_free_freelist_hook+0x130/0x1a0 [ 300.390387][T10645] ? zone_watermark_ok_safe+0x230/0x230 [ 300.395977][T10645] ? __get_vm_area_node+0x17b/0x370 [ 300.401249][T10645] ? __get_vm_area_node+0x17b/0x370 [ 300.406519][T10645] __vmalloc_node_range+0x393/0x1330 [ 300.411941][T10645] ? free_vm_area+0x50/0x50 [ 300.416486][T10645] ? arch_dup_task_struct+0x57/0xd0 [ 300.421730][T10645] ? __asan_memcpy+0x40/0x70 [ 300.426371][T10645] dup_task_struct+0x3d0/0x7c0 [ 300.431174][T10645] ? copy_process+0x586/0x3d80 [ 300.436000][T10645] ? lockdep_hardirqs_on+0x98/0x150 [ 300.441251][T10645] copy_process+0x586/0x3d80 [ 300.445870][T10645] ? __might_fault+0xaa/0x120 [ 300.450653][T10645] ? get_pid_task+0x20/0x1e0 [ 300.455294][T10645] ? __pidfd_prepare+0x140/0x140 [ 300.460310][T10645] kernel_clone+0x24b/0x8a0 [ 300.464872][T10645] ? create_io_thread+0x190/0x190 [ 300.470014][T10645] __x64_sys_clone+0x1b7/0x230 [ 300.474809][T10645] ? __fget_files+0x43d/0x4b0 [ 300.479542][T10645] ? __ia32_sys_vfork+0x140/0x140 [ 300.484658][T10645] ? lock_chain_count+0x20/0x20 [ 300.489661][T10645] ? lockdep_hardirqs_on+0x98/0x150 [ 300.494993][T10645] do_syscall_64+0x55/0xa0 [ 300.499446][T10645] ? clear_bhb_loop+0x40/0x90 [ 300.504156][T10645] ? clear_bhb_loop+0x40/0x90 [ 300.508875][T10645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.515704][T10645] RIP: 0033:0x7fec0e19c799 [ 300.520435][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.540112][T10645] RSP: 002b:00007fec0f0f2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 300.548592][T10645] RAX: ffffffffffffffda RBX: 00007fec0e416090 RCX: 00007fec0e19c799 [ 300.556703][T10645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000045004400 [ 300.564726][T10645] RBP: 00007fec0f0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 300.572849][T10645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 300.580871][T10645] R13: 00007fec0e416128 R14: 00007fec0e416090 R15: 00007fffdfd9bad8 [ 300.588941][T10645] [ 301.049219][T10645] Mem-Info: [ 301.062979][T10645] active_anon:13276 inactive_anon:0 isolated_anon:0 [ 301.062979][T10645] active_file:17188 inactive_file:40019 isolated_file:0 [ 301.062979][T10645] unevictable:768 dirty:106 writeback:0 [ 301.062979][T10645] slab_reclaimable:10634 slab_unreclaimable:93280 [ 301.062979][T10645] mapped:31662 shmem:9289 pagetables:614 [ 301.062979][T10645] sec_pagetables:0 bounce:0 [ 301.062979][T10645] kernel_misc_reclaimable:0 [ 301.062979][T10645] free:1338128 free_pcp:8640 free_cma:0 [ 301.191414][T10645] Node 0 active_anon:54676kB inactive_anon:0kB active_file:68752kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128124kB dirty:380kB writeback:0kB shmem:37100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12368kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no [ 301.283850][T10645] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 301.384568][T10645] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 301.466030][T10645] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 301.484408][T10645] Node 0 DMA32 free:1444972kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:57936kB inactive_anon:0kB active_file:68752kB inactive_file:159056kB unevictable:1536kB writepending:380kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:11100kB local_pcp:7212kB free_cma:0kB [ 301.578163][T10645] lowmem_reserve[]: 0 0 0 0 0 [ 301.590178][T10645] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 301.665611][T10645] lowmem_reserve[]: 0 0 0 0 0 [ 301.672682][T10645] Node 1 Normal free:3887140kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22880kB local_pcp:8480kB free_cma:0kB [ 301.725124][T10645] lowmem_reserve[]: 0 0 0 0 0 [ 301.734294][T10645] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 301.762396][T10645] Node 0 DMA32: 3*4kB (UME) 129*8kB (U) 514*16kB (U) 247*32kB (UME) 1648*64kB (UM) 627*128kB (UM) 238*256kB (UM) 86*512kB (UME) 24*1024kB (UME) 10*2048kB (UM) 266*4096kB (UM) = 1442452kB [ 301.816407][T10645] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 301.866093][T10645] Node 1 Normal: 249*4kB (UE) 62*8kB (UE) 41*16kB (UE) 74*32kB (UE) 20*64kB (UME) 7*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 946*4096kB (M) = 3887140kB [ 301.904846][T10645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 301.986481][T10645] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.017603][T10645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 302.052111][T10645] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 302.098937][T10645] 68749 total pagecache pages [ 302.113162][T10658] mac80211_hwsim hwsim3 wlan0: left promiscuous mode [ 302.129673][T10645] 0 pages in swap cache [ 302.150757][T10645] Free swap = 124996kB [ 302.155177][T10658] mac80211_hwsim hwsim3 wlan0: left allmulticast mode [ 302.171197][T10645] Total swap = 124996kB [ 302.175589][T10645] 2097051 pages RAM [ 302.188779][T10645] 0 pages HighMem/MovableOnly [ 302.193773][T10645] 416924 pages reserved [ 302.210617][T10645] 0 pages cma reserved [ 304.106684][T10680] netlink: 'syz.1.1367': attribute type 10 has an invalid length. [ 304.114592][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1367'. [ 304.180899][T10680] caif0: entered promiscuous mode [ 304.226030][T10680] caif0: entered allmulticast mode [ 304.260365][T10680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.681558][T10678] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 304.740707][T10678] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 306.230591][T10695] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1370'. [ 308.289355][T10716] netlink: 'syz.2.1376': attribute type 28 has an invalid length. [ 308.300906][T10716] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1376'. [ 308.415664][T10720] netlink: 'syz.0.1379': attribute type 13 has an invalid length. [ 308.425435][T10720] netlink: 'syz.0.1379': attribute type 58 has an invalid length. [ 308.433843][T10720] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1379'. [ 308.704875][T10729] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1381'. [ 310.958358][T10740] pim6reg1: entered promiscuous mode [ 310.973560][T10740] pim6reg1: entered allmulticast mode [ 311.488883][T10761] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1388'. [ 311.543078][T10768] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1391'. [ 311.558990][T10768] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1391'. [ 311.568683][T10767] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1391'. [ 311.584937][T10767] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1391'. [ 312.424254][T10784] netlink: 'syz.2.1396': attribute type 2 has an invalid length. [ 312.442681][T10784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1396'. [ 313.145645][T10800] delete_channel: no stack [ 313.152387][T10803] netlink: 'syz.1.1399': attribute type 3 has an invalid length. [ 313.177532][T10803] netlink: 'syz.1.1399': attribute type 6 has an invalid length. [ 313.185499][T10803] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1399'. [ 313.442779][T10814] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1402'. [ 313.470458][T10814] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1402'. [ 313.480846][T10810] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1402'. [ 315.225460][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.245514][T10850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.315788][T10850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.334696][T10850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.744061][T10869] __nla_validate_parse: 2 callbacks suppressed [ 316.744092][T10869] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.1422'. [ 316.786742][T10869] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 317.028182][T10871] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 317.034390][T10871] syzkaller1: Linktype set failed because interface is up [ 317.394006][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.401526][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.057445][T10908] netlink: 'syz.2.1433': attribute type 12 has an invalid length. [ 320.065334][T10908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1433'. [ 320.729724][T10933] netlink: 'syz.1.1441': attribute type 29 has an invalid length. [ 320.752525][T10933] netlink: 'syz.1.1441': attribute type 29 has an invalid length. [ 320.762825][T10933] netlink: 'syz.1.1441': attribute type 29 has an invalid length. [ 321.023512][T10940] netlink: 'syz.1.1442': attribute type 10 has an invalid length. [ 321.032037][T10940] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1442'. [ 323.111003][T10978] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1454'. [ 323.299472][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.309906][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.320116][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.330697][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.341555][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.350982][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.413390][T10987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1457'. [ 323.970283][T11001] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1461'. [ 323.993530][T11001] pim6reg1: entered promiscuous mode [ 324.001883][T11001] pim6reg1: entered allmulticast mode [ 324.521271][ T6911] tipc: Subscription rejected, illegal request [ 325.112748][T11029] netlink: 'syz.0.1471': attribute type 21 has an invalid length. [ 325.146117][T11029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1471'. [ 325.929994][T11052] netlink: 'syz.3.1476': attribute type 39 has an invalid length. [ 328.608865][T11090] netlink: 'syz.1.1487': attribute type 46 has an invalid length. [ 328.830748][T11088] netlink: 'syz.0.1486': attribute type 33 has an invalid length. [ 328.876002][T11088] netlink: 'syz.0.1486': attribute type 3 has an invalid length. [ 328.921106][T11088] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1486'. [ 330.130794][T11123] netlink: 'syz.3.1497': attribute type 9 has an invalid length. [ 330.156726][T11123] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1497'. [ 331.686828][T11143] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 331.726957][T11143] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1503'. [ 332.195904][T11154] netlink: 'syz.2.1505': attribute type 2 has an invalid length. [ 332.223898][T11154] netlink: 'syz.2.1505': attribute type 8 has an invalid length. [ 332.256158][T11154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1505'. [ 332.556727][T11167] netpci0: tun_chr_ioctl cmd 2147767517 [ 333.410241][T11177] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 333.584094][T11177] team0: Device wg1 is of different type [ 334.221043][T11229] netlink: 'syz.3.1510': attribute type 1 has an invalid length. [ 334.248898][T11229] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1510'. [ 335.514089][T11257] netlink: 'syz.0.1519': attribute type 21 has an invalid length. [ 335.868702][T11260] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1520'. [ 336.051373][T11260] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 336.584640][T11280] netlink: 'syz.3.1527': attribute type 3 has an invalid length. [ 336.607224][T11280] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1527'. [ 336.608787][T11282] netlink: 'syz.1.1526': attribute type 3 has an invalid length. [ 336.624724][T11282] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 336.632709][T11282] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1526'. [ 336.807252][T11294] pimreg: tun_chr_ioctl cmd 1074025677 [ 336.812878][T11294] pimreg: linktype set to 780 [ 336.895411][T11298] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1533'. [ 336.961550][T11298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.246807][T11298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.261741][T11298] bond0 (unregistering): Released all slaves [ 337.279305][T11303] €Â0: renamed from batadv_slave_1 (while UP) [ 337.541473][T11314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1539'. [ 337.581031][T11314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1539'. [ 337.614977][T11324] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1539'. [ 337.629475][T11314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1539'. [ 337.666953][T11314] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1539'. [ 337.832757][T11324] netlink: 'syz.3.1539': attribute type 16 has an invalid length. [ 337.857668][T11324] veth1_macvtap: entered allmulticast mode [ 338.423773][T11371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.678543][T11385] netlink: 'syz.0.1558': attribute type 10 has an invalid length. [ 338.710884][T11385] bridge0: port 3(hsr0) entered disabled state [ 338.728105][T11385] hsr0: left allmulticast mode [ 338.732931][T11385] hsr_slave_0: left allmulticast mode [ 338.745236][T11385] hsr_slave_1: left allmulticast mode [ 338.754522][T11385] bridge0: port 3(hsr0) entered disabled state [ 339.025350][T11397] IPv6: NLM_F_CREATE should be specified when creating new route [ 339.096757][T11400] netlink: 'syz.1.1565': attribute type 21 has an invalid length. [ 339.149393][T11400] delete_channel: no stack [ 339.155027][T11400] delete_channel: no stack [ 339.825784][T11434] netlink: 'syz.0.1574': attribute type 21 has an invalid length. [ 339.846235][T11434] __nla_validate_parse: 2 callbacks suppressed [ 339.846278][T11434] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1574'. [ 339.892119][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1574'. [ 339.939360][T11438] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1575'. [ 340.086697][T11438] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 340.093826][T11438] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 340.176327][T11443] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 340.183355][T11443] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 341.107729][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.117367][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.126629][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.135766][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.144929][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.154102][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.163355][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.172599][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.181760][T11464] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 341.455012][T11473] netlink: 'syz.1.1584': attribute type 21 has an invalid length. [ 341.490992][T11473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1584'. [ 341.618454][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1585'. [ 341.637170][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1585'. [ 341.661554][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1585'. [ 341.683305][T11476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1585'. [ 341.885503][T11484] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1587'. [ 341.919612][T11484] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1587'. [ 342.506637][T11513] netlink: 'syz.2.1592': attribute type 153 has an invalid length. [ 343.552419][T11533] netlink: 'syz.1.1597': attribute type 1 has an invalid length. [ 344.498537][T11548] syzkaller0: entered promiscuous mode [ 344.516765][T11548] syzkaller0: entered allmulticast mode [ 344.553773][T11556] netlink: 'syz.3.1602': attribute type 33 has an invalid length. [ 346.700821][T11558] netlink: 'syz.1.1603': attribute type 10 has an invalid length. [ 346.709013][T11558] __nla_validate_parse: 6 callbacks suppressed [ 346.709025][T11558] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1603'. [ 346.882044][T11576] netlink: 'syz.3.1609': attribute type 10 has an invalid length. [ 346.898143][T11576] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1609'. [ 347.124016][T11591] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 347.354758][T11591] netlink: 'syz.1.1612': attribute type 29 has an invalid length. [ 347.563724][T11607] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1617'. [ 347.643028][T11609] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1618'. [ 347.654344][T11609] net_ratelimit: 3321 callbacks suppressed [ 347.654391][T11609] netlink: zone id is out of range [ 347.667363][T11609] netlink: zone id is out of range [ 347.673235][T11609] netlink: zone id is out of range [ 347.680660][T11609] netlink: zone id is out of range [ 347.688238][T11609] netlink: zone id is out of range [ 347.717688][T11609] netlink: zone id is out of range [ 347.723048][T11609] netlink: zone id is out of range [ 347.731478][T11609] netlink: zone id is out of range [ 347.752917][T11609] netlink: zone id is out of range [ 347.759561][T11609] netlink: zone id is out of range [ 348.027383][T11618] macvlan1: entered promiscuous mode [ 348.518693][T11620] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1622'. [ 348.556486][T11620] netlink: 22828 bytes leftover after parsing attributes in process `syz.1.1622'. [ 348.631336][T11614] netlink: 'syz.3.1620': attribute type 2 has an invalid length. [ 348.673625][T11614] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1620'. [ 349.460609][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 349.471716][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 349.483606][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1631'. [ 350.171188][T11656] netlink: 'syz.3.1635': attribute type 10 has an invalid length. [ 351.667548][T11673] delete_channel: no stack [ 351.890045][T11679] netlink: 'syz.2.1642': attribute type 3 has an invalid length. [ 351.927470][T11679] __nla_validate_parse: 2 callbacks suppressed [ 351.927506][T11679] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1642'. [ 351.987316][T11689] netlink: 'syz.0.1645': attribute type 2 has an invalid length. [ 352.005140][T11683] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1643'. [ 352.014904][T11689] netlink: 'syz.0.1645': attribute type 3 has an invalid length. [ 352.014947][T11689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1645'. [ 352.147508][T11695] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1646'. [ 352.158013][T11695] batadv_slave_1: entered promiscuous mode [ 352.425513][ T5779] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 352.540361][T11703] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1648'. [ 352.703258][ T6911] tipc: Subscription rejected, illegal request [ 353.167464][T11715] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1654'. [ 353.297653][T11718] netlink: 'syz.3.1655': attribute type 29 has an invalid length. [ 353.394703][T11718] netlink: 'syz.3.1655': attribute type 29 has an invalid length. [ 353.475981][T11721] netlink: 'syz.3.1655': attribute type 29 has an invalid length. [ 354.132210][T11733] netlink: 'syz.1.1657': attribute type 2 has an invalid length. [ 354.167801][T11733] netlink: 'syz.1.1657': attribute type 8 has an invalid length. [ 354.187772][T11733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1657'. [ 354.490109][T11743] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.1662'. [ 354.525272][T11743] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1662'. [ 356.575690][T11775] netlink: 'syz.3.1671': attribute type 10 has an invalid length. [ 356.589713][T11775] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1671'. [ 357.831125][T11804] __nla_validate_parse: 1 callbacks suppressed [ 357.831142][T11804] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1681'. [ 357.916998][T11804] netlink: 'syz.3.1681': attribute type 2 has an invalid length. [ 357.970386][T11804] netlink: 'syz.3.1681': attribute type 1 has an invalid length. [ 358.046044][T11804] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1681'. [ 358.576510][T11812] netlink: 'syz.2.1683': attribute type 10 has an invalid length. [ 358.584415][T11812] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1683'. [ 359.269614][ T6909] failed to send hello msg [ 359.297281][ T6909] failed while handling packet from 1:16384 [ 361.190581][T11888] netlink: 'syz.2.1697': attribute type 1 has an invalid length. [ 361.231308][T11888] netlink: 'syz.2.1697': attribute type 2 has an invalid length. [ 361.306015][T11888] netlink: 'syz.2.1697': attribute type 2 has an invalid length. [ 361.365675][T11888] netlink: 'syz.2.1697': attribute type 3 has an invalid length. [ 361.421757][T11888] netlink: 'syz.2.1697': attribute type 4 has an invalid length. [ 361.465879][T11888] netlink: 'syz.2.1697': attribute type 5 has an invalid length. [ 361.517774][T11888] netlink: 'syz.2.1697': attribute type 6 has an invalid length. [ 361.566849][T11888] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.1697'. [ 361.912480][T11909] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1705'. [ 362.393496][T11921] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1708'. [ 363.109583][T11927] Ÿë: port 1(ip6gretap0) entered blocking state [ 363.126580][T11927] Ÿë: port 1(ip6gretap0) entered disabled state [ 363.139089][T11927] ip6gretap0: entered allmulticast mode [ 363.202877][T11927] ip6gretap0: entered promiscuous mode [ 363.259148][T11931] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1711'. [ 363.361806][T11938] validate_nla: 8 callbacks suppressed [ 363.361822][T11938] netlink: 'syz.0.1713': attribute type 21 has an invalid length. [ 363.378413][T11938] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1713'. [ 363.487359][T11941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1713'. [ 363.998387][T11957] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 364.251569][T11965] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1722'. [ 367.166564][T11974] netlink: 'syz.1.1724': attribute type 10 has an invalid length. [ 367.187919][T11974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1724'. [ 367.206009][T11974] ================================================================== [ 367.214122][T11974] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 367.221966][T11974] Write of size 48 at addr ffff88805c76c090 by task syz.1.1724/11974 [ 367.230046][T11974] [ 367.232379][T11974] CPU: 0 PID: 11974 Comm: syz.1.1724 Not tainted syzkaller #0 [ 367.239847][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.250278][T11974] Call Trace: [ 367.253568][T11974] [ 367.256511][T11974] dump_stack_lvl+0x18c/0x250 [ 367.261211][T11974] ? __lock_acquire+0x7d40/0x7d40 [ 367.266251][T11974] ? show_regs_print_info+0x20/0x20 [ 367.271476][T11974] ? load_image+0x400/0x400 [ 367.275993][T11974] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 367.281464][T11974] ? __virt_addr_valid+0x18c/0x540 [ 367.286569][T11974] ? __virt_addr_valid+0x469/0x540 [ 367.291672][T11974] print_report+0xa8/0x210 [ 367.296086][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 367.301274][T11974] kasan_report+0x117/0x150 [ 367.305770][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 367.310877][T11974] kasan_check_range+0x241/0x290 [ 367.315805][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 367.321085][T11974] __asan_memcpy+0x40/0x70 [ 367.325493][T11974] __bpf_get_stackid+0x6bf/0x900 [ 367.330441][T11974] bpf_get_stackid_pe+0x343/0x410 [ 367.335633][T11974] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 367.341089][T11974] bpf_overflow_handler+0x1fc/0x510 [ 367.346302][T11974] ? lock_chain_count+0x20/0x20 [ 367.351145][T11974] ? bpf_overflow_handler+0xde/0x510 [ 367.356423][T11974] ? tp_perf_event_destroy+0x20/0x20 [ 367.361969][T11974] ? lockdep_hardirqs_on+0x98/0x150 [ 367.367269][T11974] ? __perf_event_account_interrupt+0x187/0x280 [ 367.373613][T11974] __perf_event_overflow+0x447/0x630 [ 367.378910][T11974] perf_swevent_event+0x324/0x630 [ 367.383939][T11974] ? __lock_acquire+0x1347/0x7d40 [ 367.388954][T11974] ? perf_tp_event+0x1450/0x1450 [ 367.393889][T11974] ___perf_sw_event+0x4a7/0x730 [ 367.398729][T11974] ? ___perf_sw_event+0x199/0x730 [ 367.403839][T11974] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 367.410244][T11974] ? __lock_acquire+0x1347/0x7d40 [ 367.415261][T11974] ? __get_user_4+0x11/0x20 [ 367.419772][T11974] ? mark_lock+0x94/0x320 [ 367.424094][T11974] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 367.430067][T11974] ? lock_chain_count+0x20/0x20 [ 367.434957][T11974] __perf_sw_event+0x139/0x270 [ 367.439724][T11974] do_user_addr_fault+0x123e/0x12c0 [ 367.444929][T11974] ? rcu_is_watching+0x15/0xb0 [ 367.449690][T11974] exc_page_fault+0x64/0x100 [ 367.454275][T11974] asm_exc_page_fault+0x26/0x30 [ 367.459111][T11974] RIP: 0010:__get_user_4+0x11/0x20 [ 367.464210][T11974] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 367.483896][T11974] RSP: 0018:ffffc90019c97d98 EFLAGS: 00050206 [ 367.489959][T11974] RAX: 000000110e22fff6 RBX: ffff88802f8b3b80 RCX: 26284c734cc6b300 [ 367.497921][T11974] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 367.505887][T11974] RBP: ffffc90019c97ed8 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 367.513846][T11974] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 00000000c004743e [ 367.521810][T11974] R13: ffff88802fef5830 R14: ffff88802fef5680 R15: 1ffff11005fdeb06 [ 367.529785][T11974] ppp_ioctl+0x3ac/0x1a90 [ 367.534198][T11974] ? ppp_poll+0x250/0x250 [ 367.538603][T11974] ? __fget_files+0x28/0x4b0 [ 367.543190][T11974] ? bpf_lsm_file_ioctl+0x9/0x10 [ 367.548127][T11974] ? security_file_ioctl+0x80/0xa0 [ 367.553235][T11974] ? ppp_poll+0x250/0x250 [ 367.557554][T11974] __se_sys_ioctl+0xfd/0x170 [ 367.562148][T11974] do_syscall_64+0x55/0xa0 [ 367.566565][T11974] ? clear_bhb_loop+0x40/0x90 [ 367.571238][T11974] ? clear_bhb_loop+0x40/0x90 [ 367.575912][T11974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.581816][T11974] RIP: 0033:0x7f4cbbf9c799 [ 367.586242][T11974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.606128][T11974] RSP: 002b:00007f4cbce81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.614536][T11974] RAX: ffffffffffffffda RBX: 00007f4cbc215fa0 RCX: 00007f4cbbf9c799 [ 367.622502][T11974] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000a [ 367.630551][T11974] RBP: 00007f4cbc032c99 R08: 0000000000000000 R09: 0000000000000000 [ 367.638610][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.646581][T11974] R13: 00007f4cbc216038 R14: 00007f4cbc215fa0 R15: 00007ffd76b36fc8 [ 367.654646][T11974] [ 367.657686][T11974] [ 367.659995][T11974] Allocated by task 11974: [ 367.664389][T11974] kasan_set_track+0x4e/0x70 [ 367.668975][T11974] __kasan_kmalloc+0x8f/0xa0 [ 367.673615][T11974] __kmalloc_node+0xb4/0x230 [ 367.678195][T11974] bpf_map_area_alloc+0x5e/0x110 [ 367.683125][T11974] prealloc_elems_and_freelist+0x86/0x1c0 [ 367.688839][T11974] stack_map_alloc+0x33a/0x4c0 [ 367.693596][T11974] map_create+0x877/0x12f0 [ 367.698024][T11974] __sys_bpf+0x651/0x890 [ 367.702256][T11974] __x64_sys_bpf+0x7c/0x90 [ 367.706747][T11974] do_syscall_64+0x55/0xa0 [ 367.711155][T11974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.717044][T11974] [ 367.719461][T11974] Last potentially related work creation: [ 367.725157][T11974] kasan_save_stack+0x3e/0x60 [ 367.729828][T11974] __kasan_record_aux_stack+0xaf/0xc0 [ 367.735188][T11974] call_rcu+0x153/0x950 [ 367.739335][T11974] nf_unregister_net_hooks+0xcb/0x130 [ 367.744697][T11974] nf_ct_netns_put+0x2d2/0x520 [ 367.749453][T11974] nf_conncount_destroy+0x41/0x150 [ 367.754552][T11974] ovs_ct_exit+0x9c/0x200 [ 367.758876][T11974] ovs_exit_net+0xed/0x7a0 [ 367.763278][T11974] cleanup_net+0x70a/0xbb0 [ 367.767697][T11974] process_scheduled_works+0xa5d/0x15d0 [ 367.773232][T11974] worker_thread+0xa55/0xfc0 [ 367.777808][T11974] kthread+0x2fa/0x390 [ 367.781886][T11974] ret_from_fork+0x48/0x80 [ 367.786299][T11974] ret_from_fork_asm+0x11/0x20 [ 367.791050][T11974] [ 367.793396][T11974] The buggy address belongs to the object at ffff88805c76c080 [ 367.793396][T11974] which belongs to the cache kmalloc-cg-64 of size 64 [ 367.807611][T11974] The buggy address is located 16 bytes inside of [ 367.807611][T11974] allocated 40-byte region [ffff88805c76c080, ffff88805c76c0a8) [ 367.821570][T11974] [ 367.823881][T11974] The buggy address belongs to the physical page: [ 367.830304][T11974] page:ffffea000171db00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c76c [ 367.840444][T11974] memcg:ffff888023a84801 [ 367.844677][T11974] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 367.852723][T11974] page_type: 0xffffffff() [ 367.857094][T11974] raw: 00fff00000000800 ffff888017c4da00 ffffea0001e5a1c0 0000000000000005 [ 367.865665][T11974] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888023a84801 [ 367.874298][T11974] page dumped because: kasan: bad access detected [ 367.880715][T11974] page_owner tracks the page as allocated [ 367.886508][T11974] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 9992, tgid 9991 (syz.3.1176), ts 272120421199, free_ts 269516194406 [ 367.904749][T11974] post_alloc_hook+0x1c1/0x200 [ 367.909527][T11974] get_page_from_freelist+0x1951/0x19e0 [ 367.915163][T11974] __alloc_pages+0x1f0/0x460 [ 367.919758][T11974] alloc_slab_page+0x5d/0x160 [ 367.924448][T11974] new_slab+0x87/0x2d0 [ 367.928525][T11974] ___slab_alloc+0xc5d/0x12f0 [ 367.933214][T11974] __kmem_cache_alloc_node+0x19e/0x250 [ 367.938672][T11974] __kmalloc_node+0xa4/0x230 [ 367.943266][T11974] kvmalloc_node+0x70/0x180 [ 367.947779][T11974] nf_hook_entries_grow+0x27d/0x6d0 [ 367.952988][T11974] __nf_register_net_hook+0x2c9/0x910 [ 367.958374][T11974] nf_register_net_hook+0xb2/0x190 [ 367.963597][T11974] nf_register_net_hooks+0x44/0x1b0 [ 367.968809][T11974] nf_ct_netns_do_get+0x213/0x5c0 [ 367.973843][T11974] nf_ct_netns_inet_get+0x3b/0x150 [ 367.979030][T11974] nf_conncount_init+0x127/0x380 [ 367.983965][T11974] page last free stack trace: [ 367.988623][T11974] free_unref_page_prepare+0x7b2/0x8c0 [ 367.994073][T11974] free_unref_page+0x32/0x2e0 [ 367.998740][T11974] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 368.004456][T11974] __apply_to_page_range+0x860/0xdd0 [ 368.009731][T11974] kasan_release_vmalloc+0x97/0xb0 [ 368.014846][T11974] __purge_vmap_area_lazy+0xfa7/0x1af0 [ 368.020403][T11974] drain_vmap_area_work+0x40/0xd0 [ 368.025429][T11974] process_scheduled_works+0xa5d/0x15d0 [ 368.030971][T11974] worker_thread+0xa55/0xfc0 [ 368.035565][T11974] kthread+0x2fa/0x390 [ 368.039631][T11974] ret_from_fork+0x48/0x80 [ 368.044051][T11974] ret_from_fork_asm+0x11/0x20 [ 368.048900][T11974] [ 368.051297][T11974] Memory state around the buggy address: [ 368.056999][T11974] ffff88805c76bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 368.065047][T11974] ffff88805c76c000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.073099][T11974] >ffff88805c76c080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 368.081408][T11974] ^ [ 368.086781][T11974] ffff88805c76c100: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.094840][T11974] ffff88805c76c180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 368.102892][T11974] ================================================================== [ 368.129621][T11974] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 368.136858][T11974] CPU: 0 PID: 11974 Comm: syz.1.1724 Not tainted syzkaller #0 [ 368.144328][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.154576][T11974] Call Trace: [ 368.157874][T11974] [ 368.160812][T11974] dump_stack_lvl+0x18c/0x250 [ 368.165514][T11974] ? show_regs_print_info+0x20/0x20 [ 368.170737][T11974] ? load_image+0x400/0x400 [ 368.175244][T11974] panic+0x2dc/0x730 [ 368.179148][T11974] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.185301][T11974] ? bpf_jit_dump+0xd0/0xd0 [ 368.189804][T11974] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 368.195690][T11974] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 368.201619][T11974] ? _raw_spin_unlock+0x40/0x40 [ 368.206704][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 368.211899][T11974] check_panic_on_warn+0x84/0xa0 [ 368.216939][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 368.222064][T11974] end_report+0x6f/0x130 [ 368.226298][T11974] kasan_report+0x128/0x150 [ 368.230799][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 368.235904][T11974] kasan_check_range+0x241/0x290 [ 368.240841][T11974] ? __bpf_get_stackid+0x6bf/0x900 [ 368.245946][T11974] __asan_memcpy+0x40/0x70 [ 368.250356][T11974] __bpf_get_stackid+0x6bf/0x900 [ 368.255286][T11974] bpf_get_stackid_pe+0x343/0x410 [ 368.260412][T11974] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 368.265865][T11974] bpf_overflow_handler+0x1fc/0x510 [ 368.271064][T11974] ? lock_chain_count+0x20/0x20 [ 368.275920][T11974] ? bpf_overflow_handler+0xde/0x510 [ 368.281291][T11974] ? tp_perf_event_destroy+0x20/0x20 [ 368.286572][T11974] ? lockdep_hardirqs_on+0x98/0x150 [ 368.291767][T11974] ? __perf_event_account_interrupt+0x187/0x280 [ 368.297996][T11974] __perf_event_overflow+0x447/0x630 [ 368.303296][T11974] perf_swevent_event+0x324/0x630 [ 368.308420][T11974] ? __lock_acquire+0x1347/0x7d40 [ 368.313445][T11974] ? perf_tp_event+0x1450/0x1450 [ 368.318481][T11974] ___perf_sw_event+0x4a7/0x730 [ 368.323363][T11974] ? ___perf_sw_event+0x199/0x730 [ 368.328388][T11974] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 368.334801][T11974] ? __lock_acquire+0x1347/0x7d40 [ 368.339835][T11974] ? __get_user_4+0x11/0x20 [ 368.344334][T11974] ? mark_lock+0x94/0x320 [ 368.348663][T11974] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 368.354636][T11974] ? lock_chain_count+0x20/0x20 [ 368.359479][T11974] __perf_sw_event+0x139/0x270 [ 368.364240][T11974] do_user_addr_fault+0x123e/0x12c0 [ 368.370007][T11974] ? rcu_is_watching+0x15/0xb0 [ 368.374797][T11974] exc_page_fault+0x64/0x100 [ 368.379403][T11974] asm_exc_page_fault+0x26/0x30 [ 368.384255][T11974] RIP: 0010:__get_user_4+0x11/0x20 [ 368.389450][T11974] Code: 48 c1 fa 3f 48 09 d0 0f 01 cb 0f b7 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 [ 368.409151][T11974] RSP: 0018:ffffc90019c97d98 EFLAGS: 00050206 [ 368.415391][T11974] RAX: 000000110e22fff6 RBX: ffff88802f8b3b80 RCX: 26284c734cc6b300 [ 368.423439][T11974] RDX: 0000000000000000 RSI: ffffffff8acadae0 RDI: ffffffff8b1c85a0 [ 368.431398][T11974] RBP: ffffc90019c97ed8 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 368.439360][T11974] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 00000000c004743e [ 368.447320][T11974] R13: ffff88802fef5830 R14: ffff88802fef5680 R15: 1ffff11005fdeb06 [ 368.455287][T11974] ppp_ioctl+0x3ac/0x1a90 [ 368.459614][T11974] ? ppp_poll+0x250/0x250 [ 368.464018][T11974] ? __fget_files+0x28/0x4b0 [ 368.468627][T11974] ? bpf_lsm_file_ioctl+0x9/0x10 [ 368.473553][T11974] ? security_file_ioctl+0x80/0xa0 [ 368.478656][T11974] ? ppp_poll+0x250/0x250 [ 368.482971][T11974] __se_sys_ioctl+0xfd/0x170 [ 368.487563][T11974] do_syscall_64+0x55/0xa0 [ 368.491970][T11974] ? clear_bhb_loop+0x40/0x90 [ 368.496632][T11974] ? clear_bhb_loop+0x40/0x90 [ 368.501321][T11974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.507241][T11974] RIP: 0033:0x7f4cbbf9c799 [ 368.511643][T11974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.531246][T11974] RSP: 002b:00007f4cbce81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.539733][T11974] RAX: ffffffffffffffda RBX: 00007f4cbc215fa0 RCX: 00007f4cbbf9c799 [ 368.547778][T11974] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 000000000000000a [ 368.555734][T11974] RBP: 00007f4cbc032c99 R08: 0000000000000000 R09: 0000000000000000 [ 368.563691][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.571645][T11974] R13: 00007f4cbc216038 R14: 00007f4cbc215fa0 R15: 00007ffd76b36fc8 [ 368.579616][T11974] [ 368.582975][T11974] Kernel Offset: disabled [ 368.587334][T11974] Rebooting in 86400 seconds..