last executing test programs: 11.961696612s ago: executing program 3 (id=3011): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000020000000000000001000000850000005300000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r1, 0x0, 0x5, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xc7, &(0x7f0000000500)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x48, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r3, @ANYBLOB="0800000200000000f90000000000000000000100", @ANYRES32=r4, @ANYRES32, @ANYBLOB="00000000050000000200"/28], 0x50) 11.177593467s ago: executing program 3 (id=3017): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0xc356}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e0000000900000005000000ffff000006020400", @ANYRES32=r2, @ANYBLOB="0100"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000005c0)=""/151, 0x84}, {&(0x7f00000003c0)=""/114}, {&(0x7f0000000240)=""/22}], 0x1, &(0x7f0000002f40)=""/244, 0x17}, 0x0) close(r6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000080)="8bf225", 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r3], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f0000000100)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x88202, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x1000, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4001000}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x90, 0x2, 0x0, 0x0, 0x0, 0x0, 0x181, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, @perf_config_ext={0x0, 0x772}, 0x108500, 0xe9a, 0x7baf376b, 0x8, 0x5, 0x0, 0x4}, 0x0, 0xfffffffc00000000, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) 10.285966045s ago: executing program 3 (id=3028): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 10.13997013s ago: executing program 3 (id=3030): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (fail_nth: 1) 9.440932462s ago: executing program 3 (id=3032): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdc, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x0, r2}, 0x18) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0xff, 0x8}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @generic={0x3, 0x5, 0x6, 0x7fff, 0x7fff}, @call={0x85, 0x0, 0x0, 0x98}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd4, &(0x7f0000000200)=""/212, 0x40f00, 0x0, '\x00', r4, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x2, 0x10, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f00000007c0)=[r6, r7], &(0x7f0000000800), 0x10, 0x3}, 0x94) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) 8.704145635s ago: executing program 3 (id=3039): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000190081044e81f782db4cb904021d0800fd007c05e8fe55a108001e0001400203b4000e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d61421f25e1ef6530a68000a007a290457f01a7cee4090000001fb791643a5ee4e11bad15e473dfc6d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af22a3fd0a2c46ac381ee", 0xd8}], 0x1}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.216784144s ago: executing program 1 (id=3060): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x8000000}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008041) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x62, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c25b3aa450ffc60", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010000) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000380)=@in={0x2, 0xffc0, @local}, 0x80, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000600)="fc9fda1de89f6b66d0c20b0156403ce90efb741413e1341f7b0aff88657b9bb4704b5e31c3f44f3f163edee87379f575aba5f0df7a67219b54946965e4015eed322329c5d75b1011e1b2c4914d4f6830b2a1fa5580e8f3368ee2453d6cc0731fe2b15afbf46dd49615892b58879ea36539331eeb4e2bc14cabe82fac5ff1c16ff8375592aaff29a5716ac84baf343f45d95f6b1c38e9cf345f95faa148e05132a8ee3b4e28d0ec4e0d", 0xa9}], 0x2, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1c8}, 0x4040845) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="020000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) (async) r5 = socket$kcm(0xa, 0x2, 0x73) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000090000000400000005000000000000000000005f615f5f2e881b00000000000000"], &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x800}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="6b000000000000002900000002000000ff0275b0a6d8dba1c08100000000000000007f0000010800000007000000000000991150bef221978756640000001c000000000000eaf2062375fc000000001608000000", @ANYRES32=0x0, @ANYBLOB="000000007f00000100000000"], 0x6b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x4029, r2, 0x8000, '\x00', 0x0, r6, 0x1, 0x4, 0x4, 0x7}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x4029, r2, 0x8000, '\x00', 0x0, r6, 0x1, 0x4, 0x4, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.727578339s ago: executing program 0 (id=3065): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x48) (async) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001a80)={&(0x7f0000000080)=@x25, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000440)="a98712bf38d641da3ad934e6d1f231126f331241fe46885f33ccf1de3a70f295263205e8224a9275865ab6e1a358db22a32e4b8d50a98230fdf4987bdc9b7e821051fd48b142965a8107ae92e55fc390034c9fceda21d2b9fc250e84f181362ab13947881f9ddd89ec578ff448cc5ad4a3135cb62529127368f4e1eedbb5b0ca727e84321166c9a2b8db5e57c42c441ce8cea25c9b21ccc1c0dac499305103c2939519a8dedc6664b7d7e12013839db64d94693f5be591c41188548584709d4276f22f", 0xc3}, {&(0x7f0000000540)="91", 0x1}, {&(0x7f0000000580)="515ef821d9946ee9da", 0x9}, {&(0x7f00000009c0)="f747dada9d813d95704010ca4b68f62eccb4e902ae90db9658305dec179b61e8785447b1ea64c858f717fff5651bf8d684596f8f93c57792554ac0aafa37f8cfa665be101cda455bed081b9d7932769e80ea19e78875966b1bea65d523225955ee62441714dcb1f45a5980ba80b2a022b85b5538576641711dd992ffab83ee8c1911ec79fe1c89e91e82df44dc0875efc01977ff33cdcd432e421c264bb4ecab7863f5629beaade8bcb8781a3b2d8be769b66fe7036b9e50b1b53a4bbb436570c194dd321d2c9410e0a5075870f5c752d40faef4185e1104ee3c6fca2f3a1a54610dd82d1e707c7ef50a62e1f67f2788ea7ccccf28f76c5ee85cb9a6c30f87c978c35c57cda226d8ab6de7f766425ba7b8aa78662461927b3515eb7c4ff5789848683c36a930e360600630269709d92020d15753077d6e8d30e7818094d97c6cf581ddda7d75505268c07f97297e278a1b6802ed9a1558948cd2f7d46ba24e7929792b8d94d34d3e63cc59d62ad6ac4c82a9c09e32dd1f3d5ed5099ed41ded9d796e1e582b6a4df834c660a5bfe359306754ea215fcf0fbafb8eb6f186db4efd4ff4e669de6d3ebfd95575220f6dfe7f21ffbdab433f42890a5fe7c4a78bd60e1766aa0763df061dd2c10738936d85fccb439b8cc5028c57a0e3f1a6264a17990bd035bc7809e0472fa075b7524ed7f8dd4e646722673dd653991ebe971ca83afc5371adbe04ac1d295bda3dd9d576506c309fbaaf91cf6bf4933c89540264286978843cff54b2963dc8aa04252dd2dffcff3f1d57bcb48016ad9b9965f3ef6be53159abd98bed0ccfa6dab04fe5db0dd0568b2e38759729e7d7aa5955efef1ed2f643a06fd8aac8d59c9c423d61d11b2e137bda1d7069a66fc0b871728cbe24a0ca5aaa02fb3616545ecb6ebaccf372f7e8fdb21ea2fca343f5705bddb7b30095256407fba52afcc3162c2f24fc79cfe768db6edf75d95aaa3e2a984469c2ece16517d288f5339ce38a1a677648ae8f696d9e026da55023f764c1b2bb82f99e0db8bc99a84eecabda7f27ceae9c3ad7b383d0688a464d0f8a4bc7c06b3ff9505cd3b00051d04ff98fcbb35aec230311f16b3b74195d545dd263a696803f4637e54a62bde743a2af10fbecac7f1b553837176d9c9b1159a1d2ad93d93e3f8133ecd42d5e8ed33aa98b798e91188d7cd9e8b10182a346e9d568884d9dbfd7af53d12cae58d15e4e4296cecf119cb196a7c84a5c67010253dfddc018eb38b6f919846a49250a00d0caac9fe6507b4bacdff5f71d6127718866fed6de5f473639e8f4d5c27a286ef56564c28d9ad90442ce689713fe1c5439b7cfbaeb97d17275a34913f670412cb43c260415556ff0b54595a20449b0a7339272ec29ee8464e627fd87c5ca6cbb9d84ea580a809615b260f3f8d91c69b709e83a9071ada9fd998acb9aedaed5c9062664ff6dd62e6abe1a4f197ff43f94595a5976905be5c2311b789b729e531f7a261fd99b3a03063b117b81d727c0749b429202a213f797b561096cd4e6a67b5888414865e52716385f82513c50c5cba98d42aa3826aec1c8782d595fbf864f63133043c6277235281b8471e75deaa0ca43d6d358231300d9ff204d875cbcb49991a888c43d190a95f519c387a0e1be81e77748394c436ab791114fa3f7ec157d570dd8862e442344093f7f04fbf0bf98dd3c0f1be389c82214c5ab3883d6c71c0e536bfd29f8a38ea3b6c5ed14e0abd323fcde7587e12e15560ff04c0645e6be88f03d5ae3bb77d6dd0ffb39e46d695fe07a5ab3e7384915488557ffd5c194b4cdfe66c095aa23cd81f3a708cc23af23b0658f98b240f0569f8066ec07ea73303ce473dd06a394529b88169ee043a443728be18c57bdfca449c9381b7f76ac2075c2bad050af326f68e5d9d55e2cf38ae2d40808d0242167943233518e2015c53959f604244ab1d3b9e368ce781ddaad3677d7d94766b96d0d66e72ecfa18c50da3fc37fd83e683911168de9226d15556b3f3b61037d9a3e82ca472216731c680d6106da52d9bf449f4312d1463dd6ebe6df5b764605f3761536eed8d55a3e022fab0b20b8941f70eb5f221339852aa6facf6c5735dff2bd120d00eaf814b17580c3e32ff0d38e0d0a4d2d517477cd4dbc5ecf9ca21af560cbb3d276615262cec4a207f58ceb7b187ee099561c29fb4c8387eafe91081fc61695e9184af9d8ec49b47be407a3f536ec4284b09dae1d05a3290e62626b89bb50224ee10a9ce1292dca9562226d705c9742a35584377f945a0534677a4e49bd3a02d288aa27321aefe142df363ae33bb6aeb1279122796f1fafe951eae77bcd4c55550722989701cd0f1212dd4da1cae88f3d0eee433ccfe2dce1d6776ff3c9427eea738f9dc69d97b4a4218919b5f9c0d40797e8e21daaabb7992d8814a23771f9a2d25896a0ea1c2aa682e97b2e0ffb861e4bc2762482d902042e33b86e1e9038e67fd0ed1fbc4f8293aa704075e8d6d695a0ccb79699edc8fd2f725b8b1f1f59f1253e8af5245b95e5fde1c65effa04ab7cd6621eb3f0bd3beea7e550d90dd29181c2de3460a9fef8513f63596c37ddb83fdf8f5ccfbe9282a03c535b84b46dc8f8af5846da5f5e183f21eda4167cb4b5c324e74fbc1a3887e7c9b6c82b8e2ef41791619ec4c93c1c5c9119d1bcbb0e20b9fac5a4be3807e7af41f279182bb1d9ab8120553b654938df0f47e39165562f3364ac6db0a8caf9c6acfd9f2ea9421aabd859a63b1929dad3285a9de5cae1c5349a08328a8729fbc7546aa80492bf32695b7fda75604a1bcbe7739e75c1bdac71aef3243d661f404ede8a2e83b75e2b4eded4fc6fec19c81dc6d9cf27f351e2109ede5438bfb8be497270a7ef8b21ef8ac14e920a3faf4a24f09329f2a63312b37621575dc04b60b2b03d43c73358e238d27a5231aeb17f4767e9ec5f9f0003d52a2578a41d90c47bbf3e9f2a8d17ec67c12aa6b4dbfcc571bd65343c399742e0302c3d12a04c57e260c133a0d1a9dc1be85b143c064aa7e0b68178400987b465ea2126570d47dbf57d2316431609afa559884469497fb628198155d7dc540ce37672f0af6e062f5ef5b7e3a8a39a443fed22cef09d42212bed73f368a2c38762ff4052ebeb6c6052880ce66195f81a4fe71d29e178ab47ff3b029e537f7dc1bb7b7316dc606eef3a6a5f30733b171e1e9b3873411e67306e13b8a6cd1cab3f0a330291ea9dba372f94c616634fe1f91b1a7b383da3fa0ad6db0dd043fccb9b6e08e3293cb5b94212a63ab6a1124050483ce03ff9206ab39f4a631e438fa53dae6044c27fc1cef46272fecbc5631d77f0d40c114d9c36db6b8fc68d1c97f671e9233a9435815bcfbca776173621c8a996c8df8e72dbfe9c25fec6a12db58d26b28df71f14e942294fc6076a8622ab1987341e91c055f5a91b68c68f4e20de498f34b65802fbdc2fe28b75060a35954cbc4bcd4d500d8635514ca9de505d595d79272ceed9392539fae2b5af818796eb18d49e151c27f7c9017c69b9917fc6b205058bcb51f9604a89f1a41aca15592952dbd0be8c15994dee825df095d96a5a72caf8f91c1c082ded6ba2d7501f27570763d94dab14689d5f7a32abe145151693135cf5bf57afb16f31731272f32f24f6dde3689986c185299644b0785ebeb20f4b612d960860a9821968f6d5a1aaf41c735cb4ae9989eccb3c4226cf17453e06cf3834d1064a804dec37a6084e77713337c534d3e4cb80c04fd178cd69448c2fb8103d4ece4cb14c63429de48697b6093ce038bdc658899139a266f986268033bcbcb2af612a716849f7e11c660d360ab9db6b23ffb15ded57cfb13fa178858ce878effdac5568a612705aaffa397545d43b58e513d105e08c5af5b9094bfcd549fae51263f3fd362482bccfab2f7c1b9d49f504d1bf98640b478bf71e223cafd5dc701c8244f843a665f694301daa379589f9866e3d341b515f0b8a23a69a4657b6c5291784cb155c609441d96f550da04d4e7e6a9f9eec61dfd691f0c4eaa069f4bfc8f8660bff88c6b7fb9f6cdd4d37bea23c0d38cecd4ac0361380d0b5271f05474268d0b9718142a566b110605871f775d8cb01115b5bcc7b92c3e9d58a1650f1ea9d26ee370b06728b0dc99cb91fe8095db971dbfbbf81861d89c436164dff6ffa7ccacb0c900577da06fe17643fcdfa5ee64c85f12ec7047902d7f669454e10fc8fcf7df5537ef5e3085b1f4e5c66ebbbec388b577cc3ae002d20ec033ce34042274d20dbe7e6e1186412c330e3dbcb4b081d1f560cb3d0ddade4aea0c1e55cf0e101a213e91151b19c6ade786d233c8da2c79634ed84b653fd8d96c164745322bb983816c100e093111ebf6ed46cd2ed20e086377f060214089b646a996baf47deb52980908ca9fbfb2a27c6711880d56246548e4d795c9155e9ef984630dabe442b262a702210453ad7e819006cb05bbaf62033a42d33fa8bd7a383a567b6cd888c6052de7e3f7ec1f8d0b36d7efa78bc1250747bbb8ed149cfc8d81a3d8e01ce6303f564b66727b87dd0a962f2adf9846985f74ec6c49f1f4504e69c74aef099668a7228c4df42f0840b3e2e7a21f5c8108fcdc6cc3c6f27948ac76e99b5b9f8ad84fe9a0aa82497e32a28e3659116aab0ee5a8e5ed0674ee4567fed968b2c657975595dfdd046eae3ff688c3d194ca23eeef9e39a50f33a11e7b6e14d10d8d30b7db8b53824b08d72c36b0ccd697703c178b461c6b9e9df1de40959c98f46e11e26baca2bd5ad3384a6f1b49e7070f7771934d81c83b81e27c9fda2f135132a6a89fae4441d8caf002175124fc748fb784677898bac33ebc52e3fcfc595d7d0761b8c94487f0d59d0d543c0f3e6216d1778d222a5103033bca94ab82d47e2eec801d94b33a71e4e171d0096cc698b4a9d205eb59ac9e8087da4ffbeba4506da3ddb0749f43d75af8f9d76de025d6a01bac1e63ea467a32cc60e219f2064bf2cb6478ac449574a28c44d9abf77f76f3bd4994470102821e8ddf9681843601dd165bd8e5ff628e7655648964dd7f56168fb7aa4206266d31ee15d34b6ad29a90c20244278e97d695e5960442ddd090d116e52ea7c534851d17976005e4d0f90c4249d609b42df1e0ca24ec7d515149753f074237eab097391e23568e7018f5182999af24629de1012fca03710df7ed7dab09f678faa980b1a35d195f9757272e1239f17886a1ebd42ab3402ac92b2b6b866bd9a92966c8798ce3b7eaf703bc4d696a8096ecca10b5a5b732a5338f2ba2933465f5297c50d082dbf6331617abdb670c79070d5e004cfe086a55c6f05f00d0a618f347deeb95d530332ee94dfd5e6721d90646e13399c0d897ba089a920c17d3ab346431a9109f19c67c83d89c5c24fda0dfad747e0afc9876c6ab64ce477575d0c452495482c6a3ce50aecd88ed7f36da368ffb557672a1f7baed892f1b99bedfb0ea548a4fdd910ceddd39701aa965cfcf51477e034fb925975ef53ba41b27f1bcf7bba1e0253223c6e60417a10d959c2114ee1f457814ab1a6004e218061937e9ca72d1831fab3918431b851e3487944afa45b257deda0de5352fc863459e800de3253fddb26a48ddc3be993d4df2177b66833900c4fcff00d2fe1233bffcb7015e284cf332459261b984c1d14b33e2a936024740d3992d1a2f8ba6635fcf8511c1d09dbc9fe20566af236e676288705c7a38b488a2296d436c4b63cfd5f44304574ae56e645483198f87c87e8c35675f6ed6158b81", 0x1000}, {&(0x7f00000019c0)="431c8d452e29e9fa8b4cf405e44b93616afcd1722525ea6f072aa44c7c9e11ae76856da4999e99c47d092d22d654bbeac138", 0x32}], 0x5}, 0x4008000) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) (async) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5.603207743s ago: executing program 1 (id=3067): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) recvmsg$kcm(r2, &(0x7f0000001e80)={&(0x7f00000000c0)=@nfc, 0x80, &(0x7f0000001e00)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/248, 0xf8}], 0x2, &(0x7f0000001e40)=""/37, 0x25}, 0x10120) setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f0000000580)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x4004054) close(r4) recvmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x2, 0x3, 0x5}, 0x10}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) r7 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) (async) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$kcm(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="f8", 0x1}], 0x1}, 0x5744935563dc5412) sendmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) (async) sendmsg$kcm(r7, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="d8", 0x1}], 0x1}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.508929576s ago: executing program 2 (id=3068): r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x5f0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180015000600142603600e1208000fa888810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x204001, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000200)=r3) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c01803002d000b12d25a8009087ec9c511df648c2594f90224fc60100c02403c650cecda4002000000053582c137153e3702480680", 0x35}], 0x1}, 0x0) 5.233712075s ago: executing program 1 (id=3069): r0 = socket$kcm(0x11, 0xa, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040), 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x7, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000010000000000000008000000185100000d000000000000000000009718000000ee0cffff000000000700000095"], &(0x7f0000001600)='GPL\x00', 0x2, 0x1000, &(0x7f0000001800)=""/4096, 0x40f00, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800)={0x1, 0xe, 0x1c35, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002840)=[r5, r5], &(0x7f0000002880)=[{0x3, 0x5, 0x1}, {0x2, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xffff, 0x3}, {0x5, 0x5, 0x6, 0x1}, {0x5, 0x3, 0x10, 0x8}], 0x10, 0x8}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb01001800000000121c000000b0000000b00000000400000009000000000000010000000036007403060000000000deffffff11040000000900000006000005080000000e00000003000000893800000200000005000000010000000b000000000000fe4468a1e5d20d66371086301350c6518600000000000800006f33000000030000001000000100000002000000080000000000000e020000000100000009000000000000070000000000000000000000030000000002000000020000004000004a5b76defa4c1a609856"], &(0x7f0000000300)=""/165, 0xcc, 0xa5, 0x1, 0x10, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x606}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @sched_cls}, 0x94) socket$kcm(0x11, 0xa, 0x300) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbf, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close(0x3) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) close(0x3) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002900)={0x6, 0x7, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000010000000000000008000000185100000d000000000000000000009718000000ee0cffff000000000700000095"], &(0x7f0000001600)='GPL\x00', 0x2, 0x1000, &(0x7f0000001800)=""/4096, 0x40f00, 0x10, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002800)={0x1, 0xe, 0x1c35, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002840)=[r5, r5], &(0x7f0000002880)=[{0x3, 0x5, 0x1}, {0x2, 0x3, 0x9, 0x1}, {0x4, 0x1, 0xffff, 0x3}, {0x5, 0x5, 0x6, 0x1}, {0x5, 0x3, 0x10, 0x8}], 0x10, 0x8}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000014c0)=ANY=[@ANYBLOB="9feb01001800000000121c000000b0000000b00000000400000009000000000000010000000036007403060000000000deffffff11040000000900000006000005080000000e00000003000000893800000200000005000000010000000b000000000000fe4468a1e5d20d66371086301350c6518600000000000800006f33000000030000001000000100000002000000080000000000000e020000000100000009000000000000070000000000000000000000030000000002000000020000004000004a5b76defa4c1a609856"], &(0x7f0000000300)=""/165, 0xcc, 0xa5, 0x1, 0x10, 0x10000}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x606}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @sched_cls}, 0x94) (async) 5.197114466s ago: executing program 2 (id=3070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x7fffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x1}, 0x104002, 0x0, 0x0, 0x0, 0x6f00000000004, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000380)}, {&(0x7f0000000a80)="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", 0xd79}, {0x0}], 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 5.159421257s ago: executing program 4 (id=3071): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (fail_nth: 4) 5.003156332s ago: executing program 2 (id=3072): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xe, 0x5}, {0x2, 0x1, 0x8, 0xa}, {0x4, 0x5, 0x6, 0x9}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x10c002, 0xac5d}, 0x0, 0xe, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa10000000000000701000009ffffffb702000000000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x7d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) 4.721591051s ago: executing program 4 (id=3073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) (async) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) (async) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x29, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @exit, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9bb7}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x4, 0x2, 0xa, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x4, 0xc00}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x2, 0x3, 0x5}, {0x4, 0x4, 0x0, 0x8}, {0x4, 0x1, 0x1, 0xc}, {0x0, 0x2, 0xe, 0x1}, {0x0, 0x2, 0xf, 0x4}, {0x1, 0x3, 0xd, 0x8}, {0x5, 0x1, 0xf, 0x5}], 0x10, 0x699}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x29, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}, @exit, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9bb7}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x4, 0x2, 0xa, 0x6}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x4, 0xc00}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0xffffffffffffffff], &(0x7f0000000340)=[{0x1, 0x2, 0x3, 0x5}, {0x4, 0x4, 0x0, 0x8}, {0x4, 0x1, 0x1, 0xc}, {0x0, 0x2, 0xe, 0x1}, {0x0, 0x2, 0xf, 0x4}, {0x1, 0x3, 0xd, 0x8}, {0x5, 0x1, 0xf, 0x5}], 0x10, 0x699}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe7, 0x5f, &(0x7f0000000480)="0faafafcaa5b7643ae195ba7a21096c8c8105d8d0900610b9c297642f3eeb8031bf829385089b6d848cfe3a966158fd842088524ca006198a2e0bfa49d3f8fb123405673075c7bd442ed393207c1ad8b7b225275509448d3eb65d0480afe43bb9a0c724d26927b74d6eb708f1a29b097dcabe7b6616081c7f2da21c7a9c2f808a28cd3728a5562b3ed0a69d2612a373e60be3b0b99278623fb73573a704f60104c7e6ac7de3afa194eaf474b68e38d119528646f1b87e003fa43ccaa802da624efe40ddffb9cc99b08c49c0a9ef8cd7c39d4b63a86f4a1351bd1600e17ab80405095dee0739a19", &(0x7f0000000580)=""/95, 0x1, 0x0, 0x84, 0x49, &(0x7f0000000600)="517e6a923ef7f4bf5db7d0e79818b7dbda406cd12292684e5d29842251fcc8a099da75007ba3bbb07ac09cde4bd739e7a68ef24a845ac7edb3924439cd7a638043a450dcff966a602ebb663788d89e2953a799841c505a724399e36aa77757a5525be05850772eeb963c6e8fa070e504972e1cd3433be63c970f9a1386c1f6467f086b31", &(0x7f00000006c0)="191998c2f3c6c3d8cfa573f9cb5b30baa323bcc0f155de1eae0cf8fe11f29e866d1009850cf252f219287f046245b1f25e15d7b08291b617e9c372563abc8a936cb731a0e188470592", 0x4, 0x0, 0x7}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x3, [@datasec={0x2, 0x2, 0x0, 0xf, 0x1, [{0x3, 0xc, 0x401}, {0x2, 0x2, 0x8000}], "fa"}, @enum64={0x2, 0x3, 0x0, 0x13, 0x1, 0x1, [{0xe, 0x1000, 0x800}, {0xe, 0x6, 0x400}, {0x8, 0x5, 0x1}]}, @struct={0xf, 0x6, 0x0, 0x4, 0x0, 0xb0, [{0xd, 0x0, 0x2}, {0x9, 0x1, 0x2}, {0x9, 0x0, 0x8}, {0x4, 0x0, 0x1}, {0xb, 0x3, 0x2}, {0xb, 0xb1d, 0xfffffffa}]}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x8}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e]}}, &(0x7f00000008c0)=""/156, 0xe3, 0x9c, 0x1}, 0x28) getpid() (async) r3 = getpid() r4 = perf_event_open(&(0x7f0000000a40)={0x4, 0x80, 0x2, 0x5, 0x2, 0x64, 0x0, 0x4, 0x1000, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0x7f, 0x1}, 0x4000, 0x7, 0xa913, 0x5, 0x8001, 0xe, 0x3ff, 0x0, 0x1, 0x0, 0x80000000}, r3, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000009c0)={0x3, 0x80, 0x3, 0x9, 0x3, 0x1, 0x0, 0x2, 0x44202, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9}, 0x80000, 0x9, 0x5, 0x2, 0x7, 0x1, 0x5, 0x0, 0xe, 0x0, 0x8}, r3, 0x2, r4, 0xb) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={r2, 0x20, &(0x7f0000000bc0)={&(0x7f0000000ac0)=""/185, 0xb9, 0x0, &(0x7f0000000b80)=""/60, 0x3c}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r1, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000f00)=[{}], 0x8, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0xf, &(0x7f0000000d00)=@raw=[@jmp={0x5, 0x0, 0xb, 0x8, 0x5, 0x50}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x5, 0x0, 0x41, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000d80)='GPL\x00', 0xa2, 0x6d, &(0x7f0000000dc0)=""/109, 0x40f00, 0x93, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000001140)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001180)=[{0x5, 0x3, 0x8, 0x2}, {0x0, 0x5, 0xa, 0xa}, {0x4, 0x3, 0x2, 0x2}, {0x0, 0x1, 0xb, 0x7}, {0x2, 0x5, 0xa, 0x9}, {0x5, 0x5, 0xe, 0x1}, {0x5, 0x1, 0x3, 0x2}, {0x4, 0x3, 0x2, 0xc}], 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001200)={0x6, 0xf, &(0x7f0000000d00)=@raw=[@jmp={0x5, 0x0, 0xb, 0x8, 0x5, 0x50}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x2, 0x2, 0x5, 0x0, 0x41, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000d80)='GPL\x00', 0xa2, 0x6d, &(0x7f0000000dc0)=""/109, 0x40f00, 0x93, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000001140)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001180)=[{0x5, 0x3, 0x8, 0x2}, {0x0, 0x5, 0xa, 0xa}, {0x4, 0x3, 0x2, 0x2}, {0x0, 0x1, 0xb, 0x7}, {0x2, 0x5, 0xa, 0x9}, {0x5, 0x5, 0xe, 0x1}, {0x5, 0x1, 0x3, 0x2}, {0x4, 0x3, 0x2, 0xc}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001300)={'veth1_to_bond\x00', @broadcast}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000023c0)={r7, &(0x7f0000001340)="6683660e51106ea5c788a268797b160bf04c1810ac144dcbf835c9a03509f34ed9f8b76f3a54a22e17ec56e95f3946dba6c80f64008634ad271706edfeecf9cf69d3d362450309148a", &(0x7f00000013c0)=""/4096, 0x4}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002440)=@generic={&(0x7f0000002400)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002600)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xf, '\x00', r6, r2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x15, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002540)='syzkaller\x00', 0x8, 0x16, &(0x7f0000002580)=""/22, 0x41100, 0xba, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0x1, 0x3, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002680)=[r5, r9, r5], &(0x7f00000026c0)=[{0x1, 0x2, 0x0, 0xa}, {0x0, 0x2, 0x3, 0xb}, {0x0, 0x5, 0x4, 0x6}, {0x3, 0x2, 0x0, 0xa}, {0x2, 0x3, 0x4}], 0x10, 0x40}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x15, &(0x7f0000002480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002540)='syzkaller\x00', 0x8, 0x16, &(0x7f0000002580)=""/22, 0x41100, 0xba, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0x1, 0x3, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002680)=[r5, r9, r5], &(0x7f00000026c0)=[{0x1, 0x2, 0x0, 0xa}, {0x0, 0x2, 0x3, 0xb}, {0x0, 0x5, 0x4, 0x6}, {0x3, 0x2, 0x0, 0xa}, {0x2, 0x3, 0x4}], 0x10, 0x40}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002840)=@generic={&(0x7f0000002800)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000028c0)=@generic={&(0x7f0000002880)='./file0\x00', 0x0, 0x8}, 0x18) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002900)={0x1b, 0x0, 0x0, 0x8, 0x0, r10, 0x2, '\x00', r6, r1, 0x0, 0x1, 0x1}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c00)={0x6, 0x2, &(0x7f00000029c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x2, 0x3, 0x3, 0x8, 0x4, 0x18, 0x1e}], &(0x7f0000002a00)='syzkaller\x00', 0x2, 0xd8, &(0x7f0000002a40)=""/216, 0x0, 0x0, '\x00', r6, 0x25, r2, 0x8, &(0x7f0000002b40)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000002b80)={0x3, 0x8, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000002bc0)=[{0x5, 0x1, 0x4, 0x8}], 0x10, 0x6a}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002cc0)=@o_path={&(0x7f0000002980)='./file0\x00', r11, 0x4000, r12}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002d40)=@generic={&(0x7f0000002d00)='./file0\x00'}, 0x18) (async) r13 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002d40)=@generic={&(0x7f0000002d00)='./file0\x00'}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002d80)={0xffffffffffffffff, r5}, 0xc) recvmsg$kcm(r8, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002dc0)=""/57, 0x39}], 0x1}, 0x101) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002e80), 0x2, 0x0) (async) r14 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000002e80), 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f0000002ec0), 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003280)=@o_path={&(0x7f0000002f00)='./file0\x00', 0xffffffffffffffff, 0x4000, r13}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000003280)=@o_path={&(0x7f0000002f00)='./file0\x00', 0xffffffffffffffff, 0x4000, r13}, 0x18) 4.720679721s ago: executing program 0 (id=3074): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x2, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2, 0x47}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r1, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{0x1}, &(0x7f0000000800), &(0x7f0000000840)='%+9llu \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900), 0x4) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r8, &(0x7f00000007c0), &(0x7f0000000200)=""/166, 0x2000000}, 0x20) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 4.651039333s ago: executing program 4 (id=3075): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000027000b6c8cff00f90429fc60010fc569", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180035a3df0d860cedb828771ad2181100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xca, &(0x7f0000000340)=""/202, 0x41100, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000540)=[r1, r1], 0x0, 0x10, 0x7d82}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180035a3df0d860cedb828771ad2181100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008510000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xca, &(0x7f0000000340)=""/202, 0x41100, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000540)=[r1, r1], 0x0, 0x10, 0x7d82}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff965, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@ifindex, 0xb, 0x0, 0x800, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="001500000000000036e0047900"/24, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000008f00000000000000d1f2d493484ba4517d", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000020009500000000000000bd0a0400000000002500f4fffcffffffbf91000000000000b7020000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000100)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e000000ff010000c10600000400000001620000", @ANYRES32=r5, @ANYBLOB="ff7f000200", @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0300000001000000040000000600"/24], 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40305829, &(0x7f0000000040)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@ifindex=r7, r3, 0x1f, 0x2004, 0x0, @value=r9, @void, @void, @void, r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r1, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 4.407723461s ago: executing program 1 (id=3076): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xffffffff, 0xa6a4}, 0x10a202, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffffffffffffffb9) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000007c0)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4e29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef44c94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75be4b09000000000000c00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cfd261be12697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22836dd4cab25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30c1d36e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020f495750f9936d9c07130d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338f181c7f10f5420f40fd0ec51690c9e8d8b6eda5aabc893d1653758fd43f5cabb9b821119bdcce3ddbfd6811800337992c3356eec5adba029b54778c026ad93102cce85ed403801deca385d4b493d4cdc770c00e3a50ab5ec88443dde28a2d0ef201f589a2d6e841eb753d4b96e0b110e868aed32e396ea07961e7dd9e31854235ae13564b24c1d2d615e4945480e39a5829c9417991c89e752579bad373cef6841be3360d938afcead4ede350d602fced5edf4e20892f960df47a6be843e54a10ba7432ca660458ce2fbdf9d2b7fc1fb31bb59ab653e3b9d1f69a7cbbbed40ac88e4e4587b72023e8790b8aff00"/1305, 0x519}, {&(0x7f0000001b80)="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", 0x296}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x84aebfbd63493ff2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="191dff71ad000004000000080000007f0000000000000000eb7f5abf3c37239aade6104cc6a600b7ffc50665e034e8e9ab349dec5f435cb42aff298e907629ef2eddf255", @ANYRES32, @ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2c2, 0x0) r6 = perf_event_open(0x0, 0xffffffffffffffff, 0x6, r2, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x6) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xa, &(0x7f0000000d40)=ANY=[@ANYBLOB="18080000000000000000008000001f00851000000600000018000000", @ANYRES32, @ANYBLOB="3a6aa402a817248294a0c1ebdd5b5a5c204447acfb9fae011d8922151d75e644eb119dacf6a8f55e967669d754ee0ffc392ff00a75125fc30ce652328bdd6afbbb7279090be00fae91eedc98259f1c0f8eb7cc289a7fad1f841e1bcfae9fd3160a30afa0b35d46adcac7be21a4b53ace64fc5afcd205ca9986ca31b84c561520b307d58beb71ec4d2a1be636cbcf75c27a9ed03bf3ebe1e20cb01f5e69a7d9c290c2caf3042dc85e5add3e9f48498180de235dafa313f25ca5d6fc33fc194f0fc058054c5ffd0d65c3877dd06280bb170bea8027bd09837c386708579809a7"], &(0x7f0000000d00)='syzkaller\x00', 0x1, 0xd2, &(0x7f0000000340)=""/210, 0x41100, 0x13}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00'}, 0x74) r7 = socket$kcm(0x2, 0xf, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x76, &(0x7f0000000000), 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x66) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000640)=0xffffe2e4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e40)=""/190, 0xbe}, {&(0x7f0000000140)=""/74, 0x4a}, {&(0x7f0000002c40)=""/4100, 0x1004}], 0x3}, 0x0) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/110, 0x6e}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/65, 0x41}], 0x3}, 0x40000003) 4.269949725s ago: executing program 4 (id=3077): socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xb9}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.269343695s ago: executing program 2 (id=3078): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x2}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2b, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/11], 0x0}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) close(0x3) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={&(0x7f0000000080)="6b876860111ab611bff5bd26dc5441be7250775e835ecc2674ff8ebb8384cddcc718afb97f213e0d", &(0x7f0000000100)=""/164, 0x0, &(0x7f00000005c0)="afd4f8f58239c5f6c51415b1912c4b3184c7804e6c6a9d21773f2e2ae739967468d68389", 0x2, r2, 0x4}, 0x38) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b40)=""/165, 0xa5}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000c00)=""/4083, 0xff3}], 0x3}, 0x10040) 1.112623245s ago: executing program 2 (id=3079): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x4004c50) r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0xd, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x105, 0x98, 0x0, 0x8, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x4004c50) (async) socket$kcm(0x1e, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0xd, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x105, 0x98, 0x0, 0x8, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) 1.049794897s ago: executing program 4 (id=3080): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x4, 0x1}, 0x50) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="0f0200003a000517d25a80648c63940d0324fc600b020000280008c321d51f000200080000003e37eb248833c33ccf43bf38", 0x32}, {&(0x7f0000000240)="14ea6b09a80fdd9810700f03d15a4c5ed13c5c9768b359f879a6db6ee18a54321484f4f48481dc5f007ccb4e5142a37bb45726fa7e5362f171c9a4ee99949c6e867251ba84edb024a97e8be1ad62727bb4bed90e4a62941a8336517c6f875606f41898dd831b4a7aec1b41c0c135332020604e9c34ccde232d5b9c76f91adf73c72a6cd62933753ec2263f5067bff09d4bcc1c5665c74e9bb7bc525daaffd17491087a5ffd5fd65eb611c415a9c885535e7d8f4c8058ad267e61da6db9585f4b41357e4823de2a70f4399ed933edbc", 0xcf}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000100)="de19f496ca4908ffcc8049bc7dae9c6a1d", 0x11}], 0x4, 0x0, 0x0, 0x6c000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x4, 0x1, 0x200}, 0x0, 0x0, r0, 0x3) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x2, 0x3, 0x84) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x6) (async, rerun: 64) recvmsg(0xffffffffffffffff, 0x0, 0x10104) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0x31) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x46}, 0x90) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000002800000002000000000000"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000000452565ee000000"], 0x50) 974.037969ms ago: executing program 0 (id=3081): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0xff, 0x0, 0x4, 0x0, 0x7fffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x1}, 0x104002, 0x0, 0x0, 0x0, 0x6f00000000004, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000380)}, {&(0x7f0000000a80)="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", 0xd79}, {0x0}], 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 942.883451ms ago: executing program 1 (id=3082): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003540), 0x48) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)=r2}, 0x20) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="1400000029000b6c690000000000000005000000", 0x14}], 0x1}, 0x40000) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8921, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xe0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000006c0), &(0x7f0000000740), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8b00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) close(r4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)="eae98255af2389c5362441b1c08c0454e402ac9d8fcca6c2b097aad2bd72009c45c0553c836a060959edbd7c262f6086a3390b", &(0x7f0000000380)="e319bd28b791758394d64640075224f976ae35a5f24cb1271d13af041006fb231c72836bbf5194d14e78bed1cfada7a698ad89f3f5b31abaebd29cbbefcd4002db6e05b72168cdb7d7db92daeaa2e7106f9caef6a93e20c425e46d576e6ca7c55b1ffe16580cbfd773d30b876e1f58", 0x1ff, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRES32=r6, @ANYRESHEX=r3], 0x50) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000400804e85935d1bd50aa6c23a32c012ad3a7b4942ca7f90bcc1a618860783c386cf7933c99ab4dde1f7648f26bf3dfc77ac6117d014c1f7ad6abe482b44286f41084426e4533aed69c21f0563fa00"/107, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) 629.63388ms ago: executing program 1 (id=3085): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x101c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$cgroup_devices(r3, 0x0, 0xffdd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x0, 0x0, 0x81, &(0x7f00000008c0), &(0x7f0000000940)=""/129, 0x8, 0x0, 0xb1, 0xa8, &(0x7f0000000a00)="0d9811dfca851e1878442d6c1cb291b108f585d84d60f507d40baee5508317bd353a128a3c5cadc0ddc191dc0d1039d868503a021ef2432419727ea88a00919b02c85eaf8452b07ab017a04c226b8dcf5001fa6c5cc6e3a505b1e6ee3d27d200baa23d42064c80076f0aff4aba2b21407dfdb8a20877b708f21ffd2c5ca73bb7e647cf11587bfcc315600360bd0b3b2fe3d74b2e920b4886d4ccff94d3cf67ec07b2b7c6796a8a22f04625bdc3641127f4", &(0x7f0000000ac0)="4a09a1fb4f3d9a03abf92fa62a796716e851a2b3ff71e14b67ef10f75e2115f04638a7427afd0221b37ec2d10fe091f7fc0dbe4815213c97c27c5af4f73a99fe558ab8597793c29d29d41e8c9a4c60e73b4ef6984d22c8e6fb9f7a9d4eeb3b06837972449647ba95c02aa15ca32fd657d45a24d9e8491bf575b90584f76c9ceef8cb27e7c13459145d2e11f97439cca89ce623fb9938e1230dc05121ed29fc189acfe09358344a79", 0x5, 0x0, 0xfffffff0}, 0x50) syz_clone(0x81000, &(0x7f0000000580)="5ea3aac45e8bdaf2ad4071455cc2e16d110fa7493cbd217102bca6ce0c7ede7c25572b3132ec0f86c7809393eda8119e200a84dbb4f58218ab5e75a2349e0238bd88afc503d6b93c47c882e80db1", 0x4e, &(0x7f00000000c0), &(0x7f0000000600), &(0x7f00000006c0)="475c86a97ab4c5938c440959f866a458cbe9b98dec4c7c7ff455bb83b6edccd925c6df390afc008ed60a0950d53839a2f707fe92d3054efb9b9165237bc8bf471e656b8e15dd86") bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000d0108000067caf67d00"/24], 0x48) mkdir(0x0, 0x0) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, 0x0, &(0x7f0000000340)}, 0x20) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x2, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @enum={0x9, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x625e2474}, {0x4, 0x8}, {0x3, 0x8}, {0x6, 0x6}, {0x7, 0x8001}, {0x3, 0xff}]}]}}, &(0x7f00000001c0)=""/257, 0x6e, 0x101, 0x6}, 0x28) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000640)='\x00') 380.566038ms ago: executing program 4 (id=3086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a8ffde464ab13be009f00000000000000004b00000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x60300, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100140, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="263f3e894d00000000000000b5599c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) 169.892215ms ago: executing program 0 (id=3087): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)=@generic={&(0x7f00000014c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r3, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r3}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xbb2c, 0x0, 0x0, 0x0, 0x7fff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x1000, &(0x7f0000000440)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001440)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0x2, 0x2bee9486, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001600)=[r3, r3, r4, r3, r3, r5, r3, r6, r3], 0x0, 0x10, 0x8}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) 0s ago: executing program 0 (id=3088): close(0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c250000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) socket$kcm(0xa, 0x6, 0x0) (async) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x1b, &(0x7f0000000100), 0x120) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000008c0)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x4, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000a31fbe3f2db4e6d90fbd7551a6bbd4d1a9429643c19420c3106e000000000000000200000085000000a7c27e1997655ffa10dd20d42c7e8b587e39c3ed0071cc4bf5d27731f06a37d42ba8934f7257063f94d39e1fb82e321f421af330c33a094d78c8b96c2f945235f445dfcec57745bee290ec4c5a2ebd01d20da746df32ca28fe27dc449f9efdd17f8c09a42e4995373baecf010fd078bb63b1228f0f47ec30cb6fe6bbea3edf89a1e9"], &(0x7f00000001c0)='GPL\x00', 0xcc, 0x0, 0x0, 0x40f00, 0x8, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[r0, r0, r9, r1, r10, r1, r0], &(0x7f0000000a80)=[{0x4, 0x5, 0xd, 0x6}], 0x10, 0x6}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1200'. [ 244.700626][ T8976] netlink: 'syz.1.1212': attribute type 2 has an invalid length. [ 244.721532][ T8982] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1214'. [ 244.877250][ T8989] IPv6: NLM_F_CREATE should be specified when creating new route [ 244.887503][ T8989] IPv6: Can't replace route, no match found [ 246.350938][ T8980] ref_ctr_offset mismatch. inode: 0x4d2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 246.518722][ T5387] team0: Port device wlan1 removed [ 246.931902][ T9003] validate_nla: 3 callbacks suppressed [ 246.931916][ T9003] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 246.948687][ T5387] device hsr_slave_0 left promiscuous mode [ 246.956750][ T5387] device hsr_slave_1 left promiscuous mode [ 246.967264][ T5387] bridge0: port 3(dummy0) entered disabled state [ 246.977109][ T5387] device bridge_slave_1 left promiscuous mode [ 246.992374][ T5387] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.012713][ T5387] device bridge_slave_0 left promiscuous mode [ 247.022854][ T5387] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.097208][ T5387] device veth0_vlan left promiscuous mode [ 247.563569][ T5387] team0 (unregistering): Port device team_slave_1 removed [ 247.596289][ T5387] team0 (unregistering): Port device team_slave_0 removed [ 247.628162][ T5387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.875006][ T5387] team0 (unregistering): Port device bond0 removed [ 247.899264][ T5387] bond0 (unregistering): Released all slaves [ 247.975798][ T9003] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 247.988405][ T9029] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.1227'. [ 248.018225][ T9030] netlink: 'syz.3.1226': attribute type 2 has an invalid length. [ 248.052368][ T9030] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1226'. [ 248.193087][ T9045] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 248.272266][ T9033] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1228'. [ 248.362708][ T9033] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 248.439778][ T9046] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1230'. [ 248.560342][ T9050] netlink: 'syz.2.1231': attribute type 41 has an invalid length. [ 249.062941][ T9071] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1238'. [ 249.904395][ T9100] netlink: 'syz.0.1246': attribute type 3 has an invalid length. [ 249.980007][ T9100] netlink: 'syz.0.1246': attribute type 8 has an invalid length. [ 250.020017][ T9100] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1246'. [ 250.100522][ T9105] netlink: 'syz.2.1249': attribute type 10 has an invalid length. [ 250.113392][ T9105] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1249'. [ 250.548479][ T9117] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1253'. [ 250.900849][ T9123] netlink: 'syz.1.1255': attribute type 25 has an invalid length. [ 250.908886][ T9123] netlink: 'syz.1.1255': attribute type 29 has an invalid length. [ 250.960280][ T9126] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1255'. [ 251.020291][ T9125] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1256'. [ 253.227610][ T9201] __nla_validate_parse: 4 callbacks suppressed [ 253.227641][ T9201] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1275'. [ 253.250371][ T9201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 253.303105][ T9201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.343707][ T9246] validate_nla: 4 callbacks suppressed [ 254.343721][ T9246] netlink: 'syz.4.1287': attribute type 10 has an invalid length. [ 254.529426][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.536982][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.646078][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.653513][ T9246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.662161][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.669350][ T9246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.772620][ T9246] team0: Port device bridge0 added [ 255.527790][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.534396][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.559771][ T9250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1288'. [ 255.646611][ T9257] netlink: 'syz.4.1290': attribute type 25 has an invalid length. [ 255.695949][ T9257] netlink: 'syz.4.1290': attribute type 29 has an invalid length. [ 255.715194][ T9259] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1290'. [ 255.754882][ T9266] tap0: tun_chr_ioctl cmd 1074812118 [ 256.008759][ T9277] netlink: 'syz.3.1295': attribute type 13 has an invalid length. [ 256.049139][ T9277] netlink: 'syz.3.1295': attribute type 58 has an invalid length. [ 256.120443][ T9277] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1295'. [ 256.246892][ T9286] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 256.276167][ T9286] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1297'. [ 256.528873][ T9295] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 256.608020][ T9295] netlink: 'syz.3.1301': attribute type 29 has an invalid length. [ 256.852093][ T9292] device syzkaller0 entered promiscuous mode [ 257.285486][ T9307] netlink: 'syz.2.1304': attribute type 29 has an invalid length. [ 260.545026][ T9307] netlink: 'syz.2.1304': attribute type 29 has an invalid length. [ 260.554245][ T9314] netlink: 'syz.0.1306': attribute type 25 has an invalid length. [ 260.562684][ T9314] netlink: 'syz.0.1306': attribute type 29 has an invalid length. [ 260.571949][ T9319] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1306'. [ 260.582586][ T9312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1305'. [ 260.814118][ T9332] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1308'. [ 260.896368][ T9332] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1308'. [ 260.954150][ T9332] bond0: (slave bond_slave_0): Releasing backup interface [ 261.006297][ T9332] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 261.210636][ T9345] netlink: 'syz.1.1314': attribute type 16 has an invalid length. [ 261.250335][ T9345] netlink: 'syz.1.1314': attribute type 3 has an invalid length. [ 261.258107][ T9345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1314'. [ 261.460797][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1318'. [ 261.531411][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 261.592776][ T9355] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1318'. [ 261.650408][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1318'. [ 261.710275][ T9355] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1318'. [ 262.983968][ T9409] netlink: 'syz.3.1332': attribute type 19 has an invalid length. [ 263.505801][ T9415] delete_channel: no stack [ 263.763425][ T9423] netlink: 'syz.4.1336': attribute type 1 has an invalid length. [ 263.785675][ T9423] netlink: 'syz.4.1336': attribute type 4 has an invalid length. [ 264.203251][ T9437] device syzkaller0 entered promiscuous mode [ 266.381274][ T9443] netlink: 'syz.3.1342': attribute type 33 has an invalid length. [ 266.389270][ T9443] __nla_validate_parse: 9 callbacks suppressed [ 266.389281][ T9443] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1342'. [ 266.422374][ T9452] netlink: 'syz.2.1343': attribute type 2 has an invalid length. [ 266.597147][ T9459] device sit0 entered promiscuous mode [ 266.691217][ T9463] netlink: 'syz.1.1346': attribute type 10 has an invalid length. [ 266.701012][ T9463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1346'. [ 266.721199][ T9459] tap0: tun_chr_ioctl cmd 1074025677 [ 266.726973][ T9459] tap0: linktype set to 1 [ 266.735568][ T9459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 266.742958][ T9459] IPv6: NLM_F_CREATE should be set when creating new route [ 266.750379][ T9459] IPv6: NLM_F_CREATE should be set when creating new route [ 266.757706][ T9459] IPv6: NLM_F_CREATE should be set when creating new route [ 267.277463][ T9486] netlink: 'syz.1.1353': attribute type 17 has an invalid length. [ 267.289137][ T9486] netlink: 'syz.1.1353': attribute type 16 has an invalid length. [ 267.298601][ T9486] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1353'. [ 267.366494][ T9489] netlink: 'syz.4.1355': attribute type 10 has an invalid length. [ 267.544725][ T9489] team0: Device wg1 is of different type [ 267.602906][ T9500] netlink: 'syz.0.1357': attribute type 21 has an invalid length. [ 268.124780][ T9536] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1363'. [ 268.383848][ T9540] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1363'. [ 269.043661][ T9553] netlink: 'syz.4.1370': attribute type 39 has an invalid length. [ 269.193363][ T9556] netlink: 'syz.2.1369': attribute type 15 has an invalid length. [ 269.218619][ T9556] netlink: 'syz.2.1369': attribute type 7 has an invalid length. [ 269.357127][ T9572] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1375'. [ 270.342886][ T9600] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1384'. [ 270.700117][ T9624] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1390'. [ 270.736581][ T9624] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 271.232246][ T9643] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1395'. [ 272.351981][ T9675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1405'. [ 272.468175][ T9691] validate_nla: 3 callbacks suppressed [ 272.468192][ T9691] netlink: 'syz.3.1409': attribute type 1 has an invalid length. [ 272.490072][ T9691] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1409'. [ 272.595530][ T9690] netlink: 'syz.4.1410': attribute type 1 has an invalid length. [ 272.634930][ T9690] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1410'. [ 273.058013][ T9710] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1416'. [ 273.185891][ T9714] netlink: 'syz.2.1415': attribute type 21 has an invalid length. [ 273.215515][ T9717] device wg2 entered promiscuous mode [ 273.329420][ T9720] netlink: 'syz.2.1415': attribute type 28 has an invalid length. [ 274.524864][ T9766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1436'. [ 274.638224][ T9758] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1426'. [ 275.891303][ T9805] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1438'. [ 275.942386][ T9805] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 276.023142][ T9807] : port 1(ip6gretap0) entered blocking state [ 276.098875][ T9807] : port 1(ip6gretap0) entered disabled state [ 276.142607][ T9807] device ip6gretap0 entered promiscuous mode [ 276.220080][ T9801] netlink: 'syz.4.1437': attribute type 39 has an invalid length. [ 276.433710][ T9821] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1443'. [ 276.944675][ T9834] netlink: 'syz.3.1446': attribute type 13 has an invalid length. [ 276.974663][ T9834] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1446'. [ 276.998435][ T9834] syz_tun: refused to change device tx_queue_len [ 277.025613][ T9834] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 277.983834][ T9865] TCP: TCP_TX_DELAY enabled [ 278.023422][ T9865] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 278.084612][ T9870] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1455'. [ 278.607276][ T9878] device syzkaller0 left promiscuous mode [ 279.367060][ T9901] netlink: 'syz.4.1465': attribute type 10 has an invalid length. [ 279.390673][ T9901] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1465'. [ 279.431878][ T9901] device bond0 entered promiscuous mode [ 279.449670][ T9901] device bond_slave_1 entered promiscuous mode [ 279.469118][ T9901] bridge0: port 3(bond0) entered blocking state [ 279.495921][ T9901] bridge0: port 3(bond0) entered disabled state [ 279.548836][ T9901] bridge0: port 3(bond0) entered blocking state [ 279.555298][ T9901] bridge0: port 3(bond0) entered forwarding state [ 279.610319][ T9904] netlink: 'syz.3.1467': attribute type 10 has an invalid length. [ 279.632961][ T9904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 279.664256][ T9904] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 279.732399][ T9905] netlink: 'syz.3.1467': attribute type 10 has an invalid length. [ 279.751502][ T9905] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1467'. [ 279.792188][ T9905] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 279.893659][ T9912] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 280.045841][ T9912] netlink: 'syz.0.1468': attribute type 1 has an invalid length. [ 280.050089][ T9910] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1471'. [ 280.101225][ T9912] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1468'. [ 280.136493][ T9918] device syzkaller0 entered promiscuous mode [ 280.153640][ T9916] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1470'. [ 280.179205][ T9916] device hsr_slave_0 left promiscuous mode [ 280.292955][ T9916] device hsr_slave_1 left promiscuous mode [ 280.511562][ T9932] netlink: 'syz.0.1473': attribute type 13 has an invalid length. [ 280.532390][ T9932] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1473'. [ 280.563580][ T9932] syz_tun: refused to change device tx_queue_len [ 280.570334][ T9932] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 283.051379][ T9969] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1484'. [ 283.214401][ T9982] sock: sock_timestamping_bind_phc: sock not bind to device [ 283.555831][ T9996] netlink: 'syz.1.1490': attribute type 13 has an invalid length. [ 283.592891][ T9996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1490'. [ 283.712997][ T9996] syz_tun: refused to change device tx_queue_len [ 283.733016][ T9996] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 283.794607][T10015] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1496'. [ 284.323219][T10023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1501'. [ 284.770586][T10045] netlink: 'syz.3.1506': attribute type 10 has an invalid length. [ 285.085816][T10053] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1510'. [ 285.386681][T10066] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1513'. [ 286.510304][T10080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1518'. [ 286.919573][T10100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1522'. [ 286.963278][T10099] netlink: 'syz.3.1523': attribute type 2 has an invalid length. [ 287.966087][T10116] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1527'. [ 288.147210][T10116] netlink: 'syz.4.1527': attribute type 10 has an invalid length. [ 288.832350][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.918725][T10116] device bridge_slave_1 left promiscuous mode [ 288.930170][T10116] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.956683][T10116] device bridge_slave_1 entered promiscuous mode [ 288.986481][T10116] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 289.017851][T10133] netlink: 'syz.4.1527': attribute type 17 has an invalid length. [ 289.030072][T10133] netlink: 'syz.4.1527': attribute type 16 has an invalid length. [ 289.084841][T10133] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1527'. [ 289.177241][T10140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1533'. [ 291.633847][T10188] FAULT_INJECTION: forcing a failure. [ 291.633847][T10188] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 291.739642][T10188] CPU: 1 PID: 10188 Comm: syz.1.1545 Not tainted syzkaller #0 [ 291.747157][T10188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 291.757225][T10188] Call Trace: [ 291.760518][T10188] [ 291.763459][T10188] dump_stack_lvl+0x188/0x24e [ 291.768150][T10188] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.774322][T10188] ? show_regs_print_info+0x12/0x12 [ 291.779518][T10188] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 291.785677][T10188] should_fail_ex+0x399/0x4d0 [ 291.790351][T10188] _copy_from_user+0x2c/0x170 [ 291.795022][T10188] __sys_bpf+0x2ea/0x780 [ 291.799258][T10188] ? bpf_link_show_fdinfo+0x380/0x380 [ 291.804634][T10188] ? lock_chain_count+0x20/0x20 [ 291.809475][T10188] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 291.815451][T10188] __x64_sys_bpf+0x78/0x90 [ 291.819859][T10188] do_syscall_64+0x4c/0xa0 [ 291.824264][T10188] ? clear_bhb_loop+0x60/0xb0 [ 291.828933][T10188] ? clear_bhb_loop+0x60/0xb0 [ 291.833604][T10188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.839489][T10188] RIP: 0033:0x7f9b26b9ce59 [ 291.843895][T10188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.863487][T10188] RSP: 002b:00007f9b24df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.871887][T10188] RAX: ffffffffffffffda RBX: 00007f9b26e15fa0 RCX: 00007f9b26b9ce59 [ 291.879847][T10188] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 291.887805][T10188] RBP: 00007f9b24df6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.895764][T10188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.903724][T10188] R13: 00007f9b26e16038 R14: 00007f9b26e15fa0 R15: 00007ffdee50aee8 [ 291.911695][T10188] [ 292.337771][T10203] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1549'. [ 292.544727][T10210] netlink: 81056 bytes leftover after parsing attributes in process `syz.0.1550'. [ 292.562706][T10215] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 292.587291][T10215] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.648158][T10210] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 292.818195][T10219] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1554'. [ 293.964243][T10244] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 294.100772][T10262] FAULT_INJECTION: forcing a failure. [ 294.100772][T10262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.154797][T10262] CPU: 1 PID: 10262 Comm: syz.3.1564 Not tainted syzkaller #0 [ 294.162308][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.172377][T10262] Call Trace: [ 294.175663][T10262] [ 294.178604][T10262] dump_stack_lvl+0x188/0x24e [ 294.183299][T10262] ? show_regs_print_info+0x12/0x12 [ 294.188504][T10262] ? load_image+0x400/0x400 [ 294.193013][T10262] ? __lock_acquire+0x7d10/0x7d10 [ 294.198039][T10262] should_fail_ex+0x399/0x4d0 [ 294.202708][T10262] strncpy_from_user+0x32/0x350 [ 294.207553][T10262] bpf_prog_load+0x1f3/0x1560 [ 294.212222][T10262] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 294.218199][T10262] ? lock_chain_count+0x20/0x20 [ 294.223044][T10262] ? map_freeze+0x390/0x390 [ 294.227540][T10262] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 294.233687][T10262] ? lockdep_hardirqs_on+0x94/0x140 [ 294.238885][T10262] ? copy_user_enhanced_fast_string+0xa/0x40 [ 294.244853][T10262] ? bpf_lsm_bpf+0x5/0x10 [ 294.249176][T10262] ? security_bpf+0x7a/0xa0 [ 294.253670][T10262] __sys_bpf+0x5b8/0x780 [ 294.257905][T10262] ? bpf_link_show_fdinfo+0x380/0x380 [ 294.263282][T10262] ? lock_chain_count+0x20/0x20 [ 294.268127][T10262] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 294.274103][T10262] __x64_sys_bpf+0x78/0x90 [ 294.278513][T10262] do_syscall_64+0x4c/0xa0 [ 294.283179][T10262] ? clear_bhb_loop+0x60/0xb0 [ 294.287848][T10262] ? clear_bhb_loop+0x60/0xb0 [ 294.292522][T10262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.298406][T10262] RIP: 0033:0x7f06a2f9ce59 [ 294.302808][T10262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.322400][T10262] RSP: 002b:00007f06a3ec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.330803][T10262] RAX: ffffffffffffffda RBX: 00007f06a3215fa0 RCX: 00007f06a2f9ce59 [ 294.338761][T10262] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 294.346732][T10262] RBP: 00007f06a3ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 294.354698][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.362658][T10262] R13: 00007f06a3216038 R14: 00007f06a3215fa0 R15: 00007ffcfd61a3a8 [ 294.370639][T10262] [ 295.071598][T10277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1568'. [ 296.202370][T10309] FAULT_INJECTION: forcing a failure. [ 296.202370][T10309] name failslab, interval 1, probability 0, space 0, times 1 [ 296.290435][T10309] CPU: 0 PID: 10309 Comm: syz.3.1579 Not tainted syzkaller #0 [ 296.297950][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.308010][T10309] Call Trace: [ 296.311290][T10309] [ 296.314223][T10309] dump_stack_lvl+0x188/0x24e [ 296.318908][T10309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.325071][T10309] ? show_regs_print_info+0x12/0x12 [ 296.330273][T10309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.336464][T10309] should_fail_ex+0x399/0x4d0 [ 296.341156][T10309] should_failslab+0x5/0x20 [ 296.345663][T10309] slab_pre_alloc_hook+0x59/0x310 [ 296.350699][T10309] ? __get_vm_area_node+0x122/0x330 [ 296.355909][T10309] __kmem_cache_alloc_node+0x4f/0x260 [ 296.361292][T10309] ? __get_vm_area_node+0x122/0x330 [ 296.366499][T10309] kmalloc_node_trace+0x22/0xe0 [ 296.371364][T10309] __get_vm_area_node+0x122/0x330 [ 296.376405][T10309] __vmalloc_node_range+0x357/0x13b0 [ 296.381696][T10309] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.387274][T10309] ? perf_trace_preemptirq_template+0x268/0x320 [ 296.393536][T10309] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.399531][T10309] ? free_vm_area+0x50/0x50 [ 296.404040][T10309] ? rcu_is_watching+0x11/0xa0 [ 296.408817][T10309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.414988][T10309] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.420539][T10309] __vmalloc+0x76/0x80 [ 296.424610][T10309] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.430169][T10309] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.435556][T10309] bpf_prog_alloc+0x1c/0x1b0 [ 296.440163][T10309] bpf_prog_load+0x7c9/0x1560 [ 296.444872][T10309] ? map_freeze+0x390/0x390 [ 296.449467][T10309] ? __might_fault+0xa6/0x120 [ 296.454192][T10309] ? __might_fault+0xa6/0x120 [ 296.458880][T10309] ? __might_fault+0xc2/0x120 [ 296.463558][T10309] ? __might_fault+0xa6/0x120 [ 296.468241][T10309] ? bpf_lsm_bpf+0x5/0x10 [ 296.472576][T10309] ? security_bpf+0x7a/0xa0 [ 296.477087][T10309] __sys_bpf+0x5b8/0x780 [ 296.481349][T10309] ? bpf_link_show_fdinfo+0x380/0x380 [ 296.486759][T10309] ? lock_chain_count+0x20/0x20 [ 296.491610][T10309] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.497616][T10309] __x64_sys_bpf+0x78/0x90 [ 296.502047][T10309] do_syscall_64+0x4c/0xa0 [ 296.506463][T10309] ? clear_bhb_loop+0x60/0xb0 [ 296.511144][T10309] ? clear_bhb_loop+0x60/0xb0 [ 296.515830][T10309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.521728][T10309] RIP: 0033:0x7f06a2f9ce59 [ 296.526145][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.545749][T10309] RSP: 002b:00007f06a3ec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.554188][T10309] RAX: ffffffffffffffda RBX: 00007f06a3215fa0 RCX: 00007f06a2f9ce59 [ 296.562162][T10309] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 296.570132][T10309] RBP: 00007f06a3ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 296.578105][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.586080][T10309] R13: 00007f06a3216038 R14: 00007f06a3215fa0 R15: 00007ffcfd61a3a8 [ 296.594085][T10309] [ 296.649166][T10310] netlink: 'syz.4.1578': attribute type 30 has an invalid length. [ 296.713029][T10309] syz.3.1579: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 296.755713][T10309] CPU: 1 PID: 10309 Comm: syz.3.1579 Not tainted syzkaller #0 [ 296.763217][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.773281][T10309] Call Trace: [ 296.776570][T10309] [ 296.779511][T10309] dump_stack_lvl+0x188/0x24e [ 296.784201][T10309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.790378][T10309] ? show_regs_print_info+0x12/0x12 [ 296.795586][T10309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.801776][T10309] warn_alloc+0x242/0x330 [ 296.806129][T10309] ? zone_watermark_ok_safe+0x270/0x270 [ 296.811700][T10309] ? __get_vm_area_node+0x318/0x330 [ 296.816920][T10309] __vmalloc_node_range+0x37c/0x13b0 [ 296.822232][T10309] ? perf_trace_preemptirq_template+0x268/0x320 [ 296.828498][T10309] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.834501][T10309] ? free_vm_area+0x50/0x50 [ 296.839019][T10309] ? rcu_is_watching+0x11/0xa0 [ 296.843808][T10309] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.849981][T10309] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.855547][T10309] __vmalloc+0x76/0x80 [ 296.859629][T10309] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.865196][T10309] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 296.870590][T10309] bpf_prog_alloc+0x1c/0x1b0 [ 296.875213][T10309] bpf_prog_load+0x7c9/0x1560 [ 296.879919][T10309] ? map_freeze+0x390/0x390 [ 296.884441][T10309] ? __might_fault+0xa6/0x120 [ 296.889142][T10309] ? __might_fault+0xa6/0x120 [ 296.893831][T10309] ? __might_fault+0xc2/0x120 [ 296.898526][T10309] ? __might_fault+0xa6/0x120 [ 296.903214][T10309] ? bpf_lsm_bpf+0x5/0x10 [ 296.907557][T10309] ? security_bpf+0x7a/0xa0 [ 296.912085][T10309] __sys_bpf+0x5b8/0x780 [ 296.916345][T10309] ? bpf_link_show_fdinfo+0x380/0x380 [ 296.921746][T10309] ? lock_chain_count+0x20/0x20 [ 296.926612][T10309] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 296.932622][T10309] __x64_sys_bpf+0x78/0x90 [ 296.937062][T10309] do_syscall_64+0x4c/0xa0 [ 296.941489][T10309] ? clear_bhb_loop+0x60/0xb0 [ 296.946185][T10309] ? clear_bhb_loop+0x60/0xb0 [ 296.950885][T10309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.956799][T10309] RIP: 0033:0x7f06a2f9ce59 [ 296.961223][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.980838][T10309] RSP: 002b:00007f06a3ec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 296.989263][T10309] RAX: ffffffffffffffda RBX: 00007f06a3215fa0 RCX: 00007f06a2f9ce59 [ 296.997248][T10309] RDX: 0000000000000048 RSI: 0000200000000440 RDI: 0000000000000005 [ 297.005231][T10309] RBP: 00007f06a3ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 297.013213][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.021194][T10309] R13: 00007f06a3216038 R14: 00007f06a3215fa0 R15: 00007ffcfd61a3a8 [ 297.029191][T10309] [ 297.891506][T10309] Mem-Info: [ 297.895012][T10309] active_anon:75282 inactive_anon:0 isolated_anon:0 [ 297.895012][T10309] active_file:21084 inactive_file:40044 isolated_file:0 [ 297.895012][T10309] unevictable:768 dirty:92 writeback:0 [ 297.895012][T10309] slab_reclaimable:21365 slab_unreclaimable:106128 [ 297.895012][T10309] mapped:44366 shmem:69219 pagetables:856 [ 297.895012][T10309] sec_pagetables:0 bounce:0 [ 297.895012][T10309] kernel_misc_reclaimable:0 [ 297.895012][T10309] free:1242585 free_pcp:8549 free_cma:0 [ 298.081187][T10309] Node 0 active_anon:308428kB inactive_anon:0kB active_file:84336kB inactive_file:159972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:174664kB dirty:364kB writeback:0kB shmem:282640kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11676kB pagetables:3424kB sec_pagetables:0kB all_unreclaimable? no [ 298.200034][T10309] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 298.336251][T10309] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.424968][T10309] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 298.444525][T10309] Node 0 DMA32 free:1032728kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:328628kB inactive_anon:0kB active_file:84336kB inactive_file:159972kB unevictable:1536kB writepending:364kB present:3129332kB managed:2592944kB mlocked:0kB bounce:0kB free_pcp:18132kB local_pcp:5696kB free_cma:0kB [ 298.530079][T10309] lowmem_reserve[]: 0 0 1 1 1 [ 298.534902][T10309] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.625292][T10309] lowmem_reserve[]: 0 0 0 0 0 [ 298.633023][T10309] Node 1 Normal free:3895564kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:6464kB free_cma:0kB [ 298.715695][T10309] lowmem_reserve[]: 0 0 0 0 0 [ 298.724488][T10309] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.778998][T10309] Node 0 DMA32: 2*4kB (UM) 1*8kB (U) 248*16kB (UME) 148*32kB (UE) 186*64kB (UE) 52*128kB (UME) 5*256kB (UE) 2*512kB (UE) 9*1024kB (UME) 4*2048kB (UME) 239*4096kB (M) = 1025936kB [ 298.797179][T10309] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.845818][T10309] Node 1 Normal: 243*4kB (UME) 64*8kB (UME) 36*16kB (UME) 56*32kB (UME) 24*64kB (UME) 14*128kB (UME) 7*256kB (UE) 3*512kB (UME) 0*1024kB 1*2048kB (E) 948*4096kB (M) = 3895564kB [ 298.903104][T10309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.959744][T10309] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.980085][T10309] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.997423][T10309] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.007623][T10309] 139489 total pagecache pages [ 299.037160][T10309] 0 pages in swap cache [ 299.048030][T10309] Free swap = 124996kB [ 299.058162][T10309] Total swap = 124996kB [ 299.062755][T10309] 2097051 pages RAM [ 299.066628][T10309] 0 pages HighMem/MovableOnly [ 299.096398][T10309] 415214 pages reserved [ 299.120284][T10309] 0 pages cma reserved [ 301.641947][T10336] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 301.651786][T10336] device geneve0 entered promiscuous mode [ 301.678964][T10336] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 301.689341][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1584'. [ 301.734438][T10333] l: port 1(gretap0) entered blocking state [ 301.750197][T10333] l: port 1(gretap0) entered disabled state [ 301.761297][T10333] device gretap0 entered promiscuous mode [ 302.583237][T10367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1595'. [ 302.601871][T10367] device hsr_slave_0 left promiscuous mode [ 302.623087][T10367] device hsr_slave_1 left promiscuous mode [ 302.979035][T10376] device syzkaller0 left promiscuous mode [ 306.145509][T10380] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1598'. [ 306.619436][T10411] netlink: 'syz.2.1604': attribute type 2 has an invalid length. [ 306.632550][T10411] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 307.643733][T10428] netlink: 'syz.1.1609': attribute type 16 has an invalid length. [ 307.690405][T10428] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1609'. [ 310.469654][T10452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1614'. [ 310.591215][T10462] netlink: 'syz.3.1617': attribute type 1 has an invalid length. [ 310.687473][T10463] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1618'. [ 310.847889][T10470] netlink: 'syz.1.1622': attribute type 2 has an invalid length. [ 310.865880][T10470] netlink: 'syz.1.1622': attribute type 8 has an invalid length. [ 310.881923][T10470] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1622'. [ 311.504802][T10496] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 311.534117][T10496] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1619'. [ 312.829884][T10544] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1643'. [ 312.912389][T10545] delete_channel: no stack [ 313.544508][T10571] sctp: [Deprecated]: syz.1.1649 (pid 10571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.544508][T10571] Use struct sctp_sack_info instead [ 313.783646][T10594] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1656'. [ 313.875366][T10599] device syzkaller0 entered promiscuous mode [ 314.266565][T10628] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.1664'. [ 314.287128][T10628] netlink: zone id is out of range [ 314.296533][T10628] netlink: zone id is out of range [ 314.323015][T10628] netlink: zone id is out of range [ 314.392683][T10628] netlink: zone id is out of range [ 314.418740][T10628] netlink: zone id is out of range [ 314.454619][T10628] netlink: zone id is out of range [ 314.499694][T10628] netlink: zone id is out of range [ 314.506806][T10628] netlink: get zone limit has 8 unknown bytes [ 314.828548][ T4277] Bluetooth: hci4: Malformed Event: 0x13 [ 315.623578][T10678] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 316.233379][T10694] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1681'. [ 316.310948][T10691] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 316.322438][T10694] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1681'. [ 316.394745][T10694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1681'. [ 316.528164][T10701] netlink: 3748 bytes leftover after parsing attributes in process `syz.1.1684'. [ 316.922770][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.929129][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.954194][T10725] netlink: 'syz.1.1690': attribute type 39 has an invalid length. [ 317.386103][T10736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 317.393420][T10736] IPv6: NLM_F_CREATE should be set when creating new route [ 317.400712][T10736] IPv6: NLM_F_CREATE should be set when creating new route [ 317.481315][T10735] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 318.148864][T10757] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1701'. [ 318.170398][T10757] openvswitch: netlink: Flow actions attr not present in new flow. [ 319.293475][T10795] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.1715'. [ 319.402506][T10800] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1716'. [ 319.640439][ T5387] wlan1: Trigger new scan to find an IBSS to join [ 319.676520][T10810] netlink: 'syz.4.1718': attribute type 21 has an invalid length. [ 319.818760][T10811] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1717'. [ 320.597909][T10832] netlink: 'syz.4.1722': attribute type 10 has an invalid length. [ 320.661521][T10832] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1722'. [ 320.729504][T10834] netlink: 'syz.0.1724': attribute type 11 has an invalid length. [ 320.743202][T10834] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1724'. [ 320.754968][T10832] device dummy0 entered promiscuous mode [ 320.805427][T10832] bridge0: port 2(dummy0) entered blocking state [ 320.840155][T10832] bridge0: port 2(dummy0) entered disabled state [ 320.852081][T10832] bridge0: port 2(dummy0) entered blocking state [ 320.858573][T10832] bridge0: port 2(dummy0) entered forwarding state [ 321.660053][T10851] netlink: 'syz.3.1728': attribute type 3 has an invalid length. [ 321.691680][T10851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1728'. [ 321.722819][T10851] netlink: 'syz.3.1728': attribute type 3 has an invalid length. [ 321.741870][T10851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1728'. [ 322.610098][ T5387] wlan1: Trigger new scan to find an IBSS to join [ 322.662075][T10871] sctp: [Deprecated]: syz.0.1733 (pid 10871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.662075][T10871] Use struct sctp_sack_info instead [ 322.955059][T10885] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 322.976976][T10885] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1737'. [ 323.348965][T10898] netlink: 'syz.2.1741': attribute type 9 has an invalid length. [ 323.390064][T10898] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1741'. [ 324.215617][T10936] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 324.257226][T10936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.702338][T10952] netlink: 'syz.0.1754': attribute type 10 has an invalid length. [ 324.750156][T10952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1754'. [ 324.791809][T10952] device ipvlan1 entered promiscuous mode [ 324.846798][T10952] bridge0: port 2(ipvlan1) entered blocking state [ 324.876044][T10952] bridge0: port 2(ipvlan1) entered disabled state [ 325.028176][T10952] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 325.164805][T10961] netlink: 'syz.3.1757': attribute type 10 has an invalid length. [ 325.262812][T10957] netlink: 'syz.4.1756': attribute type 3 has an invalid length. [ 325.311317][T10957] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1756'. [ 325.640494][ T4918] wlan1: Trigger new scan to find an IBSS to join [ 326.523766][T10996] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 326.734623][T10996] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 326.736051][ T5768] wlan1: Creating new IBSS network, BSSID da:2e:6d:da:6c:65 [ 326.745092][T10989] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 326.806393][T10997] netlink: 'syz.4.1763': attribute type 29 has an invalid length. [ 327.236970][T11020] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1772'. [ 328.164147][T11050] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 328.189992][T11050] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1780'. [ 329.297679][T11093] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1792'. [ 329.541251][T11103] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1796'. [ 329.593917][T11103] netlink: 'syz.4.1796': attribute type 10 has an invalid length. [ 330.703465][T11118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1802'. [ 331.146824][T11137] device syzkaller0 entered promiscuous mode [ 331.212769][T11143] netlink: 'syz.3.1810': attribute type 21 has an invalid length. [ 331.270012][T11143] netlink: 'syz.3.1810': attribute type 22 has an invalid length. [ 331.277864][T11143] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1810'. [ 332.278878][T11167] delete_channel: no stack [ 332.322478][T11167] delete_channel: no stack [ 334.734645][T11187] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1822'. [ 335.265046][T11219] netlink: 'syz.3.1831': attribute type 10 has an invalid length. [ 335.696830][T11227] netlink: 'syz.0.1833': attribute type 21 has an invalid length. [ 335.728618][T11227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1833'. [ 336.840789][T11256] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1841'. [ 338.220800][T11279] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1844'. [ 338.312996][T11279] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 338.406335][T11279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.462957][T11299] netlink: 'syz.4.1850': attribute type 1 has an invalid length. [ 338.478934][T11296] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1850'. [ 338.496900][T11299] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1850'. [ 339.446363][T11303] netlink: 'syz.4.1852': attribute type 3 has an invalid length. [ 339.510234][T11303] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.1852'. [ 339.898864][T11309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1854'. [ 339.940798][T11322] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 340.399068][T11346] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1861'. [ 340.614816][T11350] netlink: 'syz.3.1864': attribute type 46 has an invalid length. [ 341.369533][T11364] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1868'. [ 341.388321][T11364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.905507][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1870'. [ 343.121240][T11404] netlink: 'syz.2.1878': attribute type 21 has an invalid length. [ 343.129274][T11404] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.175477][T11404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.182829][T11404] IPv6: NLM_F_CREATE should be set when creating new route [ 343.190211][T11404] IPv6: NLM_F_CREATE should be set when creating new route [ 343.197453][T11404] IPv6: NLM_F_CREATE should be set when creating new route [ 344.429661][T11431] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1887'. [ 345.315680][T11459] Ÿë: port 1(gretap0) entered blocking state [ 345.400238][T11459] Ÿë: port 1(gretap0) entered disabled state [ 345.407360][T11459] device gretap0 entered promiscuous mode [ 345.461016][T11463] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1894'. [ 345.487349][T11461] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 345.507335][T11468] Ÿë: port 2(veth0_to_team) entered blocking state [ 345.530224][T11461] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 345.569496][T11461] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1893'. [ 345.590060][T11468] Ÿë: port 2(veth0_to_team) entered disabled state [ 345.616619][T11468] device veth0_to_team entered promiscuous mode [ 345.663589][T11471] netlink: 'syz.4.1893': attribute type 2 has an invalid length. [ 345.710234][T11471] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 345.822409][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1898'. [ 345.840179][T11471] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.1893'. [ 346.025461][T11479] netlink: 'syz.3.1899': attribute type 2 has an invalid length. [ 346.396397][T11486] netlink: 'syz.3.1901': attribute type 10 has an invalid length. [ 346.557966][T11486] team0: Device wg1 is of different type [ 346.650416][T11493] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 346.688155][T11493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1904'. [ 346.784935][T11493] bridge0: port 2(veth0_vlan) entered blocking state [ 346.826737][T11493] bridge0: port 2(veth0_vlan) entered disabled state [ 346.928503][T11493] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 347.011580][T11496] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 347.064618][T11496] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1904'. [ 347.687111][T11510] IPv6: GPL: Disabled Multicast RS [ 347.723803][T11514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1912'. [ 350.849254][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'. [ 350.869394][T11530] netlink: 'syz.3.1916': attribute type 21 has an invalid length. [ 350.897104][T11530] netlink: 'syz.3.1916': attribute type 1 has an invalid length. [ 350.941657][T11536] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1917'. [ 351.490917][T11560] netlink: 'syz.3.1922': attribute type 10 has an invalid length. [ 351.519020][T11560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1922'. [ 351.582084][T11560] netlink: 'syz.3.1922': attribute type 10 has an invalid length. [ 351.591130][T11560] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1922'. [ 352.133617][T11581] netlink: 'syz.4.1930': attribute type 10 has an invalid length. [ 352.182119][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'. [ 352.582423][T11606] netlink: 'syz.1.1939': attribute type 10 has an invalid length. [ 352.637298][T11606] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1939'. [ 353.081800][T11633] netlink: 'syz.2.1946': attribute type 10 has an invalid length. [ 353.123521][T11633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1946'. [ 353.365167][T11641] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 353.386295][T11644] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1949'. [ 353.484531][T11644] team0: Port device team_slave_0 removed [ 354.840834][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 356.753777][T11683] netlink: 'syz.0.1959': attribute type 2 has an invalid length. [ 356.777782][T11683] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1959'. [ 356.842658][T11699] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1964'. [ 358.225216][T11725] netlink: 'syz.1.1971': attribute type 11 has an invalid length. [ 358.235994][T11725] netlink: 191644 bytes leftover after parsing attributes in process `syz.1.1971'. [ 359.194980][T11730] netlink: 'syz.3.1972': attribute type 10 has an invalid length. [ 359.548344][T11751] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 360.396277][T11727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.415926][T11756] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 360.429698][T11756] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1978'. [ 360.468445][T11756] bridge0: port 4(veth0_vlan) entered blocking state [ 360.503477][T11756] bridge0: port 4(veth0_vlan) entered disabled state [ 360.574445][T11756] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 360.696637][T11757] netlink: 'syz.4.1978': attribute type 10 has an invalid length. [ 360.719991][T11757] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1978'. [ 361.071527][T11775] netlink: 'syz.0.1985': attribute type 4 has an invalid length. [ 361.083381][T11775] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1985'. [ 361.149357][T11773] netlink: 'syz.1.1983': attribute type 33 has an invalid length. [ 361.185780][T11773] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1983'. [ 361.242607][T11773] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 362.030345][T11807] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1996'. [ 362.368584][T11819] netlink: 'syz.0.2000': attribute type 21 has an invalid length. [ 362.453101][T11819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.460442][T11819] IPv6: NLM_F_CREATE should be set when creating new route [ 362.467686][T11819] IPv6: NLM_F_CREATE should be set when creating new route [ 362.474953][T11819] IPv6: NLM_F_CREATE should be set when creating new route [ 362.676290][T11823] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2001'. [ 362.704975][T11823] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.739381][T11823] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.194227][T11856] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2013'. [ 364.220791][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.284721][T11854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2012'. [ 364.463724][T11872] netlink: 'syz.3.2016': attribute type 10 has an invalid length. [ 364.502345][T11872] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2016'. [ 365.713202][T11929] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2031'. [ 365.731053][T11929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.754309][T11929] bridge0: port 4(batadv0) entered blocking state [ 365.761491][T11929] bridge0: port 4(batadv0) entered disabled state [ 365.776912][T11929] device batadv0 entered promiscuous mode [ 365.784267][T11929] bridge0: port 4(batadv0) entered blocking state [ 365.791272][T11929] bridge0: port 4(batadv0) entered forwarding state [ 365.809234][T11933] netlink: 'syz.4.2032': attribute type 21 has an invalid length. [ 365.990182][ T5388] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 365.999830][ T5388] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 366.239046][T11946] netlink: 'syz.2.2036': attribute type 23 has an invalid length. [ 366.383185][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2037'. [ 366.429684][T11951] netlink: 'syz.1.2038': attribute type 4 has an invalid length. [ 366.470598][T11951] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2038'. [ 366.990484][T11977] netlink: 'syz.1.2045': attribute type 29 has an invalid length. [ 367.016175][T11977] netlink: 'syz.1.2045': attribute type 29 has an invalid length. [ 367.032475][T11973] netlink: 'syz.1.2045': attribute type 29 has an invalid length. [ 367.060277][T11973] netlink: 'syz.1.2045': attribute type 29 has an invalid length. [ 367.080415][T11979] netlink: 'syz.3.2047': attribute type 2 has an invalid length. [ 367.088381][T11979] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.2047'. [ 367.253799][T11985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2049'. [ 367.292221][T11985] bridge0: port 4(veth0_vlan) entered blocking state [ 367.321742][T11990] netlink: 126292 bytes leftover after parsing attributes in process `syz.3.2051'. [ 367.325139][T11985] bridge0: port 4(veth0_vlan) entered disabled state [ 367.373207][T11985] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 367.655490][T11998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2053'. [ 368.219847][T12015] validate_nla: 4 callbacks suppressed [ 368.260337][T12015] netlink: 'syz.0.2058': attribute type 2 has an invalid length. [ 371.544827][T12055] netlink: 'syz.4.2071': attribute type 10 has an invalid length. [ 371.591530][T12055] bridge0: port 2(dummy0) entered disabled state [ 371.598569][T12055] bridge0: port 3(bond0) entered disabled state [ 371.607284][T12055] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.929199][T12066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2074'. [ 372.677746][T12078] netlink: 'syz.0.2079': attribute type 13 has an invalid length. [ 372.731168][T12078] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2079'. [ 372.856649][T12078] erspan0: refused to change device tx_queue_len [ 372.891987][T12078] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 373.375363][T12086] can: request_module (can-proto-0) failed. [ 373.462889][T12097] netlink: 'syz.0.2083': attribute type 6 has an invalid length. [ 373.865332][T12109] netlink: 'syz.4.2085': attribute type 3 has an invalid length. [ 373.917923][T12110] IPv6: Can't replace route, no match found [ 373.966721][T12110] netlink: 'syz.4.2085': attribute type 7 has an invalid length. [ 373.996045][T12109] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2085'. [ 374.127930][T12114] netlink: 'syz.0.2087': attribute type 10 has an invalid length. [ 374.192131][T12112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'. [ 374.406990][T12124] netlink: 'syz.4.2089': attribute type 10 has an invalid length. [ 375.117598][T12147] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2095'. [ 376.119850][T12184] netlink: 'syz.3.2105': attribute type 10 has an invalid length. [ 376.192466][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.201326][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.429309][T12190] can: request_module (can-proto-0) failed. [ 376.444036][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.451788][T12184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.461716][T12184] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.469589][T12184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.667793][T12184] team0: Port device bridge0 added [ 376.705148][T12173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2102'. [ 376.735151][T12194] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2106'. [ 377.977102][T12233] delete_channel: no stack [ 378.364836][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.371327][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.803645][T12252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2120'. [ 379.068049][T12259] netlink: 'syz.0.2121': attribute type 1 has an invalid length. [ 379.459013][T12269] netlink: 'syz.4.2125': attribute type 10 has an invalid length. [ 379.788208][T12269] team0: Port device geneve1 added [ 381.140247][T12301] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2132'. [ 381.179475][T12296] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2133'. [ 383.444925][T12350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2147'. [ 383.593022][T12362] netlink: 'syz.4.2150': attribute type 33 has an invalid length. [ 383.637844][T12362] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2150'. [ 383.674944][ T4277] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 383.678679][T12365] netlink: 'syz.1.2149': attribute type 29 has an invalid length. [ 383.729982][T12364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2151'. [ 383.769648][T12365] netlink: 'syz.1.2149': attribute type 29 has an invalid length. [ 383.838612][T12366] netlink: 'syz.1.2149': attribute type 29 has an invalid length. [ 384.039523][T12369] netlink: 'syz.3.2152': attribute type 5 has an invalid length. [ 384.965153][T12385] netlink: 'syz.3.2157': attribute type 2 has an invalid length. [ 385.182683][T12385] device 0 entered promiscuous mode [ 385.720803][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 386.277383][T12415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2166'. [ 386.621807][T12425] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2168'. [ 386.669985][T12425] openvswitch: netlink: Flow key attr not present in new flow. [ 386.790641][T12430] netlink: 'syz.3.2170': attribute type 10 has an invalid length. [ 389.455812][T12499] netlink: 'syz.0.2189': attribute type 10 has an invalid length. [ 390.149141][T12526] device wlan1 entered promiscuous mode [ 390.175572][ T4921] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 390.201254][ T4921] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 390.228837][T12526] netlink: 'syz.2.2195': attribute type 3 has an invalid length. [ 390.249567][T12526] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.2195'. [ 390.288223][ T1252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.698181][T12538] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2198'. [ 390.773274][T12538] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 392.036494][T12579] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.2212'. [ 392.070184][T12579] netlink: zone id is out of range [ 392.082160][T12579] netlink: zone id is out of range [ 392.100564][T12579] netlink: zone id is out of range [ 392.140323][T12579] netlink: zone id is out of range [ 392.146431][T12579] netlink: get zone limit has 8 unknown bytes [ 392.293151][T12596] netlink: 'syz.3.2217': attribute type 3 has an invalid length. [ 392.340055][T12596] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2217'. [ 392.518519][T12603] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2221'. [ 393.148331][T12633] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2229'. [ 393.751266][T12647] netlink: 'syz.4.2233': attribute type 9 has an invalid length. [ 393.765910][T12647] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2233'. [ 393.954050][T12637] netlink: 'syz.3.2231': attribute type 11 has an invalid length. [ 393.963712][T12637] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2231'. [ 394.284492][T12654] sctp: [Deprecated]: syz.3.2236 (pid 12654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.284492][T12654] Use struct sctp_sack_info instead [ 395.078422][T12702] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2246'. [ 395.445016][T12707] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2248'. [ 396.110014][T12734] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2255'. [ 398.573379][T12741] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2257'. [ 398.783644][T12759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2262'. [ 399.617921][T12766] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2265'. [ 399.673036][T12766] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 399.738990][T12772] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 399.776583][T12768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2266'. [ 399.885451][T12781] netlink: 'syz.2.2269': attribute type 4 has an invalid length. [ 399.927854][T12781] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2269'. [ 399.992274][T12781] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 400.251628][T12798] netlink: 'syz.3.2277': attribute type 25 has an invalid length. [ 400.294254][T12798] netlink: 'syz.3.2277': attribute type 29 has an invalid length. [ 400.333322][T12807] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2277'. [ 400.543806][T12814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2278'. [ 400.710657][T12822] netlink: 'syz.3.2280': attribute type 39 has an invalid length. [ 405.241094][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2282'. [ 405.417149][T12842] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2285'. [ 405.444048][T12842] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 405.493672][T12842] CPU: 1 PID: 12842 Comm: syz.0.2285 Not tainted syzkaller #0 [ 405.501176][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 405.511238][T12842] Call Trace: [ 405.514510][T12842] [ 405.517430][T12842] dump_stack_lvl+0x188/0x24e [ 405.522119][T12842] ? show_regs_print_info+0x12/0x12 [ 405.527307][T12842] ? load_image+0x400/0x400 [ 405.531869][T12842] sysfs_warn_dup+0x8a/0xa0 [ 405.536368][T12842] sysfs_do_create_link_sd+0xc0/0x110 [ 405.541738][T12842] device_add+0x7f6/0x1000 [ 405.546154][T12842] wiphy_register+0x1d9f/0x2ac0 [ 405.551011][T12842] ? cfg80211_event_work+0x40/0x40 [ 405.556111][T12842] ? minstrel_ht_alloc+0x894/0xa20 [ 405.561218][T12842] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 405.567281][T12842] ieee80211_register_hw+0x2d00/0x39f0 [ 405.572740][T12842] ? ieee80211_register_hw+0xec1/0x39f0 [ 405.578273][T12842] ? ieee80211_register_hw+0xec1/0x39f0 [ 405.583813][T12842] ? ieee80211_tasklet_handler+0x20/0x20 [ 405.589444][T12842] ? memset+0x1e/0x40 [ 405.593427][T12842] ? __hrtimer_init+0x186/0x270 [ 405.598268][T12842] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 405.603996][T12842] hwsim_new_radio_nl+0xafa/0xce0 [ 405.609021][T12842] genl_family_rcv_msg_doit+0x22a/0x330 [ 405.614559][T12842] ? end_current_label_crit_section+0x170/0x170 [ 405.620792][T12842] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 405.626684][T12842] ? bpf_lsm_capable+0x5/0x10 [ 405.631352][T12842] ? security_capable+0x85/0xb0 [ 405.636197][T12842] genl_rcv_msg+0x604/0x790 [ 405.640701][T12842] ? genl_bind+0x360/0x360 [ 405.645107][T12842] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 405.651435][T12842] netlink_rcv_skb+0x1fb/0x450 [ 405.656191][T12842] ? genl_bind+0x360/0x360 [ 405.660601][T12842] ? netlink_ack+0x1170/0x1170 [ 405.665364][T12842] ? down_read+0x1a8/0x2d0 [ 405.669772][T12842] genl_rcv+0x24/0x40 [ 405.673749][T12842] netlink_unicast+0x74d/0x8d0 [ 405.678510][T12842] netlink_sendmsg+0x8ad/0xbd0 [ 405.683270][T12842] ? netlink_getsockopt+0x550/0x550 [ 405.688455][T12842] ? ct_irq_exit_irqson+0x113/0x170 [ 405.693654][T12842] ? aa_sock_msg_perm+0x94/0x150 [ 405.698583][T12842] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 405.703858][T12842] ? security_socket_sendmsg+0x7c/0xa0 [ 405.709307][T12842] ? netlink_getsockopt+0x550/0x550 [ 405.714497][T12842] ____sys_sendmsg+0x5be/0x970 [ 405.719257][T12842] ? __sys_sendmsg_sock+0x30/0x30 [ 405.724273][T12842] ? __import_iovec+0x315/0x500 [ 405.729121][T12842] ? import_iovec+0x6f/0xa0 [ 405.733619][T12842] ___sys_sendmsg+0x2a2/0x360 [ 405.738295][T12842] ? __sys_sendmsg+0x290/0x290 [ 405.743063][T12842] ? ktime_get_real_ts64+0x440/0x440 [ 405.748359][T12842] __se_sys_sendmsg+0x1bb/0x2a0 [ 405.753199][T12842] ? ct_nmi_exit+0x145/0x1c0 [ 405.757786][T12842] ? __x64_sys_sendmsg+0x80/0x80 [ 405.762723][T12842] ? lockdep_hardirqs_on+0x94/0x140 [ 405.768005][T12842] do_syscall_64+0x4c/0xa0 [ 405.772411][T12842] ? clear_bhb_loop+0x60/0xb0 [ 405.777089][T12842] ? clear_bhb_loop+0x60/0xb0 [ 405.781759][T12842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.787644][T12842] RIP: 0033:0x7f268899ce59 [ 405.792050][T12842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.811650][T12842] RSP: 002b:00007f2689868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.820057][T12842] RAX: ffffffffffffffda RBX: 00007f2688c15fa0 RCX: 00007f268899ce59 [ 405.828015][T12842] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 405.835977][T12842] RBP: 00007f2688a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 405.843934][T12842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.851897][T12842] R13: 00007f2688c16038 R14: 00007f2688c15fa0 R15: 00007fff126d0898 [ 405.859870][T12842] [ 406.097851][T12857] netlink: 'syz.4.2292': attribute type 29 has an invalid length. [ 406.108934][T12854] netlink: 'syz.3.2290': attribute type 3 has an invalid length. [ 406.123569][T12857] netlink: 'syz.4.2292': attribute type 29 has an invalid length. [ 406.127169][T12854] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2290'. [ 406.155037][T12858] netlink: 'syz.4.2292': attribute type 29 has an invalid length. [ 406.235542][T12857] netlink: 'syz.4.2292': attribute type 29 has an invalid length. [ 406.270624][T12857] netlink: 'syz.4.2292': attribute type 29 has an invalid length. [ 406.619367][T12870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2286'. [ 406.670232][T12876] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2297'. [ 407.802279][T12887] delete_channel: no stack [ 407.871840][T12900] device sit0 entered promiscuous mode [ 408.693139][T12938] netlink: 'syz.1.2311': attribute type 4 has an invalid length. [ 408.733088][T12938] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2311'. [ 408.800073][T12934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2310'. [ 408.865002][T12938] netlink: 'syz.1.2311': attribute type 3 has an invalid length. [ 408.888779][T12938] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2311'. [ 409.516730][T12957] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2318'. [ 409.674384][T12965] netlink: 'syz.1.2322': attribute type 10 has an invalid length. [ 409.700029][T12965] netlink: 'syz.1.2322': attribute type 4 has an invalid length. [ 409.739258][T12965] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2322'. [ 410.743689][T13002] __nla_validate_parse: 2 callbacks suppressed [ 410.743720][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 411.090888][T13011] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2335'. [ 411.302655][T13021] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.2336'. [ 411.322526][T13021] netlink: zone id is out of range [ 411.328351][T13021] netlink: zone id is out of range [ 411.385669][T13021] netlink: zone id is out of range [ 411.400149][T13021] netlink: zone id is out of range [ 411.436697][T13021] netlink: zone id is out of range [ 411.464942][T13021] netlink: zone id is out of range [ 411.520144][T13021] netlink: zone id is out of range [ 411.525508][T13021] netlink: zone id is out of range [ 411.564855][T13021] netlink: zone id is out of range [ 411.600201][T13021] netlink: zone id is out of range [ 412.472305][T13049] €Â0: renamed from pim6reg1 [ 412.727964][T13060] validate_nla: 4 callbacks suppressed [ 412.727998][T13060] netlink: 'syz.1.2347': attribute type 10 has an invalid length. [ 412.985633][T13070] netlink: 'syz.0.2349': attribute type 4 has an invalid length. [ 413.100024][T13070] netlink: 194832 bytes leftover after parsing attributes in process `syz.0.2349'. [ 413.404487][T13074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2351'. [ 413.604255][T13082] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2354'. [ 413.658860][T13082] bond0: (slave bond_slave_0): Releasing backup interface [ 413.786794][T13087] netlink: 'syz.4.2356': attribute type 2 has an invalid length. [ 413.800155][T13087] netlink: 'syz.4.2356': attribute type 8 has an invalid length. [ 413.838469][T13087] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2356'. [ 413.871277][T13090] netlink: 'syz.4.2356': attribute type 2 has an invalid length. [ 413.921258][T13090] netlink: 'syz.4.2356': attribute type 8 has an invalid length. [ 413.929045][T13090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2356'. [ 414.030757][T13093] netlink: 'syz.2.2357': attribute type 2 has an invalid length. [ 414.067108][T13093] netlink: 'syz.2.2357': attribute type 8 has an invalid length. [ 414.096196][T13093] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2357'. [ 414.752232][T13114] netlink: 'syz.4.2362': attribute type 21 has an invalid length. [ 415.011804][T13121] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2366'. [ 418.240925][T13163] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2376'. [ 418.392119][T13163] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2376'. [ 418.865406][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2379'. [ 419.992701][T13195] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2387'. [ 420.133201][T13195] net_ratelimit: 3601 callbacks suppressed [ 420.133216][T13195] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 420.442136][T13207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.449377][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 420.456696][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 420.463999][T13207] IPv6: NLM_F_CREATE should be set when creating new route [ 420.849497][T13212] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2389'. [ 420.915185][T13212] netlink: zone id is out of range [ 420.962357][T13212] netlink: zone id is out of range [ 420.974913][T13212] netlink: del zone limit has 4 unknown bytes [ 421.343725][T13228] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2394'. [ 421.699826][T13239] netlink: 'syz.3.2397': attribute type 21 has an invalid length. [ 421.740637][T13239] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2397'. [ 421.873433][T13232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2395'. [ 422.412105][T13251] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2402'. [ 422.612370][T13262] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2400'. [ 423.555851][T13283] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2410'. [ 424.194783][T13286] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2411'. [ 424.253527][T13288] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2412'. [ 424.473772][T13302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2414'. [ 424.947412][T13322] Ÿë: port 1(gretap0) entered blocking state [ 425.012391][T13322] Ÿë: port 1(gretap0) entered disabled state [ 425.034356][T13320] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 425.174180][T13322] device gretap0 entered promiscuous mode [ 425.480294][T13320] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 425.530576][T13323] netlink: 'syz.0.2418': attribute type 29 has an invalid length. [ 425.882013][T13330] netlink: 'syz.2.2423': attribute type 3 has an invalid length. [ 425.976412][T13330] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2423'. [ 427.024177][T13346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2428'. [ 427.648704][T13371] netlink: 'syz.0.2435': attribute type 21 has an invalid length. [ 427.767373][T13371] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 427.835538][T13371] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2435'. [ 427.944709][T13376] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2436'. [ 428.023601][T13376] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 428.189330][T13380] netlink: 'syz.2.2438': attribute type 21 has an invalid length. [ 428.445784][T13384] device syzkaller0 entered promiscuous mode [ 434.592560][T13416] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2447'. [ 434.613082][T13423] netlink: 'syz.2.2449': attribute type 1 has an invalid length. [ 435.013005][T13437] netlink: 'syz.4.2451': attribute type 10 has an invalid length. [ 435.126804][T13437] team0: Device vxcan0 is of different type [ 435.730671][T13443] netlink: 'syz.3.2457': attribute type 3 has an invalid length. [ 435.760303][T13443] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2457'. [ 435.986411][T13450] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2459'. [ 436.000163][T13450] netlink: 6328 bytes leftover after parsing attributes in process `syz.4.2459'. [ 436.466774][T13463] netlink: 'syz.4.2463': attribute type 39 has an invalid length. [ 436.753360][T13466] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2464'. [ 437.980659][T13492] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2472'. [ 438.805396][T13522] netlink: 'syz.4.2483': attribute type 11 has an invalid length. [ 438.814589][T13517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2481'. [ 438.830087][T13522] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2483'. [ 438.937200][T13526] netlink: 'syz.4.2483': attribute type 3 has an invalid length. [ 438.986636][T13526] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2483'. [ 439.081701][T13521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.690306][T13547] netlink: 'syz.4.2490': attribute type 10 has an invalid length. [ 439.802253][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.808622][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.994276][T13560] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2495'. [ 440.063191][T13560] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 440.209136][ T4928] tipc: Subscription rejected, illegal request [ 440.270143][T13563] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2493'. [ 440.690439][T13583] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2497'. [ 441.033403][T13585] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2498'. [ 441.429555][T13600] netlink: 'syz.3.2502': attribute type 2 has an invalid length. [ 441.461645][T13600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2502'. [ 442.611532][T13626] netlink: 'syz.2.2512': attribute type 10 has an invalid length. [ 442.779155][T13623] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2513'. [ 447.323628][T13688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2528'. [ 448.655439][T13705] netlink: 'syz.4.2534': attribute type 7 has an invalid length. [ 448.730012][T13705] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.2534'. [ 449.707708][T13732] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2540'. [ 450.050242][T13766] netlink: 'syz.4.2549': attribute type 12 has an invalid length. [ 450.079978][T13766] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2549'. [ 450.133047][T13766] netlink: 'syz.4.2549': attribute type 9 has an invalid length. [ 450.220333][T13766] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2549'. [ 450.744459][T13781] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2554'. [ 450.767760][T13784] netlink: 'syz.4.2555': attribute type 29 has an invalid length. [ 450.801294][T13786] netlink: 'syz.4.2555': attribute type 29 has an invalid length. [ 450.814020][T13781] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 450.885897][T13781] CPU: 0 PID: 13781 Comm: syz.3.2554 Not tainted syzkaller #0 [ 450.893411][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.903484][T13781] Call Trace: [ 450.906776][T13781] [ 450.909719][T13781] dump_stack_lvl+0x188/0x24e [ 450.914426][T13781] ? show_regs_print_info+0x12/0x12 [ 450.919646][T13781] ? load_image+0x400/0x400 [ 450.924193][T13781] sysfs_warn_dup+0x8a/0xa0 [ 450.928723][T13781] sysfs_do_create_link_sd+0xc0/0x110 [ 450.934124][T13781] device_add+0x7f6/0x1000 [ 450.938586][T13781] wiphy_register+0x1d9f/0x2ac0 [ 450.943483][T13781] ? cfg80211_event_work+0x40/0x40 [ 450.948626][T13781] ? minstrel_ht_alloc+0x894/0xa20 [ 450.953768][T13781] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 450.959866][T13781] ieee80211_register_hw+0x2d00/0x39f0 [ 450.965361][T13781] ? ieee80211_register_hw+0xec1/0x39f0 [ 450.970928][T13781] ? ieee80211_register_hw+0xec1/0x39f0 [ 450.976497][T13781] ? ieee80211_tasklet_handler+0x20/0x20 [ 450.982167][T13781] ? memset+0x1e/0x40 [ 450.986177][T13781] ? __hrtimer_init+0x186/0x270 [ 450.991053][T13781] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 450.996821][T13781] hwsim_new_radio_nl+0xafa/0xce0 [ 451.001887][T13781] genl_family_rcv_msg_doit+0x22a/0x330 [ 451.007456][T13781] ? end_current_label_crit_section+0x170/0x170 [ 451.013723][T13781] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 451.019651][T13781] ? bpf_lsm_capable+0x5/0x10 [ 451.024352][T13781] ? security_capable+0x85/0xb0 [ 451.029230][T13781] genl_rcv_msg+0x604/0x790 [ 451.033762][T13781] ? genl_bind+0x360/0x360 [ 451.038200][T13781] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 451.044580][T13781] netlink_rcv_skb+0x1fb/0x450 [ 451.049365][T13781] ? genl_bind+0x360/0x360 [ 451.053803][T13781] ? netlink_ack+0x1170/0x1170 [ 451.058595][T13781] ? down_read+0x1a8/0x2d0 [ 451.063040][T13781] genl_rcv+0x24/0x40 [ 451.067041][T13781] netlink_unicast+0x74d/0x8d0 [ 451.071833][T13781] netlink_sendmsg+0x8ad/0xbd0 [ 451.076625][T13781] ? netlink_getsockopt+0x550/0x550 [ 451.081844][T13781] ? aa_sock_msg_perm+0x94/0x150 [ 451.086803][T13781] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 451.092105][T13781] ? security_socket_sendmsg+0x7c/0xa0 [ 451.097585][T13781] ? netlink_getsockopt+0x550/0x550 [ 451.102803][T13781] ____sys_sendmsg+0x5be/0x970 [ 451.105856][T13794] can: request_module (can-proto-0) failed. [ 451.107579][T13781] ? __sys_sendmsg_sock+0x30/0x30 [ 451.118509][T13781] ? __import_iovec+0x315/0x500 [ 451.123388][T13781] ? import_iovec+0x6f/0xa0 [ 451.127914][T13781] ___sys_sendmsg+0x2a2/0x360 [ 451.132616][T13781] ? __sys_sendmsg+0x290/0x290 [ 451.137426][T13781] ? ktime_get_real_ts64+0x440/0x440 [ 451.142763][T13781] __se_sys_sendmsg+0x1bb/0x2a0 [ 451.147632][T13781] ? __x64_sys_sendmsg+0x80/0x80 [ 451.152607][T13781] ? lockdep_hardirqs_on+0x94/0x140 [ 451.157831][T13781] do_syscall_64+0x4c/0xa0 [ 451.162259][T13781] ? clear_bhb_loop+0x60/0xb0 [ 451.166951][T13781] ? clear_bhb_loop+0x60/0xb0 [ 451.171650][T13781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.177568][T13781] RIP: 0033:0x7f06a2f9ce59 [ 451.182000][T13781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.201623][T13781] RSP: 002b:00007f06a3e83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.210052][T13781] RAX: ffffffffffffffda RBX: 00007f06a3216180 RCX: 00007f06a2f9ce59 [ 451.218038][T13781] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 451.226027][T13781] RBP: 00007f06a3032d6f R08: 0000000000000000 R09: 0000000000000000 [ 451.234014][T13781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.241997][T13781] R13: 00007f06a3216218 R14: 00007f06a3216180 R15: 00007ffcfd61a3a8 [ 451.250000][T13781] [ 451.301430][T13784] netlink: 'syz.4.2555': attribute type 29 has an invalid length. [ 451.659620][T13799] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2556'. [ 451.994317][T13814] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2560'. [ 452.298361][T13824] netlink: 'syz.1.2561': attribute type 28 has an invalid length. [ 452.460759][T13824] netlink: 'syz.1.2561': attribute type 29 has an invalid length. [ 452.583550][T13824] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2561'. [ 452.617065][T13825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2564'. [ 452.650885][T13842] netlink: 'syz.4.2568': attribute type 2 has an invalid length. [ 452.658772][T13842] netlink: 'syz.4.2568': attribute type 1 has an invalid length. [ 452.776833][T13844] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2568'. [ 452.855512][T13844] openvswitch: netlink: Key type 386 is out of range max 32 [ 453.080612][T13847] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2569'. [ 453.089851][T13847] openvswitch: netlink: Message has 6 unknown bytes. [ 453.120526][T13848] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2569'. [ 453.180585][T13848] openvswitch: netlink: Message has 6 unknown bytes. [ 454.227884][T13866] IPv6: Can't replace route, no match found [ 458.224391][T13962] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.2601'. [ 458.572666][T13972] netlink: 'syz.3.2600': attribute type 2 has an invalid length. [ 458.604303][T13972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2600'. [ 458.735714][T13979] netlink: 'syz.0.2604': attribute type 10 has an invalid length. [ 458.832101][T13979] device macvlan0 entered promiscuous mode [ 459.073739][T13998] sctp: [Deprecated]: syz.4.2610 (pid 13998) Use of int in max_burst socket option deprecated. [ 459.073739][T13998] Use struct sctp_assoc_value instead [ 460.363022][T14036] IPv6: Can't replace route, no match found [ 460.754750][T14049] netlink: 'syz.2.2624': attribute type 17 has an invalid length. [ 460.782623][T14049] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2624'. [ 460.811403][T14049] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 460.865937][T14049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 460.922380][T14051] netlink: 'syz.2.2624': attribute type 2 has an invalid length. [ 460.948323][T14051] netlink: 'syz.2.2624': attribute type 9 has an invalid length. [ 460.970009][T14051] netlink: 'syz.2.2624': attribute type 10 has an invalid length. [ 460.995022][T14051] netlink: 'syz.2.2624': attribute type 11 has an invalid length. [ 461.020012][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2624'. [ 461.277759][T14067] netlink: 'syz.2.2628': attribute type 15 has an invalid length. [ 461.289959][T14067] netlink: 'syz.2.2628': attribute type 7 has an invalid length. [ 461.357511][T14064] netlink: 'syz.2.2628': attribute type 39 has an invalid length. [ 461.650113][T14073] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2632'. [ 461.833499][T14080] device syzkaller0 entered promiscuous mode [ 461.981983][T14079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2630'. [ 462.143079][T14086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2634'. [ 462.441160][T14102] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2638'. [ 463.948867][T14144] validate_nla: 3 callbacks suppressed [ 463.948909][T14144] netlink: 'syz.0.2651': attribute type 2 has an invalid length. [ 464.116660][T14144] device 3 entered promiscuous mode [ 464.132243][T14143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2652'. [ 464.641802][T14165] device pim6reg1 entered promiscuous mode [ 464.822340][T14175] netlink: 'syz.0.2661': attribute type 29 has an invalid length. [ 464.974531][T14175] netlink: 'syz.0.2661': attribute type 29 has an invalid length. [ 465.033513][T14178] netlink: 'syz.0.2661': attribute type 29 has an invalid length. [ 465.755004][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2665'. [ 466.053646][T14206] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2670'. [ 466.073768][T14208] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2670'. [ 466.126060][T14200] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2667'. [ 466.344054][T14215] netlink: 'syz.2.2672': attribute type 21 has an invalid length. [ 466.361400][T14215] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2672'. [ 466.387025][T14215] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2672'. [ 466.750581][T14228] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.2675'. [ 466.826305][T14232] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 466.907977][T14236] netlink: 'syz.2.2679': attribute type 3 has an invalid length. [ 466.962123][T14232] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2676'. [ 466.996978][T14236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2679'. [ 467.083818][T14237] netlink: 'syz.4.2678': attribute type 2 has an invalid length. [ 467.104715][T14237] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 467.310748][T14242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.291562][T14295] __nla_validate_parse: 5 callbacks suppressed [ 469.291580][T14295] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2693'. [ 469.729194][T14309] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2697'. [ 469.962783][T14309] IPv6: NLM_F_CREATE should be specified when creating new route [ 469.991936][T14309] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2697'. [ 470.075932][T14312] netlink: 'syz.1.2698': attribute type 1 has an invalid length. [ 470.122454][T14312] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.2698'. [ 470.545437][T14322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2700'. [ 470.628257][T14330] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 471.237758][T14339] netlink: 'syz.1.2704': attribute type 1 has an invalid length. [ 471.467965][T14348] netlink: 'syz.3.2707': attribute type 3 has an invalid length. [ 471.549996][T14348] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2707'. [ 471.782333][T14362] netlink: 'syz.1.2711': attribute type 6 has an invalid length. [ 473.108883][T14385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2717'. [ 473.519824][T14404] netlink: 'syz.3.2722': attribute type 10 has an invalid length. [ 474.099504][T14404] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.171650][T14404] device bridge_slave_1 left promiscuous mode [ 474.251799][T14404] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.352481][T14404] team0: Port device bridge_slave_1 added [ 475.140063][T14432] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 475.392710][T14432] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 475.418687][T14434] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 475.430238][T14437] netlink: 'syz.2.2729': attribute type 29 has an invalid length. [ 476.274878][T14464] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.2735'. [ 476.483425][T14471] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 476.509201][T14471] syzkaller1: linktype set to 773 [ 476.540526][T14472] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 477.159373][T14486] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2743'. [ 478.344335][T14534] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2755'. [ 480.080022][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.098887][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.106584][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.116864][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.125973][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 480.134132][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.158643][T14550] bond0: (slave syz_tun): Releasing backup interface [ 480.551717][T14600] netlink: 'syz.1.2777': attribute type 21 has an invalid length. [ 480.592779][T14600] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.613097][T14600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.620425][T14600] IPv6: NLM_F_CREATE should be set when creating new route [ 480.627806][T14600] IPv6: NLM_F_CREATE should be set when creating new route [ 480.635124][T14600] IPv6: NLM_F_CREATE should be set when creating new route [ 480.817724][ T4927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.874432][T14608] netlink: 'syz.1.2777': attribute type 21 has an invalid length. [ 480.903100][T14608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.923813][T14615] netlink: 'syz.3.2779': attribute type 10 has an invalid length. [ 480.939483][T14615] team0: Device wg1 is of different type [ 480.967985][T14578] chnl_net:caif_netlink_parms(): no params data found [ 481.023650][ T4927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.136791][ T4927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.213600][T14578] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.223362][T14578] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.232717][T14578] device bridge_slave_0 entered promiscuous mode [ 481.278080][ T4927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.330175][T14578] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.350118][T14578] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.371551][T14578] device bridge_slave_1 entered promiscuous mode [ 481.445858][T14578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.498060][T14578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.616519][ T4927] device 0 left promiscuous mode [ 481.695665][T14578] team0: Port device team_slave_0 added [ 481.717943][T14578] team0: Port device team_slave_1 added [ 481.825384][T14578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.859954][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.940402][T14578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.969754][T14578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.003942][T14578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.059368][T14578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.212875][ T4275] Bluetooth: hci5: command 0x0409 tx timeout [ 482.831119][T14578] device hsr_slave_0 entered promiscuous mode [ 482.851095][T14578] device hsr_slave_1 entered promiscuous mode [ 483.029789][T14662] netlink: 'syz.0.2789': attribute type 19 has an invalid length. [ 483.387341][T14668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2790'. [ 483.725454][T14683] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2794'. [ 484.280156][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 484.343478][T14693] device ip6gretap0 left promiscuous mode [ 484.360775][T14693] : port 1(ip6gretap0) entered disabled state [ 484.535209][ T4927] device gretap0 left promiscuous mode [ 484.549473][ T4927] l: port 1(gretap0) entered disabled state [ 484.765917][T14710] netlink: 'syz.3.2799': attribute type 10 has an invalid length. [ 485.168087][T14578] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.265728][T14578] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.374953][T14578] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.515744][T14722] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 485.578464][T14578] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.360118][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 486.407901][ T4927] device veth0_to_team left promiscuous mode [ 486.437061][ T4927] Ÿë: port 1(veth0_to_team) entered disabled state [ 486.567305][ T4927] device bridge_slave_1 left promiscuous mode [ 486.586076][ T4927] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.634161][ T4927] device bridge_slave_0 left promiscuous mode [ 486.641195][ T4927] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.768221][ T4927] device veth1_macvtap left promiscuous mode [ 486.777897][ T4927] device veth0_macvtap left promiscuous mode [ 488.440339][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 490.195992][ T4927] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 490.413974][ T4927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.445710][ T4927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.627016][ T4927] bond0 (unregistering): Released all slaves [ 490.702904][T14578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.711911][T14763] bridge0: port 4(batadv0) entered disabled state [ 490.718668][T14763] bridge0: port 3(bond0) entered disabled state [ 490.725182][T14763] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.732394][T14763] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.866417][T14783] device syzkaller0 entered promiscuous mode [ 490.885965][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.914525][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.931716][T14794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2816'. [ 491.157177][T14578] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.888039][T14793] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2817'. [ 492.907562][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.951116][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.959596][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.967338][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.010326][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.028670][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.053606][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.071468][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.078618][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.089154][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 493.132162][T14805] netlink: 'syz.4.2821': attribute type 19 has an invalid length. [ 493.172414][T14805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2821'. [ 493.191784][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 493.221472][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 493.256397][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 493.267153][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 493.323905][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 493.375605][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 493.440741][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 493.461033][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 493.473789][T14578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.485601][T14578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.500004][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 493.518832][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 493.823438][T14824] netlink: 'syz.4.2827': attribute type 19 has an invalid length. [ 493.874052][T14824] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2827'. [ 494.250165][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.267992][ T4921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.322030][T14578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.341048][T14848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2832'. [ 494.367962][T14852] netlink: 'syz.3.2834': attribute type 10 has an invalid length. [ 494.405920][T14852] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2834'. [ 494.449719][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 494.475326][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 494.508036][T14852] netlink: 'syz.3.2834': attribute type 10 has an invalid length. [ 494.552164][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 494.572165][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 494.622931][T14578] device veth0_vlan entered promiscuous mode [ 494.636468][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 494.655651][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.679077][T14578] device veth1_vlan entered promiscuous mode [ 494.737261][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 494.771466][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 494.799698][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.828683][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.873469][T14578] device veth0_macvtap entered promiscuous mode [ 494.907307][T14578] device veth1_macvtap entered promiscuous mode [ 494.948960][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.964906][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.016283][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.033816][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.049688][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.065977][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.123809][T14578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.134744][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.151768][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 495.185118][T14578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.207275][T14578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.243873][T14578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.266312][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 495.292032][ T4927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 495.326928][T14578] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.352204][T14578] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.371178][T14578] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.383368][T14578] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.406775][T14886] netlink: 'syz.3.2846': attribute type 10 has an invalid length. [ 495.417249][T14886] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2846'. [ 495.538772][ T4927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.575934][ T4927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.605086][ T5761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.650229][T14897] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2848'. [ 495.650586][ T5761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.703401][ T5761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.742160][ T5395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.198141][T14924] netlink: 'syz.2.2856': attribute type 21 has an invalid length. [ 496.226412][T14924] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2856'. [ 496.390692][T14941] netlink: 'syz.4.2859': attribute type 13 has an invalid length. [ 497.132790][T14960] netlink: 'syz.4.2865': attribute type 2 has an invalid length. [ 497.153188][T14960] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2865'. [ 498.731309][T14969] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 498.765543][T14969] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 498.810866][T14969] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 498.851161][T14969] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 498.881122][T14969] netlink: 'syz.0.2869': attribute type 29 has an invalid length. [ 498.901683][T14981] netlink: 'syz.1.2870': attribute type 29 has an invalid length. [ 498.909819][T14981] netlink: 'syz.1.2870': attribute type 29 has an invalid length. [ 499.048242][T14981] netlink: 'syz.1.2870': attribute type 29 has an invalid length. [ 499.100458][T14986] netlink: 'syz.3.2874': attribute type 13 has an invalid length. [ 499.140103][T14997] netlink: 'syz.1.2870': attribute type 29 has an invalid length. [ 500.611691][T15055] tap0: tun_chr_ioctl cmd 99999999 [ 500.628244][T15055] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2891'. [ 500.669994][T15055] tc_dump_action: action bad kind [ 500.695168][T15052] delete_channel: no stack [ 501.248164][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.254620][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.394873][T15087] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2902'. [ 504.557869][T15139] validate_nla: 4 callbacks suppressed [ 504.557906][T15139] netlink: 'syz.1.2918': attribute type 46 has an invalid length. [ 504.632091][T15139] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2918'. [ 504.915312][T15145] netlink: 'syz.1.2919': attribute type 3 has an invalid length. [ 504.938813][T15145] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2919'. [ 508.019822][T15176] netlink: 'syz.0.2928': attribute type 21 has an invalid length. [ 508.925559][T15195] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2934'. [ 509.109259][T15202] netlink: 'syz.4.2945': attribute type 2 has an invalid length. [ 509.211862][T15208] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2937'. [ 509.637766][T15202] device syzkaller0 entered promiscuous mode [ 509.679230][T15208] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 509.713896][T15208] CPU: 0 PID: 15208 Comm: syz.0.2937 Not tainted syzkaller #0 [ 509.721401][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.731464][T15208] Call Trace: [ 509.734749][T15208] [ 509.737683][T15208] dump_stack_lvl+0x188/0x24e [ 509.742427][T15208] ? show_regs_print_info+0x12/0x12 [ 509.747635][T15208] ? load_image+0x400/0x400 [ 509.752176][T15208] sysfs_warn_dup+0x8a/0xa0 [ 509.756763][T15208] sysfs_do_create_link_sd+0xc0/0x110 [ 509.762155][T15208] device_add+0x7f6/0x1000 [ 509.766656][T15208] wiphy_register+0x1d9f/0x2ac0 [ 509.771577][T15208] ? cfg80211_event_work+0x40/0x40 [ 509.776698][T15208] ? minstrel_ht_alloc+0x894/0xa20 [ 509.781868][T15208] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 509.788016][T15208] ieee80211_register_hw+0x2d00/0x39f0 [ 509.793539][T15208] ? ieee80211_register_hw+0xec1/0x39f0 [ 509.799094][T15208] ? ieee80211_register_hw+0xec1/0x39f0 [ 509.804656][T15208] ? ieee80211_tasklet_handler+0x20/0x20 [ 509.810307][T15208] ? memset+0x1e/0x40 [ 509.814357][T15208] ? __hrtimer_init+0x186/0x270 [ 509.819324][T15208] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 509.825115][T15208] hwsim_new_radio_nl+0xafa/0xce0 [ 509.830167][T15208] genl_family_rcv_msg_doit+0x22a/0x330 [ 509.835778][T15208] ? end_current_label_crit_section+0x170/0x170 [ 509.842081][T15208] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 509.848000][T15208] ? bpf_lsm_capable+0x5/0x10 [ 509.852758][T15208] ? security_capable+0x85/0xb0 [ 509.857689][T15208] genl_rcv_msg+0x604/0x790 [ 509.862211][T15208] ? lock_chain_count+0x20/0x20 [ 509.867138][T15208] ? genl_bind+0x360/0x360 [ 509.871567][T15208] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 509.877926][T15208] netlink_rcv_skb+0x1fb/0x450 [ 509.882699][T15208] ? genl_bind+0x360/0x360 [ 509.887130][T15208] ? netlink_ack+0x1170/0x1170 [ 509.891915][T15208] ? down_read+0x1a8/0x2d0 [ 509.896413][T15208] genl_rcv+0x24/0x40 [ 509.900405][T15208] netlink_unicast+0x74d/0x8d0 [ 509.905190][T15208] netlink_sendmsg+0x8ad/0xbd0 [ 509.909979][T15208] ? netlink_getsockopt+0x550/0x550 [ 509.915196][T15208] ? aa_sock_msg_perm+0x94/0x150 [ 509.920146][T15208] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 509.925441][T15208] ? security_socket_sendmsg+0x7c/0xa0 [ 509.930916][T15208] ? netlink_getsockopt+0x550/0x550 [ 509.936127][T15208] ____sys_sendmsg+0x5be/0x970 [ 509.940978][T15208] ? __sys_sendmsg_sock+0x30/0x30 [ 509.946008][T15208] ? __import_iovec+0x315/0x500 [ 509.950898][T15208] ? import_iovec+0x6f/0xa0 [ 509.955415][T15208] ___sys_sendmsg+0x2a2/0x360 [ 509.960100][T15208] ? try_to_wake_up+0x6ae/0x1080 [ 509.965111][T15208] ? __sys_sendmsg+0x290/0x290 [ 509.969949][T15208] __se_sys_sendmsg+0x1bb/0x2a0 [ 509.974816][T15208] ? __x64_sys_sendmsg+0x80/0x80 [ 509.979791][T15208] ? lockdep_hardirqs_on+0x94/0x140 [ 509.985005][T15208] do_syscall_64+0x4c/0xa0 [ 509.989425][T15208] ? clear_bhb_loop+0x60/0xb0 [ 509.994182][T15208] ? clear_bhb_loop+0x60/0xb0 [ 509.998885][T15208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.004797][T15208] RIP: 0033:0x7f268899ce59 [ 510.009223][T15208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.028842][T15208] RSP: 002b:00007f2689868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.037279][T15208] RAX: ffffffffffffffda RBX: 00007f2688c15fa0 RCX: 00007f268899ce59 [ 510.045280][T15208] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 510.053293][T15208] RBP: 00007f2688a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 510.061289][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.069283][T15208] R13: 00007f2688c16038 R14: 00007f2688c15fa0 R15: 00007fff126d0898 [ 510.077290][T15208] [ 510.115239][T15204] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2945'. [ 510.184246][T15204] bridge0: port 2(dummy0) entered disabled state [ 512.222218][T15244] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2947'. [ 512.704062][T15267] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2955'. [ 512.746656][T15267] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.2955'. [ 513.264172][T15281] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2959'. [ 513.421224][T15293] device wlan1 entered promiscuous mode [ 514.023421][T15323] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2969'. [ 514.048503][T15323] netlink: 'syz.3.2969': attribute type 29 has an invalid length. [ 514.059220][T15323] netlink: 'syz.3.2969': attribute type 29 has an invalid length. [ 514.087316][T15323] netlink: 'syz.3.2969': attribute type 29 has an invalid length. [ 514.529468][T15349] netlink: 'syz.1.2978': attribute type 1 has an invalid length. [ 514.568734][T15349] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2978'. [ 514.910182][T15362] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2982'. [ 514.942377][T15357] netlink: 118704 bytes leftover after parsing attributes in process `syz.4.2980'. [ 515.016962][T15357] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 515.813454][T15408] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2996'. [ 516.455077][T15439] netlink: 'syz.3.3005': attribute type 1 has an invalid length. [ 516.487442][T15439] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3005'. [ 516.613877][T15447] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3008'. [ 516.654608][T15447] netlink: 'syz.0.3008': attribute type 39 has an invalid length. [ 516.983427][T15461] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3012'. [ 517.025920][T15461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.227642][T15461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.398811][T15462] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3012'. [ 517.424612][T15468] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3013'. [ 517.460708][T15470] netlink: 'syz.1.3014': attribute type 27 has an invalid length. [ 517.698369][T15470] bond0: (slave bond_slave_0): Releasing backup interface [ 517.732882][T15470] device bond_slave_0 left promiscuous mode [ 518.483842][T15516] delete_channel: no stack [ 518.524241][T15518] netlink: 'syz.0.3026': attribute type 2 has an invalid length. [ 518.751384][T15522] FAULT_INJECTION: forcing a failure. [ 518.751384][T15522] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.830459][T15522] CPU: 0 PID: 15522 Comm: syz.3.3030 Not tainted syzkaller #0 [ 518.837992][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.848071][T15522] Call Trace: [ 518.851372][T15522] [ 518.854327][T15522] dump_stack_lvl+0x188/0x24e [ 518.859049][T15522] ? show_regs_print_info+0x12/0x12 [ 518.864287][T15522] ? load_image+0x400/0x400 [ 518.868847][T15522] ? __lock_acquire+0x7d10/0x7d10 [ 518.873956][T15522] should_fail_ex+0x399/0x4d0 [ 518.878762][T15522] _copy_from_user+0x2c/0x170 [ 518.883515][T15522] __sys_bpf+0x2ea/0x780 [ 518.888019][T15522] ? bpf_link_show_fdinfo+0x380/0x380 [ 518.893481][T15522] ? lock_chain_count+0x20/0x20 [ 518.898397][T15522] __x64_sys_bpf+0x78/0x90 [ 518.902861][T15522] do_syscall_64+0x4c/0xa0 [ 518.907304][T15522] ? clear_bhb_loop+0x60/0xb0 [ 518.912013][T15522] ? clear_bhb_loop+0x60/0xb0 [ 518.916727][T15522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.922651][T15522] RIP: 0033:0x7f06a2f9ce59 [ 518.927099][T15522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.946739][T15522] RSP: 002b:00007f06a3ec5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.955195][T15522] RAX: ffffffffffffffda RBX: 00007f06a3215fa0 RCX: 00007f06a2f9ce59 [ 518.963192][T15522] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 518.971185][T15522] RBP: 00007f06a3ec5090 R08: 0000000000000000 R09: 0000000000000000 [ 518.979183][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.987179][T15522] R13: 00007f06a3216038 R14: 00007f06a3215fa0 R15: 00007ffcfd61a3a8 [ 518.995223][T15522] [ 519.161705][T15526] netlink: 'syz.4.3031': attribute type 14 has an invalid length. [ 519.200314][T15526] __nla_validate_parse: 2 callbacks suppressed [ 519.200329][T15526] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3031'. [ 519.586370][T15543] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.3035'. [ 521.431400][T15584] device wlan1 entered promiscuous mode [ 521.565579][T15587] netlink: 'syz.2.3050': attribute type 14 has an invalid length. [ 521.595389][T15584] netlink: 'syz.1.3046': attribute type 3 has an invalid length. [ 521.635224][T15584] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.3046'. [ 521.861427][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.874619][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.893356][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.911433][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.919336][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 521.927646][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.071347][T15612] FAULT_INJECTION: forcing a failure. [ 522.071347][T15612] name failslab, interval 1, probability 0, space 0, times 0 [ 522.094606][T15612] CPU: 0 PID: 15612 Comm: syz.4.3057 Not tainted syzkaller #0 [ 522.102093][T15612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 522.112143][T15612] Call Trace: [ 522.115413][T15612] [ 522.118338][T15612] dump_stack_lvl+0x188/0x24e [ 522.123014][T15612] ? show_regs_print_info+0x12/0x12 [ 522.128207][T15612] ? load_image+0x400/0x400 [ 522.132708][T15612] ? __might_sleep+0xd0/0xd0 [ 522.137366][T15612] ? __lock_acquire+0x7d10/0x7d10 [ 522.142390][T15612] should_fail_ex+0x399/0x4d0 [ 522.147069][T15612] should_failslab+0x5/0x20 [ 522.151604][T15612] slab_pre_alloc_hook+0x59/0x310 [ 522.156708][T15612] ? mutex_lock_nested+0x10/0x10 [ 522.161652][T15612] ? get_callchain_buffers+0xd2/0x350 [ 522.167045][T15612] __kmem_cache_alloc_node+0x4f/0x260 [ 522.172417][T15612] ? get_callchain_buffers+0xd2/0x350 [ 522.177788][T15612] __kmalloc+0xa0/0x240 [ 522.181998][T15612] ? rcu_is_watching+0x11/0xa0 [ 522.186814][T15612] get_callchain_buffers+0xd2/0x350 [ 522.192008][T15612] ? bpf_map_init_from_attr+0x146/0x340 [ 522.197552][T15612] stack_map_alloc+0x364/0x520 [ 522.202320][T15612] map_create+0x534/0x1000 [ 522.206730][T15612] ? bpf_lsm_bpf+0x5/0x10 [ 522.211056][T15612] __sys_bpf+0x38b/0x780 [ 522.215298][T15612] ? bpf_link_show_fdinfo+0x380/0x380 [ 522.220675][T15612] ? lock_chain_count+0x20/0x20 [ 522.225529][T15612] __x64_sys_bpf+0x78/0x90 [ 522.229939][T15612] do_syscall_64+0x4c/0xa0 [ 522.234347][T15612] ? clear_bhb_loop+0x60/0xb0 [ 522.239017][T15612] ? clear_bhb_loop+0x60/0xb0 [ 522.243689][T15612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 522.249574][T15612] RIP: 0033:0x7f908819ce59 [ 522.253985][T15612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.273582][T15612] RSP: 002b:00007f908908a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.281989][T15612] RAX: ffffffffffffffda RBX: 00007f9088415fa0 RCX: 00007f908819ce59 [ 522.289954][T15612] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 522.297914][T15612] RBP: 00007f908908a090 R08: 0000000000000000 R09: 0000000000000000 [ 522.305875][T15612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.313833][T15612] R13: 00007f9088416038 R14: 00007f9088415fa0 R15: 00007ffc02ebe298 [ 522.321810][T15612] [ 522.499430][ T1252] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.666865][ T1252] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.788906][T15629] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3061'. [ 522.891983][ T1252] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.979724][T15601] chnl_net:caif_netlink_parms(): no params data found [ 523.109332][ T1252] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.285433][T15601] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.292818][T15601] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.301301][T15601] device bridge_slave_0 entered promiscuous mode [ 523.363315][T15601] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.372989][T15601] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.381726][T15601] device bridge_slave_1 entered promiscuous mode [ 523.447130][ T1252] device .*! left promiscuous mode [ 523.511964][T15601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.552460][T15601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.582999][ T1252] device 0 left promiscuous mode [ 523.600693][T15659] FAULT_INJECTION: forcing a failure. [ 523.600693][T15659] name failslab, interval 1, probability 0, space 0, times 0 [ 523.620188][T15659] CPU: 1 PID: 15659 Comm: syz.4.3071 Not tainted syzkaller #0 [ 523.620580][T15657] IPv6: Can't replace route, no match found [ 523.627651][T15659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.627681][T15659] Call Trace: [ 523.627688][T15659] [ 523.627696][T15659] dump_stack_lvl+0x188/0x24e [ 523.627722][T15659] ? show_regs_print_info+0x12/0x12 [ 523.627741][T15659] ? load_image+0x400/0x400 [ 523.627766][T15659] ? __might_sleep+0xd0/0xd0 [ 523.627784][T15659] ? __lock_acquire+0x7d10/0x7d10 [ 523.673855][T15659] should_fail_ex+0x399/0x4d0 [ 523.678565][T15659] should_failslab+0x5/0x20 [ 523.683080][T15659] slab_pre_alloc_hook+0x59/0x310 [ 523.688121][T15659] ? get_callchain_buffers+0x172/0x350 [ 523.693592][T15659] __kmem_cache_alloc_node+0x4f/0x260 [ 523.698957][T15659] ? __kmem_cache_alloc_node+0x140/0x260 [ 523.704585][T15659] ? get_callchain_buffers+0x172/0x350 [ 523.710036][T15659] __kmalloc_node+0xa0/0x240 [ 523.714624][T15659] get_callchain_buffers+0x172/0x350 [ 523.719908][T15659] stack_map_alloc+0x364/0x520 [ 523.724676][T15659] map_create+0x534/0x1000 [ 523.729085][T15659] ? bpf_lsm_bpf+0x5/0x10 [ 523.733408][T15659] __sys_bpf+0x38b/0x780 [ 523.737643][T15659] ? bpf_link_show_fdinfo+0x380/0x380 [ 523.743024][T15659] ? lock_chain_count+0x20/0x20 [ 523.747877][T15659] __x64_sys_bpf+0x78/0x90 [ 523.752285][T15659] do_syscall_64+0x4c/0xa0 [ 523.756691][T15659] ? clear_bhb_loop+0x60/0xb0 [ 523.761364][T15659] ? clear_bhb_loop+0x60/0xb0 [ 523.766037][T15659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.771936][T15659] RIP: 0033:0x7f908819ce59 [ 523.776340][T15659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.795932][T15659] RSP: 002b:00007f908908a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.804333][T15659] RAX: ffffffffffffffda RBX: 00007f9088415fa0 RCX: 00007f908819ce59 [ 523.812297][T15659] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 523.820255][T15659] RBP: 00007f908908a090 R08: 0000000000000000 R09: 0000000000000000 [ 523.828211][T15659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.836171][T15659] R13: 00007f9088416038 R14: 00007f9088415fa0 R15: 00007ffc02ebe298 [ 523.844141][T15659] [ 523.859474][T15601] team0: Port device team_slave_0 added [ 523.966055][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 524.018185][T15601] team0: Port device team_slave_1 added [ 524.196516][T15601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.216079][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.320030][T15601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.454204][T15601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.466435][T15601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.522380][T15601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.040379][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 527.507259][T15601] device hsr_slave_0 entered promiscuous mode [ 527.525204][T15601] device hsr_slave_1 entered promiscuous mode [ 527.557847][T15601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.574538][T15601] Cannot create hsr debugfs directory [ 527.742946][T15711] netlink: 463 bytes leftover after parsing attributes in process `syz.4.3080'. [ 527.752348][T15708] netlink: 'syz.2.3079': attribute type 22 has an invalid length. [ 528.013642][T15726] FAULT_INJECTION: forcing a failure. [ 528.013642][T15726] name failslab, interval 1, probability 0, space 0, times 0 [ 528.056356][T15726] CPU: 0 PID: 15726 Comm: syz.0.3083 Not tainted syzkaller #0 [ 528.063866][T15726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.073931][T15726] Call Trace: [ 528.077220][T15726] [ 528.080166][T15726] dump_stack_lvl+0x188/0x24e [ 528.084855][T15726] ? show_regs_print_info+0x12/0x12 [ 528.090057][T15726] ? load_image+0x400/0x400 [ 528.094580][T15726] ? __might_sleep+0xd0/0xd0 [ 528.099190][T15726] ? __lock_acquire+0x7d10/0x7d10 [ 528.104243][T15726] should_fail_ex+0x399/0x4d0 [ 528.108939][T15726] should_failslab+0x5/0x20 [ 528.113453][T15726] slab_pre_alloc_hook+0x59/0x310 [ 528.118493][T15726] ? get_callchain_buffers+0x172/0x350 [ 528.123973][T15726] __kmem_cache_alloc_node+0x4f/0x260 [ 528.129374][T15726] ? get_callchain_buffers+0x172/0x350 [ 528.134849][T15726] __kmalloc_node+0xa0/0x240 [ 528.139460][T15726] get_callchain_buffers+0x172/0x350 [ 528.144769][T15726] stack_map_alloc+0x364/0x520 [ 528.149551][T15726] map_create+0x534/0x1000 [ 528.153979][T15726] ? bpf_lsm_bpf+0x5/0x10 [ 528.158326][T15726] __sys_bpf+0x38b/0x780 [ 528.160216][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 528.162569][T15726] ? bpf_link_show_fdinfo+0x380/0x380 [ 528.162608][T15726] ? lock_chain_count+0x20/0x20 [ 528.162637][T15726] __x64_sys_bpf+0x78/0x90 [ 528.162657][T15726] do_syscall_64+0x4c/0xa0 [ 528.162673][T15726] ? clear_bhb_loop+0x60/0xb0 [ 528.162695][T15726] ? clear_bhb_loop+0x60/0xb0 [ 528.196926][T15726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.202816][T15726] RIP: 0033:0x7f268899ce59 [ 528.207221][T15726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.226905][T15726] RSP: 002b:00007f2689868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.235307][T15726] RAX: ffffffffffffffda RBX: 00007f2688c15fa0 RCX: 00007f268899ce59 [ 528.243269][T15726] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 528.251227][T15726] RBP: 00007f2689868090 R08: 0000000000000000 R09: 0000000000000000 [ 528.259185][T15726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.267144][T15726] R13: 00007f2688c16038 R14: 00007f2688c15fa0 R15: 00007fff126d0898 [ 528.275117][T15726] [ 528.364283][T15732] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3084'. [ 528.388182][T15732] device hsr_slave_0 left promiscuous mode [ 528.442763][T15732] device hsr_slave_1 left promiscuous mode [ 528.750202][T15736] ================================================================== [ 528.758307][T15736] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 528.766131][T15736] Write of size 48 at addr ffff88805a428710 by task syz.4.3086/15736 [ 528.774199][T15736] [ 528.776516][T15736] CPU: 0 PID: 15736 Comm: syz.4.3086 Not tainted syzkaller #0 [ 528.783958][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 528.793996][T15736] Call Trace: [ 528.797265][T15736] [ 528.800182][T15736] dump_stack_lvl+0x188/0x24e [ 528.804850][T15736] ? __lock_acquire+0x7d10/0x7d10 [ 528.809863][T15736] ? show_regs_print_info+0x12/0x12 [ 528.815055][T15736] ? load_image+0x400/0x400 [ 528.819554][T15736] ? __virt_addr_valid+0x465/0x540 [ 528.824741][T15736] ? __bpf_get_stackid+0x6c9/0x920 [ 528.829839][T15736] print_report+0xa8/0x210 [ 528.834243][T15736] kasan_report+0x10b/0x140 [ 528.838737][T15736] ? __bpf_get_stackid+0x6c9/0x920 [ 528.843837][T15736] kasan_check_range+0x235/0x290 [ 528.848768][T15736] ? __bpf_get_stackid+0x6c9/0x920 [ 528.853865][T15736] memcpy+0x3c/0x60 [ 528.857657][T15736] __bpf_get_stackid+0x6c9/0x920 [ 528.862584][T15736] bpf_get_stackid_pe+0x33f/0x400 [ 528.867598][T15736] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 528.873047][T15736] bpf_overflow_handler+0x522/0x7c0 [ 528.878237][T15736] ? bpf_overflow_handler+0xd9/0x7c0 [ 528.883506][T15736] ? perf_swevent_overflow+0x230/0x230 [ 528.888948][T15736] ? ct_irq_exit_irqson+0x113/0x170 [ 528.894203][T15736] ? __perf_event_account_interrupt+0x187/0x280 [ 528.900438][T15736] __perf_event_overflow+0x448/0x610 [ 528.905714][T15736] perf_swevent_event+0x315/0x570 [ 528.910734][T15736] ? perf_tp_event+0xc30/0xc30 [ 528.915525][T15736] ___perf_sw_event+0x49e/0x6e0 [ 528.920369][T15736] ? ___perf_sw_event+0x180/0x6e0 [ 528.925386][T15736] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 528.931791][T15736] ? __lock_acquire+0x13cf/0x7d10 [ 528.936813][T15736] ? ct_nmi_exit+0x145/0x1c0 [ 528.941393][T15736] ? ct_irq_exit_irqson+0x113/0x170 [ 528.946580][T15736] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 528.952551][T15736] ? lock_chain_count+0x20/0x20 [ 528.957392][T15736] __perf_sw_event+0x135/0x260 [ 528.962149][T15736] do_user_addr_fault+0xaea/0xb10 [ 528.967163][T15736] ? trace_hardirqs_off_finish+0x86/0x180 [ 528.972964][T15736] exc_page_fault+0x60/0x100 [ 528.977565][T15736] asm_exc_page_fault+0x22/0x30 [ 528.982409][T15736] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 528.988119][T15736] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 529.007712][T15736] RSP: 0018:ffffc9000354fe80 EFLAGS: 00050297 [ 529.013772][T15736] RAX: 000000000000000b RBX: 00007fffffffeffd RCX: 00002000000029c0 [ 529.021734][T15736] RDX: 0000000000000000 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 529.029695][T15736] RBP: 000000000000000b R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 529.037652][T15736] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: 0000000000000000 [ 529.045618][T15736] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 529.053592][T15736] __sys_socketpair+0xb4/0x540 [ 529.058431][T15736] __x64_sys_socketpair+0x97/0xb0 [ 529.063453][T15736] do_syscall_64+0x4c/0xa0 [ 529.067862][T15736] ? clear_bhb_loop+0x60/0xb0 [ 529.072535][T15736] ? clear_bhb_loop+0x60/0xb0 [ 529.077205][T15736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.083090][T15736] RIP: 0033:0x7f908819ce59 [ 529.087494][T15736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.107089][T15736] RSP: 002b:00007f908908a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 529.115489][T15736] RAX: ffffffffffffffda RBX: 00007f9088415fa0 RCX: 00007f908819ce59 [ 529.123453][T15736] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 529.131432][T15736] RBP: 00007f9088232d6f R08: 0000000000000000 R09: 0000000000000000 [ 529.139411][T15736] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000 [ 529.147372][T15736] R13: 00007f9088416038 R14: 00007f9088415fa0 R15: 00007ffc02ebe298 [ 529.155369][T15736] [ 529.158375][T15736] [ 529.160696][T15736] Allocated by task 15743: [ 529.165088][T15736] kasan_set_track+0x4b/0x70 [ 529.169668][T15736] __kasan_kmalloc+0x8e/0xa0 [ 529.174251][T15736] __kmalloc_node+0xb0/0x240 [ 529.178833][T15736] bpf_map_area_alloc+0x47/0xe0 [ 529.183670][T15736] prealloc_elems_and_freelist+0x86/0x1c0 [ 529.189377][T15736] stack_map_alloc+0x390/0x520 [ 529.194134][T15736] map_create+0x534/0x1000 [ 529.198544][T15736] __sys_bpf+0x38b/0x780 [ 529.202863][T15736] __x64_sys_bpf+0x78/0x90 [ 529.207278][T15736] do_syscall_64+0x4c/0xa0 [ 529.211690][T15736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.217574][T15736] [ 529.219879][T15736] Last potentially related work creation: [ 529.225577][T15736] kasan_save_stack+0x3a/0x60 [ 529.230251][T15736] __kasan_record_aux_stack+0xb2/0xc0 [ 529.235691][T15736] call_rcu+0x14f/0x990 [ 529.239850][T15736] __nf_register_net_hook+0x788/0x910 [ 529.245296][T15736] nf_register_net_hook+0xae/0x190 [ 529.250400][T15736] nf_register_net_hooks+0x40/0x1a0 [ 529.255584][T15736] nf_ct_netns_do_get+0x3bc/0x5b0 [ 529.260662][T15736] nf_ct_netns_inet_get+0x1f/0x150 [ 529.265765][T15736] nf_conncount_init+0x123/0x380 [ 529.270762][T15736] ovs_ct_init+0x312/0x480 [ 529.275192][T15736] ovs_init_net+0x1e2/0x240 [ 529.279709][T15736] ops_init+0x355/0x5f0 [ 529.283859][T15736] setup_net+0x4f2/0xbd0 [ 529.288092][T15736] copy_net_ns+0x348/0x5b0 [ 529.292508][T15736] create_new_namespaces+0x3d3/0x6f0 [ 529.297832][T15736] copy_namespaces+0x3b0/0x410 [ 529.302581][T15736] copy_process+0x19c2/0x4080 [ 529.307296][T15736] kernel_clone+0x24b/0x900 [ 529.311786][T15736] __x64_sys_clone+0x1a7/0x220 [ 529.316551][T15736] do_syscall_64+0x4c/0xa0 [ 529.320957][T15736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.326842][T15736] [ 529.329151][T15736] Second to last potentially related work creation: [ 529.335718][T15736] kasan_save_stack+0x3a/0x60 [ 529.340393][T15736] __kasan_record_aux_stack+0xb2/0xc0 [ 529.345751][T15736] call_rcu+0x14f/0x990 [ 529.349900][T15736] nf_unregister_net_hooks+0xc7/0x130 [ 529.355264][T15736] nf_defrag_ipv6_disable+0x91/0xe0 [ 529.360509][T15736] nf_ct_netns_put+0x371/0x510 [ 529.365263][T15736] nf_conncount_destroy+0x3d/0x150 [ 529.370359][T15736] ovs_ct_exit+0x98/0x200 [ 529.374676][T15736] ovs_exit_net+0xe9/0x7a0 [ 529.379077][T15736] cleanup_net+0x706/0xba0 [ 529.383483][T15736] process_one_work+0x8a2/0x1160 [ 529.388457][T15736] worker_thread+0xaa2/0x1270 [ 529.393119][T15736] kthread+0x29d/0x330 [ 529.397171][T15736] ret_from_fork+0x1f/0x30 [ 529.401615][T15736] [ 529.403922][T15736] The buggy address belongs to the object at ffff88805a428700 [ 529.403922][T15736] which belongs to the cache kmalloc-cg-64 of size 64 [ 529.418046][T15736] The buggy address is located 16 bytes inside of [ 529.418046][T15736] 64-byte region [ffff88805a428700, ffff88805a428740) [ 529.431130][T15736] [ 529.433456][T15736] The buggy address belongs to the physical page: [ 529.439854][T15736] page:ffffea0001690a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a428 [ 529.449990][T15736] memcg:ffff888028593e01 [ 529.454210][T15736] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 529.461742][T15736] raw: 00fff00000000200 ffffea000103d380 dead000000000002 ffff888017442780 [ 529.470309][T15736] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888028593e01 [ 529.478868][T15736] page dumped because: kasan: bad access detected [ 529.485266][T15736] page_owner tracks the page as allocated [ 529.490960][T15736] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4285, tgid 4285 (syz-executor), ts 53770228961, free_ts 11829629068 [ 529.509261][T15736] post_alloc_hook+0x173/0x1a0 [ 529.514114][T15736] get_page_from_freelist+0x1a1e/0x1ab0 [ 529.519648][T15736] __alloc_pages+0x1ec/0x4f0 [ 529.524224][T15736] alloc_slab_page+0x5d/0x160 [ 529.528894][T15736] new_slab+0x87/0x2c0 [ 529.532952][T15736] ___slab_alloc+0xbc6/0x1240 [ 529.537611][T15736] __kmem_cache_alloc_node+0x1a0/0x260 [ 529.543053][T15736] __kmalloc_node+0xa0/0x240 [ 529.547635][T15736] kvmalloc_node+0x6c/0x180 [ 529.552127][T15736] nf_hook_entries_grow+0x309/0x730 [ 529.557313][T15736] __nf_register_net_hook+0x2c9/0x910 [ 529.562675][T15736] nf_register_net_hook+0xae/0x190 [ 529.567772][T15736] nf_register_net_hooks+0x40/0x1a0 [ 529.572956][T15736] brnf_device_event+0x12e/0x1d0 [ 529.577942][T15736] raw_notifier_call_chain+0xcb/0x160 [ 529.583298][T15736] register_netdevice+0x163f/0x1b10 [ 529.588523][T15736] page last free stack trace: [ 529.593174][T15736] free_unref_page_prepare+0x8b4/0x9a0 [ 529.598625][T15736] free_unref_page+0x2e/0x3f0 [ 529.603289][T15736] free_contig_range+0x9d/0x150 [ 529.608124][T15736] destroy_args+0xf0/0xa0a [ 529.612561][T15736] debug_vm_pgtable+0x33c/0x38e [ 529.617395][T15736] do_one_initcall+0x26a/0x840 [ 529.622145][T15736] do_initcall_level+0x137/0x1e4 [ 529.627068][T15736] do_initcalls+0x4b/0x8a [ 529.631383][T15736] kernel_init_freeable+0x415/0x5be [ 529.636568][T15736] kernel_init+0x19/0x1b0 [ 529.640935][T15736] ret_from_fork+0x1f/0x30 [ 529.645339][T15736] [ 529.647650][T15736] Memory state around the buggy address: [ 529.653259][T15736] ffff88805a428600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 529.661300][T15736] ffff88805a428680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 529.669342][T15736] >ffff88805a428700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 529.677384][T15736] ^ [ 529.682734][T15736] ffff88805a428780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 529.690781][T15736] ffff88805a428800: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 529.698822][T15736] ================================================================== [ 529.706871][T15736] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 529.714048][T15736] CPU: 0 PID: 15736 Comm: syz.4.3086 Not tainted syzkaller #0 [ 529.721489][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.731528][T15736] Call Trace: [ 529.734793][T15736] [ 529.737709][T15736] dump_stack_lvl+0x188/0x24e [ 529.742375][T15736] ? memcpy+0x3c/0x60 [ 529.746347][T15736] ? show_regs_print_info+0x12/0x12 [ 529.751529][T15736] ? load_image+0x400/0x400 [ 529.756030][T15736] panic+0x2e5/0x730 [ 529.759919][T15736] ? bpf_jit_dump+0xd0/0xd0 [ 529.764420][T15736] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 529.770386][T15736] ? _raw_spin_unlock+0x40/0x40 [ 529.775223][T15736] ? print_memory_metadata+0x314/0x400 [ 529.780674][T15736] check_panic_on_warn+0x80/0xa0 [ 529.785600][T15736] ? __bpf_get_stackid+0x6c9/0x920 [ 529.790698][T15736] end_report+0x66/0x110 [ 529.794927][T15736] kasan_report+0x118/0x140 [ 529.799419][T15736] ? __bpf_get_stackid+0x6c9/0x920 [ 529.804518][T15736] kasan_check_range+0x235/0x290 [ 529.809446][T15736] ? __bpf_get_stackid+0x6c9/0x920 [ 529.814546][T15736] memcpy+0x3c/0x60 [ 529.818347][T15736] __bpf_get_stackid+0x6c9/0x920 [ 529.823272][T15736] bpf_get_stackid_pe+0x33f/0x400 [ 529.828285][T15736] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 529.833729][T15736] bpf_overflow_handler+0x522/0x7c0 [ 529.838912][T15736] ? bpf_overflow_handler+0xd9/0x7c0 [ 529.844178][T15736] ? perf_swevent_overflow+0x230/0x230 [ 529.849623][T15736] ? ct_irq_exit_irqson+0x113/0x170 [ 529.854807][T15736] ? __perf_event_account_interrupt+0x187/0x280 [ 529.861042][T15736] __perf_event_overflow+0x448/0x610 [ 529.866315][T15736] perf_swevent_event+0x315/0x570 [ 529.871364][T15736] ? perf_tp_event+0xc30/0xc30 [ 529.876136][T15736] ___perf_sw_event+0x49e/0x6e0 [ 529.880994][T15736] ? ___perf_sw_event+0x180/0x6e0 [ 529.886013][T15736] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 529.892423][T15736] ? __lock_acquire+0x13cf/0x7d10 [ 529.897447][T15736] ? ct_nmi_exit+0x145/0x1c0 [ 529.902030][T15736] ? ct_irq_exit_irqson+0x113/0x170 [ 529.907230][T15736] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 529.913203][T15736] ? lock_chain_count+0x20/0x20 [ 529.918048][T15736] __perf_sw_event+0x135/0x260 [ 529.922807][T15736] do_user_addr_fault+0xaea/0xb10 [ 529.927825][T15736] ? trace_hardirqs_off_finish+0x86/0x180 [ 529.933536][T15736] exc_page_fault+0x60/0x100 [ 529.938120][T15736] asm_exc_page_fault+0x22/0x30 [ 529.942962][T15736] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 529.948667][T15736] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 529.968259][T15736] RSP: 0018:ffffc9000354fe80 EFLAGS: 00050297 [ 529.974312][T15736] RAX: 000000000000000b RBX: 00007fffffffeffd RCX: 00002000000029c0 [ 529.982270][T15736] RDX: 0000000000000000 RSI: ffffffff8a8c2c20 RDI: ffffffff8adf2060 [ 529.990228][T15736] RBP: 000000000000000b R08: ffffffff8e2029ef R09: 1ffffffff1c4053d [ 529.998269][T15736] R10: dffffc0000000000 R11: fffffbfff1c4053e R12: 0000000000000000 [ 530.006228][T15736] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 530.014889][T15736] __sys_socketpair+0xb4/0x540 [ 530.019649][T15736] __x64_sys_socketpair+0x97/0xb0 [ 530.024664][T15736] do_syscall_64+0x4c/0xa0 [ 530.029064][T15736] ? clear_bhb_loop+0x60/0xb0 [ 530.033730][T15736] ? clear_bhb_loop+0x60/0xb0 [ 530.038400][T15736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.044282][T15736] RIP: 0033:0x7f908819ce59 [ 530.048685][T15736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.068289][T15736] RSP: 002b:00007f908908a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 530.076696][T15736] RAX: ffffffffffffffda RBX: 00007f9088415fa0 RCX: 00007f908819ce59 [ 530.084658][T15736] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 530.092619][T15736] RBP: 00007f9088232d6f R08: 0000000000000000 R09: 0000000000000000 [ 530.100581][T15736] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000000 [ 530.108543][T15736] R13: 00007f9088416038 R14: 00007f9088415fa0 R15: 00007ffc02ebe298 [ 530.116510][T15736] [ 530.119749][T15736] Kernel Offset: disabled [ 530.124067][T15736] Rebooting in 86400 seconds..