last executing test programs: 22.705271233s ago: executing program 3 (id=4693): bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32], 0xfe33) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x2, 0xa, 0xc, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xfc, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 22.588908629s ago: executing program 2 (id=4695): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4e, 0xfc, 0x2, 0x0, 0x0, 0x800000000000210b, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x80000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x24, 0x0, 0x25) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r3) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) 22.258005135s ago: executing program 1 (id=4697): r0 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/199, 0xc7}, {&(0x7f0000000180)=""/93, 0x6a}], 0xffffffffffffd5d}, 0x40000041) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x12, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', r1}, 0xffffffffffffffc2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000009000000f9000000050000ff0f100000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x80108907, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c21"], 0xee8a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) sendmsg(r0, &(0x7f0000000bc0)={&(0x7f0000000a40)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="d2409710fc24754f14c63d947b95b1f966a97a90f9310cd13472ef00c57cdc12cd9368adfc998d56275507c77cfa47ffd84c923aaee98ab7da775f0915d9c7dfef8c9e6c8d135735126ca434533c50ab3d8cab6302bf1d2b814cbe1cf2d83f720bbdbfed269b5743c99a33fe792df9388c9d3d06ba54a63309fcc60494ac40b6b9214e5978fa2ee0713a1836363e8e83005557d4a12520c3ae1ba0b6df8a50c25b844c854eaa4ac79484aca3", 0xac}], 0x1}, 0x48000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000099711f4131763df5ea3dbef9fb5ffb9bb638af20ba4720bebaf13d331474dc2f4affc4a9aaf880d8e9f65137f8de7770c670158bbb72dbf3705ac4559f96fcaba44b87697b91b86d499f7fc5ee39d0a5b37ca51de1e1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b403000000000000850000008c000000b700000000000000950000000000000064bf29d2d5b1be91fffb056155c65a29a16391be888c814ec05f757bdd2110a460775f6f1465937ef2d473f3891446484d6b32998a6f6a1333a910d38990c2980ca5477ad05a5d2bd7adf2b8a5d1ca6ce994fc94ced0f0f9db453ddcce18b0912ecae2c178f7bf87701ea729e20fb8937f50ad8db63547fb5b152a17e606f87b3581a4c1f278a4a0d0563f2c53adcbc990a0dcfa0a0fc931b4194577abc12436eeeb3788827a744387efc52317c10dbbba8ffc89117ced1b9d5b09bedaaade9308e4a225ff5e25c6db7a39e46a58ac2f559eb6481d62336c400a8bd321b3a6d2d2452ce5b2ae362a546e2bf39cfcb3586574feabbcd59d8e2498a30cb2e04ac6bb2540b0de3571d35aeb1137c10f728a06558ab14f9d1483123fda103595400020b157148d7cf7e9488e9c39bd1e06b563bbc2d5b9346d2dab44c1e1162bb3968042554d229f3323648180aac1942f47246417ca8c3482dcf4618a89d2ce32fb86961682f5a9ab93b3497962139a5fa01eedbf7bca057f7c3f483d47d22fd3f18606d2559ea0e93a33f2c982531af2e8ef8fa1c2f0e02ffabfe59465633be13a96aac2e9adc3623b659dca3b2095979f56c08f0cdca0d5f63cdaa62e98dd292341180eb9c39dc70886a5f15792b2"], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) 22.14462756s ago: executing program 2 (id=4699): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000640)="00d6", 0x2}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0xffffffffffffff41, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, &(0x7f0000000100)=""/19, 0x13}, 0x40001012) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r8) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(r10, 0x6, 0x1e, &(0x7f0000000500)=r9, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) 22.069879864s ago: executing program 0 (id=4700): r0 = socket$kcm(0x2, 0x3, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8935, &(0x7f0000000040)={r0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x4, 0x96, 0xf1, 0x0, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x5, 0x2, 0x9, 0xfffffffffffffffe, 0xffff100e, 0x7, 0x0, 0x9, 0x0, 0x801}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x1, 0x10, 0x5, 0xfffffff8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000500)=[{0x5, 0x4, 0xc, 0x4}, {0x0, 0x40000000, 0x0, 0x5}, {0x3, 0x1, 0xb, 0xa}, {0x5, 0x5, 0x9, 0x6}, {0x0, 0x1, 0xa, 0x3}], 0x10, 0xa3e0}, 0x94) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180), 0x2, 0x0) 21.30214223s ago: executing program 3 (id=4701): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x4004040) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080002000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d0", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x400000000008, 0x8000008}, 0x107004, 0x2, 0xfffffffe, 0x0, 0x0, 0xa, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x8000) r4 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, &(0x7f0000000100), 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4c0b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x11, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x200, 0x8, 0x3, 0xffc, 0x0, 0x0, 0x4, 0x0, 0x2}, r4, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x401c5820, &(0x7f0000000000)=0x18000) setsockopt$sock_attach_bpf(r6, 0x29, 0x15, &(0x7f0000000100), 0x3d) recvmsg$kcm(r4, &(0x7f0000000800)={&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000000600)=""/227, 0xe3}], 0x2, &(0x7f00000007c0)=""/27, 0x1b}, 0x10063) 21.146466767s ago: executing program 0 (id=4702): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffc3, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x1e, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f7", 0x30}], 0x2}, 0x24000008) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000000fcff7f61887bffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x0) 19.286438126s ago: executing program 2 (id=4703): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x662000, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x4, 0x8000000000000000}, 0x8100, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x662000, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x4, 0x8000000000000000}, 0x8100, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) 19.285154616s ago: executing program 0 (id=4704): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071101f000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x3, 0x4, 0x9, 0x0, 0xb, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000000), 0xe}, 0x22c50a3aef55db8e, 0x3, 0xc1, 0x9, 0xc00000000, 0x7f, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x4005, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='syzkaller\x00') 19.217870179s ago: executing program 3 (id=4705): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x110, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x88, 0xa, &(0x7f0000000000)=r0, 0x4) r3 = gettid() perf_event_open(&(0x7f0000000980)={0x3, 0x80, 0x5, 0x10, 0x5, 0x40, 0x0, 0x2, 0x2000, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x7fffffff, 0x6}, 0x0, 0x7, 0x8, 0x4, 0x7, 0x2, 0x9, 0x0, 0x401, 0x0, 0x1}, r3, 0xc, r0, 0x1) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000500e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg(r4, &(0x7f0000000940)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, 0x2}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="f45a4752eadf510ade12624dbee6c4043cb8f0f81647d3e46460689c12ce19438c3c2ad1b3e5f60825c154c5d8a8f81e10a9ac", 0x33}, {&(0x7f0000000300)="0aeb4a0af4285a21359aa435c63e80fe2a7735025f2c81551836db282bf53428082c8880dd5b237ba297c36221fe4eca8049aa8a1f9737105cdb30d2b09717381aa584664b248665f97b", 0x4a}, {&(0x7f0000000380)="74b18e7abbd2019454d8ae7b0a47556719d84fe2df816379841eae9b2ded8345bbd5f42ed7c19c26ef9d89462cdca06ca2963597e39d4fafd740c4a2283c4f35da49a2eee6fd3e22f38312fa25e25575760c6c5b93631af3c4ab2d378b4ef1d3f0a73cabd53783ec015d884d5e1022e754a682619c747776fdf66549e0f8dfe695985b1fe7d79405ac53aca6e99630f21a11780f427b1bb24820a777c5f9e2f8a060a2db1c64fdc728da8fb019a082e509eb7c9a127109e27319e6e367", 0xbd}], 0x3, &(0x7f0000000600)=[{0xb8, 0x29, 0x9, "258a2aac91a12f5c40d57af6e3df78dcbf4b75473ac35b1ed25bb49cd4e9a2531113cc5dcc3db5ac534c5ce8d3a952427b42afefec4c4fde6c1c7a8e9132e065326cd0a76436179e86e5022d6f0f8308e4ad66554306c9e6d3bfab868a625bcb4e7a093aebc5d43dcbe4793b44929dd201d8115079e3f8972657bc7b597db67111c23415618dbfcf8787309d94138c035e59c59051c185cd868b23b5d7c92fa67f"}, {0x20, 0x88, 0x4, "60038b100d1794cd15"}, {0xe0, 0x10b, 0x7ff, "f00e74bd579d101908916dd6a264aa8da3a4430c84657dfc016cecd35f5b9cbb71b92e21697d1ecd05f4c06d8fca91c847096adb60fd1275812168d1a772c374654568fb2e88f08a851f310689fe3f8c6b597e85f4e48c0eae4bb38c59309d5ea0c3882e3832daa3f2b6c0140571fb716c55a008879df09ba25b721e3d9981fb3b9a52589cc5d99ae858668582b98c029bcd11066da3b616c8fd1a048d9b90d9201b898f80383bf2ef00482b63e585d76ee63d6c5be9139ebe148f045bdbc9ae2fdd08e30011fb31b2cbdb22c77e031c"}, {0x48, 0x10e, 0x5, "31e8ec3b7e69a11bf86b9ad5b0650c872f5be8dd41acc5d19a28d3419d6e13a587f3289a5444706e816c69a607f4a47ca153"}, {0x110, 0x1, 0x3ff, "95e8bd88c8879882fb71ea5794cf07c72406caf2fd081ff55a255a79db2b445a90281a16a6198cc2b5a495d71d96e048a56928be453e47e2c4214ba96df7c60b3652ec3354efaf770ef5051ef0c6cf3fa15145d566bc6a26d8937c7e0e1bbedb2e4c8b2186f522ed91886d35b4cd7b01b0b268dea21b248cae67d7b13d9d55d3b25ab28cc67aa2a89d00f6eb43f3fde405784f259662c453dc560d4da39c1d14063897ea3a4309a9109566eb1bfd62adae1e44f0deccf53050ef684d2c5a6c55a7e436893b3329eeea74c5324c70c941b4f1d1e8e5bee422c1526e955bec97e98a2736574ae7b0966e669f2617aa583724c62a726595ea517a"}], 0x310}, 0x84004) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e6900850000008a00000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0281bb9f7200254b9cd956c0", 0x1c}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc080, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) setsockopt$sock_attach_bpf(r5, 0x0, 0x12, 0x0, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x300, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39}, 0x94) 19.212121989s ago: executing program 1 (id=4706): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) (async) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x7) 19.138386123s ago: executing program 1 (id=4707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) 19.038160308s ago: executing program 0 (id=4708): r0 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2123, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x3cec54dc0000000}, 0x0, 0xe, 0xffffffffffffffff, 0x1) (async) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) (async, rerun: 64) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) (async, rerun: 64) r3 = socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x11, 0x2, 0x0) (async) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x88160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x9022, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc603406034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1}) 19.037422378s ago: executing program 1 (id=4709): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'dvmrp1\x00', @local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x0, 0x9, 0x81, 0x7, 0x0, 0x8, 0xf10d1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff5}, 0x100000, 0x6, 0x4, 0x8, 0x2, 0x9, 0x5, 0x0, 0x3, 0x0, 0x4}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000180000000800000040000000420000205575c032e048c6260e6ece534ca1539ff94957eb4cfcbac48b068edf6a5b201657d6629226639efa0380ea6bad4b1f2aa076d3305b03876a400511a4668065ee", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x24}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000001c0)) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7ffffff7, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) recvmsg$kcm(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2002) 18.832405717s ago: executing program 3 (id=4710): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000cb, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48283, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x800000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x800000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e", 0x5}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@llc={0x1a, 0x200, 0xff, 0x7, 0xaf, 0x92, @random="cf9cc5264a6b"}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socketpair(0x1, 0x801, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8000000000, 0xda}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) socket$kcm(0x1e, 0x4, 0x0) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) 18.56705484s ago: executing program 2 (id=4711): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000640)="00d6", 0x2}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0xffffffffffffff41, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, &(0x7f0000000100)=""/19, 0x13}, 0x40001012) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r8) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(r10, 0x6, 0x1e, &(0x7f0000000500)=r9, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) 18.298037843s ago: executing program 0 (id=4712): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffffc3, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x1e, 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f7", 0x30}], 0x2}, 0x24000008) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000000fcff7f61887bffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x0) 17.606109315s ago: executing program 3 (id=4713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f0000000440)=0x1) socket$kcm(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x7, 0x11, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000017c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000018c0), &(0x7f0000001900)=[{0x4, 0x5, 0x6, 0xb}, {0x4, 0x4, 0x1, 0xb}, {0x5, 0x1, 0xe, 0x3}, {0x4, 0x2, 0x8, 0x7}, {0x0, 0x5, 0xe, 0x1}, {0x5, 0x3, 0xf, 0xb}], 0x10, 0x6}, 0x94) r3 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r2, 0x0, 0x46, 0x45, &(0x7f00000005c0)="4ce659efebdb359fea9bc176038edbee45ea05d9c0312a9f20980a9d97dad91f024cd8cc5d571f39d57517ef2fecde90360f2c0b877af5c06287e73f46ae7d2c861981c6f0ea", &(0x7f0000000840)=""/69, 0xfffffffd, 0x0, 0x83, 0x57, &(0x7f0000000f40)="54a0ece1698e4f1a3dab78ceb4b104785ad3350bb10a09f3c10a29e2e6082213b4ed0c8c0e89b46f612ff9706225fb6b7d7ff3667af031ab374010350c9fd2e25a55f796bb6c2963c1009d99e8b02d1cc7aceaf4893db809c0e4af205c815a466cb960da3e4b8c7ee0203aad73cee3611aaf0bdfb52ee44f62da3012a11a722e298f5d", &(0x7f0000001080)="cb74a0514f7d7c68fdbe2b9473a05265ed8736eb00b95c10d8a9f092dca06f2cd5cea2b3a91059538b8b748e395e6289b10eb615dc7677326de9233ac3ec46797ec7d1735afe10db6ba26fcec5745f3b633049f556c9ba", 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1f, 0x1, @perf_bp={0x0, 0x8}, 0x100410, 0x200, 0x3, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002a80)={0xffffffffffffffff, 0x20, &(0x7f0000002a40)={&(0x7f0000000640)=""/115, 0x73, 0x0, &(0x7f0000001a40)=""/4096, 0x1000}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb373", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg$kcm(r7, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e40)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000060000000b00000000000007000000000600000000000009000000000200000000000009000000000000000000000003000000000400000002000000490000000e0000009b736c0d518d85dd0061302e5f00d6fabe2df69478b6065cfba9b7fbb14e6f895e26d9d5d57bd6a5c0f656b2ce3012e28ae09a494bc841d3e0cc7eb2af8290d00f8e9bd381561130"], &(0x7f0000000e00), 0x66, 0x0, 0x1, 0x9}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) ioctl$TUNGETFILTER(r2, 0x801054db, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r7, r8}) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000140)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0x18}, 0x400c081) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.530228149s ago: executing program 1 (id=4714): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="110000005e0033"], 0xfe33) 17.442100873s ago: executing program 3 (id=4715): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000880000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x28, 0x8, 0x5, 0xfffff02c}, {0x6, 0xc0}]}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 17.440090043s ago: executing program 1 (id=4716): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8804) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f700000000923300000000000000000000000011523ffaf57a7e979a8b6d46125394645825156c04"], 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 17.419504635s ago: executing program 2 (id=4717): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="54000000000000000000000400000000000000600000000100010001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) sendmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x40090}, 0x240000d1) close(r2) 17.407425225s ago: executing program 0 (id=4718): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x50, 0x0, 0x1}, 0x28) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB='1-2', @ANYRESOCT=0x0, @ANYBLOB='E('], 0x31) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}, {&(0x7f0000000cc0)="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", 0xf34}], 0x3}, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, &(0x7f0000000040), 0x17) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104702, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 17.189768865s ago: executing program 2 (id=4719): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a8dcc7482add00000000001e00000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03"], 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000020000000001000c02000000000000000000000d0000000000005f2e"], 0x0, 0x35}, 0x28) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10811, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x5, &(0x7f0000000140), 0x55) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 1.444659851s ago: executing program 32 (id=4718): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x10100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x50, 0x0, 0x1}, 0x28) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB='1-2', @ANYRESOCT=0x0, @ANYBLOB='E('], 0x31) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014001040400060404009bbc7a46e3988285dcdf12f213e6f768fec601955fd80009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) (async) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x3, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27050200420014000300002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000440)="cb4e88a8af3288a8eef1", 0xa}, {&(0x7f0000000cc0)="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", 0xf34}], 0x3}, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, &(0x7f0000000040), 0x17) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x104702, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1.25719675s ago: executing program 33 (id=4716): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8804) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f700000000923300000000000000000000000011523ffaf57a7e979a8b6d46125394645825156c04"], 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 125.085764ms ago: executing program 34 (id=4719): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007911a8dcc7482add00000000001e00000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03"], 0x12) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000020000000001000c02000000000000000000000d0000000000005f2e"], 0x0, 0x35}, 0x28) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10811, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x5, &(0x7f0000000140), 0x55) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 0s ago: executing program 35 (id=4715): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000880000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x28, 0x8, 0x5, 0xfffff02c}, {0x6, 0xc0}]}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): x1e0 [ 883.060592][T19319] ? __sys_sendmsg+0x2b0/0x2b0 [ 883.065456][T19319] ? __lock_acquire+0x7d80/0x7d80 [ 883.070568][T19319] __se_sys_sendmsg+0x1d0/0x2c0 [ 883.075481][T19319] ? __x64_sys_sendmsg+0x80/0x80 [ 883.080493][T19319] ? lockdep_hardirqs_on+0x98/0x150 [ 883.085765][T19319] do_syscall_64+0x55/0xb0 [ 883.090236][T19319] ? clear_bhb_loop+0x40/0x90 [ 883.094978][T19319] ? clear_bhb_loop+0x40/0x90 [ 883.099736][T19319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 883.105698][T19319] RIP: 0033:0x7f190179e159 [ 883.110174][T19319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.129842][T19319] RSP: 002b:00007f190265f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 883.138315][T19319] RAX: ffffffffffffffda RBX: 00007f1901a25fa0 RCX: 00007f190179e159 [ 883.146357][T19319] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 883.154386][T19319] RBP: 00007f190265f090 R08: 0000000000000000 R09: 0000000000000000 [ 883.162417][T19319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 883.170436][T19319] R13: 00007f1901a26038 R14: 00007f1901a25fa0 R15: 00007ffff752fa98 [ 883.178485][T19319] [ 883.217803][T19322] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3544'. [ 883.538827][T19326] netlink: 'syz.0.3547': attribute type 10 has an invalid length. [ 884.318875][T19326] team0: Port device geneve1 added [ 884.328058][T19329] netlink: 'syz.0.3547': attribute type 10 has an invalid length. [ 885.624227][T19361] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3554'. [ 885.832384][T19367] FAULT_INJECTION: forcing a failure. [ 885.832384][T19367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.868228][T19367] CPU: 0 PID: 19367 Comm: syz.2.3555 Not tainted syzkaller #0 [ 885.876024][T19367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.886133][T19367] Call Trace: [ 885.889460][T19367] [ 885.892439][T19367] dump_stack_lvl+0x18c/0x250 [ 885.897175][T19367] ? show_regs_print_info+0x20/0x20 [ 885.902521][T19367] ? load_image+0x420/0x420 [ 885.907088][T19367] ? __lock_acquire+0x7d80/0x7d80 [ 885.912174][T19367] should_fail_ex+0x394/0x4c0 [ 885.916919][T19367] _copy_from_user+0x2f/0xe0 [ 885.921566][T19367] __copy_msghdr+0x388/0x560 [ 885.926214][T19367] ___sys_sendmsg+0x214/0x360 [ 885.930952][T19367] ? __sys_sendmsg+0x2b0/0x2b0 [ 885.935799][T19367] ? trace_call_bpf+0xc3/0x6c0 [ 885.940655][T19367] __se_sys_sendmsg+0x1d0/0x2c0 [ 885.945561][T19367] ? perf_trace_preemptirq_template+0x269/0x330 [ 885.951869][T19367] ? __x64_sys_sendmsg+0x80/0x80 [ 885.956894][T19367] ? lockdep_hardirqs_on+0x98/0x150 [ 885.962166][T19367] do_syscall_64+0x55/0xb0 [ 885.966640][T19367] ? clear_bhb_loop+0x40/0x90 [ 885.971384][T19367] ? clear_bhb_loop+0x40/0x90 [ 885.976127][T19367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 885.982081][T19367] RIP: 0033:0x7f3a5019e159 [ 885.986544][T19367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.006213][T19367] RSP: 002b:00007f3a51034028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.014687][T19367] RAX: ffffffffffffffda RBX: 00007f3a50426090 RCX: 00007f3a5019e159 [ 886.022718][T19367] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 886.030764][T19367] RBP: 00007f3a51034090 R08: 0000000000000000 R09: 0000000000000000 [ 886.038789][T19367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.046814][T19367] R13: 00007f3a50426128 R14: 00007f3a50426090 R15: 00007ffc2c3f7c78 [ 886.054870][T19367] [ 886.070611][T19372] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3558'. [ 888.016897][T19411] FAULT_INJECTION: forcing a failure. [ 888.016897][T19411] name failslab, interval 1, probability 0, space 0, times 0 [ 888.037350][T19411] CPU: 1 PID: 19411 Comm: syz.0.3569 Not tainted syzkaller #0 [ 888.044887][T19411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.054986][T19411] Call Trace: [ 888.058303][T19411] [ 888.061274][T19411] dump_stack_lvl+0x18c/0x250 [ 888.066008][T19411] ? show_regs_print_info+0x20/0x20 [ 888.071269][T19411] ? load_image+0x420/0x420 [ 888.075801][T19411] ? __might_sleep+0xe0/0xe0 [ 888.080437][T19411] ? __lock_acquire+0x7d80/0x7d80 [ 888.085590][T19411] should_fail_ex+0x394/0x4c0 [ 888.090305][T19411] should_failslab+0x9/0x20 [ 888.094843][T19411] slab_pre_alloc_hook+0x59/0x300 [ 888.099909][T19411] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 888.105920][T19411] ? sock_kmalloc+0x96/0xf0 [ 888.110464][T19411] ? sock_kmalloc+0x96/0xf0 [ 888.115015][T19411] __kmem_cache_alloc_node+0x53/0x250 [ 888.120430][T19411] ? sock_kmalloc+0x96/0xf0 [ 888.124968][T19411] __kmalloc+0xa7/0x240 [ 888.129156][T19411] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 888.135352][T19411] sock_kmalloc+0x96/0xf0 [ 888.139722][T19411] ____sys_sendmsg+0x1d4/0x980 [ 888.144519][T19411] ? __import_iovec+0x64b/0x850 [ 888.149411][T19411] ? __sys_sendmsg_sock+0x30/0x30 [ 888.154479][T19411] ? import_iovec+0x73/0xa0 [ 888.159063][T19411] ___sys_sendmsg+0x2a6/0x360 [ 888.163769][T19411] ? get_pid_task+0x20/0x1e0 [ 888.168403][T19411] ? __sys_sendmsg+0x2b0/0x2b0 [ 888.173250][T19411] ? __lock_acquire+0x7d80/0x7d80 [ 888.178334][T19411] __se_sys_sendmsg+0x1d0/0x2c0 [ 888.183224][T19411] ? __x64_sys_sendmsg+0x80/0x80 [ 888.188383][T19411] ? lockdep_hardirqs_on+0x98/0x150 [ 888.193623][T19411] do_syscall_64+0x55/0xb0 [ 888.198096][T19411] ? clear_bhb_loop+0x40/0x90 [ 888.202899][T19411] ? clear_bhb_loop+0x40/0x90 [ 888.207610][T19411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 888.213536][T19411] RIP: 0033:0x7f190179e159 [ 888.217979][T19411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.237612][T19411] RSP: 002b:00007f190265f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.246054][T19411] RAX: ffffffffffffffda RBX: 00007f1901a25fa0 RCX: 00007f190179e159 [ 888.254056][T19411] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 888.262054][T19411] RBP: 00007f190265f090 R08: 0000000000000000 R09: 0000000000000000 [ 888.270053][T19411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.278061][T19411] R13: 00007f1901a26038 R14: 00007f1901a25fa0 R15: 00007ffff752fa98 [ 888.286079][T19411] [ 889.814370][T19433] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3574'. [ 890.348367][T19440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3577'. [ 890.451976][T19442] bridge0: port 2(veth0_to_bond) entered blocking state [ 890.493970][T19442] bridge0: port 2(veth0_to_bond) entered disabled state [ 890.520347][T19442] veth0_to_bond: entered allmulticast mode [ 890.587851][T19442] veth0_to_bond: entered promiscuous mode [ 890.721447][T19444] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3578'. [ 890.778297][T19444] netlink: 'syz.2.3578': attribute type 1 has an invalid length. [ 891.200994][T14707] Bluetooth: hci0: ISO packet for unknown connection handle 4 [ 892.362340][T19471] netlink: 'syz.3.3585': attribute type 3 has an invalid length. [ 893.628852][T19482] netlink: 'syz.3.3589': attribute type 21 has an invalid length. [ 893.657709][T19482] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3589'. [ 893.852588][T19486] sit0: entered allmulticast mode [ 893.913544][T19482] sit0: entered promiscuous mode [ 894.889325][T19490] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 894.896551][T19490] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 895.335688][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.528016][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.558066][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.616253][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.656432][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.694157][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.709345][T19505] netlink: 'syz.0.3593': attribute type 1 has an invalid length. [ 895.727884][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 895.729184][T19505] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3593'. [ 895.748706][T19506] FAULT_INJECTION: forcing a failure. [ 895.748706][T19506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.774453][T19506] CPU: 1 PID: 19506 Comm: syz.1.3592 Not tainted syzkaller #0 [ 895.782077][T19506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 895.792350][T19506] Call Trace: [ 895.795652][T19506] [ 895.798607][T19506] dump_stack_lvl+0x18c/0x250 [ 895.803325][T19506] ? show_regs_print_info+0x20/0x20 [ 895.808569][T19506] ? load_image+0x420/0x420 [ 895.813123][T19506] ? __lock_acquire+0x7d80/0x7d80 [ 895.818191][T19506] ? snprintf+0xe9/0x140 [ 895.822489][T19506] should_fail_ex+0x394/0x4c0 [ 895.827212][T19506] _copy_to_user+0x2f/0xa0 [ 895.831665][T19506] simple_read_from_buffer+0xe7/0x150 [ 895.837067][T19506] proc_fail_nth_read+0x1e8/0x260 [ 895.842134][T19506] ? proc_fault_inject_write+0x360/0x360 [ 895.847811][T19506] ? fsnotify_perm+0x271/0x5e0 [ 895.852604][T19506] ? proc_fault_inject_write+0x360/0x360 [ 895.858276][T19506] vfs_read+0x298/0x990 [ 895.862475][T19506] ? kernel_read+0x1e0/0x1e0 [ 895.867102][T19506] ? __fget_files+0x28/0x460 [ 895.871742][T19506] ? __fget_files+0x3fc/0x460 [ 895.876492][T19506] ? __fdget_pos+0x2a3/0x330 [ 895.881120][T19506] ? ksys_read+0x74/0x260 [ 895.885498][T19506] ksys_read+0x151/0x260 [ 895.889781][T19506] ? vfs_write+0x9a0/0x9a0 [ 895.894237][T19506] ? lockdep_hardirqs_on+0x98/0x150 [ 895.899476][T19506] do_syscall_64+0x55/0xb0 [ 895.903921][T19506] ? clear_bhb_loop+0x40/0x90 [ 895.908629][T19506] ? clear_bhb_loop+0x40/0x90 [ 895.913342][T19506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 895.919268][T19506] RIP: 0033:0x7fae2d15e98e [ 895.923715][T19506] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 895.943354][T19506] RSP: 002b:00007fae2e0fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 895.951801][T19506] RAX: ffffffffffffffda RBX: 00007fae2e0fe6c0 RCX: 00007fae2d15e98e [ 895.959795][T19506] RDX: 000000000000000f RSI: 00007fae2e0fe0a0 RDI: 0000000000000004 [ 895.967792][T19506] RBP: 00007fae2e0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 895.975784][T19506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.984043][T19506] R13: 00007fae2d426128 R14: 00007fae2d426090 R15: 00007fff7cf59de8 [ 895.992058][T19506] [ 896.010188][T19497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3591'. [ 897.504351][T19528] netlink: 'syz.3.3599': attribute type 3 has an invalid length. [ 897.522992][T19528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3599'. [ 897.751228][T19533] netlink: 'syz.1.3598': attribute type 9 has an invalid length. [ 897.806204][T19533] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3598'. [ 898.701701][T19553] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 898.753414][T19548] syzkaller0: entered promiscuous mode [ 898.767429][T19553] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3605'. [ 898.843127][T19548] syzkaller0: entered allmulticast mode [ 899.133748][T19558] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3606'. [ 903.097967][T19586] FAULT_INJECTION: forcing a failure. [ 903.097967][T19586] name failslab, interval 1, probability 0, space 0, times 0 [ 903.125022][T19586] CPU: 0 PID: 19586 Comm: syz.1.3612 Not tainted syzkaller #0 [ 903.132593][T19586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.142701][T19586] Call Trace: [ 903.146047][T19586] [ 903.149036][T19586] dump_stack_lvl+0x18c/0x250 [ 903.153947][T19586] ? show_regs_print_info+0x20/0x20 [ 903.159208][T19586] ? load_image+0x420/0x420 [ 903.163806][T19586] should_fail_ex+0x394/0x4c0 [ 903.168649][T19586] should_failslab+0x9/0x20 [ 903.173402][T19586] slab_pre_alloc_hook+0x59/0x300 [ 903.178499][T19586] kmem_cache_alloc+0x5a/0x2c0 [ 903.183323][T19586] ? __nf_conntrack_alloc+0x93/0x370 [ 903.188763][T19586] __nf_conntrack_alloc+0x93/0x370 [ 903.194043][T19586] init_conntrack+0x166/0xe20 [ 903.198833][T19586] ? early_drop+0x7f0/0x7f0 [ 903.203399][T19586] ? nf_conntrack_find_get+0x670/0x670 [ 903.208915][T19586] ? __siphash_unaligned+0x25c/0x3d0 [ 903.214307][T19586] nf_conntrack_in+0xc29/0x15b0 [ 903.219243][T19586] ? nf_ct_pernet+0x270/0x270 [ 903.224070][T19586] ? ip6t_do_table+0x1cb/0x1570 [ 903.229090][T19586] ? ip6t_alloc_initial_table+0x640/0x640 [ 903.234881][T19586] ? ipv6_defrag+0x2d6/0x3a0 [ 903.239546][T19586] ? ipv6_conntrack_in+0x20/0x20 [ 903.244542][T19586] nf_hook_slow+0xbd/0x200 [ 903.249018][T19586] __ip6_local_out+0x784/0x8a0 [ 903.253905][T19586] ? __ip6_local_out+0x60c/0x8a0 [ 903.258907][T19586] ? ip6_dst_hoplimit+0x350/0x350 [ 903.264027][T19586] ? __ip6_local_out+0x8a0/0x8a0 [ 903.269031][T19586] ? read_lock_is_recursive+0x20/0x20 [ 903.274552][T19586] ? __skb_checksum+0x800/0x800 [ 903.279487][T19586] ip6_local_out+0x2a/0x130 [ 903.284053][T19586] ? ip6_send_skb+0x10a/0x380 [ 903.288826][T19586] ip6_send_skb+0x1cd/0x380 [ 903.293388][T19586] udp_v6_send_skb+0xbd8/0x1810 [ 903.298399][T19586] udp_v6_push_pending_frames+0x133/0x220 [ 903.304178][T19586] udpv6_sendmsg+0xdd8/0x2350 [ 903.308931][T19586] ? udpv6_sendmsg+0x2350/0x2350 [ 903.313932][T19586] ? __might_sleep+0xe0/0xe0 [ 903.318620][T19586] ? udp_v6_early_demux+0xf90/0xf90 [ 903.323929][T19586] ? aa_af_perm+0x330/0x330 [ 903.328534][T19586] ? sock_rps_record_flow+0x19/0x3f0 [ 903.333923][T19586] ? inet_send_prepare+0x5b/0x250 [ 903.339025][T19586] ? inet6_sendmsg+0x5f/0xd0 [ 903.343685][T19586] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 903.348957][T19586] ____sys_sendmsg+0x61b/0x980 [ 903.353826][T19586] ? __asan_memset+0x22/0x40 [ 903.358490][T19586] ? __sys_sendmsg_sock+0x30/0x30 [ 903.363575][T19586] ? __import_iovec+0x3fa/0x850 [ 903.368505][T19586] ? import_iovec+0x73/0xa0 [ 903.373096][T19586] ___sys_sendmsg+0x2a6/0x360 [ 903.377844][T19586] ? get_pid_task+0x20/0x1e0 [ 903.382516][T19586] ? __sys_sendmsg+0x2b0/0x2b0 [ 903.387386][T19586] ? __lock_acquire+0x7d80/0x7d80 [ 903.392521][T19586] __se_sys_sendmsg+0x1d0/0x2c0 [ 903.397436][T19586] ? __x64_sys_sendmsg+0x80/0x80 [ 903.402464][T19586] ? lockdep_hardirqs_on+0x98/0x150 [ 903.407737][T19586] do_syscall_64+0x55/0xb0 [ 903.412223][T19586] ? clear_bhb_loop+0x40/0x90 [ 903.416962][T19586] ? clear_bhb_loop+0x40/0x90 [ 903.421716][T19586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.427687][T19586] RIP: 0033:0x7fae2d19e159 [ 903.432167][T19586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.451848][T19586] RSP: 002b:00007fae2e11f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.460377][T19586] RAX: ffffffffffffffda RBX: 00007fae2d425fa0 RCX: 00007fae2d19e159 [ 903.468412][T19586] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 903.476451][T19586] RBP: 00007fae2e11f090 R08: 0000000000000000 R09: 0000000000000000 [ 903.484496][T19586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.492529][T19586] R13: 00007fae2d426038 R14: 00007fae2d425fa0 R15: 00007fff7cf59de8 [ 903.500583][T19586] [ 904.427882][T19592] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.3615'. [ 906.705363][T19562] netlink: 'syz.0.3608': attribute type 10 has an invalid length. [ 906.713801][T19562] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3608'. [ 906.723343][T19562] hsr0: entered promiscuous mode [ 906.729633][T19562] bridge0: port 1(hsr0) entered blocking state [ 906.736165][T19562] bridge0: port 1(hsr0) entered disabled state [ 906.743217][T19562] hsr0: entered allmulticast mode [ 906.767199][T19562] hsr_slave_0: entered allmulticast mode [ 906.772924][T19562] hsr_slave_1: entered allmulticast mode [ 906.793378][T19562] bridge0: port 1(hsr0) entered blocking state [ 906.799822][T19562] bridge0: port 1(hsr0) entered forwarding state [ 907.150243][T19602] netlink: 'syz.2.3619': attribute type 10 has an invalid length. [ 907.264052][T19605] netlink: 'syz.0.3618': attribute type 41 has an invalid length. [ 907.337238][T19613] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3618'. [ 907.339423][T19602] bridge0: port 2(team0) entered disabled state [ 907.353652][T19602] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.410498][T19602] team0: Device bridge0 is already an upper device of the team interface [ 907.460737][T19605] netlink: 'syz.0.3618': attribute type 41 has an invalid length. [ 907.525406][T19619] FAULT_INJECTION: forcing a failure. [ 907.525406][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 907.572854][T19619] CPU: 0 PID: 19619 Comm: syz.3.3621 Not tainted syzkaller #0 [ 907.580642][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.590755][T19619] Call Trace: [ 907.594090][T19619] [ 907.597073][T19619] dump_stack_lvl+0x18c/0x250 [ 907.601819][T19619] ? show_regs_print_info+0x20/0x20 [ 907.607092][T19619] ? load_image+0x420/0x420 [ 907.611673][T19619] should_fail_ex+0x394/0x4c0 [ 907.616445][T19619] should_failslab+0x9/0x20 [ 907.621025][T19619] slab_pre_alloc_hook+0x59/0x300 [ 907.626093][T19619] ? lockdep_init_map_type+0x9c/0x8e0 [ 907.631502][T19619] ? nf_ct_ext_add+0x1ab/0x3e0 [ 907.636302][T19619] ? nf_ct_ext_add+0x1ab/0x3e0 [ 907.641106][T19619] __kmem_cache_alloc_node+0x53/0x250 [ 907.646664][T19619] ? nf_ct_ext_add+0x1ab/0x3e0 [ 907.651492][T19619] __kmalloc_node_track_caller+0xa4/0x230 [ 907.657273][T19619] krealloc+0x86/0x120 [ 907.661393][T19619] nf_ct_ext_add+0x1ab/0x3e0 [ 907.666030][T19619] init_conntrack+0x561/0xe20 [ 907.670752][T19619] ? early_drop+0x7f0/0x7f0 [ 907.675296][T19619] ? nf_conntrack_find_get+0x670/0x670 [ 907.680786][T19619] ? __siphash_unaligned+0x25c/0x3d0 [ 907.686146][T19619] nf_conntrack_in+0xc29/0x15b0 [ 907.691049][T19619] ? nf_ct_pernet+0x270/0x270 [ 907.695782][T19619] ? ip6t_do_table+0x1cb/0x1570 [ 907.700673][T19619] ? ip6t_alloc_initial_table+0x640/0x640 [ 907.706432][T19619] ? ipv6_defrag+0x2d6/0x3a0 [ 907.711085][T19619] ? ipv6_conntrack_in+0x20/0x20 [ 907.716062][T19619] nf_hook_slow+0xbd/0x200 [ 907.720516][T19619] __ip6_local_out+0x784/0x8a0 [ 907.725318][T19619] ? __ip6_local_out+0x60c/0x8a0 [ 907.730290][T19619] ? ip6_dst_hoplimit+0x350/0x350 [ 907.735387][T19619] ? __ip6_local_out+0x8a0/0x8a0 [ 907.740364][T19619] ? read_lock_is_recursive+0x20/0x20 [ 907.745771][T19619] ? __skb_checksum+0x800/0x800 [ 907.750655][T19619] ip6_local_out+0x2a/0x130 [ 907.755199][T19619] ? ip6_send_skb+0x10a/0x380 [ 907.759915][T19619] ip6_send_skb+0x1cd/0x380 [ 907.764453][T19619] udp_v6_send_skb+0xbd8/0x1810 [ 907.769354][T19619] udp_v6_push_pending_frames+0x133/0x220 [ 907.775113][T19619] udpv6_sendmsg+0xdd8/0x2350 [ 907.779834][T19619] ? udpv6_sendmsg+0x2350/0x2350 [ 907.784807][T19619] ? __might_sleep+0xe0/0xe0 [ 907.789428][T19619] ? udp_v6_early_demux+0xf90/0xf90 [ 907.794684][T19619] ? aa_af_perm+0x330/0x330 [ 907.799228][T19619] ? sock_rps_record_flow+0x19/0x3f0 [ 907.804552][T19619] ? inet_send_prepare+0x5b/0x250 [ 907.809626][T19619] ? inet6_sendmsg+0x5f/0xd0 [ 907.814338][T19619] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 907.819568][T19619] ____sys_sendmsg+0x61b/0x980 [ 907.824369][T19619] ? __asan_memset+0x22/0x40 [ 907.828990][T19619] ? __sys_sendmsg_sock+0x30/0x30 [ 907.834059][T19619] ? __import_iovec+0x3fa/0x850 [ 907.838959][T19619] ? import_iovec+0x73/0xa0 [ 907.843526][T19619] ___sys_sendmsg+0x2a6/0x360 [ 907.848249][T19619] ? get_pid_task+0x20/0x1e0 [ 907.852887][T19619] ? __sys_sendmsg+0x2b0/0x2b0 [ 907.857709][T19619] ? __lock_acquire+0x7d80/0x7d80 [ 907.862785][T19619] __se_sys_sendmsg+0x1d0/0x2c0 [ 907.867696][T19619] ? __x64_sys_sendmsg+0x80/0x80 [ 907.872679][T19619] ? lockdep_hardirqs_on+0x98/0x150 [ 907.877923][T19619] do_syscall_64+0x55/0xb0 [ 907.882371][T19619] ? clear_bhb_loop+0x40/0x90 [ 907.887074][T19619] ? clear_bhb_loop+0x40/0x90 [ 907.891788][T19619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.897708][T19619] RIP: 0033:0x7f6da459e159 [ 907.902156][T19619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.921792][T19619] RSP: 002b:00007f6da551d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.930236][T19619] RAX: ffffffffffffffda RBX: 00007f6da4825fa0 RCX: 00007f6da459e159 [ 907.938237][T19619] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 907.946232][T19619] RBP: 00007f6da551d090 R08: 0000000000000000 R09: 0000000000000000 [ 907.954253][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.962247][T19619] R13: 00007f6da4826038 R14: 00007f6da4825fa0 R15: 00007ffc746976a8 [ 907.970256][T19619] [ 909.196935][T19643] netlink: 'syz.3.3628': attribute type 41 has an invalid length. [ 909.237323][T19643] netlink: 'syz.3.3628': attribute type 41 has an invalid length. [ 909.306821][T19638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 909.542627][T19655] FAULT_INJECTION: forcing a failure. [ 909.542627][T19655] name failslab, interval 1, probability 0, space 0, times 0 [ 909.555914][T19655] CPU: 1 PID: 19655 Comm: syz.3.3633 Not tainted syzkaller #0 [ 909.563446][T19655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 909.573567][T19655] Call Trace: [ 909.576931][T19655] [ 909.579917][T19655] dump_stack_lvl+0x18c/0x250 [ 909.584680][T19655] ? show_regs_print_info+0x20/0x20 [ 909.590158][T19655] ? load_image+0x420/0x420 [ 909.595014][T19655] ? mark_lock+0x94/0x320 [ 909.599465][T19655] ? mark_lock+0x94/0x320 [ 909.603876][T19655] should_fail_ex+0x394/0x4c0 [ 909.608638][T19655] should_failslab+0x9/0x20 [ 909.613210][T19655] slab_pre_alloc_hook+0x59/0x300 [ 909.618356][T19655] kmem_cache_alloc_node+0x5e/0x310 [ 909.623634][T19655] ? __alloc_skb+0x103/0x2c0 [ 909.628294][T19655] __alloc_skb+0x103/0x2c0 [ 909.632788][T19655] alloc_skb_with_frags+0xcd/0x7a0 [ 909.637978][T19655] ? mark_lock+0x94/0x320 [ 909.642383][T19655] ? __lock_acquire+0x1262/0x7d80 [ 909.647477][T19655] sock_alloc_send_pskb+0x883/0x9a0 [ 909.652771][T19655] ? sock_kzfree_s+0x50/0x50 [ 909.657424][T19655] ? verify_lock_unused+0x140/0x140 [ 909.662700][T19655] __ip6_append_data+0x2b18/0x3d40 [ 909.667922][T19655] ? __in6_dev_get+0xd0/0xd0 [ 909.672630][T19655] ? ip6_mtu+0x7d/0x3f0 [ 909.676852][T19655] ? ip6_setup_cork+0xff0/0xff0 [ 909.681772][T19655] ? __lock_acquire+0x7d80/0x7d80 [ 909.686876][T19655] ip6_append_data+0x1b0/0x350 [ 909.691714][T19655] ? __in6_dev_get+0xd0/0xd0 [ 909.696388][T19655] icmp6_send+0x1384/0x1b60 [ 909.700977][T19655] ? icmp6_send+0x236/0x1b60 [ 909.705665][T19655] ? icmpv6_push_pending_frames+0x3f0/0x3f0 [ 909.711642][T19655] ? __asan_memset+0x22/0x40 [ 909.716767][T19655] ? __xfrm_sk_clone_policy+0x850/0x850 [ 909.722878][T19655] ip6_link_failure+0x3b/0x4c0 [ 909.727739][T19655] ? ip6_negative_advice+0x310/0x310 [ 909.733096][T19655] vti6_tnl_xmit+0x135f/0x19c0 [ 909.737937][T19655] ? validate_xmit_xfrm+0xbb/0x1340 [ 909.743212][T19655] ? vti6_dev_uninit+0x120/0x120 [ 909.748235][T19655] dev_hard_start_xmit+0x269/0x790 [ 909.753494][T19655] __dev_queue_xmit+0x1be8/0x37e0 [ 909.758595][T19655] ? __dev_queue_xmit+0x272/0x37e0 [ 909.763789][T19655] ? read_seqbegin+0x126/0x250 [ 909.768628][T19655] ? read_seqbegin+0x1b6/0x250 [ 909.773457][T19655] ? neigh_event_send+0x110/0x110 [ 909.778642][T19655] ? netdev_core_pick_tx+0x370/0x370 [ 909.784044][T19655] ? neigh_connected_output+0x3b7/0x460 [ 909.789687][T19655] ip6_finish_output2+0xf7a/0x1690 [ 909.794892][T19655] ? ip6_finish_output2+0x71a/0x1690 [ 909.800344][T19655] ? ip6_mtu+0x7d/0x3f0 [ 909.804551][T19655] ? nf_hook+0x390/0x390 [ 909.808856][T19655] ? ip6_mtu+0x321/0x3f0 [ 909.813169][T19655] ? ip6_finish_output+0x567/0x7f0 [ 909.818351][T19655] ? ip6_send_skb+0x10a/0x380 [ 909.822501][T19653] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.3632'. [ 909.823072][T19655] ip6_send_skb+0x1cd/0x380 [ 909.837061][T19655] udp_v6_send_skb+0xbd8/0x1810 [ 909.842001][T19655] udp_v6_push_pending_frames+0x133/0x220 [ 909.847796][T19655] udpv6_sendmsg+0xdd8/0x2350 [ 909.852828][T19655] ? udpv6_sendmsg+0x2350/0x2350 [ 909.858085][T19655] ? __might_sleep+0xe0/0xe0 [ 909.862734][T19655] ? udp_v6_early_demux+0xf90/0xf90 [ 909.868037][T19655] ? aa_af_perm+0x330/0x330 [ 909.872619][T19655] ? sock_rps_record_flow+0x19/0x3f0 [ 909.877966][T19655] ? inet_send_prepare+0x5b/0x250 [ 909.883056][T19655] ? inet6_sendmsg+0x5f/0xd0 [ 909.887757][T19655] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 909.893030][T19655] ____sys_sendmsg+0x61b/0x980 [ 909.897889][T19655] ? __asan_memset+0x22/0x40 [ 909.902548][T19655] ? __sys_sendmsg_sock+0x30/0x30 [ 909.907632][T19655] ? __import_iovec+0x3fa/0x850 [ 909.912552][T19655] ? import_iovec+0x73/0xa0 [ 909.917128][T19655] ___sys_sendmsg+0x2a6/0x360 [ 909.921875][T19655] ? get_pid_task+0x20/0x1e0 [ 909.926558][T19655] ? __sys_sendmsg+0x2b0/0x2b0 [ 909.931425][T19655] ? __lock_acquire+0x7d80/0x7d80 [ 909.936545][T19655] __se_sys_sendmsg+0x1d0/0x2c0 [ 909.941465][T19655] ? __x64_sys_sendmsg+0x80/0x80 [ 909.946481][T19655] ? lockdep_hardirqs_on+0x98/0x150 [ 909.951769][T19655] do_syscall_64+0x55/0xb0 [ 909.956246][T19655] ? clear_bhb_loop+0x40/0x90 [ 909.960995][T19655] ? clear_bhb_loop+0x40/0x90 [ 909.965738][T19655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.971702][T19655] RIP: 0033:0x7f6da459e159 [ 909.976205][T19655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.995870][T19655] RSP: 002b:00007f6da551d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.004358][T19655] RAX: ffffffffffffffda RBX: 00007f6da4825fa0 RCX: 00007f6da459e159 [ 910.012387][T19655] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 910.020414][T19655] RBP: 00007f6da551d090 R08: 0000000000000000 R09: 0000000000000000 [ 910.028454][T19655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.036498][T19655] R13: 00007f6da4826038 R14: 00007f6da4825fa0 R15: 00007ffc746976a8 [ 910.044560][T19655] [ 910.649186][T19667] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3637'. [ 910.691044][T19665] netlink: 'syz.2.3636': attribute type 2 has an invalid length. [ 910.709832][T19665] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3636'. [ 910.818255][T19672] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.834552][T19672] bridge0: entered allmulticast mode [ 911.052688][T19675] bridge0: left allmulticast mode [ 911.638863][T19688] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.3645'. [ 911.758737][T19687] netlink: 'syz.3.3643': attribute type 10 has an invalid length. [ 911.808007][T19687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3643'. [ 911.828146][T19690] netlink: 'syz.1.3644': attribute type 1 has an invalid length. [ 911.886962][T19687] bridge0: port 3(team0) entered blocking state [ 911.896521][T19687] bridge0: port 3(team0) entered disabled state [ 911.916690][T19690] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3644'. [ 911.934402][T19687] team0: entered allmulticast mode [ 911.941639][T19687] team_slave_0: entered allmulticast mode [ 911.955867][T19690] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3644'. [ 911.965508][T19687] team_slave_1: entered allmulticast mode [ 912.018336][T19687] team0: entered promiscuous mode [ 912.033788][T19687] team_slave_0: entered promiscuous mode [ 912.043821][T19687] team_slave_1: entered promiscuous mode [ 912.106309][T19691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.600368][T19705] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3648'. [ 913.496345][T19729] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3655'. [ 913.513302][T19729] netlink: zone id is out of range [ 913.531200][T19729] netlink: zone id is out of range [ 913.547527][T19729] netlink: zone id is out of range [ 913.556630][T19729] netlink: zone id is out of range [ 913.574036][T19729] netlink: zone id is out of range [ 913.587644][T19729] netlink: zone id is out of range [ 913.602584][T19729] netlink: zone id is out of range [ 913.618723][T19729] netlink: zone id is out of range [ 913.630468][T19729] netlink: zone id is out of range [ 914.441476][T19750] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3661'. [ 914.664947][T19752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.285435][T19787] netlink: 'syz.1.3675': attribute type 3 has an invalid length. [ 916.369645][T19787] netlink: 'syz.1.3675': attribute type 5 has an invalid length. [ 916.416270][T19787] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.3675'. [ 917.409989][T19802] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3679'. [ 917.590500][T19809] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3682'. [ 917.622503][T19809] net_ratelimit: 82 callbacks suppressed [ 917.622523][T19809] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 920.554126][T19880] netlink: 'syz.2.3701': attribute type 6 has an invalid length. [ 920.612105][T19880] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3701'. [ 920.659851][T19882] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3701'. [ 921.649708][T19904] : port 1(ip6gretap0) entered blocking state [ 921.665533][T19904] : port 1(ip6gretap0) entered disabled state [ 921.684161][T19904] ip6gretap0: entered allmulticast mode [ 921.712214][T19904] ip6gretap0: entered promiscuous mode [ 921.777263][T19905] ip6gretap0: left allmulticast mode [ 921.787653][T19905] ip6gretap0: left promiscuous mode [ 921.793316][T19905] : port 1(ip6gretap0) entered disabled state [ 922.029889][T19908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3708'. [ 922.775353][T19925] delete_channel: no stack [ 924.998554][T19940] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3719'. [ 925.666110][T19958] netlink: 'syz.1.3725': attribute type 21 has an invalid length. [ 925.714171][T19958] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3725'. [ 925.932065][T19962] netlink: 'syz.2.3726': attribute type 10 has an invalid length. [ 926.023623][T19962] team0: left allmulticast mode [ 926.037231][T19962] team_slave_0: left allmulticast mode [ 926.051886][T19962] team_slave_1: left allmulticast mode [ 926.067266][T19962] bond0: left allmulticast mode [ 926.077669][T19962] bond_slave_0: left allmulticast mode [ 926.095615][T19962] : left allmulticast mode [ 926.106772][T19962] bridge_slave_1: left allmulticast mode [ 926.116534][T19967] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 926.128388][T19962] geneve1: left allmulticast mode [ 926.135653][T19962] team0: left promiscuous mode [ 926.142261][T19962] team_slave_0: left promiscuous mode [ 926.148702][T19962] team_slave_1: left promiscuous mode [ 926.154614][T19962] bond0: left promiscuous mode [ 926.167070][T19962] bond_slave_0: left promiscuous mode [ 926.173496][T19962] : left promiscuous mode [ 926.178695][T19962] bridge_slave_1: left promiscuous mode [ 926.185133][T19962] geneve1: left promiscuous mode [ 926.195115][T19962] bridge0: port 2(team0) entered disabled state [ 926.212393][T19962] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.242851][T19967] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 926.265907][T19968] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 926.304093][T19965] netlink: 'syz.3.3727': attribute type 2 has an invalid length. [ 926.342117][T19971] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 926.353343][T19972] netlink: 'syz.0.3728': attribute type 29 has an invalid length. [ 927.039438][T19990] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.3731'. [ 927.212718][T19990] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 927.294104][T19996] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3733'. [ 927.900738][T20004] netlink: 'syz.0.3734': attribute type 29 has an invalid length. [ 928.257514][T20004] netlink: 'syz.0.3734': attribute type 29 has an invalid length. [ 929.639236][T20029] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3742'. [ 930.387384][T20038] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3744'. [ 930.436410][T20041] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3744'. [ 930.477539][T20038] openvswitch: netlink: Flow key attribute not present in set flow. [ 930.925928][T20048] validate_nla: 4 callbacks suppressed [ 930.925949][T20048] netlink: 'syz.1.3746': attribute type 10 has an invalid length. [ 931.029650][T20048] team0: Device hsr_slave_0 failed to register rx_handler [ 931.328171][T20054] netlink: 'syz.0.3747': attribute type 3 has an invalid length. [ 931.335978][T20054] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3747'. [ 931.820421][T20066] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3752'. [ 932.033171][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.039842][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.684104][T20088] netlink: 'syz.2.3760': attribute type 2 has an invalid length. [ 933.695805][T20088] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3760'. [ 934.477361][T20107] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3765'. [ 934.663194][T20110] FAULT_INJECTION: forcing a failure. [ 934.663194][T20110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.680138][T20110] CPU: 1 PID: 20110 Comm: syz.2.3766 Not tainted syzkaller #0 [ 934.687812][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.697953][T20110] Call Trace: [ 934.701286][T20110] [ 934.704271][T20110] dump_stack_lvl+0x18c/0x250 [ 934.709016][T20110] ? show_regs_print_info+0x20/0x20 [ 934.714286][T20110] ? load_image+0x420/0x420 [ 934.718862][T20110] ? __lock_acquire+0x7d80/0x7d80 [ 934.723952][T20110] ? snprintf+0xe9/0x140 [ 934.728242][T20110] should_fail_ex+0x394/0x4c0 [ 934.732963][T20110] _copy_to_user+0x2f/0xa0 [ 934.737414][T20110] simple_read_from_buffer+0xe7/0x150 [ 934.742854][T20110] proc_fail_nth_read+0x1e8/0x260 [ 934.747920][T20110] ? proc_fault_inject_write+0x360/0x360 [ 934.753596][T20110] ? fsnotify_perm+0x271/0x5e0 [ 934.758397][T20110] ? proc_fault_inject_write+0x360/0x360 [ 934.764067][T20110] vfs_read+0x298/0x990 [ 934.768271][T20110] ? kernel_read+0x1e0/0x1e0 [ 934.772935][T20110] ? __fget_files+0x28/0x460 [ 934.777566][T20110] ? __fget_files+0x3fc/0x460 [ 934.782551][T20110] ? __fdget_pos+0x2a3/0x330 [ 934.787178][T20110] ? ksys_read+0x74/0x260 [ 934.791571][T20110] ksys_read+0x151/0x260 [ 934.795857][T20110] ? vfs_write+0x9a0/0x9a0 [ 934.800320][T20110] ? lockdep_hardirqs_on+0x98/0x150 [ 934.805582][T20110] do_syscall_64+0x55/0xb0 [ 934.810032][T20110] ? clear_bhb_loop+0x40/0x90 [ 934.814878][T20110] ? clear_bhb_loop+0x40/0x90 [ 934.819586][T20110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 934.825528][T20110] RIP: 0033:0x7f3a5015e98e [ 934.829976][T20110] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 934.849723][T20110] RSP: 002b:00007f3a51033fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.858178][T20110] RAX: ffffffffffffffda RBX: 00007f3a510346c0 RCX: 00007f3a5015e98e [ 934.866189][T20110] RDX: 000000000000000f RSI: 00007f3a510340a0 RDI: 0000000000000005 [ 934.874215][T20110] RBP: 00007f3a51034090 R08: 0000000000000000 R09: 0000000000000000 [ 934.882242][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.890244][T20110] R13: 00007f3a50426128 R14: 00007f3a50426090 R15: 00007ffc2c3f7c78 [ 934.898258][T20110] [ 935.186135][T20119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3769'. [ 935.258137][T20116] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3769'. [ 935.300503][T20119] bond0: (slave bond_slave_0): Releasing backup interface [ 935.348898][T20119] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 936.010642][T20133] netlink: 'syz.3.3772': attribute type 9 has an invalid length. [ 936.290308][T20133] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3772'. [ 936.849167][T20140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.897255][T20140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.989356][T20140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.026504][T20140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.086268][T20140] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 937.095373][T20140] batman_adv: batadv0: Removing interface: virt_wifi0 [ 938.187467][T20158] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3778'. [ 938.573125][T20166] FAULT_INJECTION: forcing a failure. [ 938.573125][T20166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.668672][T20166] CPU: 1 PID: 20166 Comm: syz.3.3779 Not tainted syzkaller #0 [ 938.676242][T20166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 938.686388][T20166] Call Trace: [ 938.689744][T20166] [ 938.692738][T20166] dump_stack_lvl+0x18c/0x250 [ 938.697483][T20166] ? show_regs_print_info+0x20/0x20 [ 938.702783][T20166] ? load_image+0x420/0x420 [ 938.707355][T20166] ? __might_fault+0xaa/0x120 [ 938.712108][T20166] ? __lock_acquire+0x7d80/0x7d80 [ 938.717204][T20166] should_fail_ex+0x394/0x4c0 [ 938.721977][T20166] _copy_from_user+0x2f/0xe0 [ 938.726633][T20166] ___sys_sendmsg+0x1c7/0x360 [ 938.731381][T20166] ? get_pid_task+0x20/0x1e0 [ 938.736048][T20166] ? __sys_sendmsg+0x2b0/0x2b0 [ 938.740910][T20166] ? __lock_acquire+0x7d80/0x7d80 [ 938.746042][T20166] __se_sys_sendmsg+0x1d0/0x2c0 [ 938.750975][T20166] ? __x64_sys_sendmsg+0x80/0x80 [ 938.756001][T20166] ? lockdep_hardirqs_on+0x98/0x150 [ 938.761283][T20166] do_syscall_64+0x55/0xb0 [ 938.765764][T20166] ? clear_bhb_loop+0x40/0x90 [ 938.770509][T20166] ? clear_bhb_loop+0x40/0x90 [ 938.775292][T20166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.781273][T20166] RIP: 0033:0x7f6da459e159 [ 938.785764][T20166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.805444][T20166] RSP: 002b:00007f6da551d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.813933][T20166] RAX: ffffffffffffffda RBX: 00007f6da4825fa0 RCX: 00007f6da459e159 [ 938.821965][T20166] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 938.830000][T20166] RBP: 00007f6da551d090 R08: 0000000000000000 R09: 0000000000000000 [ 938.838054][T20166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.846076][T20166] R13: 00007f6da4826038 R14: 00007f6da4825fa0 R15: 00007ffc746976a8 [ 938.854139][T20166] [ 939.354081][T20185] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3786'. [ 939.405911][T20185] netlink: zone id is out of range [ 939.895369][T20194] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3788'. [ 940.588866][T20200] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3789'. [ 940.944806][T20208] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3791'. [ 942.953867][T20244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3798'. [ 943.022138][T20244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3798'. [ 943.098495][T20243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3798'. [ 943.944173][T20249] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3803'. [ 944.073922][T20252] FAULT_INJECTION: forcing a failure. [ 944.073922][T20252] name failslab, interval 1, probability 0, space 0, times 0 [ 944.175152][T20255] delete_channel: no stack [ 944.200344][T20252] CPU: 0 PID: 20252 Comm: syz.2.3802 Not tainted syzkaller #0 [ 944.207909][T20252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.218026][T20252] Call Trace: [ 944.221456][T20252] [ 944.224466][T20252] dump_stack_lvl+0x18c/0x250 [ 944.229225][T20252] ? show_regs_print_info+0x20/0x20 [ 944.234478][T20252] ? load_image+0x420/0x420 [ 944.239042][T20252] ? __might_sleep+0xe0/0xe0 [ 944.243680][T20252] ? __lock_acquire+0x7d80/0x7d80 [ 944.248751][T20252] should_fail_ex+0x394/0x4c0 [ 944.253488][T20252] should_failslab+0x9/0x20 [ 944.258078][T20252] slab_pre_alloc_hook+0x59/0x300 [ 944.263173][T20252] ? sock_kmalloc+0x96/0xf0 [ 944.267729][T20252] ? sock_kmalloc+0x96/0xf0 [ 944.272374][T20252] __kmem_cache_alloc_node+0x53/0x250 [ 944.277804][T20252] ? sock_kmalloc+0x96/0xf0 [ 944.282388][T20252] __kmalloc+0xa7/0x240 [ 944.286599][T20252] sock_kmalloc+0x96/0xf0 [ 944.290985][T20252] ____sys_sendmsg+0x1d4/0x980 [ 944.295804][T20252] ? __asan_memset+0x22/0x40 [ 944.300439][T20252] ? __sys_sendmsg_sock+0x30/0x30 [ 944.305502][T20252] ? __import_iovec+0x3fa/0x850 [ 944.310400][T20252] ? import_iovec+0x73/0xa0 [ 944.314945][T20252] ___sys_sendmsg+0x2a6/0x360 [ 944.319654][T20252] ? get_pid_task+0x20/0x1e0 [ 944.324285][T20252] ? __sys_sendmsg+0x2b0/0x2b0 [ 944.329115][T20252] ? __lock_acquire+0x7d80/0x7d80 [ 944.334217][T20252] __se_sys_sendmsg+0x1d0/0x2c0 [ 944.339127][T20252] ? __x64_sys_sendmsg+0x80/0x80 [ 944.344119][T20252] ? lockdep_hardirqs_on+0x98/0x150 [ 944.349382][T20252] do_syscall_64+0x55/0xb0 [ 944.353839][T20252] ? clear_bhb_loop+0x40/0x90 [ 944.358553][T20252] ? clear_bhb_loop+0x40/0x90 [ 944.363267][T20252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 944.369282][T20252] RIP: 0033:0x7f3a5019e159 [ 944.373735][T20252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.393389][T20252] RSP: 002b:00007f3a51034028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.401837][T20252] RAX: ffffffffffffffda RBX: 00007f3a50426090 RCX: 00007f3a5019e159 [ 944.409837][T20252] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 944.417839][T20252] RBP: 00007f3a51034090 R08: 0000000000000000 R09: 0000000000000000 [ 944.426098][T20252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.434127][T20252] R13: 00007f3a50426128 R14: 00007f3a50426090 R15: 00007ffc2c3f7c78 [ 944.442142][T20252] [ 946.516977][T20286] FAULT_INJECTION: forcing a failure. [ 946.516977][T20286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 946.580868][T20289] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3814'. [ 946.590255][T20286] CPU: 1 PID: 20286 Comm: syz.0.3815 Not tainted syzkaller #0 [ 946.597784][T20286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.607900][T20286] Call Trace: [ 946.611226][T20286] [ 946.614218][T20286] dump_stack_lvl+0x18c/0x250 [ 946.618988][T20286] ? show_regs_print_info+0x20/0x20 [ 946.624267][T20286] ? load_image+0x420/0x420 [ 946.628842][T20286] ? __might_fault+0xaa/0x120 [ 946.633619][T20286] ? __lock_acquire+0x7d80/0x7d80 [ 946.638696][T20286] ? __virt_addr_valid+0x10c/0x380 [ 946.643892][T20286] should_fail_ex+0x394/0x4c0 [ 946.648649][T20286] _copy_from_user+0x2f/0xe0 [ 946.653304][T20286] ____sys_sendmsg+0x329/0x980 [ 946.658142][T20286] ? __sys_sendmsg_sock+0x30/0x30 [ 946.663216][T20286] ? __import_iovec+0x3fa/0x850 [ 946.668206][T20286] ? import_iovec+0x73/0xa0 [ 946.672747][T20286] ___sys_sendmsg+0x2a6/0x360 [ 946.677458][T20286] ? get_pid_task+0x20/0x1e0 [ 946.682089][T20286] ? __sys_sendmsg+0x2b0/0x2b0 [ 946.686897][T20286] ? __lock_acquire+0x7d80/0x7d80 [ 946.691979][T20286] __se_sys_sendmsg+0x1d0/0x2c0 [ 946.696863][T20286] ? __x64_sys_sendmsg+0x80/0x80 [ 946.702022][T20286] ? lockdep_hardirqs_on+0x98/0x150 [ 946.707260][T20286] do_syscall_64+0x55/0xb0 [ 946.711871][T20286] ? clear_bhb_loop+0x40/0x90 [ 946.716612][T20286] ? clear_bhb_loop+0x40/0x90 [ 946.721350][T20286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.727284][T20286] RIP: 0033:0x7f190179e159 [ 946.731745][T20286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.751500][T20286] RSP: 002b:00007f190265f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.759948][T20286] RAX: ffffffffffffffda RBX: 00007f1901a25fa0 RCX: 00007f190179e159 [ 946.767951][T20286] RDX: 00000000040448d4 RSI: 0000200000002b00 RDI: 0000000000000003 [ 946.775983][T20286] RBP: 00007f190265f090 R08: 0000000000000000 R09: 0000000000000000 [ 946.783993][T20286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.791992][T20286] R13: 00007f1901a26038 R14: 00007f1901a25fa0 R15: 00007ffff752fa98 [ 946.800013][T20286] [ 947.962377][T20305] delete_channel: no stack [ 947.967022][T20305] delete_channel: no stack [ 949.358908][T20323] FAULT_INJECTION: forcing a failure. [ 949.358908][T20323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.387178][T20323] CPU: 0 PID: 20323 Comm: syz.0.3826 Not tainted syzkaller #0 [ 949.394726][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.404852][T20323] Call Trace: [ 949.408187][T20323] [ 949.411155][T20323] dump_stack_lvl+0x18c/0x250 [ 949.415900][T20323] ? show_regs_print_info+0x20/0x20 [ 949.421139][T20323] ? load_image+0x420/0x420 [ 949.425683][T20323] ? __lock_acquire+0x7d80/0x7d80 [ 949.430750][T20323] ? snprintf+0xe9/0x140 [ 949.435043][T20323] should_fail_ex+0x394/0x4c0 [ 949.439759][T20323] _copy_to_user+0x2f/0xa0 [ 949.444221][T20323] simple_read_from_buffer+0xe7/0x150 [ 949.449629][T20323] proc_fail_nth_read+0x1e8/0x260 [ 949.454695][T20323] ? proc_fault_inject_write+0x360/0x360 [ 949.460375][T20323] ? fsnotify_perm+0x271/0x5e0 [ 949.465178][T20323] ? proc_fault_inject_write+0x360/0x360 [ 949.470854][T20323] vfs_read+0x298/0x990 [ 949.475050][T20323] ? kernel_read+0x1e0/0x1e0 [ 949.479679][T20323] ? __fget_files+0x28/0x460 [ 949.484308][T20323] ? __fget_files+0x3fc/0x460 [ 949.489029][T20323] ? __fdget_pos+0x2a3/0x330 [ 949.493656][T20323] ? ksys_read+0x74/0x260 [ 949.498034][T20323] ksys_read+0x151/0x260 [ 949.502317][T20323] ? vfs_write+0x9a0/0x9a0 [ 949.506817][T20323] ? lockdep_hardirqs_on+0x98/0x150 [ 949.512099][T20323] do_syscall_64+0x55/0xb0 [ 949.516557][T20323] ? clear_bhb_loop+0x40/0x90 [ 949.521271][T20323] ? clear_bhb_loop+0x40/0x90 [ 949.525993][T20323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 949.531921][T20323] RIP: 0033:0x7f190175e98e [ 949.536367][T20323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 949.556269][T20323] RSP: 002b:00007f190265efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 949.564719][T20323] RAX: ffffffffffffffda RBX: 00007f190265f6c0 RCX: 00007f190175e98e [ 949.572727][T20323] RDX: 000000000000000f RSI: 00007f190265f0a0 RDI: 0000000000000005 [ 949.580732][T20323] RBP: 00007f190265f090 R08: 0000000000000000 R09: 0000000000000000 [ 949.588779][T20323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.596786][T20323] R13: 00007f1901a26038 R14: 00007f1901a25fa0 R15: 00007ffff752fa98 [ 949.604812][T20323] [ 949.848965][T14707] Bluetooth: hci1: ISO packet for unknown connection handle 48 [ 949.951197][T20325] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3828'. [ 950.652193][T20345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3830'. [ 950.696108][T20341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3832'. [ 950.785623][T20345] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3830'. [ 950.847326][T20343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3830'. [ 952.959838][T20367] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3839'. [ 953.396218][T20369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3840'. [ 953.652087][T20369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3840'. [ 953.699336][T20369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3840'. [ 953.734189][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3840'. [ 954.474042][T20393] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3846'. [ 955.357563][T20410] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3849'. [ 956.258031][T20422] netlink: 'syz.3.3855': attribute type 29 has an invalid length. [ 956.315759][T20422] netlink: 'syz.3.3855': attribute type 29 has an invalid length. [ 956.647683][T20431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3854'. [ 956.656791][T20431] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3854'. [ 956.817706][T20428] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3854'. [ 957.956969][T20455] netlink: 'syz.3.3862': attribute type 46 has an invalid length. [ 957.971989][T20455] __nla_validate_parse: 3 callbacks suppressed [ 957.972009][T20455] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3862'. [ 958.031635][T20451] : renamed from team_slave_1 (while UP) [ 958.272899][T20457] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 958.596707][T20465] netlink: 'syz.1.3866': attribute type 29 has an invalid length. [ 958.633248][T20465] netlink: 'syz.1.3866': attribute type 29 has an invalid length. [ 958.779325][T20473] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3867'. [ 958.833295][T20468] netlink: 'syz.0.3865': attribute type 21 has an invalid length. [ 958.890509][T20468] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3865'. [ 959.580247][T20489] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3870'. [ 959.833176][T20492] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3871'. [ 960.448030][T20495] netlink: 'syz.1.3872': attribute type 10 has an invalid length. [ 960.456022][T20495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3872'. [ 960.779534][T20501] netlink: 'syz.0.3882': attribute type 29 has an invalid length. [ 960.821214][T20501] netlink: 'syz.0.3882': attribute type 29 has an invalid length. [ 961.070449][T20508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3874'. [ 961.112894][T20508] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3874'. [ 961.165683][T20504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3874'. [ 961.312347][T20516] netlink: 'syz.0.3877': attribute type 21 has an invalid length. [ 961.332436][T20516] netlink: 'syz.0.3877': attribute type 20 has an invalid length. [ 962.614020][T20545] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3883'. [ 962.617958][T20549] FAULT_INJECTION: forcing a failure. [ 962.617958][T20549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.655410][T20549] CPU: 0 PID: 20549 Comm: syz.2.3884 Not tainted syzkaller #0 [ 962.662976][T20549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 962.673094][T20549] Call Trace: [ 962.676430][T20549] [ 962.679415][T20549] dump_stack_lvl+0x18c/0x250 [ 962.684180][T20549] ? show_regs_print_info+0x20/0x20 [ 962.689522][T20549] ? load_image+0x420/0x420 [ 962.694082][T20549] ? __might_fault+0xaa/0x120 [ 962.698810][T20549] ? __lock_acquire+0x7d80/0x7d80 [ 962.703898][T20549] should_fail_ex+0x394/0x4c0 [ 962.708649][T20549] _copy_from_user+0x2f/0xe0 [ 962.713351][T20549] ___sys_sendmsg+0x1c7/0x360 [ 962.718104][T20549] ? __sys_sendmsg+0x2b0/0x2b0 [ 962.722963][T20549] ? __lock_acquire+0x7d80/0x7d80 [ 962.728061][T20549] __se_sys_sendmsg+0x1d0/0x2c0 [ 962.732948][T20549] ? __x64_sys_sendmsg+0x80/0x80 [ 962.737934][T20549] ? lockdep_hardirqs_on+0x98/0x150 [ 962.743176][T20549] do_syscall_64+0x55/0xb0 [ 962.747649][T20549] ? clear_bhb_loop+0x40/0x90 [ 962.752389][T20549] ? clear_bhb_loop+0x40/0x90 [ 962.757140][T20549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.763108][T20549] RIP: 0033:0x7f3a5019e159 [ 962.767556][T20549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.787318][T20549] RSP: 002b:00007f3a51034028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.795778][T20549] RAX: ffffffffffffffda RBX: 00007f3a50426090 RCX: 00007f3a5019e159 [ 962.803867][T20549] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000003a [ 962.811969][T20549] RBP: 00007f3a51034090 R08: 0000000000000000 R09: 0000000000000000 [ 962.820028][T20549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.828057][T20549] R13: 00007f3a50426128 R14: 00007f3a50426090 R15: 00007ffc2c3f7c78 [ 962.836073][T20549] [ 963.245482][T20557] netlink: 'syz.2.3887': attribute type 29 has an invalid length. [ 963.309120][T20555] netlink: 'syz.3.3888': attribute type 10 has an invalid length. [ 963.323305][T20557] netlink: 'syz.2.3887': attribute type 29 has an invalid length. [ 964.310698][T20560] netlink: 'syz.3.3890': attribute type 4 has an invalid length. [ 964.322966][T20560] __nla_validate_parse: 1 callbacks suppressed [ 964.323268][T20560] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3890'. [ 964.930603][T20569] netlink: 'syz.2.3891': attribute type 2 has an invalid length. [ 965.433292][T20579] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3894'. [ 965.957610][T20589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3896'. [ 966.102274][T20586] syzkaller0: entered promiscuous mode [ 966.108613][T20586] syzkaller0: entered allmulticast mode [ 966.717063][T20609] netlink: 'syz.3.3902': attribute type 2 has an invalid length. [ 966.762789][T20609] netlink: 'syz.3.3902': attribute type 1 has an invalid length. [ 966.795820][T20609] netlink: 'syz.3.3902': attribute type 2 has an invalid length. [ 966.841410][T20609] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.3902'. [ 968.884795][T20603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.973441][T20614] netlink: 'syz.2.3904': attribute type 58 has an invalid length. [ 968.995683][T20614] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3904'. [ 969.017516][T20616] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3905'. [ 969.879676][T20636] bond_slave_1: entered promiscuous mode [ 969.885412][T20636] bond_slave_1: entered allmulticast mode [ 970.600477][T20652] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3916'. [ 970.683944][T20652] netlink: 'syz.1.3916': attribute type 4 has an invalid length. [ 970.707261][T20652] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3916'. [ 970.744045][T20651] netlink: 'syz.0.3917': attribute type 2 has an invalid length. [ 971.067531][T20658] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 971.078844][T20658] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 971.092861][T20660] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 971.524015][T20670] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3921'. [ 972.985238][T20702] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3929'. [ 972.995071][T20702] openvswitch: netlink: Key type 8208 is out of range max 32 [ 973.008324][T20702] netlink: 'syz.3.3929': attribute type 11 has an invalid length. [ 973.016517][T20702] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3929'. [ 975.379176][T20715] netlink: 'syz.2.3935': attribute type 10 has an invalid length. [ 975.416807][T20715] netlink: 'syz.2.3935': attribute type 16 has an invalid length. [ 975.466946][T20715] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3935'. [ 975.534751][T20714] netlink: 'syz.2.3935': attribute type 10 has an invalid length. [ 975.560195][T20714] netlink: 'syz.2.3935': attribute type 16 has an invalid length. [ 975.579501][T20714] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3935'. [ 975.620349][T20715] netlink: 'syz.2.3935': attribute type 21 has an invalid length. [ 975.632846][T20715] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3935'. [ 975.644938][T20715] netlink: 'syz.2.3935': attribute type 4 has an invalid length. [ 975.658546][T20715] netlink: 'syz.2.3935': attribute type 5 has an invalid length. [ 975.669635][T20722] netlink: 'syz.3.3937': attribute type 29 has an invalid length. [ 975.678328][T20715] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3935'. [ 975.689351][T20722] netlink: 'syz.3.3937': attribute type 29 has an invalid length. [ 979.419011][T20800] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.3956'. [ 979.537927][T20805] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3958'. [ 980.013611][T20818] validate_nla: 1 callbacks suppressed [ 980.013632][T20818] netlink: 'syz.0.3962': attribute type 15 has an invalid length. [ 980.027496][T20818] netlink: 'syz.0.3962': attribute type 16 has an invalid length. [ 980.035379][T20818] netlink: 'syz.0.3962': attribute type 20 has an invalid length. [ 980.058393][T20818] netlink: 'syz.0.3962': attribute type 21 has an invalid length. [ 980.066324][T20820] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3961'. [ 980.124452][T20818] netlink: 'syz.0.3962': attribute type 23 has an invalid length. [ 980.177573][T20818] netlink: 'syz.0.3962': attribute type 25 has an invalid length. [ 980.197423][T20818] netlink: 'syz.0.3962': attribute type 27 has an invalid length. [ 980.205339][T20818] netlink: 'syz.0.3962': attribute type 28 has an invalid length. [ 980.237213][T20818] netlink: 'syz.0.3962': attribute type 29 has an invalid length. [ 980.245111][T20818] netlink: 'syz.0.3962': attribute type 30 has an invalid length. [ 980.544730][T20826] netlink: 60179 bytes leftover after parsing attributes in process `syz.1.3964'. [ 981.061855][T20836] tun0: tun_chr_ioctl cmd 1074025681 [ 981.380259][T20838] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3968'. [ 981.392621][T20838] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3968'. [ 983.325895][T20847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3970'. [ 983.405282][T20860] TCP: TCP_TX_DELAY enabled [ 983.724427][T20872] syz.3.3977: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 983.774490][T20872] CPU: 1 PID: 20872 Comm: syz.3.3977 Not tainted syzkaller #0 [ 983.782051][T20872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 983.792167][T20872] Call Trace: [ 983.795497][T20872] [ 983.798565][T20872] dump_stack_lvl+0x18c/0x250 [ 983.803333][T20872] ? show_regs_print_info+0x20/0x20 [ 983.808599][T20872] ? load_image+0x420/0x420 [ 983.813224][T20872] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 983.819716][T20872] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 983.826327][T20872] warn_alloc+0x246/0x340 [ 983.830717][T20872] ? stack_trace_save+0xaa/0x100 [ 983.835722][T20872] ? zone_watermark_ok_safe+0x230/0x230 [ 983.841342][T20872] ? kasan_set_track+0x5f/0x70 [ 983.846164][T20872] ? kasan_set_track+0x4e/0x70 [ 983.850987][T20872] ? __kasan_kmalloc+0x8f/0xa0 [ 983.856107][T20872] ? xsk_init_queue+0xad/0x100 [ 983.861017][T20872] ? xsk_setsockopt+0x4c9/0x750 [ 983.865921][T20872] ? do_sock_setsockopt+0x175/0x1a0 [ 983.871194][T20872] ? __x64_sys_setsockopt+0x182/0x200 [ 983.876646][T20872] __vmalloc_node_range+0x129/0x1320 [ 983.882045][T20872] ? free_vm_area+0x50/0x50 [ 983.886632][T20872] vmalloc_user+0x74/0x80 [ 983.891024][T20872] ? xskq_create+0xbf/0x170 [ 983.895581][T20872] xskq_create+0xbf/0x170 [ 983.899969][T20872] xsk_init_queue+0xad/0x100 [ 983.904618][T20872] xsk_setsockopt+0x4c9/0x750 [ 983.909355][T20872] ? xsk_poll+0x670/0x670 [ 983.913739][T20872] ? __fget_files+0x28/0x460 [ 983.918401][T20872] ? aa_sock_opt_perm+0x74/0x100 [ 983.923397][T20872] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 983.929005][T20872] ? security_socket_setsockopt+0x7e/0xa0 [ 983.934868][T20872] ? xsk_poll+0x670/0x670 [ 983.939252][T20872] do_sock_setsockopt+0x175/0x1a0 [ 983.944351][T20872] ? __fdget+0x180/0x210 [ 983.948659][T20872] __x64_sys_setsockopt+0x182/0x200 [ 983.953928][T20872] do_syscall_64+0x55/0xb0 [ 983.958380][T20872] ? clear_bhb_loop+0x40/0x90 [ 983.963092][T20872] ? clear_bhb_loop+0x40/0x90 [ 983.967802][T20872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.973729][T20872] RIP: 0033:0x7f6da459e159 [ 983.978177][T20872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.998012][T20872] RSP: 002b:00007f6da54db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 984.006459][T20872] RAX: ffffffffffffffda RBX: 00007f6da4826180 RCX: 00007f6da459e159 [ 984.014476][T20872] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 984.022477][T20872] RBP: 00007f6da463503b R08: 0000000000000004 R09: 0000000000000000 [ 984.030487][T20872] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 984.038572][T20872] R13: 00007f6da4826218 R14: 00007f6da4826180 R15: 00007ffc746976a8 [ 984.046581][T20872] [ 984.058561][T20877] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3976'. [ 984.097274][T20872] Mem-Info: [ 984.101155][T20872] active_anon:21957 inactive_anon:0 isolated_anon:0 [ 984.101155][T20872] active_file:18504 inactive_file:40300 isolated_file:0 [ 984.101155][T20872] unevictable:768 dirty:67 writeback:0 [ 984.101155][T20872] slab_reclaimable:10841 slab_unreclaimable:95691 [ 984.101155][T20872] mapped:25532 shmem:16071 pagetables:580 [ 984.101155][T20872] sec_pagetables:0 bounce:0 [ 984.101155][T20872] kernel_misc_reclaimable:0 [ 984.101155][T20872] free:1314378 free_pcp:17583 free_cma:0 [ 984.152922][T20872] Node 0 active_anon:87500kB inactive_anon:0kB active_file:73504kB inactive_file:160916kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101660kB dirty:264kB writeback:0kB shmem:62448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11592kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? yes [ 984.190161][T20872] Node 1 active_anon:28kB inactive_anon:0kB active_file:512kB inactive_file:284kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:468kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:336kB pagetables:12kB sec_pagetables:0kB all_unreclaimable? no [ 984.232463][T20872] Node 0 DMA free:15148kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 984.260837][T20872] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 984.266811][T20872] Node 0 DMA32 free:1381564kB boost:71680kB min:106324kB low:114984kB high:123644kB reserved_highatomic:0KB active_anon:86360kB inactive_anon:0kB active_file:73504kB inactive_file:160092kB unevictable:1536kB writepending:264kB present:3129332kB managed:2586820kB mlocked:0kB bounce:0kB free_pcp:39156kB local_pcp:21272kB free_cma:0kB [ 984.302566][T20878] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3978'. [ 984.315204][T20872] lowmem_reserve[]: 0 0 0 0 0 [ 984.327679][T20872] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 984.371794][T20872] lowmem_reserve[]: 0 0 0 0 0 [ 984.380177][T20872] Node 1 Normal free:3861040kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:512kB inactive_file:284kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:31888kB local_pcp:0kB free_cma:0kB [ 984.417270][T20872] lowmem_reserve[]: 0 0 0 0 0 [ 984.422254][T20872] Node 0 DMA: 27*4kB (UM) 12*8kB (UM) 4*16kB (UM) 3*32kB (UM) 3*64kB (UM) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (M) 1*2048kB (M) 2*4096kB (UM) = 15148kB [ 984.441287][T20872] Node 0 DMA32: 323*4kB (UM) 1394*8kB (UME) 867*16kB (UME) 1335*32kB (UME) 1300*64kB (UE) 1092*128kB (UME) 775*256kB (UM) 501*512kB (UM) 257*1024kB (UM) 97*2048kB (UM) 43*4096kB (UM) = 1384876kB [ 984.461175][T20872] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 984.487276][T20872] Node 1 Normal: 629*4kB (UME) 396*8kB (UME) 371*16kB (UME) 1005*32kB (UME) 770*64kB (UME) 588*128kB (UME) 507*256kB (UME) 395*512kB (UM) 288*1024kB (UME) 175*2048kB (UM) 661*4096kB (UM) = 3861124kB [ 984.539781][T20872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.573754][T20872] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.617452][T20872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.639053][T20872] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.648985][T20872] 71206 total pagecache pages [ 984.662674][T20872] 0 pages in swap cache [ 984.666921][T20872] Free swap = 124996kB [ 984.679564][T20872] Total swap = 124996kB [ 984.683833][T20872] 2097051 pages RAM [ 984.697134][T20872] 0 pages HighMem/MovableOnly [ 984.702958][T20872] 416960 pages reserved [ 984.717940][T20872] 0 pages cma reserved [ 986.234586][T20902] validate_nla: 4 callbacks suppressed [ 986.234688][T20902] netlink: 'syz.2.3985': attribute type 2 has an invalid length. [ 986.316585][T20902] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3985'. [ 987.882695][T20916] netlink: 'syz.3.3988': attribute type 39 has an invalid length. [ 988.073571][T20924] netlink: 'syz.2.3990': attribute type 1 has an invalid length. [ 988.113733][T20924] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3990'. [ 988.129835][T20927] netlink: 'syz.0.3991': attribute type 3 has an invalid length. [ 988.159142][T20927] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 988.202717][T20927] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3991'. [ 988.239844][T20930] netlink: 'syz.0.3991': attribute type 1 has an invalid length. [ 988.251829][T20930] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3991'. [ 988.523494][T20937] netlink: 'syz.1.3993': attribute type 3 has an invalid length. [ 988.531461][T20937] netlink: 'syz.1.3993': attribute type 1 has an invalid length. [ 988.540364][T20937] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3993'. [ 988.551782][T20937] FAULT_INJECTION: forcing a failure. [ 988.551782][T20937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.568065][T20937] CPU: 0 PID: 20937 Comm: syz.1.3993 Not tainted syzkaller #0 [ 988.575621][T20937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 988.585825][T20937] Call Trace: [ 988.589164][T20937] [ 988.592230][T20937] dump_stack_lvl+0x18c/0x250 [ 988.596986][T20937] ? show_regs_print_info+0x20/0x20 [ 988.602266][T20937] ? load_image+0x420/0x420 [ 988.606837][T20937] ? __might_fault+0xaa/0x120 [ 988.611584][T20937] ? __lock_acquire+0x7d80/0x7d80 [ 988.617125][T20937] should_fail_ex+0x394/0x4c0 [ 988.621863][T20937] _copy_from_user+0x2f/0xe0 [ 988.626513][T20937] ___sys_sendmsg+0x1c7/0x360 [ 988.631332][T20937] ? get_pid_task+0x20/0x1e0 [ 988.636032][T20937] ? __sys_sendmsg+0x2b0/0x2b0 [ 988.640873][T20937] ? __lock_acquire+0x7d80/0x7d80 [ 988.646062][T20937] __se_sys_sendmsg+0x1d0/0x2c0 [ 988.650967][T20937] ? __x64_sys_sendmsg+0x80/0x80 [ 988.655994][T20937] ? lockdep_hardirqs_on+0x98/0x150 [ 988.661250][T20937] do_syscall_64+0x55/0xb0 [ 988.666228][T20937] ? clear_bhb_loop+0x40/0x90 [ 988.670954][T20937] ? clear_bhb_loop+0x40/0x90 [ 988.675680][T20937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 988.681627][T20937] RIP: 0033:0x7fae2d19e159 [ 988.686088][T20937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.705747][T20937] RSP: 002b:00007fae2e0fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.714210][T20937] RAX: ffffffffffffffda RBX: 00007fae2d426090 RCX: 00007fae2d19e159 [ 988.722231][T20937] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 988.730268][T20937] RBP: 00007fae2e0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 988.738297][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.746328][T20937] R13: 00007fae2d426128 R14: 00007fae2d426090 R15: 00007fff7cf59de8 [ 988.754367][T20937] [ 989.070072][T20940] netlink: 'syz.3.3995': attribute type 3 has an invalid length. [ 989.126552][T20940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3995'. [ 989.168337][T20945] netlink: 'syz.3.3995': attribute type 11 has an invalid length. [ 989.176345][T20945] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.3995'. [ 989.957667][T20961] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4002'. [ 990.052875][T20966] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 990.203117][T20979] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4006'. [ 990.214845][T20979] FAULT_INJECTION: forcing a failure. [ 990.214845][T20979] name failslab, interval 1, probability 0, space 0, times 0 [ 990.229267][T20979] CPU: 0 PID: 20979 Comm: syz.0.4006 Not tainted syzkaller #0 [ 990.236801][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 990.247090][T20979] Call Trace: [ 990.250427][T20979] [ 990.253398][T20979] dump_stack_lvl+0x18c/0x250 [ 990.258150][T20979] ? show_regs_print_info+0x20/0x20 [ 990.263430][T20979] ? load_image+0x420/0x420 [ 990.268155][T20979] ? __might_sleep+0xe0/0xe0 [ 990.272802][T20979] ? __lock_acquire+0x7d80/0x7d80 [ 990.277883][T20979] ? perf_trace_lock+0xfc/0x3b0 [ 990.282788][T20979] should_fail_ex+0x394/0x4c0 [ 990.287605][T20979] should_failslab+0x9/0x20 [ 990.292302][T20979] slab_pre_alloc_hook+0x59/0x300 [ 990.297404][T20979] ? __get_vm_area_node+0x125/0x370 [ 990.302712][T20979] __kmem_cache_alloc_node+0x53/0x250 [ 990.308192][T20979] ? __get_vm_area_node+0x125/0x370 [ 990.313577][T20979] kmalloc_node_trace+0x26/0xe0 [ 990.318490][T20979] __get_vm_area_node+0x125/0x370 [ 990.323573][T20979] __vmalloc_node_range+0x36f/0x1320 [ 990.329034][T20979] ? netlink_sendmsg+0x602/0xbf0 [ 990.334022][T20979] ? netlink_insert+0x1094/0x1390 [ 990.339121][T20979] ? netlink_insert+0x2ba/0x1390 [ 990.344134][T20979] ? free_vm_area+0x50/0x50 [ 990.348980][T20979] ? netlink_sendmsg+0x602/0xbf0 [ 990.353966][T20979] vmalloc+0x79/0x90 [ 990.357932][T20979] ? netlink_sendmsg+0x602/0xbf0 [ 990.362924][T20979] netlink_sendmsg+0x602/0xbf0 [ 990.367757][T20979] ? netlink_getsockopt+0x590/0x590 [ 990.373024][T20979] ? apparmor_socket_sendmsg+0x8e/0x330 [ 990.378836][T20979] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 990.384179][T20979] ? security_socket_sendmsg+0x80/0xa0 [ 990.389677][T20979] ? netlink_getsockopt+0x590/0x590 [ 990.394949][T20979] ____sys_sendmsg+0x61b/0x980 [ 990.399796][T20979] ? __asan_memset+0x22/0x40 [ 990.404497][T20979] ? __sys_sendmsg_sock+0x30/0x30 [ 990.409567][T20979] ? __import_iovec+0x5f2/0x850 [ 990.414539][T20979] ? import_iovec+0x73/0xa0 [ 990.419101][T20979] ___sys_sendmsg+0x2a6/0x360 [ 990.423835][T20979] ? __sys_sendmsg+0x2b0/0x2b0 [ 990.428698][T20979] ? __lock_acquire+0x7d80/0x7d80 [ 990.433909][T20979] __se_sys_sendmsg+0x1d0/0x2c0 [ 990.438805][T20979] ? __x64_sys_sendmsg+0x80/0x80 [ 990.443900][T20979] ? lockdep_hardirqs_on+0x98/0x150 [ 990.449150][T20979] do_syscall_64+0x55/0xb0 [ 990.453634][T20979] ? clear_bhb_loop+0x40/0x90 [ 990.458374][T20979] ? clear_bhb_loop+0x40/0x90 [ 990.463135][T20979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.469267][T20979] RIP: 0033:0x7f190179e159 [ 990.473779][T20979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.493534][T20979] RSP: 002b:00007f190263e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.502083][T20979] RAX: ffffffffffffffda RBX: 00007f1901a26090 RCX: 00007f190179e159 [ 990.510130][T20979] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 990.518173][T20979] RBP: 00007f190263e090 R08: 0000000000000000 R09: 0000000000000000 [ 990.526402][T20979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.534491][T20979] R13: 00007f1901a26128 R14: 00007f1901a26090 R15: 00007ffff752fa98 [ 990.542545][T20979] [ 991.559865][T21004] validate_nla: 3 callbacks suppressed [ 991.559886][T21004] netlink: 'syz.3.4012': attribute type 19 has an invalid length. [ 991.633823][T21004] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.4012'. [ 992.461841][T21015] netlink: 'syz.0.4015': attribute type 9 has an invalid length. [ 992.470326][T21015] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4015'. [ 992.611471][T21020] netlink: 'syz.0.4017': attribute type 12 has an invalid length. [ 992.626119][T21020] netlink: 'syz.0.4017': attribute type 15 has an invalid length. [ 992.912243][T21024] syzkaller0: entered promiscuous mode [ 992.920623][T21024] syzkaller0: entered allmulticast mode [ 993.452499][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.460365][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.985169][T21040] netlink: 'syz.3.4025': attribute type 21 has an invalid length. [ 995.993529][T21040] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4025'. [ 996.003099][T21040] netlink: 'syz.3.4025': attribute type 4 has an invalid length. [ 996.011172][T21040] netlink: 'syz.3.4025': attribute type 3 has an invalid length. [ 996.019049][T21040] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4025'. [ 996.822681][T21062] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.4031'. [ 997.226687][T21068] 0: renamed from pim6reg1 [ 997.708514][T21078] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4034'. [ 998.222831][T21094] netlink: 'syz.3.4038': attribute type 2 has an invalid length. [ 998.249305][T21094] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4038'. [ 998.723032][T21110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4042'. [ 998.969613][T21113] netlink: 'syz.1.4043': attribute type 6 has an invalid length. [ 998.997599][T21113] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4043'. [ 999.122781][T21115] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4044'. [ 999.323030][T21115] pim6reg1: entered promiscuous mode [ 999.513661][T21115] pim6reg1: entered allmulticast mode [ 999.844300][T21122] netlink: 'syz.0.4044': attribute type 10 has an invalid length. [ 999.867323][T21122] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4044'. [ 999.899070][T21122] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1000.078851][T21122] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1000.906194][T21160] netlink: 'syz.0.4052': attribute type 10 has an invalid length. [ 1001.136291][T21172] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4056'. [ 1001.802474][T21184] netlink: 'syz.1.4058': attribute type 2 has an invalid length. [ 1002.961403][T21196] IPv6: NLM_F_CREATE should be specified when creating new route [ 1002.988481][T21198] netlink: 'syz.3.4062': attribute type 27 has an invalid length. [ 1002.997588][T21196] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4061'. [ 1003.007684][T21198] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4062'. [ 1004.304230][T21232] netlink: 'syz.3.4067': attribute type 21 has an invalid length. [ 1004.440057][T21232] IPv6: NLM_F_CREATE should be specified when creating new route [ 1004.582746][T21239] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4073'. [ 1004.596432][T21232] IPv6: Can't replace route, no match found [ 1005.448864][T21248] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1005.492682][T21249] delete_channel: no stack [ 1005.650188][T21263] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1005.718818][T21258] syzkaller0: entered promiscuous mode [ 1005.735116][T21258] syzkaller0: entered allmulticast mode [ 1005.765378][T21267] netlink: 'syz.0.4080': attribute type 21 has an invalid length. [ 1005.901017][T21266] netlink: 61707 bytes leftover after parsing attributes in process `syz.2.4079'. [ 1010.196023][T21277] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4083'. [ 1010.520514][T21287] netlink: 'syz.3.4085': attribute type 1 has an invalid length. [ 1010.590909][T21287] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1010.663854][T21297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4086'. [ 1010.733994][T21287] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4085'. [ 1012.121941][T21314] netlink: 'syz.0.4091': attribute type 3 has an invalid length. [ 1012.157503][T21314] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 1012.192643][T21314] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1012.234051][T21319] netlink: 'syz.0.4091': attribute type 1 has an invalid length. [ 1012.259950][T21319] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4091'. [ 1012.304004][T21318] netlink: 71 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1013.582091][T21349] tap0: tun_chr_ioctl cmd 1074025677 [ 1013.591854][T21349] tap0: linktype set to 804 [ 1014.173571][T21357] tap0: tun_chr_ioctl cmd 1074025692 [ 1014.539200][T21372] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1014.549219][T21372] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1015.004166][T21376] netlink: 'syz.3.4108': attribute type 2 has an invalid length. [ 1015.014020][T21376] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1015.379556][T21392] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1015.388929][T21392] syzkaller1: linktype set to 769 [ 1015.413019][T21392] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 1015.590384][T21400] netlink: 'syz.2.4114': attribute type 10 has an invalid length. [ 1015.604795][T21396] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1015.636939][T21400] mac80211_hwsim hwsim41 ..c: left promiscuous mode [ 1015.647697][T21400] mac80211_hwsim hwsim41 ..c: left allmulticast mode [ 1015.708918][T21400] bond0: (slave ..c): Enslaving as an active interface with an up link [ 1015.725165][T21396] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1015.760048][T21404] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4115'. [ 1016.024596][T21417] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.4121'. [ 1016.263570][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.286117][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1016.302335][T21432] dummy0: entered promiscuous mode [ 1016.320545][T21432] bridge0: port 2(dummy0) entered blocking state [ 1016.335453][T21432] bridge0: port 2(dummy0) entered disabled state [ 1016.359418][T21432] dummy0: entered allmulticast mode [ 1016.452340][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.473159][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1016.515583][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.530983][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1016.545603][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.592625][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1016.629930][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.667212][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1016.760140][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.781404][T21432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4124'. [ 1016.823320][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.860170][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1016.908840][T21432] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 1018.551905][T21445] team0: Port device wlan1 removed [ 1018.576923][T21445] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1019.017593][T21452] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 1021.038023][ T8471] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1021.962127][T21533] validate_nla: 26 callbacks suppressed [ 1021.962149][T21533] netlink: 'syz.3.4148': attribute type 1 has an invalid length. [ 1021.994329][T21533] __nla_validate_parse: 29 callbacks suppressed [ 1021.994350][T21533] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4148'. [ 1022.295432][T21537] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4149'. [ 1022.923064][T21540] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1022.937399][T21540] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1024.073488][T21564] netlink: 'syz.0.4158': attribute type 10 has an invalid length. [ 1024.083554][T21564] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4158'. [ 1024.929898][T21583] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4164'. [ 1025.349775][T21601] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1025.438909][T21601] bridge_slave_1: default FDB implementation only supports local addresses [ 1025.994858][T21608] netlink: 'syz.3.4170': attribute type 10 has an invalid length. [ 1026.017564][T21608] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1026.041213][T21608] hsr0: entered promiscuous mode [ 1026.063324][T21608] bridge0: port 4(hsr0) entered blocking state [ 1026.079271][T21608] bridge0: port 4(hsr0) entered disabled state [ 1026.092596][T21608] hsr0: entered allmulticast mode [ 1026.120788][T21608] hsr_slave_0: entered allmulticast mode [ 1026.134737][T21608] hsr_slave_1: entered allmulticast mode [ 1026.973153][T21641] netlink: 'syz.1.4176': attribute type 1 has an invalid length. [ 1026.982780][T21641] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1028.222886][T21672] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4187'. [ 1028.422292][T21682] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 1028.444334][T21682] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 1028.473408][T21682] netlink: 'syz.1.4188': attribute type 21 has an invalid length. [ 1028.493861][T21682] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1028.512891][T21682] netlink: 'syz.1.4188': attribute type 4 has an invalid length. [ 1028.540855][T21682] netlink: 'syz.1.4188': attribute type 3 has an invalid length. [ 1028.578699][T21689] netlink: 'syz.1.4188': attribute type 29 has an invalid length. [ 1028.598630][T21682] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1028.618643][T21694] netlink: 'syz.1.4188': attribute type 21 has an invalid length. [ 1028.632457][T21694] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1028.655513][T21694] netlink: 'syz.1.4188': attribute type 4 has an invalid length. [ 1028.673118][T21694] netlink: 'syz.1.4188': attribute type 3 has an invalid length. [ 1028.689661][T21694] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1029.148779][T21708] dummy0: left allmulticast mode [ 1029.153874][T21708] dummy0: left promiscuous mode [ 1029.217514][T21708] bridge0: port 2(dummy0) entered disabled state [ 1029.415581][T21708] team0: Port device dummy0 added [ 1029.581136][T21714] tap0: tun_chr_ioctl cmd 1074025677 [ 1029.586855][T21714] tap0: linktype set to 270 [ 1029.678731][T21721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4194'. [ 1029.695428][T21721] bridge0: port 3(team0) entered blocking state [ 1029.702562][T21721] bridge0: port 3(team0) entered disabled state [ 1029.712232][T21721] team0: entered allmulticast mode [ 1029.718087][T21721] team_slave_0: entered allmulticast mode [ 1029.724064][T21721] team_slave_1: entered allmulticast mode [ 1029.733592][T21721] geneve1: entered allmulticast mode [ 1029.742523][T21721] team0: entered promiscuous mode [ 1029.750610][T21721] team_slave_0: entered promiscuous mode [ 1029.756714][T21721] team_slave_1: entered promiscuous mode [ 1029.763510][T21721] geneve1: entered promiscuous mode [ 1029.774015][T21721] bridge0: port 3(team0) entered blocking state [ 1029.780566][T21721] bridge0: port 3(team0) entered forwarding state [ 1030.085531][T21741] Q6`Ҙ: renamed from lo (while UP) [ 1033.909911][T21803] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1034.059130][T21807] validate_nla: 2 callbacks suppressed [ 1034.059169][T21807] netlink: 'syz.3.4217': attribute type 2 has an invalid length. [ 1034.077688][T21807] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4217'. [ 1034.308729][T21805] sit0: left promiscuous mode [ 1034.981671][T21829] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4221'. [ 1037.057528][T21866] netlink: 'syz.1.4229': attribute type 3 has an invalid length. [ 1037.100594][T21859] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4227'. [ 1037.103873][T21866] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.4229'. [ 1037.189812][T21859] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4227'. [ 1037.375630][T21861] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4227'. [ 1037.441345][T21879] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1038.180395][T21896] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4236'. [ 1038.309845][T21901] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4235'. [ 1039.530249][T21914] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4241'. [ 1040.612160][T21926] netlink: 'syz.3.4244': attribute type 1 has an invalid length. [ 1040.630913][T21926] netlink: 60179 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1040.657912][T21927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4243'. [ 1040.700658][T21928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1040.708095][T21928] IPv6: NLM_F_CREATE should be set when creating new route [ 1040.715415][T21928] IPv6: NLM_F_CREATE should be set when creating new route [ 1040.722780][T21928] IPv6: NLM_F_CREATE should be set when creating new route [ 1040.901113][T21939] netlink: 'syz.2.4245': attribute type 13 has an invalid length. [ 1040.928499][T21939] netlink: 'syz.2.4245': attribute type 58 has an invalid length. [ 1040.949008][T21942] netlink: 'syz.3.4247': attribute type 3 has an invalid length. [ 1040.967440][T21939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4245'. [ 1040.981681][T21942] netlink: 'syz.3.4247': attribute type 1 has an invalid length. [ 1041.004094][T21942] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1041.013581][T21945] netlink: 'syz.3.4247': attribute type 1 has an invalid length. [ 1041.013604][T21945] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1041.156447][T21949] netlink: 'syz.2.4250': attribute type 6 has an invalid length. [ 1041.188647][T21949] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4250'. [ 1041.458722][T14707] Bluetooth: hci0: Malformed LE Event: 0x0b [ 1041.927878][T21968] syzkaller0: entered promiscuous mode [ 1041.942920][T21968] syzkaller0: entered allmulticast mode [ 1044.261946][T22001] netlink: 'syz.1.4262': attribute type 29 has an invalid length. [ 1045.402041][T21976] netlink: 'syz.3.4256': attribute type 39 has an invalid length. [ 1045.410154][T21979] netlink: 'syz.3.4256': attribute type 39 has an invalid length. [ 1045.421851][T22000] team0: Device nlmon0 is of different type [ 1045.602089][T22015] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4265'. [ 1045.692203][T22011] validate_nla: 2 callbacks suppressed [ 1045.692219][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.706714][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.715148][T22009] vcan0: entered allmulticast mode [ 1045.725504][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.753131][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.771770][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.787643][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.806466][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.830647][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.847873][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1045.864943][T22011] netlink: 'syz.3.4263': attribute type 10 has an invalid length. [ 1046.374105][T14707] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 1046.397242][T14707] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 1046.623354][T22040] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1046.635841][T22041] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4272'. [ 1046.645936][T22041] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 1047.013814][T22054] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4276'. [ 1047.173475][T22059] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1047.630485][T22076] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1049.403091][T22104] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4289'. [ 1049.474794][T22111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1051.192342][T22153] validate_nla: 29 callbacks suppressed [ 1051.192362][T22153] netlink: 'syz.2.4300': attribute type 9 has an invalid length. [ 1051.207583][T22153] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4300'. [ 1053.425208][T22151] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1053.519775][T22156] netlink: 'syz.2.4300': attribute type 9 has an invalid length. [ 1053.531984][T22156] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4300'. [ 1053.621312][T14707] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 1054.278849][T22187] netlink: 'syz.2.4309': attribute type 1 has an invalid length. [ 1054.343105][T22187] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4309'. [ 1054.892006][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.900802][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.041311][T22198] netlink: 'syz.2.4314': attribute type 10 has an invalid length. [ 1055.050386][T22198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1055.064433][T22198] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1055.788000][T22222] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1057.902099][T22274] netlink: 'syz.1.4335': attribute type 10 has an invalid length. [ 1057.925275][T22274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4335'. [ 1057.950520][T22274] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1058.573537][T22281] netlink: 'syz.1.4337': attribute type 1 has an invalid length. [ 1058.594713][T22281] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1058.803601][T14707] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1061.399948][T22300] netlink: 207340 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1061.609694][T22304] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1061.645949][T22308] netlink: 'syz.1.4345': attribute type 1 has an invalid length. [ 1061.688164][T22303] delete_channel: no stack [ 1061.694135][T22308] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4345'. [ 1061.882386][T22315] netlink: 'syz.1.4349': attribute type 21 has an invalid length. [ 1061.892037][T22315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4349'. [ 1062.032506][T22319] veth0_virt_wifi: mtu less than device minimum [ 1062.109802][T22325] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4352'. [ 1062.119311][T22325] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4352'. [ 1062.459948][T22338] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4356'. [ 1062.476910][T22338] hsr_slave_0: left promiscuous mode [ 1062.514147][T22338] hsr_slave_1: left promiscuous mode [ 1062.624419][T22338] bridge0: port 1(hsr0) entered disabled state [ 1062.765700][T22338] hsr0 (unregistering): left allmulticast mode [ 1062.781970][T22338] bridge0: port 1(hsr0) entered disabled state [ 1063.400929][T22350] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4359'. [ 1063.467006][T22354] netlink: 'syz.2.4361': attribute type 29 has an invalid length. [ 1063.477976][T22354] netlink: 'syz.2.4361': attribute type 29 has an invalid length. [ 1063.818550][T22365] syzkaller0: entered promiscuous mode [ 1063.824246][T22365] syzkaller0: entered allmulticast mode [ 1064.905573][T14707] Bluetooth: hci2: Malformed HCI Event [ 1068.504725][T22407] netlink: 'syz.1.4372': attribute type 10 has an invalid length. [ 1068.527737][T22407] mac80211_hwsim hwsim32 wlan1: left promiscuous mode [ 1068.534787][T22407] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 1068.572085][T22407] team0: Port device wlan1 removed [ 1068.753737][T22417] netlink: 'syz.0.4375': attribute type 21 has an invalid length. [ 1073.957210][T22460] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4386'. [ 1073.966730][T22460] openvswitch: netlink: Key type 8208 is out of range max 32 [ 1075.210396][T22490] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4393'. [ 1075.965714][T22488] delete_channel: no stack [ 1076.258114][T15225] cgroup: fork rejected by pids controller in /syz0 [ 1076.403162][T22530] netlink: 'syz.2.4407': attribute type 2 has an invalid length. [ 1076.601754][T22539] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1076.698320][T22539] team0: Port device bond0 removed [ 1076.708769][T22539] bond0 (unregistering): (slave c): Releasing backup interface [ 1076.742867][T22539] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1076.764101][T22539] bond0 (unregistering): (slave ..c): Releasing backup interface [ 1076.783409][T22539] bond0 (unregistering): Released all slaves [ 1077.224824][T22553] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1077.390211][T22564] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1077.403192][T22564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1077.413998][T22564] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1077.424946][T22564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1077.437478][T22564] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1077.445363][T22564] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1077.773144][T22562] chnl_net:caif_netlink_parms(): no params data found [ 1078.032980][T22587] netlink: 'syz.3.4419': attribute type 10 has an invalid length. [ 1078.071708][T22581] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.086161][T22562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.097631][T22562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.129157][T22562] bridge_slave_0: entered allmulticast mode [ 1078.138792][T22562] bridge_slave_0: entered promiscuous mode [ 1078.266211][T22562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.275099][T22562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.295417][T22562] bridge_slave_1: entered allmulticast mode [ 1078.322543][T22562] bridge_slave_1: entered promiscuous mode [ 1078.483288][T22562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.716854][T22562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.803978][T22597] syzkaller0: entered promiscuous mode [ 1078.809659][T22597] syzkaller0: entered allmulticast mode [ 1078.851858][T22562] team0: Port device team_slave_0 added [ 1078.861867][T22562] team0: Port device team_slave_1 added [ 1079.005499][T22609] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4423'. [ 1079.027897][T22562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.057327][T22562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.105270][T22562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.523536][T22564] Bluetooth: hci0: command tx timeout [ 1081.126672][T22562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.137652][T22562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.177533][T22562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.200229][T22617] netlink: 'syz.1.4425': attribute type 2 has an invalid length. [ 1081.364178][ T6283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.460837][T22562] hsr_slave_0: entered promiscuous mode [ 1081.479770][T22562] hsr_slave_1: entered promiscuous mode [ 1081.527589][T22562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.535272][T22562] Cannot create hsr debugfs directory [ 1081.591370][ T6283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.601956][T22564] Bluetooth: hci0: command tx timeout [ 1081.744572][ T6283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.004448][ T6283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.172461][T22638] : port 1(hsr_slave_0) entered blocking state [ 1082.189357][T22638] : port 1(hsr_slave_0) entered disabled state [ 1083.136338][T22661] netlink: 'syz.1.4436': attribute type 21 has an invalid length. [ 1083.144850][T22661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1083.156240][T22661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4436'. [ 1083.677323][T22564] Bluetooth: hci0: command tx timeout [ 1083.761725][T22562] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1083.802126][T22562] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1083.814499][T22562] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1083.829806][T22562] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1084.224124][T22693] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1084.276233][T22693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1084.335666][ T6283] bond0: (slave wlan1): Releasing backup interface [ 1084.462522][T22562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.533388][T22562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.591919][ T8189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.599216][ T8189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.663883][T19871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.671204][T19871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.845620][T22562] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1085.090206][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.101660][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.119045][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.126954][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.168086][ T6283] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1085.211503][ T6283] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1085.325048][ T6283] team0: left allmulticast mode [ 1085.331743][ T6283] team_slave_0: left allmulticast mode [ 1085.338394][ T6283] team_slave_1: left allmulticast mode [ 1085.344052][ T6283] geneve1: left allmulticast mode [ 1085.349793][ T6283] team0: left promiscuous mode [ 1085.354729][ T6283] team_slave_0: left promiscuous mode [ 1085.361134][ T6283] team_slave_1: left promiscuous mode [ 1085.367482][ T6283] geneve1: left promiscuous mode [ 1085.373019][ T6283] bridge0: port 3(team0) entered disabled state [ 1085.390582][ T6283] bridge_slave_1: left allmulticast mode [ 1085.400958][ T6283] bridge_slave_1: left promiscuous mode [ 1085.415183][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.757386][T22564] Bluetooth: hci0: command tx timeout [ 1085.994040][ T6283] team0 (unregistering): Port device geneve1 removed [ 1086.296501][ T6283] team0 (unregistering): Port device team_slave_1 removed [ 1086.360276][ T6283] team0 (unregistering): Port device team_slave_0 removed [ 1086.411686][ T6283] bond0 (unregistering): (slave 4@0): Releasing backup interface [ 1086.479962][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.856120][ T6283] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1086.867886][ T6283] bond0 (unregistering): Released all slaves [ 1087.000158][T22728] netlink: 49920 bytes leftover after parsing attributes in process `syz.3.4448'. [ 1087.279592][T22562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.388734][T22562] veth0_vlan: entered promiscuous mode [ 1087.424573][T22562] veth1_vlan: entered promiscuous mode [ 1087.529923][T22562] veth0_macvtap: entered promiscuous mode [ 1087.554778][T22562] veth1_macvtap: entered promiscuous mode [ 1087.614516][T22562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1087.648689][T22562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.670745][T22562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.681141][T22747] netlink: 'syz.3.4453': attribute type 27 has an invalid length. [ 1087.695182][T22747] netlink: 'syz.3.4453': attribute type 25 has an invalid length. [ 1087.717963][T22562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1087.737243][T22562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1087.759679][T22562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.786715][T22562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.809485][T22562] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.819283][T22562] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1087.830262][T22562] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.117529][T19568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.142884][T19568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.272961][ T8189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.307160][ T8189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.451192][T22763] syzkaller0: entered promiscuous mode [ 1089.457532][T22763] syzkaller0: entered allmulticast mode [ 1089.909599][T22787] netlink: 'syz.3.4461': attribute type 29 has an invalid length. [ 1090.023309][T22793] syz.2.4463[22793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1090.023572][T22793] syz.2.4463[22793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1092.576907][T22787] netlink: 'syz.3.4461': attribute type 29 has an invalid length. [ 1092.600223][T22793] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1093.523846][T22823] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1093.555071][T22823] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1093.771459][T22832] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1093.787382][T22832] syzkaller1: linktype set to 805 [ 1093.937346][T22833] can: request_module (can-proto-0) failed. [ 1095.726480][T22884] netlink: 'syz.0.4485': attribute type 29 has an invalid length. [ 1095.726572][T22883] netlink: 'syz.0.4485': attribute type 29 has an invalid length. [ 1095.743801][T22883] netlink: 'syz.0.4485': attribute type 29 has an invalid length. [ 1095.978133][T22890] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1096.003500][T22890] bridge_slave_1: default FDB implementation only supports local addresses [ 1096.315105][T22900] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1096.391025][T22900] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1099.422246][T22920] netlink: 'syz.0.4497': attribute type 16 has an invalid length. [ 1099.463981][T22920] netlink: 'syz.0.4497': attribute type 25 has an invalid length. [ 1099.507493][T22920] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1099.854406][T22935] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4501'. [ 1100.016807][T22939] netlink: 'syz.3.4502': attribute type 39 has an invalid length. [ 1100.206631][T22946] netlink: 'syz.2.4498': attribute type 21 has an invalid length. [ 1100.214973][T22946] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4498'. [ 1100.230040][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1100.249885][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1100.259318][T22943] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1100.273091][T22943] bridge_slave_0: entered allmulticast mode [ 1100.281459][T22943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1100.293321][T22943] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4503'. [ 1101.076114][T22968] netlink: 'syz.0.4511': attribute type 3 has an invalid length. [ 1101.097452][T22968] netlink: 'syz.0.4511': attribute type 6 has an invalid length. [ 1101.105266][T22968] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.4511'. [ 1104.957748][T23006] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4518'. [ 1105.234832][T23011] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1105.495601][T23026] netlink: 154464 bytes leftover after parsing attributes in process `syz.0.4523'. [ 1107.030668][T23050] netlink: 'syz.3.4531': attribute type 3 has an invalid length. [ 1107.048778][T23050] netlink: 'syz.3.4531': attribute type 16 has an invalid length. [ 1107.056800][T23050] netlink: 'syz.3.4531': attribute type 18 has an invalid length. [ 1107.103701][T23050] netlink: 'syz.3.4531': attribute type 20 has an invalid length. [ 1107.150835][T23050] netlink: 'syz.3.4531': attribute type 25 has an invalid length. [ 1107.151963][T23051] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4530'. [ 1108.210271][T23075] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4536'. [ 1110.759789][T23068] netlink: 'syz.3.4537': attribute type 10 has an invalid length. [ 1111.226438][T23084] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1111.531797][T23068] team0 (unregistering): left allmulticast mode [ 1111.544374][T23068] team_slave_0: left allmulticast mode [ 1111.553090][T23068] team_slave_1: left allmulticast mode [ 1111.560148][T23068] team0 (unregistering): left promiscuous mode [ 1111.566405][T23068] team_slave_0: left promiscuous mode [ 1111.573356][T23068] team_slave_1: left promiscuous mode [ 1111.579530][T23068] bridge0: port 3(team0) entered disabled state [ 1111.630704][T23068] team0 (unregistering): Port device team_slave_0 removed [ 1111.668843][T23068] team0 (unregistering): Port device team_slave_1 removed [ 1111.704525][T23084] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.4540'. [ 1112.331945][T23123] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4549'. [ 1112.350890][T23121] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4549'. [ 1112.937295][T23127] netlink: 'syz.0.4550': attribute type 2 has an invalid length. [ 1112.972186][T23127] netlink: 'syz.0.4550': attribute type 2 has an invalid length. [ 1113.013240][T23127] netlink: 'syz.0.4550': attribute type 2 has an invalid length. [ 1113.112251][T23127] netlink: 'syz.0.4550': attribute type 2 has an invalid length. [ 1113.619146][T23135] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1113.662948][T23130] netlink: 'syz.0.4550': attribute type 1 has an invalid length. [ 1113.705546][T23130] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1113.746577][T23130] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1116.332903][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.339902][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.642567][T23170] netlink: 'syz.1.4561': attribute type 10 has an invalid length. [ 1116.667393][T23170] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.4561'. [ 1116.701734][T23170] openvswitch: netlink: Flow key attr not present in new flow. [ 1117.132779][T23174] delete_channel: no stack [ 1118.277884][T23194] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1118.283990][T23194] syzkaller1: linktype set to 825 [ 1118.442493][T23200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1118.488125][T23200] netlink: 668 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1118.499380][T23200] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1118.517304][T23200] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1118.558327][T23197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1118.565627][T23197] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.573049][T23197] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.580387][T23197] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.622827][T23197] netlink: 'syz.3.4567': attribute type 9 has an invalid length. [ 1118.646533][T23197] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1118.799608][T23200] netlink: 'syz.3.4567': attribute type 9 has an invalid length. [ 1118.854973][T23200] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1119.468847][T23206] syzkaller0: entered promiscuous mode [ 1119.474648][T23206] syzkaller0: entered allmulticast mode [ 1120.255823][T23222] netlink: 'syz.2.4572': attribute type 9 has an invalid length. [ 1120.278017][T23222] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4572'. [ 1122.749762][T23226] netlink: 'syz.3.4574': attribute type 21 has an invalid length. [ 1122.760025][T23229] netlink: 'syz.0.4573': attribute type 30 has an invalid length. [ 1122.777708][T23231] netlink: 'syz.0.4573': attribute type 10 has an invalid length. [ 1122.830982][T23231] team0: Device wg1 is of different type [ 1122.897189][T23235] netlink: 'syz.3.4575': attribute type 8 has an invalid length. [ 1122.927383][T23235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4575'. [ 1126.992861][T23254] netlink: 'syz.0.4578': attribute type 13 has an invalid length. [ 1127.007339][T23254] netlink: 'syz.0.4578': attribute type 58 has an invalid length. [ 1127.024340][T23254] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1127.063195][T23261] netlink: 'syz.1.4581': attribute type 39 has an invalid length. [ 1127.304929][T23264] netlink: 'syz.3.4582': attribute type 2 has an invalid length. [ 1127.329709][T23264] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4582'. [ 1127.924023][T23297] netlink: 'syz.0.4591': attribute type 3 has an invalid length. [ 1127.949832][T23297] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4591'. [ 1127.988012][T23302] sctp: [Deprecated]: syz.0.4591 (pid 23302) Use of int in maxseg socket option. [ 1127.988012][T23302] Use struct sctp_assoc_value instead [ 1130.353940][T23305] netlink: 'syz.3.4593': attribute type 10 has an invalid length. [ 1130.367250][T23305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4593'. [ 1130.589564][T23321] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4598'. [ 1134.614009][T23387] delete_channel: no stack [ 1134.761670][T23403] netlink: set zone limit has 8 unknown bytes [ 1137.791937][T23426] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1138.228651][T23440] mac80211_hwsim hwsim48 .3c: renamed from wlan1 [ 1139.050609][T23456] netlink: 'syz.3.4634': attribute type 4 has an invalid length. [ 1139.161396][T23456] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1139.383721][T22564] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 1139.393918][T23471] netlink: 'syz.0.4637': attribute type 3 has an invalid length. [ 1139.402874][T23471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1141.370117][T22564] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1141.570370][T23516] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4647'. [ 1143.525603][T23511] netlink: 'syz.2.4645': attribute type 46 has an invalid length. [ 1143.541048][T23516] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 1143.781796][T23534] netlink: 'syz.2.4649': attribute type 12 has an invalid length. [ 1143.817170][T23534] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.4649'. [ 1144.799219][T23556] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4658'. [ 1150.976414][T23607] delete_channel: no stack [ 1151.027522][T22564] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1153.770208][T23641] syzkaller0: entered promiscuous mode [ 1153.775729][T23641] syzkaller0: entered allmulticast mode [ 1153.971829][T14707] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1156.172325][T23667] netlink: 'syz.2.4679': attribute type 21 has an invalid length. [ 1156.180477][T23667] IPv6: NLM_F_CREATE should be specified when creating new route [ 1156.188613][T23667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1156.195873][T23667] IPv6: NLM_F_CREATE should be set when creating new route [ 1156.203281][T23667] IPv6: NLM_F_CREATE should be set when creating new route [ 1156.210643][T23667] IPv6: NLM_F_CREATE should be set when creating new route [ 1156.238443][T23665] netlink: 'syz.2.4679': attribute type 21 has an invalid length. [ 1156.246447][T23665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1156.512323][T23677] netlink: set zone limit has 8 unknown bytes [ 1157.112346][T23696] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4687'. [ 1157.741519][T23712] netlink: 'syz.2.4692': attribute type 10 has an invalid length. [ 1158.462646][T23718] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1158.649053][T23730] sit0: entered promiscuous mode [ 1158.874234][T23734] syzkaller0: entered promiscuous mode [ 1158.880306][T23734] syzkaller0: entered allmulticast mode [ 1161.868117][T23766] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1162.089190][T23783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1162.096569][T23783] IPv6: NLM_F_CREATE should be set when creating new route [ 1162.103998][T23783] IPv6: NLM_F_CREATE should be set when creating new route [ 1162.111406][T23783] IPv6: NLM_F_CREATE should be set when creating new route [ 1162.121434][T23784] netlink: 'syz.0.4708': attribute type 3 has an invalid length. [ 1162.153123][T23784] netlink: 'syz.0.4708': attribute type 1 has an invalid length. [ 1162.162576][T23784] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.4708'. [ 1162.390343][T23787] netlink: 'syz.1.4709': attribute type 9 has an invalid length. [ 1162.470550][T23787] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4709'. [ 1162.622859][T23790] netlink: 'syz.3.4710': attribute type 39 has an invalid length. [ 1164.032625][T23820] netlink: 'syz.3.4715': attribute type 11 has an invalid length. [ 1164.096744][T23820] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4715'. [ 1181.070493][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1181.083681][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1181.094131][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1181.103734][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1181.113283][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1181.122740][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1181.137444][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1181.144888][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1181.153044][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1181.163320][T14707] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1181.174914][T14707] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1181.202094][T14707] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1182.588364][T14707] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1182.599786][T14707] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1182.614309][T14707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1182.623557][T14707] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1182.633510][T14707] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1182.642544][T14707] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1182.650463][T14707] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1182.661014][T23842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1182.669672][T23842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1182.679870][T23842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1182.688056][T23842] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1182.695753][T23842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1183.277402][T23839] Bluetooth: hci3: command tx timeout [ 1183.286029][T23842] Bluetooth: hci5: command tx timeout [ 1184.797387][T23839] Bluetooth: hci6: command tx timeout [ 1184.805410][T23842] Bluetooth: hci7: command tx timeout [ 1185.357280][T23842] Bluetooth: hci5: command tx timeout [ 1185.362782][T23842] Bluetooth: hci3: command tx timeout [ 1186.877314][T23839] Bluetooth: hci6: command tx timeout [ 1186.884584][T23842] Bluetooth: hci7: command tx timeout [ 1187.437178][T23842] Bluetooth: hci3: command tx timeout [ 1187.442760][T23842] Bluetooth: hci5: command tx timeout [ 1188.957266][T23839] Bluetooth: hci6: command tx timeout [ 1188.963634][T23842] Bluetooth: hci7: command tx timeout [ 1189.517278][T23839] Bluetooth: hci3: command tx timeout [ 1189.522842][T23842] Bluetooth: hci5: command tx timeout [ 1191.037207][T23842] Bluetooth: hci7: command tx timeout [ 1191.042821][T23842] Bluetooth: hci6: command tx timeout [ 1241.929629][T23839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1241.943507][T23839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1241.952504][T23839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1241.961666][T23839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1241.970249][T23839] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1241.978116][T23839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1242.187728][T23842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1242.202106][T23842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1242.210705][T23842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1242.220203][T23842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1242.228403][T23842] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1242.235996][T23842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1243.555627][T14707] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1243.565832][T14707] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1243.578680][T14707] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1243.590643][T14707] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1243.601036][T14707] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1243.610271][T14707] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1243.718368][T14707] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1243.735083][T14707] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1243.743843][T14707] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1243.758008][T14707] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1243.768186][T14707] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1243.775832][T14707] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1244.077223][T14707] Bluetooth: hci8: command tx timeout [ 1244.321524][T14707] Bluetooth: hci9: command tx timeout [ 1245.677268][T14707] Bluetooth: hci11: command tx timeout [ 1245.837190][T14707] Bluetooth: hci10: command tx timeout [ 1246.157139][T14707] Bluetooth: hci8: command tx timeout [ 1246.397183][T14707] Bluetooth: hci9: command tx timeout [ 1247.757215][T14707] Bluetooth: hci11: command tx timeout [ 1247.917354][T14707] Bluetooth: hci10: command tx timeout [ 1248.237222][T14707] Bluetooth: hci8: command tx timeout [ 1248.477140][T14707] Bluetooth: hci9: command tx timeout [ 1249.837243][T14707] Bluetooth: hci11: command tx timeout [ 1249.997244][T14707] Bluetooth: hci10: command tx timeout [ 1250.317317][T14707] Bluetooth: hci8: command tx timeout [ 1250.557208][T14707] Bluetooth: hci9: command tx timeout [ 1251.917160][T14707] Bluetooth: hci11: command tx timeout [ 1252.077275][T14707] Bluetooth: hci10: command tx timeout [ 1267.769517][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1267.776029][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1268.767134][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1268.774162][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23814/1:b..l [ 1268.782699][ C1] rcu: (detected by 1, t=10502 jiffies, g=138953, q=2553 ncpus=2) [ 1268.790656][ C1] task:syz.1.4716 state:R running task stack:22824 pid:23814 ppid:14705 flags:0x00004006 [ 1268.802623][ C1] Call Trace: [ 1268.805950][ C1] [ 1268.808930][ C1] __schedule+0x15ae/0x4660 [ 1268.813510][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 1268.819817][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1268.827075][ C1] ? lock_chain_count+0x20/0x20 [ 1268.831983][ C1] ? asan.module_dtor+0x20/0x20 [ 1268.836889][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1268.842165][ C1] preempt_schedule_irq+0xbf/0x150 [ 1268.847331][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 1268.853113][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1268.858975][ C1] irqentry_exit+0x67/0x70 [ 1268.863440][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1268.869467][ C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 1268.875499][ C1] Code: 8a e8 02 04 3d 09 65 66 8b 05 7a db b0 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 e6 16 3b 00 fb 65 8b 05 46 db b0 7e <85> c0 75 05 e8 35 c0 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 1268.895238][ C1] RSP: 0018:ffffc900038e7a00 EFLAGS: 00000286 [ 1268.901356][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: c4c4332313441400 [ 1268.909375][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d35e0 [ 1268.917401][ C1] RBP: ffffc900038e7a90 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 1268.925507][ C1] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffffffff88bf6a24 [ 1268.933523][ C1] R13: ffffc900038e7d00 R14: dffffc0000000000 R15: 1ffff9200071cf40 [ 1268.941640][ C1] ? bpf_test_run+0x174/0x870 [ 1268.946402][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1268.951309][ C1] ? bpf_test_timer_continue+0x135/0x380 [ 1268.957001][ C1] ? bpf_test_run+0x174/0x870 [ 1268.961820][ C1] bpf_test_run+0x3dd/0x870 [ 1268.966393][ C1] ? bpf_test_run+0x174/0x870 [ 1268.971131][ C1] ? dst_hold+0x70/0x70 [ 1268.975345][ C1] ? dst_hold+0x37/0x70 [ 1268.979590][ C1] ? audit_tree_destroy_watch+0x20/0x20 [ 1268.985230][ C1] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1268.990683][ C1] ? cpu_online+0x60/0x60 [ 1268.995064][ C1] bpf_prog_test_run+0x31f/0x390 [ 1269.000055][ C1] __sys_bpf+0x49d/0x890 [ 1269.004350][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 1269.009790][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1269.016018][ C1] __x64_sys_bpf+0x7c/0x90 [ 1269.020514][ C1] do_syscall_64+0x55/0xb0 [ 1269.024981][ C1] ? clear_bhb_loop+0x40/0x90 [ 1269.029705][ C1] ? clear_bhb_loop+0x40/0x90 [ 1269.034435][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1269.040389][ C1] RIP: 0033:0x7fae2d19e159 [ 1269.044932][ C1] RSP: 002b:00007fae2e11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1269.053404][ C1] RAX: ffffffffffffffda RBX: 00007fae2d425fa0 RCX: 00007fae2d19e159 [ 1269.061421][ C1] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1269.069430][ C1] RBP: 00007fae2d23503b R08: 0000000000000000 R09: 0000000000000000 [ 1269.077444][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.085456][ C1] R13: 00007fae2d426038 R14: 00007fae2d425fa0 R15: 00007fff7cf59de8 [ 1269.093508][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)