last executing test programs: 17.453973398s ago: executing program 0 (id=2891): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)="3e8bbcee0da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efad78944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb022614681c9e3762a3ad5f84751ca94e35039796705cadae08ee170149049bca1061336755d0e4ab0454262699a2e46cd90a2374f0e7201efe43a4d614461f3e8412ab89f8f0c494952d40788", 0xd3}], 0x1}, 0x547052430a225ce3) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000000000082295", @ANYRESHEX=r4, @ANYRES64=r2], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x1f4, 0xd28, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) close(r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%pI4 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func={0x7, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x2e, 0x61, 0x30]}}, &(0x7f0000000480)=""/179, 0x2a, 0xb3, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x4, '\x00', r7, r8, 0x1, 0x1, 0x1}, 0x50) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x10000) close(0x3) 17.256254711s ago: executing program 0 (id=2893): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0xa}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b40800000000000061104afaffffffffa500000000000000950000000000000006bc43163fdf658cbc9fe9b520bb7067192e9f28f46f980910c6d6586584dd4e2184b020788a50142024686e50ce85ce4eaceeb23ddd6323ab3c30600ec97e4dc38a9a22817805b90ec6f26f1f38a770a4a1a5ff89928e2c7c236a777dd71f8e01517833af6c27da270d3d8ac86865ba03692ea6867140ad8869a59031aa81f94ecd3d1f558091e743fb08c918c1913d65abeeaa360000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 16.911172809s ago: executing program 0 (id=2896): r0 = socket$kcm(0x29, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x3) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001a40)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) recvmsg(r2, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000002ac0)=""/93, 0x5d}, {&(0x7f0000002b40)=""/191, 0xbf}, {&(0x7f0000002c00)=""/142, 0x8e}], 0x3, &(0x7f0000002d00)=""/164, 0xa4}, 0x1) close(0x3) close(0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r0, r3}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002a80)=@generic={&(0x7f0000001a80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3}, 0x18) 16.568121946s ago: executing program 0 (id=2899): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x5}, 0x884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003ba, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdc, 0x0, @perf_bp={0x0}, 0x4010, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x0, 0x26, 0x0, 0x10}, 0x28) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 15.814271821s ago: executing program 0 (id=2904): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'lo\x00', @link_local}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2}, 0xc) socketpair(0xb, 0xa, 0x8, &(0x7f00000001c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000070000000900000002000020080000003f168549a84167a433245d9aaf9122849e57c14adedb60a368d24a8c764deff5210ac971ffc19f350f110f8f1da61dba0e595ee857466892a803a6ed500c6438fa7ff83152315ace24b3eb6eb6b90c7bdba3743ad18d8f3ea1fea3202f408fb8d8382d54395309b00a6f77a063095d9813be77e4", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000050000000f00"/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89fb, &(0x7f0000000900)={'sit0\x00', @random="2000230c1100"}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6c74, 0x0, 0x1, 0xe0c, '\x00', 0x0, r0, 0x5, 0x80000000, 0x2}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x297a1ba7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000001a0000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000004acb2547b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) r10 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) recvmsg$unix(r8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r9, &(0x7f0000000b00)={&(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000600)="0e3c795a03bf8bd2b77ed399f7f9fe602a3fedb0cfb790b27fef3a73f98c675025d5009e323ff8972ead8837ff122008779a08aa25084e7956f083b63906c0d09bf79e4d55", 0x45}], 0x1, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010102}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x72, &(0x7f0000000000)=r11, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfffffbc3}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x0, 0x0, 0x4, 0x1, 0x9, 0x2ead738db6b86504, 0xf}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000}, @jmp={0x5, 0x0, 0x8, 0x0, 0x6, 0x8, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x1000, 0xce, &(0x7f00000001c0)=""/206, 0x41100, 0x2, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x2, 0x0, 0xfffffff3}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000004c0)=[0xffffffffffffffff, r3, r5, r6, r7, 0x1], &(0x7f0000000500)=[{0x1, 0x5, 0x0, 0x5}, {0x0, 0x5, 0x1, 0x4}, {0x2, 0x3, 0x0, 0x1072476a62303829}, {0x5, 0x2, 0xe, 0x2}, {0x5, 0x2, 0x4, 0x8}, {0x3, 0x1, 0x9, 0xc}, {0x4, 0x4, 0x7, 0x7}, {0x4, 0x2, 0x5, 0x2}], 0x10, 0x3}, 0x94) 14.747358293s ago: executing program 0 (id=2916): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xb4, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xb4, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@restrict={0x10, 0x0, 0x0, 0xb, 0x1}, @typedef={0xf}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x1}}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x71, 0x6}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000600)=""/10, 0x68, 0xa, 0x0, 0xffffffff}, 0x28) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0x0, 0xffff, 0x18}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00', 0x0, 0xd676a63fee2d8908}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0xffffffffffffffff, 0x81, 0x18}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfa4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2771, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @alu={0x4, 0x1, 0x9, 0xb, 0x6, 0x50, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x42, &(0x7f0000000200)=""/66, 0x41000, 0x10, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0x4, 0x0, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r4, r5, 0x1, r6, r7, 0x1, r8], 0x0, 0x10, 0xfffffeff}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000a40)=r9, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000a40)=r9, 0x4) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000a80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="5ed1f5709142fc3d434c22b9b0f877db12565e5c105463ba5961c5b51d49143b27bcbd617aa8ce7bf18010d81a1d1f0a903e039e21067e5276a485c7", 0x3c}, {&(0x7f0000000b00)="dee48122eeb30d07fba77292a313a4eddbef3217e0c981e183756c151fdd7acd55997c66d1f0083eab44a67f226b858be5539868d3d143055e", 0x39}, {&(0x7f0000000b40)="c764b5fff2ab52c1c2d88b687f58090ad96d941cfede0277834485f31df87bc6ccdab468c976695425e227296ff6b1b3539d570ecb78292bfeed16aec280901901f293750384fab5d244d4a79e3f40c459db9865ecb6cc4131c646431868924092a2adbed44153ed89c0035d3ea3c5f0219c2a315b58027a2ac765b1102f720ef7320251a37166004daf659211e169c3aa8ad1966a10b724d8b7c1793d18f52444ad515f48f4f3f0413ee732094d1004ffd20817ca726a7bdd7fad34d7d20998c1ba094b1857fd40e02a5629b7c280", 0xcf}, {&(0x7f0000000c40)="58a7f4a80d9b7ea89651f246134c631de76f17cdee1a29403a58f83cacdea5fd24cf83e6ed8a0bf5011f7f03223e9e8f7e504603cfa3c08744f8d624460563a9315f2416924841c408fbd8ea3ddeece325f17dad77d227df4074d69fa9708013e5fc595bb8ef47", 0x67}, {&(0x7f0000000cc0)="025925c94a7c1af72153b8193f5e89df8fe51c7f8e725126cb6ecbe1110563586d6beaa68e7a4a0ee6fdb67774e902bf5feee3c846a271bbc1b6a35e0cb37f6ba3aeea54197292392c", 0x49}, {&(0x7f0000000d40)="16406563df0dd04575f5d7d252cc40c30d92318c6bba9f3922a48987224c3cff89a1b3dc76082c6ea150afc88654e6045215fea3f21b2a31aeb191bb2875cc3a0ea9a3f8fbc14f81f4e7cd7e1bd23b92874e54dc7b55d04f66d2ef9406c69d7d2dc0a5d4953e69", 0x67}, {&(0x7f0000000dc0)="95c2816d2c4a2b7da3f4b1590262fbef1260f63fa44f04b4c47c100013fb58bbae89e184076dc5c605966e7ba90e0221e20f44a63981fc4ecc03a24a7ce0f290d000e1b0c4589ca9c0c4e943b5c84dfae13a95d5c18adf4f0ab38ea9", 0x5c}, {&(0x7f0000000e40)="d007004ababb8bea8364e8b716b5e4e4437243d21d2f8eb99d6de3b07776c314229749ede9743abcfadc1fb7dab5b0a3fa0b3b32", 0x34}], 0x8}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000f00)={&(0x7f0000000a80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="5ed1f5709142fc3d434c22b9b0f877db12565e5c105463ba5961c5b51d49143b27bcbd617aa8ce7bf18010d81a1d1f0a903e039e21067e5276a485c7", 0x3c}, {&(0x7f0000000b00)="dee48122eeb30d07fba77292a313a4eddbef3217e0c981e183756c151fdd7acd55997c66d1f0083eab44a67f226b858be5539868d3d143055e", 0x39}, {&(0x7f0000000b40)="c764b5fff2ab52c1c2d88b687f58090ad96d941cfede0277834485f31df87bc6ccdab468c976695425e227296ff6b1b3539d570ecb78292bfeed16aec280901901f293750384fab5d244d4a79e3f40c459db9865ecb6cc4131c646431868924092a2adbed44153ed89c0035d3ea3c5f0219c2a315b58027a2ac765b1102f720ef7320251a37166004daf659211e169c3aa8ad1966a10b724d8b7c1793d18f52444ad515f48f4f3f0413ee732094d1004ffd20817ca726a7bdd7fad34d7d20998c1ba094b1857fd40e02a5629b7c280", 0xcf}, {&(0x7f0000000c40)="58a7f4a80d9b7ea89651f246134c631de76f17cdee1a29403a58f83cacdea5fd24cf83e6ed8a0bf5011f7f03223e9e8f7e504603cfa3c08744f8d624460563a9315f2416924841c408fbd8ea3ddeece325f17dad77d227df4074d69fa9708013e5fc595bb8ef47", 0x67}, {&(0x7f0000000cc0)="025925c94a7c1af72153b8193f5e89df8fe51c7f8e725126cb6ecbe1110563586d6beaa68e7a4a0ee6fdb67774e902bf5feee3c846a271bbc1b6a35e0cb37f6ba3aeea54197292392c", 0x49}, {&(0x7f0000000d40)="16406563df0dd04575f5d7d252cc40c30d92318c6bba9f3922a48987224c3cff89a1b3dc76082c6ea150afc88654e6045215fea3f21b2a31aeb191bb2875cc3a0ea9a3f8fbc14f81f4e7cd7e1bd23b92874e54dc7b55d04f66d2ef9406c69d7d2dc0a5d4953e69", 0x67}, {&(0x7f0000000dc0)="95c2816d2c4a2b7da3f4b1590262fbef1260f63fa44f04b4c47c100013fb58bbae89e184076dc5c605966e7ba90e0221e20f44a63981fc4ecc03a24a7ce0f290d000e1b0c4589ca9c0c4e943b5c84dfae13a95d5c18adf4f0ab38ea9", 0x5c}, {&(0x7f0000000e40)="d007004ababb8bea8364e8b716b5e4e4437243d21d2f8eb99d6de3b07776c314229749ede9743abcfadc1fb7dab5b0a3fa0b3b32", 0x34}], 0x8}, 0x0) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={0xffffffffffffffff, 0x7, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x23, 0x9, 0x0, 0xfffff0e9, 0x20040, r10, 0xd, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x23, 0x9, 0x0, 0xfffff0e9, 0x20040, r10, 0xd, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) close(r6) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x101000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r2, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x6, &(0x7f0000001040)=@raw=[@jmp={0x5, 0x0, 0x7, 0x0, 0x7, 0x50, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @ldst={0x2, 0x3, 0x0, 0x0, 0xa, 0x2, 0xfffffffffffffffc}, @generic={0x2, 0x6, 0x0, 0x3ff, 0x2}], &(0x7f0000001080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000010c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001100)={0x3, 0x6, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000011c0)=[r9, r11, r0, r8, r8], &(0x7f0000001200)=[{0x0, 0x1, 0xb}, {0x3, 0x1, 0xf}, {0x1, 0x4, 0x4, 0x6}, {0x3, 0x5, 0x1}, {0x3, 0x1, 0xf}, {0x2, 0x2, 0x6, 0x1}, {0x3, 0x5, 0x9, 0x4}], 0x10, 0xffff}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001340)=r4, 0x4) (async) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001340)=r4, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001380)=r7, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x1000, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001440)=r2) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000001440)=r2) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001480), 0x42000, 0x0) ioctl$TUNSETFILTEREBPF(r13, 0x800454e1, &(0x7f00000014c0)=r0) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000001500)={'ip6_vti0\x00', @link_local}) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0x0, 0x8, 0x10}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x7, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000015c0)='GPL\x00', 0xfffffffa, 0x6, &(0x7f0000001600)=""/6, 0x40f00, 0x8, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000001640)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001680)=[r8], &(0x7f00000016c0)=[{0x3, 0x4, 0xd, 0x8}, {0x1, 0x5, 0xe, 0x3}, {0x0, 0x3, 0x8, 0xf}, {0x5, 0x5, 0xb, 0x7}, {0x5, 0x4, 0xe, 0xb}, {0x0, 0x5, 0xb, 0x4}], 0x10, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001740)={0x18, 0x7, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000015c0)='GPL\x00', 0xfffffffa, 0x6, &(0x7f0000001600)=""/6, 0x40f00, 0x8, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000001640)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001680)=[r8], &(0x7f00000016c0)=[{0x3, 0x4, 0xd, 0x8}, {0x1, 0x5, 0xe, 0x3}, {0x0, 0x3, 0x8, 0xf}, {0x5, 0x5, 0xb, 0x7}, {0x5, 0x4, 0xe, 0xb}, {0x0, 0x5, 0xb, 0x4}], 0x10, 0x1}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001800), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r8}, &(0x7f0000001840), &(0x7f0000001880)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r8}, &(0x7f0000001840), &(0x7f0000001880)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r12, 0x0, 0x5a, 0x5e, &(0x7f0000001900)="f1433a101568f95e1268a45aed575d6a9dc6ce41e1a1381ad246c6b86bd51d571700ac6be2f0bd1987322c6450a9b4da4adb5c66f83e95a46932863350d8500355e0041f405eeaf113ec33c23ba9fb5f6eff0f4b7691b1573c24", &(0x7f0000001980)=""/94, 0x3, 0x0, 0x92, 0x6, &(0x7f0000001a00)="2f7e077118cc1457687c83db0ef385161516e42bd41bca53027b627f7c0c731d62f76b157d6651451929ebbd0a055d1106017ff5859375dffcf7e2007703321d12b6a5b1f8ebbe0dd04ea71da7d592e94bcf75ccda3022e714fd287ff9c62db55c895fc3e73c1458321565e7e80ef6974baf24c19042945222f2de918aba6723a3c5dcbecb85b0fed079a3c4efc74d974a12", &(0x7f0000001ac0)="f9c970939650", 0x6}, 0x50) 8.574196022s ago: executing program 4 (id=2941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg0\x00', 0x7c2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x10c001, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x40019) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x5, 0xd4202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r7}, 0xa0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000dd0a0000800000007301530000000000950000000008000000925e1d17e69c3b2c7dc5a998a4760d0bcf1e30e7ebdcc0b8fafd7383a1edd8cd88eaeb48210d62280b2f3b9e83d6d25af4abc50bbad99ea27d3c3a39fb517aa966ed21db2f1fcdfb47d4aaa709473585cbe08f0908c0913a7bab483e8240d3a3a42c5e06ab91330b8efe7c9540dfe1b78a51f0a8a349c4f277c4053ef72fd975b705ea3237"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000b300950000000000000036450cb8415d0cc20b6feb426b942c2375e5f91ac4658db8639f24fcdbe979fd83193d855b28c8a96aa61ae0a71b00877c76b1f1e2f77d3e88"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32=0x1, @ANYBLOB="0200000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000020000000200"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)='%-5lx \x00'}, 0x20) 7.310381498s ago: executing program 4 (id=2944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0xf}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0xa283, r0}, 0x38) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r3, &(0x7f0000000280), 0xfffffeed) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r0}, 0xc) 6.902582336s ago: executing program 1 (id=2945): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40000020) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100, 0x3}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="c1", 0x1}], 0x1}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000fd01"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000), 0x10) 6.486297285s ago: executing program 2 (id=2947): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000400)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x40047440, &(0x7f0000001200)) (async) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xf, 0x3, 0x2) (async) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x110200, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x401c5820, &(0x7f0000000000)=0x818) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 5.909625387s ago: executing program 1 (id=2948): socket$kcm(0x1e, 0x1, 0x0) (async) r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10840, 0x0, 0x6, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x1, 0x0, 0x100000, 0x8}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x63}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x63) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x63) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b40d25a80648c2594f90424fc60", 0x14}], 0x1}, 0x0) syz_clone(0x10a200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94", 0x1}], 0x1}, 0x20000001) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2097) (async) recvmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2097) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 5.806897479s ago: executing program 3 (id=2949): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r7}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r10, 0x1, 0x43, &(0x7f0000000000), 0xff7b) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94) 5.569918494s ago: executing program 2 (id=2950): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6, 0x80000000}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff0010b6f227b97f617c368e00000000009500"/32], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e02001d000000008c6394f95524fc60040011800a0000004700f4d87147f154c6f00f530c000099893a951b1204c0dbaeebd4371563e088707c8c21dd3c44b3abaf85880b9a2d1e3cb6fa88fac53804cb4df562037262cef3e16d3ff9056f47c3eb", 0x34039}], 0x100001f8}, 0x24040805) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080), 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0d, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6, 0x80000000}, 0x828, 0x6, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000080)) (async) socket$kcm(0x10, 0x2, 0x10) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff0010b6f227b97f617c368e00000000009500"/32], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000100)="c00e02001d000000008c6394f95524fc60040011800a0000004700f4d87147f154c6f00f530c000099893a951b1204c0dbaeebd4371563e088707c8c21dd3c44b3abaf85880b9a2d1e3cb6fa88fac53804cb4df562037262cef3e16d3ff9056f47c3eb", 0x34039}], 0x100001f8}, 0x24040805) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080), 0x1}, 0x0) (async) 4.80810031s ago: executing program 2 (id=2951): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000004000"/19, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x4008, 0x2, 0xe7b3, 0x0, 0xe33, 0x0, 0x5}, 0x0, 0xb, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x3, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x2, @perf_config_ext={0x86, 0xffffffffffffffff}, 0x13212, 0x7, 0x3, 0x2, 0x3, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETLE(r6, 0x400454cc, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x809, 0x5, 0x4, 0x22, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xc5a, 0x4, 0x0, 0xd}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x100000000000000, 0x80001}, 0x1088, 0x0, 0xc2bc, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 4.663382463s ago: executing program 3 (id=2952): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848", 0x14}], 0x1}, 0x80054) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x92, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x2080, 0x1, 0x3, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000080)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x9) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f84829", 0x15}], 0x1}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000005c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000004000000001800000000000001000000", @ANYRES32, @ANYBLOB="0200000000000000000003000000000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000300"], 0x50) (async) close(r4) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0xd, 0x1, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0]}, 0x40) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) syz_clone(0x58020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 4.370368579s ago: executing program 1 (id=2953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x440000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000000)='/proc/sys\x00\x00\x00\x00\x00\x00(O\x00\x00\x10\x04\xba?BVEm\xe39\xf7\xe3\x9es\xa8\xab%nN\xd4\xa2=\x11\xc8\xdd\x15\xcc\x00\x00\x00\x00'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 4.195885433s ago: executing program 2 (id=2954): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=@framed={{}, [@jmp={0x5, 0x1, 0x8, 0x0, 0xa, 0x6, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000003c0), &(0x7f0000000440)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)=r3}, 0x20) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000fe0300000900000080010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000991c249fa6a3d61d300000000005e"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x9}, 0x94) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r5, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) 3.659636434s ago: executing program 4 (id=2955): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x75040000, 0x0, r1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xac) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x800, 0x67, 0x0, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r3}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.574328485s ago: executing program 3 (id=2956): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x7, 0x1bb, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400"], 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @restrict={0x5, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x42, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x8, 0x80000, 0x0, &(0x7f0000000200)) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x11, 0x2, 0x300) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18}, 0x180, 0xc8, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x4000000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) (rerun: 64) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce818d036c00fe08fff500000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4) 3.227803213s ago: executing program 3 (id=2957): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x23}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/206, 0xce}], 0x1, &(0x7f0000000300)=""/167, 0xa7}, 0x40000300) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) 2.970453268s ago: executing program 1 (id=2958): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000121600000000009500800000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) sendmsg$kcm(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000000c0)="dff85775ab7ae5690477da4631eb64ecf19a324c62afa711e800906b2a2aa9c39aba4369021f73b7d5cd8acfa7b2148de4646ae6af882b2df0746b9eef5864bbe212c888b43c26b2d59fde263a30459029313a7aa7dffcfa0a9c6d830c3f3172c8444ace53752a38ad721da4fba484ff16d3d9971d80711cf8274b1d2b8aa49fb011eb193cbd055dd0aa35c443f2d9dd7a5047c3453de3d32ea979bd7a3d8de23e67656fdd7201137ae24d03e9474dbf6e7222ee31ac353f8c35fa55684d783f20a3e26050cd408080033412edce42797d25e29c43e1467d3585b31833209f36e50b304737620f", 0xe7}, {&(0x7f00000001c0)="2d9fe6590a618fb6b587d2199746b76ed1bce5b937b9c3381092b4981b716008a5b1a530562e2274fd59996badc1e0fab631289f27264d4114d8a146cb2b78b9cccd64f97492aabf72032654bf02ac82ae2525800fbe4a921f71e4580d678c373bed9810d5b2c70d2a0e25", 0x6b}, {&(0x7f0000000240)="001ee48c162ea5081ee837f34ba0a942472ed8ef5047024f3921d585fc6ca187855113ac9a744d223045c67255e05fbca4bfba18dc31e887f5bfdeb4c6fc784f0aa41c7dfbf2cf17b7def9893966e51cc7d88d34a253df96307366f6db07e0ac2b286049b9a1a0696649e3e3a4079e7be008fff73f20e832ac56bb02388feb2afe555c5e4b17fbc96e7946806cea792915de746697d00ab1210c867802bebfc03447d878ed6124daee191f32144e1326c7e9f82b5049c370e3e25b13", 0xbc}, {&(0x7f0000000700)="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", 0x37f}], 0x4}, 0x4000000) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x9e8, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008005) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xe1, 0x3b, &(0x7f0000000200)="904608a66b91a2dd2b919bf9902af75d483a57c3c0124673e515a145d2a11bbb58f6e81e8c64f113ec4038071e82d11a7fc877790751269afc5ae02c67246d04d6e2e8e0e4308ac5229b657f0d30def89fd340c704f8ea229eea1f47f438ee8677d381e00e04486c80e6a9def912419174d945bff2ab09cb96f54a0309d711147c267370c86cd3cdde7b37b86fc7d4dd36c8c058f72eccc79146bc58a8c565361664ad90f82232260050a81318ac50bf06636c098fcb63e786764f8711756102a46eee95b4c972aad6e49c3a96618521da3d0c8212a903ea4cacd92638e0ea3b6c", &(0x7f0000000300)=""/59, 0x80000000, 0x0, 0xf2, 0x93, &(0x7f0000000400)="0dd09c87fd3c8ec8e02bc9b5e3c8b9c296532598f1650813b61b99a70a3b718e77e0df2789c72a4c04069addedace6d38e9f9fa2c85d98355a0f153b581ad3df4e476e341166e0dfaa0c5a17daabb332ed8890538f20b5600fffbe83f7008c75b74fd1943faa8e43cd61567db9a784cd6e0c97e37d0cd673aeaec2b64958627c4dc589a846ea5a4d443ec684389ee6f415a548a93dc2e6e78aa623d3482b3061a94fbe9557dab19f346979a4ddd64d1ddbea25b0d4c7543caf6bcfdd0bbd0bce867e7adc52830e690e3b940bd1e66bc2bf25fd66bd5011ef446db43cfdc8834717cfa2b71f38b40391744f35934a8986661b", &(0x7f0000000500)="1ed07aa955659fa630495c01e551426e650ab519f47be55c3851e6d64bda8ad61cb0ad1b3fb61895d9c055518a6290ea72eaee65f9f7f65c2de21a4677fb89e81a633d924c3a2c707ee7df4528126f1473348caf40ab9d2a0f0101207d9e5ce8ae26fa0401f6c93c715b99bca37eebde8bbf8563d9310ec90d110e4299df179ce5151fe6aa8ce719b338aec5cc54d13a41cde9", 0x1, 0x0, 0xeec}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000046000000760000000000000027000000ffffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f00000001c0)=[{0x28, 0x0, 0x3, 0xfffff000}, {0x6}]}) setsockopt$sock_attach_bpf(r5, 0x6, 0x43, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8932, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a80)="2e00000010008188f7b62aa73f72cc9f0ba1f8483700000000010000000000000e000a00100000008a8000001294ceb6d991f633f2ece13c6f50e69f76a0fc813c4a3b9c88ef21c069dfc7321a2580877994ff86c64e656e1d2fd37627f9d05decf22b6f794a053e30e6714421cb996f05b27172aa", 0x75}], 0x1}, 0x4800) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r3}, 0x8) 1.282353633s ago: executing program 3 (id=2959): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={0x0, 0xffffffffffffffff, 0x80000}, 0x18) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8cff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0x2f, 0x0, 0xc) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711863000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) socket$kcm(0x2, 0x1, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, 0x0, @perf_config_ext={0x100000000, 0x2}, 0x21, 0x3, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x8dc, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) gettid() r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000001c0), 0x2, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x40047438, 0x110c23003f) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.281721563s ago: executing program 4 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db44b904021d080406007c09e8fe55a10a0015000400142603600e1208000f0000000401a8000900080002400300000a080010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbece8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.233140404s ago: executing program 2 (id=2961): r0 = getpid() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x8, 0xffffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000900)={0x4, 0x80, 0x15, 0x4e, 0x20, 0xc, 0x0, 0x2, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xea29, 0x1, @perf_bp={&(0x7f0000000700), 0x3}, 0x0, 0x8, 0x1000, 0x2, 0x9, 0x401, 0x6, 0x0, 0x7, 0x0, 0x6}, r0, 0x8, r2, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open$cgroup(&(0x7f0000000400)={0x0, 0x80, 0xd7, 0x94, 0x60, 0xe4, 0x0, 0x80, 0x20102, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x12e, 0x0, @perf_bp={&(0x7f00000003c0), 0x9}, 0x80, 0x8000000000000002, 0x4, 0x8, 0x6, 0xe, 0xc, 0x0, 0x2, 0x0, 0x6}, r2, 0x6, r1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018eef767d585ed4f80642d7186109e0000000000000020200000200000eb0300000002000000000000be1cdb24a113abff1bf189ae43980c02000000000000000100000d00000000000000000000000000005f6fb9421ad150daf18cd1c2bb91fc57de1db59fff894e87e7da9d081f95b75b2def586801042454f540404b1039530058ab8de80af46b76d0bef6eea1d7be6845f1798259558f7bc8c01bdf17d3501b19c04db702b774155639888669532981766e4e9fc4ce9a5ab943d131bcfe1a60c51895ce812e4f16d92e77beb015acc634b547b68c3b3435d12d466f6fb3fcf2"], 0x0, 0x3c}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000a000000000000000000000000000000000000000259c594fdfb2ac89f9f1c309938314ca8b1494f620961bf156c68bce89520a5941d6d5e3d30cd497a241a24836e2d60f82e21f71fa7e597f505042dfe64c9fc8a9d6b96b8295cb14dd78f0dce1327bbcf1df22712d0d9988c625010000000000000012d4ce878b693352265faea62631a804"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000008, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r7, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) 1.129545436s ago: executing program 1 (id=2962): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) 646.240456ms ago: executing program 1 (id=2963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x101910, 0x2, 0xf959, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="01000000030000000200000003"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="a2df56908a493f0fa0e268ff030000453999d246af5a80ecf4ac000080000080180100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/24, @ANYRES32, @ANYBLOB], 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x15, &(0x7f0000001380)=ANY=[@ANYBLOB, @ANYBLOB="000000da796525eeaa5974790000000000b7080000070000007b8af8ff00000000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, r2}, 0xc) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000d00)="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", 0x3ea}], 0x1}, 0x40000) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838029f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x14, 0x29, 0x43}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x9fc) (async) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x9c}, {0x6}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(0x0, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x1) (async) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x24, 0x0, 0x0) (async) sendmsg$kcm(r5, 0x0, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000009000000000000000080000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf0900000000000055090100000000009500ebff00000000850000000f000000bf91000000000000b7020000010000008500000085000000b70000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 643.842256ms ago: executing program 4 (id=2964): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8933, &(0x7f0000000900)={'wg1\x00', @random="0000230c1100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 595.224857ms ago: executing program 2 (id=2965): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x30, 0x1, 0x0, 0xfffff030}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x30, 0x1, 0x0, 0xfffff030}]}) (async) 178.021826ms ago: executing program 4 (id=2966): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r7, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x4008010) 0s ago: executing program 3 (id=2967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d04000000000000400000000200000000000000000000f9ea03000000000000006100"], 0x0, 0x52}, 0x28) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) r4 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES8=r1, @ANYRES16=r0, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRESDEC=r2], 0x48) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) (async, rerun: 64) r6 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000400)=@nl, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="bb8dd823", 0x4}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB='X\x00\x00'], 0x58}, 0x8818) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) (async) close(0x3) r7 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x80044943, &(0x7f0000001bc0)={r7}) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.1303'. [ 408.386442][T10062] : port 1(ip6gretap0) entered blocking state [ 408.402124][T10062] : port 1(ip6gretap0) entered disabled state [ 408.413494][T10062] device ip6gretap0 entered promiscuous mode [ 408.432503][T10058] device ip6gretap0 left promiscuous mode [ 408.440206][T10058] : port 1(ip6gretap0) entered disabled state [ 408.856572][T10072] netlink: 'syz.1.1309': attribute type 3 has an invalid length. [ 408.951559][T10072] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1309'. [ 409.384359][T10077] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1311'. [ 409.436130][ T4278] Bluetooth: hci2: unexpected event 0x31 length: 151 > 6 [ 411.137256][T10082] netlink: 'syz.4.1313': attribute type 10 has an invalid length. [ 411.169219][T10082] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1313'. [ 411.415946][T10094] netlink: 'syz.3.1316': attribute type 3 has an invalid length. [ 411.424172][T10094] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 411.435066][T10094] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1316'. [ 412.109563][T10123] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1320'. [ 412.138095][T10125] netlink: 'syz.1.1320': attribute type 4 has an invalid length. [ 412.165544][T10125] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1320'. [ 412.484841][T10131] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1332'. [ 412.518989][T10131] openvswitch: netlink: Message has 48126 unknown bytes. [ 412.651727][T10139] : port 1(ip6gretap0) entered blocking state [ 412.693516][T10139] : port 1(ip6gretap0) entered disabled state [ 412.707615][T10139] device ip6gretap0 entered promiscuous mode [ 412.735218][T10133] device ip6gretap0 left promiscuous mode [ 412.749169][T10133] : port 1(ip6gretap0) entered disabled state [ 412.925916][T10146] netlink: 'syz.2.1325': attribute type 19 has an invalid length. [ 413.033511][T10144] netlink: 'syz.4.1324': attribute type 21 has an invalid length. [ 413.068676][T10144] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1324'. [ 413.411310][T10159] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1328'. [ 413.419908][T10158] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1329'. [ 413.897424][T10167] netlink: 'syz.4.1331': attribute type 10 has an invalid length. [ 413.926545][T10167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1331'. [ 413.978931][T10167] device ipvlan1 entered promiscuous mode [ 414.046560][T10167] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 414.107672][T10172] netlink: 63763 bytes leftover after parsing attributes in process `syz.1.1333'. [ 414.887072][T10208] netlink: 'syz.1.1345': attribute type 27 has an invalid length. [ 415.015683][T10209] netlink: 'syz.1.1345': attribute type 9 has an invalid length. [ 415.301305][T10208] bond0: (slave bond_slave_0): Releasing backup interface [ 415.992708][T10217] team0: Port device team_slave_0 removed [ 416.140118][T10202] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.178063][T10226] netlink: 'syz.2.1349': attribute type 10 has an invalid length. [ 416.189871][T10226] __nla_validate_parse: 3 callbacks suppressed [ 416.189912][T10226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1349'. [ 416.222675][T10226] bridge0: port 3(ipvlan1) entered blocking state [ 416.229612][T10226] bridge0: port 3(ipvlan1) entered disabled state [ 416.244540][T10226] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 416.676068][T10239] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1352'. [ 416.720846][T10239] device hsr_slave_0 left promiscuous mode [ 416.765728][T10239] device hsr_slave_1 left promiscuous mode [ 416.906528][T10239] bridge0: port 4(hsr0) entered disabled state [ 417.007936][T10239] bridge0: port 4(hsr0) entered disabled state [ 417.066321][T10241] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1352'. [ 419.083969][T10260] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1357'. [ 419.270934][T10280] netlink: 'syz.2.1358': attribute type 21 has an invalid length. [ 419.324432][T10280] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1358'. [ 420.609980][T10288] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1363'. [ 420.630895][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 420.687617][T10288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.840330][T10303] netlink: 'syz.3.1366': attribute type 39 has an invalid length. [ 421.865471][T10316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1370'. [ 422.269808][T10325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1371'. [ 422.416536][T10327] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1373'. [ 422.445737][T10331] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.1375'. [ 423.038341][T10340] netlink: 'syz.3.1376': attribute type 10 has an invalid length. [ 423.080738][T10340] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1376'. [ 424.430670][T10355] delete_channel: no stack [ 424.466497][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 424.492395][T10365] tap0: tun_chr_ioctl cmd 1074025688 [ 424.513032][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 424.518959][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 424.578747][T10360] netlink: 'syz.0.1382': attribute type 29 has an invalid length. [ 424.688037][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 424.738782][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 424.843097][T10360] netlink: 'syz.0.1382': attribute type 29 has an invalid length. [ 424.945678][T10361] netlink: 'syz.0.1382': attribute type 29 has an invalid length. [ 425.081195][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 425.102113][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 425.140627][T10367] netlink: 'syz.0.1382': attribute type 29 has an invalid length. [ 425.629102][T10364] tap0: tun_chr_ioctl cmd 1074025673 [ 426.643027][T10385] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.1387'. [ 431.691140][ T4278] Bluetooth: hci4: ACL packet for unknown connection handle 3955 [ 433.626859][T10482] netlink: 'syz.1.1409': attribute type 9 has an invalid length. [ 433.655259][T10482] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1409'. [ 435.689312][T10529] netlink: 'syz.0.1422': attribute type 21 has an invalid length. [ 436.013037][T10540] netlink: 'syz.4.1425': attribute type 3 has an invalid length. [ 436.045862][T10540] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1425'. [ 436.217296][T10550] syzkaller1: tun_chr_ioctl cmd 21731 [ 436.794506][T10566] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1432'. [ 436.855831][T10566] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 437.220735][T10580] netlink: 'syz.4.1435': attribute type 21 has an invalid length. [ 437.236924][T10580] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1435'. [ 437.277544][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1435'. [ 437.722653][T10589] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1439'. [ 438.352157][T10603] netlink: 'syz.1.1440': attribute type 2 has an invalid length. [ 438.395669][T10603] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1440'. [ 440.112390][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.118768][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.447602][T10600] device ip6_vti0 entered promiscuous mode [ 440.693116][T10624] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1445'. [ 442.057192][T10659] netlink: 130181 bytes leftover after parsing attributes in process `syz.3.1452'. [ 443.536683][T10686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1459'. [ 443.911361][T10696] netlink: 'syz.3.1461': attribute type 16 has an invalid length. [ 443.959299][T10696] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1461'. [ 444.182559][T10699] netlink: 'syz.2.1463': attribute type 19 has an invalid length. [ 444.220256][T10699] netlink: 19672 bytes leftover after parsing attributes in process `syz.2.1463'. [ 444.401229][T10701] device syzkaller0 entered promiscuous mode [ 445.061205][T10725] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 445.081605][T10725] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 445.102482][T10722] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1471'. [ 446.202119][T10740] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1475'. [ 446.692592][T10766] netlink: 'syz.3.1480': attribute type 3 has an invalid length. [ 446.749800][T10766] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1480'. [ 447.737191][T10796] netlink: 'syz.1.1486': attribute type 10 has an invalid length. [ 449.153999][T10824] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1490'. [ 449.254072][T10807] device syzkaller0 entered promiscuous mode [ 452.390482][T10859] netlink: 'syz.2.1498': attribute type 16 has an invalid length. [ 452.398384][T10859] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1498'. [ 452.466933][T10859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 452.506546][T10861] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1498'. [ 452.844142][T10882] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 452.913181][T10882] netlink: 'syz.0.1501': attribute type 1 has an invalid length. [ 452.934528][T10882] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1501'. [ 453.654621][T10905] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 454.049764][T10887] netlink: 'syz.1.1504': attribute type 21 has an invalid length. [ 454.155625][T10896] netlink: 'syz.2.1508': attribute type 10 has an invalid length. [ 454.164249][T10896] device netdevsim0 entered promiscuous mode [ 454.175038][T10903] netlink: 'syz.4.1507': attribute type 39 has an invalid length. [ 454.290683][T10905] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 454.300675][T10906] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 457.509725][T10907] netlink: 'syz.4.1507': attribute type 29 has an invalid length. [ 457.957711][T10942] __sock_release: fasync list not empty! [ 458.838909][T10963] tun0: tun_chr_ioctl cmd 2148553947 [ 458.915838][T10963] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1520'. [ 458.970493][T10965] device sit0 left promiscuous mode [ 459.394040][T10976] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.1523'. [ 459.585852][T10972] device sit0 entered promiscuous mode [ 460.098365][T10993] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 460.705139][T10993] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 460.768157][T10996] netlink: 'syz.0.1527': attribute type 29 has an invalid length. [ 460.999129][T11000] netlink: 'syz.2.1528': attribute type 27 has an invalid length. [ 461.139827][T11008] netlink: 'syz.1.1531': attribute type 1 has an invalid length. [ 461.160496][T11008] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1531'. [ 461.171111][T11004] tipc: Started in network mode [ 461.176202][T11004] tipc: Node identity 9215a268, cluster identity 4711 [ 461.189925][T11004] tipc: Node number set to 2450891368 [ 461.211616][T11010] netlink: 'syz.1.1531': attribute type 21 has an invalid length. [ 461.231598][T10999] delete_channel: no stack [ 461.511715][T11017] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1532'. [ 461.548524][T11017] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 462.096233][T11032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1538'. [ 462.124124][T11025] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1534'. [ 462.125444][T11030] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.1537'. [ 462.175043][T11039] netlink: 'syz.0.1539': attribute type 3 has an invalid length. [ 462.204383][T11039] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1539'. [ 462.231203][T11025] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1534'. [ 462.299317][T11037] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1534'. [ 462.462906][T11044] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 462.556777][T11045] bridge_slave_1: default FDB implementation only supports local addresses [ 464.089757][T11068] __nla_validate_parse: 3 callbacks suppressed [ 464.089815][T11068] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1547'. [ 465.108267][T11098] netlink: 'syz.0.1554': attribute type 3 has an invalid length. [ 465.149218][T11098] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1554'. [ 465.171945][T11095] netlink: 'syz.0.1554': attribute type 21 has an invalid length. [ 465.179892][T11095] netlink: 'syz.0.1554': attribute type 6 has an invalid length. [ 465.234498][T11095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1554'. [ 465.664179][T11109] : port 1(ip6gretap0) entered blocking state [ 465.672055][T11109] : port 1(ip6gretap0) entered disabled state [ 465.683234][T11109] device ip6gretap0 entered promiscuous mode [ 465.693402][T11106] device ip6gretap0 left promiscuous mode [ 465.705094][T11106] : port 1(ip6gretap0) entered disabled state [ 466.058500][T11121] device syzkaller0 left promiscuous mode [ 466.959157][T11143] device sit0 left promiscuous mode [ 467.167712][T11145] device sit0 entered promiscuous mode [ 467.484478][T11153] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1568'. [ 468.066206][T11161] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1571'. [ 468.181349][T11161] netlink: zone id is out of range [ 468.186580][T11161] netlink: zone id is out of range [ 468.277422][T11161] netlink: zone id is out of range [ 468.314484][T11161] netlink: zone id is out of range [ 468.319697][T11161] netlink: zone id is out of range [ 468.460630][T11161] netlink: zone id is out of range [ 468.556276][T11161] netlink: zone id is out of range [ 468.694081][T11161] netlink: zone id is out of range [ 468.790267][T11161] netlink: zone id is out of range [ 468.795490][T11161] netlink: zone id is out of range [ 469.216814][T11183] tap0: tun_chr_ioctl cmd 1074025681 [ 469.826645][T11189] syz.1.1579[11189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.827028][T11189] syz.1.1579[11189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.235860][T11192] netlink: 'syz.1.1580': attribute type 1 has an invalid length. [ 471.540807][T11192] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1580'. [ 472.488418][T11207] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 472.533248][T11207] dvmrp1: ignored: set checksum disabled [ 472.587325][T11200] device macsec0 entered promiscuous mode [ 475.737893][T11057] delete_channel: no stack [ 477.055480][T11249] syz.4.1595[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.055586][T11249] syz.4.1595[11249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.351257][T11255] netlink: 'syz.4.1598': attribute type 10 has an invalid length. [ 477.628105][T11259] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1601'. [ 477.668775][T11259] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 477.756182][T11259] net_ratelimit: 3542 callbacks suppressed [ 477.756201][T11259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.417847][T11287] netlink: 15039 bytes leftover after parsing attributes in process `syz.2.1608'. [ 478.484722][T11287] netlink: 15039 bytes leftover after parsing attributes in process `syz.2.1608'. [ 480.369996][T11314] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1613'. [ 480.405875][T11310] netlink: 'syz.2.1616': attribute type 29 has an invalid length. [ 480.469451][T11310] netlink: 'syz.2.1616': attribute type 29 has an invalid length. [ 481.019650][T11320] netlink: 'syz.2.1616': attribute type 29 has an invalid length. [ 481.038454][T11325] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 482.516836][T11375] netlink: 'syz.3.1630': attribute type 29 has an invalid length. [ 482.538580][T11375] netlink: 'syz.3.1630': attribute type 29 has an invalid length. [ 482.750892][T11380] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1631'. [ 482.764780][T11379] netlink: 'syz.4.1632': attribute type 4 has an invalid length. [ 482.773457][T11379] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1632'. [ 482.819500][T11379] netlink: 'syz.4.1632': attribute type 16 has an invalid length. [ 482.843486][T11379] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1632'. [ 483.179761][T11389] netlink: 'syz.1.1635': attribute type 7 has an invalid length. [ 483.290759][T11394] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1637'. [ 483.405968][T11394] openvswitch: netlink: Message has 48126 unknown bytes. [ 484.335184][T11416] netlink: 'syz.1.1641': attribute type 3 has an invalid length. [ 484.526011][T11416] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1641'. [ 485.096024][T11427] syz.2.1644[11427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.865555][T11456] netlink: 'syz.1.1651': attribute type 21 has an invalid length. [ 485.964709][T11458] netlink: 'syz.4.1652': attribute type 21 has an invalid length. [ 485.973448][T11458] netlink: 'syz.4.1652': attribute type 1 has an invalid length. [ 486.417438][T11465] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.1655'. [ 490.164168][T11513] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1667'. [ 490.360000][T11517] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1667'. [ 490.373232][T11508] delete_channel: no stack [ 490.414838][T11517] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 490.734017][T11526] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1669'. [ 490.767654][T11526] netlink: 'syz.0.1669': attribute type 3 has an invalid length. [ 490.810298][T11526] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1669'. [ 491.030541][T11530] netlink: 'syz.4.1670': attribute type 10 has an invalid length. [ 491.114425][T11538] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 491.192416][T11532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 491.201449][T11532] IPv6: NLM_F_CREATE should be set when creating new route [ 491.208781][T11532] IPv6: NLM_F_CREATE should be set when creating new route [ 491.216296][T11532] IPv6: NLM_F_CREATE should be set when creating new route [ 491.268605][T11538] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 491.279124][T11541] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 491.301097][T11542] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 491.469969][T11552] netlink: 'syz.2.1677': attribute type 15 has an invalid length. [ 491.485942][T11552] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1677'. [ 491.516519][T11553] netlink: 'syz.2.1677': attribute type 15 has an invalid length. [ 491.534665][T11553] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1677'. [ 491.827648][T11569] netlink: 'syz.4.1681': attribute type 21 has an invalid length. [ 492.019985][T11575] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1682'. [ 492.108923][T11575] netlink: 'syz.2.1682': attribute type 7 has an invalid length. [ 492.947340][T11598] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1686'. [ 493.094623][T11598] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1686'. [ 493.116813][T11604] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.1690'. [ 495.763713][T11626] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1694'. [ 496.093957][T11643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1700'. [ 496.747163][ T4278] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 498.820716][ T4276] Bluetooth: hci4: command 0x2016 tx timeout [ 498.864685][T11674] validate_nla: 2 callbacks suppressed [ 498.864703][T11674] netlink: 'syz.0.1709': attribute type 27 has an invalid length. [ 499.905255][T11680] delete_channel: no stack [ 500.981609][T11732] ¥: port 2(syz_tun) entered blocking state [ 500.987917][T11732] ¥: port 2(syz_tun) entered disabled state [ 500.999548][T11732] device syz_tun entered promiscuous mode [ 501.276612][T11741] netlink: 'syz.2.1723': attribute type 10 has an invalid length. [ 501.393486][T11741] team0: Device hsr_slave_0 failed to register rx_handler [ 501.552688][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.559081][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.666479][T11780] delete_channel: no stack [ 502.768199][T11780] delete_channel: no stack [ 503.967486][T11828] tap0: tun_chr_ioctl cmd 1074025675 [ 504.055123][T11828] tap0: persist enabled [ 504.082178][T11831] tap0: tun_chr_ioctl cmd 1074025675 [ 504.089906][T11831] tap0: persist disabled [ 504.199224][T11834] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1746'. [ 504.905025][T11854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1752'. [ 506.461178][T11874] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1756'. [ 506.873030][T11897] netlink: 'syz.1.1760': attribute type 27 has an invalid length. [ 506.904661][T11897] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1760'. [ 507.587609][T11930] Ÿë: port 1(gretap0) entered blocking state [ 507.610356][T11930] Ÿë: port 1(gretap0) entered disabled state [ 507.617787][T11930] device gretap0 entered promiscuous mode [ 508.103161][T11949] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1772'. [ 508.224065][T11952] netlink: 'syz.1.1772': attribute type 9 has an invalid length. [ 508.350529][T11952] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1772'. [ 508.394090][T11956] netlink: 'syz.1.1772': attribute type 9 has an invalid length. [ 508.409166][T11956] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1772'. [ 509.349149][T11983] netlink: 'syz.2.1780': attribute type 15 has an invalid length. [ 509.365863][T11983] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1780'. [ 509.376354][T11978] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1779'. [ 509.729594][T11995] netlink: 'syz.0.1783': attribute type 10 has an invalid length. [ 509.771257][T11995] device macvlan0 entered promiscuous mode [ 509.874991][T12010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1787'. [ 510.347776][T12026] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1790'. [ 510.373477][T12026] netlink: zone id is out of range [ 510.391795][T12026] netlink: zone id is out of range [ 510.511154][T12026] netlink: del zone limit has 4 unknown bytes [ 510.611829][T12032] netlink: 'syz.4.1791': attribute type 7 has an invalid length. [ 510.800491][T12042] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1792'. [ 511.154044][T12061] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1797'. [ 511.164066][T12061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.450778][T12076] netlink: 'syz.1.1800': attribute type 21 has an invalid length. [ 511.541265][T12076] netlink: 'syz.1.1800': attribute type 21 has an invalid length. [ 512.826766][T12099] netlink: 'syz.1.1806': attribute type 25 has an invalid length. [ 512.847303][T12099] netlink: 'syz.1.1806': attribute type 9 has an invalid length. [ 512.939625][T12099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1806'. [ 513.114444][T12109] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1808'. [ 513.215791][T12109] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 513.354389][T12115] netlink: 15695 bytes leftover after parsing attributes in process `syz.4.1808'. [ 513.917754][T12130] device pim6reg1 entered promiscuous mode [ 514.207126][T12141] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1816'. [ 514.474190][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1818'. [ 514.870998][T12168] netlink: 'syz.0.1820': attribute type 21 has an invalid length. [ 514.948446][T12171] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 514.965090][T12171] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 514.978709][T12171] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 514.994625][T12171] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 515.006419][T12171] netlink: 'syz.3.1822': attribute type 27 has an invalid length. [ 515.117444][T12171] bond0: (slave bond_slave_0): Releasing backup interface [ 515.195721][T12172] netlink: 'syz.3.1822': attribute type 17 has an invalid length. [ 515.204189][T12172] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1822'. [ 515.323579][T12176] device hsr0 entered promiscuous mode [ 515.559571][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 516.595095][T12215] netlink: 'syz.3.1833': attribute type 2 has an invalid length. [ 516.669562][T12215] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1833'. [ 517.138977][T12220] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1835'. [ 517.372362][T12220] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 518.510659][T12239] netlink: 'syz.1.1838': attribute type 29 has an invalid length. [ 518.543623][T12233] netlink: 'syz.3.1837': attribute type 3 has an invalid length. [ 518.580607][T12239] netlink: 'syz.1.1838': attribute type 29 has an invalid length. [ 518.655057][T12233] netlink: 'syz.3.1837': attribute type 181 has an invalid length. [ 518.947212][T12249] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1841'. [ 519.060440][T12249] openvswitch: netlink: Message has 6 unknown bytes. [ 519.631997][T12239] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1838'. [ 519.686267][T12239] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 519.722819][T12239] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.458289][T12302] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 521.495465][T12302] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 521.524081][T12302] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1854'. [ 522.537286][T12319] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1861'. [ 522.842467][T12321] netlink: 'syz.4.1860': attribute type 21 has an invalid length. [ 524.379508][T12361] netlink: 'syz.0.1871': attribute type 11 has an invalid length. [ 524.410373][T12361] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1871'. [ 524.523049][T12360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.530639][T12384] device sit0 left promiscuous mode [ 525.849205][T12396] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1880'. [ 525.978804][T12397] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1880'. [ 526.061284][T12397] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 526.070609][T12396] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 526.503068][T12415] netlink: 'syz.2.1885': attribute type 3 has an invalid length. [ 526.511039][T12415] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1885'. [ 527.241269][T12425] netlink: 'syz.1.1887': attribute type 21 has an invalid length. [ 527.249271][T12425] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 527.324949][T12425] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1887'. [ 527.373691][T12435] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.1901'. [ 528.225446][T12446] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 528.386255][T12446] device veth0_vlan left promiscuous mode [ 528.405557][T12446] device veth0_vlan entered promiscuous mode [ 528.425711][T12446] team0: Device veth0_vlan failed to register rx_handler [ 528.566602][T12451] netlink: 'syz.1.1893': attribute type 33 has an invalid length. [ 528.607268][T12451] netlink: 'syz.1.1893': attribute type 4 has an invalid length. [ 528.652767][T12451] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1893'. [ 528.863410][T12465] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1897'. [ 529.370382][T12478] netlink: 'syz.1.1899': attribute type 17 has an invalid length. [ 529.397502][T12478] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1899'. [ 529.430439][T12478] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 529.468109][T12478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.155902][T12501] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1910'. [ 530.587166][T12511] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1912'. [ 531.994948][T12523] delete_channel: no stack [ 532.547536][T12553] netlink: 'syz.3.1924': attribute type 3 has an invalid length. [ 532.651482][T12553] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.1924'. [ 533.020638][T12572] netlink: 'syz.0.1929': attribute type 17 has an invalid length. [ 533.119523][T12574] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1931'. [ 533.152546][T12574] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 533.218832][T12574] CPU: 1 PID: 12574 Comm: syz.3.1931 Not tainted syzkaller #0 [ 533.226405][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.236594][T12574] Call Trace: [ 533.239906][T12574] [ 533.242870][T12574] dump_stack_lvl+0x188/0x24e [ 533.247604][T12574] ? show_regs_print_info+0x12/0x12 [ 533.252849][T12574] ? load_image+0x410/0x410 [ 533.257401][T12574] sysfs_warn_dup+0x8a/0xa0 [ 533.261949][T12574] sysfs_do_create_link_sd+0xc0/0x110 [ 533.267361][T12574] device_add+0x83b/0x1050 [ 533.271831][T12574] wiphy_register+0x1d8b/0x2aa0 [ 533.276740][T12574] ? cfg80211_event_work+0x40/0x40 [ 533.281916][T12574] ? minstrel_ht_alloc+0x894/0xa20 [ 533.287075][T12574] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 533.293218][T12574] ieee80211_register_hw+0x2d48/0x39f0 [ 533.298740][T12574] ? ieee80211_register_hw+0xf71/0x39f0 [ 533.304341][T12574] ? ieee80211_register_hw+0xe71/0x39f0 [ 533.309936][T12574] ? ieee80211_tasklet_handler+0x20/0x20 [ 533.315612][T12574] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 533.321551][T12574] ? __debug_object_init+0xed/0x440 [ 533.326824][T12574] ? memset+0x1e/0x40 [ 533.330927][T12574] ? __hrtimer_init+0x189/0x270 [ 533.335819][T12574] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 533.341619][T12574] ? memcpy+0x3c/0x60 [ 533.345644][T12574] hwsim_new_radio_nl+0xab7/0xc90 [ 533.350722][T12574] genl_family_rcv_msg_doit+0x22f/0x350 [ 533.356302][T12574] ? end_current_label_crit_section+0x170/0x170 [ 533.362584][T12574] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 533.368520][T12574] ? bpf_lsm_capable+0x5/0x10 [ 533.373233][T12574] ? security_capable+0x85/0xb0 [ 533.378136][T12574] genl_rcv_msg+0x601/0x790 [ 533.382679][T12574] ? genl_bind+0x360/0x360 [ 533.387119][T12574] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 533.393509][T12574] netlink_rcv_skb+0x1ef/0x440 [ 533.398320][T12574] ? genl_bind+0x360/0x360 [ 533.402777][T12574] ? netlink_ack+0x1160/0x1160 [ 533.407612][T12574] ? down_read+0x1a8/0x2d0 [ 533.412067][T12574] genl_rcv+0x24/0x40 [ 533.416086][T12574] netlink_unicast+0x7ad/0x920 [ 533.420905][T12574] netlink_sendmsg+0x8ad/0xbd0 [ 533.425717][T12574] ? netlink_getsockopt+0x550/0x550 [ 533.431080][T12574] ? apparmor_socket_sendmsg+0x8a/0x330 [ 533.436687][T12574] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 533.442186][T12574] ? security_socket_sendmsg+0x7c/0xa0 [ 533.447694][T12574] ? netlink_getsockopt+0x550/0x550 [ 533.452932][T12574] ____sys_sendmsg+0x5ed/0x9a0 [ 533.457750][T12574] ? __sys_sendmsg_sock+0x30/0x30 [ 533.462813][T12574] ? __import_iovec+0x306/0x510 [ 533.467713][T12574] ? import_iovec+0x6f/0xa0 [ 533.472261][T12574] ___sys_sendmsg+0x2a2/0x360 [ 533.476992][T12574] ? __sys_sendmsg+0x2a0/0x2a0 [ 533.481857][T12574] __se_sys_sendmsg+0x1c3/0x2b0 [ 533.486751][T12574] ? perf_trace_preemptirq_template+0x268/0x320 [ 533.493032][T12574] ? __x64_sys_sendmsg+0x80/0x80 [ 533.498025][T12574] ? lockdep_hardirqs_on+0x94/0x140 [ 533.503260][T12574] do_syscall_64+0x4c/0xa0 [ 533.507717][T12574] ? clear_bhb_loop+0x60/0xb0 [ 533.512436][T12574] ? clear_bhb_loop+0x60/0xb0 [ 533.517159][T12574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.523091][T12574] RIP: 0033:0x7f3d76f9e159 [ 533.527538][T12574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.547173][T12574] RSP: 002b:00007f3d751f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.555626][T12574] RAX: ffffffffffffffda RBX: 00007f3d77225fa0 RCX: 00007f3d76f9e159 [ 533.563631][T12574] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 533.571626][T12574] RBP: 00007f3d77035024 R08: 0000000000000000 R09: 0000000000000000 [ 533.579633][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.587661][T12574] R13: 00007f3d77226038 R14: 00007f3d77225fa0 R15: 00007ffcf13a1fa8 [ 533.595684][T12574] [ 533.682083][T12588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1932'. [ 533.716780][T12588] openvswitch: netlink: Message has 6 unknown bytes. [ 534.186112][T12599] bond_slave_0: mtu less than device minimum [ 535.185093][T12633] netlink: 'syz.4.1942': attribute type 21 has an invalid length. [ 535.233942][T12633] netlink: 'syz.4.1942': attribute type 6 has an invalid length. [ 535.296340][T12633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1942'. [ 535.375721][T12639] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1943'. [ 535.426638][T12645] netlink: 'syz.1.1943': attribute type 10 has an invalid length. [ 535.574289][T12649] netlink: 'syz.3.1945': attribute type 3 has an invalid length. [ 535.625171][T12652] netlink: 'syz.0.1946': attribute type 10 has an invalid length. [ 535.674851][T12649] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1945'. [ 535.711574][T12652] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1946'. [ 535.798925][T12658] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1948'. [ 536.488721][T12677] tap0: tun_chr_ioctl cmd 35108 [ 536.569254][T12683] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 536.594300][T12683] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 536.638967][T12683] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 537.014189][T12694] netlink: 'syz.4.1958': attribute type 10 has an invalid length. [ 537.687495][T12700] netlink: 'syz.3.1959': attribute type 19 has an invalid length. [ 537.720862][T12700] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1959'. [ 537.983428][T12713] netlink: 'syz.1.1962': attribute type 3 has an invalid length. [ 538.016354][T12713] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1962'. [ 538.602645][T12735] bond0: (slave batadv0): Error: Slave device does not support XDP [ 539.453684][T12736] delete_channel: no stack [ 540.449758][T12751] netlink: 'syz.0.1970': attribute type 12 has an invalid length. [ 540.484534][T12751] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1970'. [ 540.682381][ T4278] Bluetooth: hci4: Dropping invalid advertising data [ 540.690027][ T4278] Bluetooth: hci4: unknown advertising packet type: 0xdc [ 540.690065][ T4278] Bluetooth: hci4: Malformed LE Event: 0x02 [ 541.123722][T12770] netlink: 'syz.2.1975': attribute type 19 has an invalid length. [ 541.183779][T12770] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.1975'. [ 541.254334][T12761] delete_channel: no stack [ 541.590006][T12802] netlink: 'syz.2.1981': attribute type 10 has an invalid length. [ 541.712349][T12802] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 542.557841][T12832] bond0: (slave batadv0): Error: Slave device does not support XDP [ 542.631085][T12835] netlink: 'syz.1.1990': attribute type 10 has an invalid length. [ 542.719867][T12836] netlink: 'syz.3.1991': attribute type 3 has an invalid length. [ 542.762343][T12835] device bridge_slave_1 left promiscuous mode [ 542.778173][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.788412][T12836] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1991'. [ 542.833533][T12835] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 543.237408][ T5977] tipc: Subscription rejected, illegal request [ 544.407604][T12879] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 544.905750][T12886] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2005'. [ 545.210669][T12879] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 545.360443][T12881] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 545.419586][T12883] netlink: 'syz.0.2003': attribute type 29 has an invalid length. [ 547.822279][T12934] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 548.299661][T12934] team0: Device wg1 is of different type [ 551.691752][T12949] bridge0: port 4(batadv0) entered blocking state [ 551.699047][T12949] bridge0: port 4(batadv0) entered disabled state [ 551.708642][T12949] device batadv0 entered promiscuous mode [ 551.715436][T12949] bridge0: port 4(batadv0) entered blocking state [ 551.722068][T12949] bridge0: port 4(batadv0) entered forwarding state [ 552.051707][ T6009] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 552.061583][ T6009] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 552.731857][T13001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2037'. [ 554.364481][T13023] netlink: 'syz.1.2044': attribute type 27 has an invalid length. [ 554.410299][T13023] netlink: 'syz.1.2044': attribute type 4 has an invalid length. [ 554.472369][T13023] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2044'. [ 554.514731][T13019] netlink: 'syz.0.2042': attribute type 7 has an invalid length. [ 554.964554][T13038] netlink: 'syz.1.2046': attribute type 8 has an invalid length. [ 555.029655][T13038] netlink: 'syz.1.2046': attribute type 4 has an invalid length. [ 555.054152][T13039] netlink: 'syz.1.2046': attribute type 21 has an invalid length. [ 555.072772][T13039] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 555.090305][T13038] netlink: 'syz.1.2046': attribute type 7 has an invalid length. [ 555.118725][T13039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2046'. [ 555.138819][T13038] netlink: 'syz.1.2046': attribute type 8 has an invalid length. [ 555.169407][T13038] netlink: 'syz.1.2046': attribute type 7 has an invalid length. [ 555.188740][T13038] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.2046'. [ 555.563739][T13051] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2048'. [ 556.615052][T13062] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2052'. [ 556.716086][T13063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2053'. [ 556.903348][T13078] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2055'. [ 556.915089][T13061] delete_channel: no stack [ 556.921728][T13079] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2055'. [ 557.652420][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2061'. [ 557.666290][T13096] device wlan1 entered promiscuous mode [ 557.811659][T13109] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 557.821501][T13105] __nla_validate_parse: 3 callbacks suppressed [ 557.821538][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2061'. [ 557.889306][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2061'. [ 558.022987][T13122] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2064'. [ 558.094257][T13127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2065'. [ 558.116486][T13127] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2065'. [ 558.476487][T13129] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2066'. [ 558.558379][T13134] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2068'. [ 558.628710][T13134] openvswitch: netlink: Message has 6 unknown bytes. [ 558.991446][T13144] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2071'. [ 559.097200][T13153] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2074'. [ 559.219825][T13150] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2072'. [ 560.433312][T13177] validate_nla: 8 callbacks suppressed [ 560.433331][T13177] netlink: 'syz.2.2080': attribute type 29 has an invalid length. [ 560.477559][T13178] netlink: 'syz.2.2080': attribute type 29 has an invalid length. [ 560.627314][T13174] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 560.637144][T13178] netlink: 'syz.2.2080': attribute type 29 has an invalid length. [ 561.133563][T13185] device syzkaller0 entered promiscuous mode [ 561.793167][T13214] netlink: 'syz.3.2088': attribute type 3 has an invalid length. [ 562.993829][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.000412][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.873441][T13258] netlink: 'syz.3.2099': attribute type 2 has an invalid length. [ 565.887941][T13258] netlink: 'syz.3.2099': attribute type 8 has an invalid length. [ 565.896001][T13258] __nla_validate_parse: 3 callbacks suppressed [ 565.896016][T13258] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2099'. [ 566.313205][T13268] netlink: 'syz.4.2102': attribute type 10 has an invalid length. [ 566.347422][T13268] team0: Device wg1 is of different type [ 566.694253][T13272] netlink: 'syz.0.2103': attribute type 3 has an invalid length. [ 567.857941][T13273] netlink: 'syz.0.2103': attribute type 39 has an invalid length. [ 571.389393][T13299] device lo entered promiscuous mode [ 571.400897][T13299] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 571.658365][T13325] netlink: 'syz.0.2115': attribute type 2 has an invalid length. [ 571.677677][T13325] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 571.693674][T13325] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2115'. [ 571.705407][T13326] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.2116'. [ 571.817679][T13332] syz.3.2118[13332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.817840][T13332] syz.3.2118[13332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.835718][T13330] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2115'. [ 572.416206][T13336] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.2119'. [ 573.151048][T13359] netlink: 'syz.2.2127': attribute type 21 has an invalid length. [ 573.188154][T13359] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2127'. [ 573.204241][T13355] netlink: 'syz.3.2126': attribute type 2 has an invalid length. [ 573.216292][T13355] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2126'. [ 573.289063][T13363] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2114'. [ 573.341897][T13365] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2114'. [ 573.445331][T13367] netlink: 'syz.2.2129': attribute type 4 has an invalid length. [ 573.692312][T13374] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.2131'. [ 573.713812][T13371] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2132'. [ 574.577305][T13381] netlink: 'syz.3.2134': attribute type 10 has an invalid length. [ 576.631889][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.655735][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.664566][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.680919][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.714666][T13412] __nla_validate_parse: 4 callbacks suppressed [ 576.714682][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 576.760428][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.800239][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 576.830453][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.847488][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 576.879745][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 576.933195][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 576.991166][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 577.029147][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 577.068717][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 577.097506][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 577.122658][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 577.178293][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 577.228142][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 577.253905][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 577.305516][T13412] netlink: 'syz.3.2140': attribute type 2 has an invalid length. [ 577.313787][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 577.332515][T13412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2140'. [ 579.783083][T13484] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 581.981684][T13530] validate_nla: 14 callbacks suppressed [ 581.981723][T13530] netlink: 'syz.0.2173': attribute type 10 has an invalid length. [ 582.049561][T13530] __nla_validate_parse: 16 callbacks suppressed [ 582.049602][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2173'. [ 582.396781][T13556] netlink: 'syz.1.2181': attribute type 10 has an invalid length. [ 582.692334][T13564] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2183'. [ 582.951986][T13577] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2186'. [ 582.973930][T13578] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2186'. [ 583.145735][T13577] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2186'. [ 583.200680][T13576] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2186'. [ 583.219568][T13581] netlink: 63219 bytes leftover after parsing attributes in process `syz.3.2188'. [ 583.250645][T13581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'. [ 583.445171][T13588] netlink: 'syz.0.2187': attribute type 10 has an invalid length. [ 583.501279][T13588] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2187'. [ 583.789261][T13590] netlink: 'syz.1.2190': attribute type 12 has an invalid length. [ 583.798377][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2190'. [ 585.239558][T13625] device syzkaller0 entered promiscuous mode [ 585.536109][T13641] netlink: 'syz.4.2203': attribute type 1 has an invalid length. [ 585.585568][T13641] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 588.588939][T13639] netlink: 'syz.2.2202': attribute type 11 has an invalid length. [ 588.598171][T13644] __nla_validate_parse: 1 callbacks suppressed [ 588.598190][T13644] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2204'. [ 588.630193][T13644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 588.646716][T13644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.094646][T13671] sctp: [Deprecated]: syz.0.2211 (pid 13671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.094646][T13671] Use struct sctp_sack_info instead [ 589.159891][T13673] device syzkaller0 entered promiscuous mode [ 590.374345][ T4278] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 590.862489][T13701] netlink: 'syz.1.2218': attribute type 10 has an invalid length. [ 590.921447][T13701] device hsr0 left promiscuous mode [ 591.057697][T13701] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 591.341830][T13709] netlink: 'syz.3.2219': attribute type 21 has an invalid length. [ 591.373889][T13709] netlink: 'syz.3.2219': attribute type 6 has an invalid length. [ 591.390327][T13709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2219'. [ 591.881416][T13727] netlink: 'syz.4.2223': attribute type 2 has an invalid length. [ 591.899899][T13727] netlink: 'syz.4.2223': attribute type 8 has an invalid length. [ 591.962597][T13727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2223'. [ 591.992169][T13726] netlink: 'syz.4.2223': attribute type 2 has an invalid length. [ 592.014882][T13726] netlink: 'syz.4.2223': attribute type 8 has an invalid length. [ 592.023929][T13726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2223'. [ 592.065302][T13724] : port 1(ip6gretap0) entered blocking state [ 592.072343][T13724] : port 1(ip6gretap0) entered disabled state [ 592.083827][T13724] device ip6gretap0 entered promiscuous mode [ 592.116152][T13744] netlink: 'syz.0.2226': attribute type 2 has an invalid length. [ 592.141405][T13744] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2226'. [ 592.226510][T13739] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 592.422892][T13739] device syzkaller0 entered promiscuous mode [ 592.726182][T13764] delete_channel: no stack [ 592.731443][T13764] delete_channel: no stack [ 592.745276][T13764] delete_channel: no stack [ 592.759213][T13764] delete_channel: no stack [ 592.764764][T13764] delete_channel: no stack [ 592.769514][T13764] delete_channel: no stack [ 592.788120][T13764] delete_channel: no stack [ 592.798597][T13764] delete_channel: no stack [ 592.819794][T13764] delete_channel: no stack [ 592.829012][T13764] delete_channel: no stack [ 592.834386][T13764] delete_channel: no stack [ 592.838990][T13764] delete_channel: no stack [ 592.844800][T13764] delete_channel: no stack [ 592.849409][T13764] delete_channel: no stack [ 592.854881][T13764] delete_channel: no stack [ 592.859476][T13764] delete_channel: no stack [ 592.865565][T13764] delete_channel: no stack [ 592.870577][T13764] delete_channel: no stack [ 592.876265][T13764] delete_channel: no stack [ 592.882792][T13764] delete_channel: no stack [ 592.888699][T13764] delete_channel: no stack [ 592.893804][T13764] delete_channel: no stack [ 592.898922][T13764] delete_channel: no stack [ 592.904002][T13764] delete_channel: no stack [ 592.909199][T13764] delete_channel: no stack [ 592.917969][T13764] delete_channel: no stack [ 592.923997][T13764] delete_channel: no stack [ 592.928747][T13764] delete_channel: no stack [ 592.934398][T13764] delete_channel: no stack [ 592.943383][T13764] delete_channel: no stack [ 592.948460][T13764] delete_channel: no stack [ 592.953519][T13764] delete_channel: no stack [ 592.958649][T13764] delete_channel: no stack [ 592.967759][T13764] delete_channel: no stack [ 592.973025][T13764] delete_channel: no stack [ 592.977847][T13764] delete_channel: no stack [ 592.985530][T13764] delete_channel: no stack [ 592.996002][T13764] delete_channel: no stack [ 593.001175][T13764] delete_channel: no stack [ 593.007203][T13764] delete_channel: no stack [ 593.022451][T13764] delete_channel: no stack [ 593.027212][T13764] delete_channel: no stack [ 593.032691][T13764] delete_channel: no stack [ 593.037308][T13764] delete_channel: no stack [ 593.042375][T13764] delete_channel: no stack [ 593.046982][T13764] delete_channel: no stack [ 593.051888][T13764] delete_channel: no stack [ 593.056915][T13764] delete_channel: no stack [ 593.062451][T13764] delete_channel: no stack [ 593.067192][T13764] delete_channel: no stack [ 593.072501][T13764] delete_channel: no stack [ 593.077275][T13764] delete_channel: no stack [ 593.082522][T13764] delete_channel: no stack [ 593.087139][T13764] delete_channel: no stack [ 593.092223][T13764] delete_channel: no stack [ 593.096985][T13764] delete_channel: no stack [ 593.102044][T13764] delete_channel: no stack [ 593.107170][T13764] delete_channel: no stack [ 593.116303][T13764] delete_channel: no stack [ 593.121183][T13764] delete_channel: no stack [ 593.126151][T13764] delete_channel: no stack [ 593.130976][T13764] delete_channel: no stack [ 593.137857][T13764] delete_channel: no stack [ 593.159181][T13764] delete_channel: no stack [ 593.174751][T13764] delete_channel: no stack [ 593.179418][T13764] delete_channel: no stack [ 595.842313][T13745] device syzkaller0 entered promiscuous mode [ 595.938033][T13773] netlink: 'syz.2.2232': attribute type 10 has an invalid length. [ 595.948203][T13773] device hsr0 left promiscuous mode [ 595.967440][T13773] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 596.008639][ T4325] syzkaller0: tun_net_xmit 48 [ 599.669696][T13823] netlink: 'syz.0.2244': attribute type 3 has an invalid length. [ 599.692539][T13823] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2244'. [ 599.703355][T13814] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2241'. [ 599.754568][T13827] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2246'. [ 600.084895][T13831] netlink: 'syz.3.2248': attribute type 10 has an invalid length. [ 601.764523][T13886] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 601.868484][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2260'. [ 601.931584][T13883] netlink: 'syz.0.2260': attribute type 10 has an invalid length. [ 601.948111][T13883] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2260'. [ 601.980930][T13889] netlink: 'syz.1.2257': attribute type 11 has an invalid length. [ 602.723252][T13907] netlink: 'syz.3.2267': attribute type 21 has an invalid length. [ 602.772182][T13907] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2267'. [ 602.790417][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2267'. [ 602.810988][T13910] netlink: 'syz.0.2264': attribute type 10 has an invalid length. [ 603.185816][ T5977] tipc: Subscription rejected, illegal request [ 603.208495][ T5977] tipc: Subscription rejected, illegal request [ 603.235348][T13923] netlink: 'syz.0.2268': attribute type 3 has an invalid length. [ 603.263084][T13929] netlink: 'syz.4.2269': attribute type 2 has an invalid length. [ 603.277143][T13923] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2268'. [ 603.299332][T13929] netlink: 'syz.4.2269': attribute type 8 has an invalid length. [ 603.344936][T13929] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2269'. [ 603.396802][T13926] can: request_module (can-proto-4) failed. [ 603.418079][T13930] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2269'. [ 603.430622][T13923] netlink: 'syz.0.2268': attribute type 3 has an invalid length. [ 603.461273][T13923] netlink: 'syz.0.2268': attribute type 3 has an invalid length. [ 606.053372][T14001] __nla_validate_parse: 30 callbacks suppressed [ 606.053394][T14001] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2286'. [ 606.827748][T14009] netlink: 61963 bytes leftover after parsing attributes in process `syz.4.2289'. [ 607.161639][T14007] ÿÿÿÿÿÿ: renamed from pim6reg1 [ 608.122062][T14034] validate_nla: 29 callbacks suppressed [ 608.122083][T14034] netlink: 'syz.0.2299': attribute type 29 has an invalid length. [ 608.160852][T14034] netlink: 'syz.0.2299': attribute type 29 has an invalid length. [ 608.204359][T14039] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.2300'. [ 608.338670][T14040] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 608.536863][T14031] netlink: 'syz.1.2296': attribute type 3 has an invalid length. [ 608.561544][T14031] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2296'. [ 610.502744][T14087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2310'. [ 614.077697][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 614.618910][T14153] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2327'. [ 614.631034][T14153] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 617.409820][T14172] netlink: 'syz.4.2329': attribute type 9 has an invalid length. [ 617.424861][T14171] netlink: 'syz.1.2331': attribute type 39 has an invalid length. [ 617.456316][T14164] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 617.480217][T14172] netlink: 668 bytes leftover after parsing attributes in process `syz.4.2329'. [ 617.492779][T14164] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2330'. [ 617.534934][T14161] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2330'. [ 617.597388][T14171] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 617.623446][T14171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.666042][T14174] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 617.700379][T14175] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 617.946563][T14189] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2337'. [ 618.023631][T14189] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 618.042715][T14189] CPU: 0 PID: 14189 Comm: syz.3.2337 Not tainted syzkaller #0 [ 618.050266][T14189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.060376][T14189] Call Trace: [ 618.063701][T14189] [ 618.066686][T14189] dump_stack_lvl+0x188/0x24e [ 618.071450][T14189] ? show_regs_print_info+0x12/0x12 [ 618.076747][T14189] ? load_image+0x410/0x410 [ 618.081341][T14189] sysfs_warn_dup+0x8a/0xa0 [ 618.085925][T14189] sysfs_do_create_link_sd+0xc0/0x110 [ 618.091371][T14189] device_add+0x83b/0x1050 [ 618.095882][T14189] wiphy_register+0x1d8b/0x2aa0 [ 618.100834][T14189] ? cfg80211_event_work+0x40/0x40 [ 618.106026][T14189] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 618.112164][T14189] ieee80211_register_hw+0x2d48/0x39f0 [ 618.117711][T14189] ? ieee80211_register_hw+0xf71/0x39f0 [ 618.123358][T14189] ? ieee80211_register_hw+0xe71/0x39f0 [ 618.128981][T14189] ? ieee80211_tasklet_handler+0x20/0x20 [ 618.134690][T14189] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 618.140931][T14189] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 618.146819][T14189] ? memcpy+0x3c/0x60 [ 618.150879][T14189] hwsim_new_radio_nl+0xab7/0xc90 [ 618.155990][T14189] genl_family_rcv_msg_doit+0x22f/0x350 [ 618.161602][T14189] ? end_current_label_crit_section+0x170/0x170 [ 618.167918][T14189] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 618.174148][T14189] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 618.180149][T14189] ? bpf_lsm_capable+0x5/0x10 [ 618.184891][T14189] ? security_capable+0x85/0xb0 [ 618.189830][T14189] genl_rcv_msg+0x601/0x790 [ 618.194404][T14189] ? genl_bind+0x360/0x360 [ 618.198878][T14189] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 618.205562][T14189] netlink_rcv_skb+0x1ef/0x440 [ 618.210408][T14189] ? genl_bind+0x360/0x360 [ 618.214916][T14189] ? netlink_ack+0x1160/0x1160 [ 618.219786][T14189] ? down_read+0x1a8/0x2d0 [ 618.224269][T14189] genl_rcv+0x24/0x40 [ 618.228315][T14189] netlink_unicast+0x7ad/0x920 [ 618.233162][T14189] netlink_sendmsg+0x8ad/0xbd0 [ 618.238001][T14189] ? netlink_getsockopt+0x550/0x550 [ 618.243350][T14189] ? apparmor_socket_sendmsg+0x8a/0x330 [ 618.248962][T14189] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 618.254297][T14189] ? security_socket_sendmsg+0x7c/0xa0 [ 618.259822][T14189] ? netlink_getsockopt+0x550/0x550 [ 618.265085][T14189] ____sys_sendmsg+0x5ed/0x9a0 [ 618.269932][T14189] ? __sys_sendmsg_sock+0x30/0x30 [ 618.275036][T14189] ? __import_iovec+0x306/0x510 [ 618.279975][T14189] ? import_iovec+0x6f/0xa0 [ 618.284563][T14189] ___sys_sendmsg+0x2a2/0x360 [ 618.289319][T14189] ? __sys_sendmsg+0x2a0/0x2a0 [ 618.294182][T14189] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 618.300005][T14189] __se_sys_sendmsg+0x1c3/0x2b0 [ 618.304924][T14189] ? perf_trace_preemptirq_template+0x268/0x320 [ 618.311238][T14189] ? __x64_sys_sendmsg+0x80/0x80 [ 618.316260][T14189] ? lockdep_hardirqs_on+0x94/0x140 [ 618.321606][T14189] do_syscall_64+0x4c/0xa0 [ 618.326088][T14189] ? clear_bhb_loop+0x60/0xb0 [ 618.330826][T14189] ? clear_bhb_loop+0x60/0xb0 [ 618.335564][T14189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.341516][T14189] RIP: 0033:0x7f3d76f9e159 [ 618.345974][T14189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.365639][T14189] RSP: 002b:00007f3d751d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.374118][T14189] RAX: ffffffffffffffda RBX: 00007f3d77226090 RCX: 00007f3d76f9e159 [ 618.382143][T14189] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 618.390169][T14189] RBP: 00007f3d77035024 R08: 0000000000000000 R09: 0000000000000000 [ 618.398199][T14189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.406227][T14189] R13: 00007f3d77226128 R14: 00007f3d77226090 R15: 00007ffcf13a1fa8 [ 618.414285][T14189] [ 618.634714][T14196] netlink: 185828 bytes leftover after parsing attributes in process `syz.0.2339'. [ 619.127658][T14216] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2345'. [ 620.905360][T14240] netlink: 'syz.2.2352': attribute type 4 has an invalid length. [ 620.936320][T14240] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2352'. [ 621.579941][T14263] netlink: 185828 bytes leftover after parsing attributes in process `syz.4.2356'. [ 623.146786][T14287] netlink: 'syz.0.2360': attribute type 25 has an invalid length. [ 623.217954][T14287] netlink: 'syz.0.2360': attribute type 28 has an invalid length. [ 624.129614][T14300] netlink: 'syz.3.2363': attribute type 21 has an invalid length. [ 624.145914][T14302] tap0: tun_chr_ioctl cmd 1074025675 [ 624.152266][T14302] tap0: persist disabled [ 624.433037][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.439510][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.022277][T14314] netlink: 'syz.3.2368': attribute type 39 has an invalid length. [ 625.606962][T14327] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.2370'. [ 625.662517][T14327] netlink: zone id is out of range [ 625.720629][T14327] netlink: zone id is out of range [ 627.153934][T14372] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2380'. [ 627.313357][T14376] netlink: 'syz.4.2382': attribute type 13 has an invalid length. [ 627.337155][T14375] netlink: 'syz.1.2381': attribute type 2 has an invalid length. [ 627.357901][T14375] netlink: 'syz.1.2381': attribute type 1 has an invalid length. [ 627.383767][T14375] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2381'. [ 630.084576][T14444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2397'. [ 630.294558][T14447] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 630.748012][T14455] netlink: 'syz.3.2402': attribute type 1 has an invalid length. [ 630.762751][T14455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.060730][T14464] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4 may have been left with an inconsistent configuration, please check. [ 631.798487][T14478] netlink: 'syz.1.2409': attribute type 29 has an invalid length. [ 631.829878][T14478] netlink: 'syz.1.2409': attribute type 29 has an invalid length. [ 631.847522][T14478] netlink: 'syz.1.2409': attribute type 29 has an invalid length. [ 631.876754][T14478] netlink: 'syz.1.2409': attribute type 29 has an invalid length. [ 633.033207][T14496] netlink: 'syz.0.2412': attribute type 3 has an invalid length. [ 633.065034][T14496] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2412'. [ 633.859131][T14508] netlink: 'syz.4.2415': attribute type 10 has an invalid length. [ 634.315446][T14517] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2418'. [ 636.427502][T14546] netlink: 'syz.1.2424': attribute type 12 has an invalid length. [ 636.517410][T14546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2424'. [ 637.450291][T14563] netlink: 'syz.2.2428': attribute type 41 has an invalid length. [ 638.187336][T14583] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2433'. [ 638.225657][T14599] netlink: 'syz.4.2437': attribute type 27 has an invalid length. [ 638.246197][T14599] netlink: 'syz.4.2437': attribute type 3 has an invalid length. [ 638.260043][T14599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2437'. [ 639.264072][T14619] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2441'. [ 639.501305][T14629] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2443'. [ 640.713776][T14657] netlink: 'syz.2.2450': attribute type 27 has an invalid length. [ 640.744028][T14657] netlink: 'syz.2.2450': attribute type 3 has an invalid length. [ 640.786091][T14657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2450'. [ 641.823923][T14676] tap0: tun_chr_ioctl cmd 35108 [ 642.385269][T14689] netlink: 'syz.2.2455': attribute type 10 has an invalid length. [ 642.439084][T14689] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2455'. [ 642.456039][T14687] netlink: 'syz.0.2456': attribute type 29 has an invalid length. [ 642.500312][T14689] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.560158][T14689] device hsr0 entered promiscuous mode [ 642.566670][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 642.648054][T14689] bridge0: port 3(hsr0) entered blocking state [ 642.690614][T14689] bridge0: port 3(hsr0) entered disabled state [ 642.747179][T14689] bridge0: port 3(hsr0) entered blocking state [ 642.753600][T14689] bridge0: port 3(hsr0) entered listening state [ 642.890024][T14687] netlink: 'syz.0.2456': attribute type 29 has an invalid length. [ 642.970566][T14702] netlink: 'syz.1.2458': attribute type 2 has an invalid length. [ 642.978510][T14702] netlink: 'syz.1.2458': attribute type 8 has an invalid length. [ 643.326359][T14702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2458'. [ 643.436777][T14688] netlink: 'syz.0.2456': attribute type 29 has an invalid length. [ 643.467197][T14694] netlink: 'syz.0.2456': attribute type 29 has an invalid length. [ 643.747219][T14712] netlink: 'syz.2.2460': attribute type 3 has an invalid length. [ 643.783386][T14712] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.2460'. [ 644.523836][T14729] netlink: 'syz.1.2464': attribute type 27 has an invalid length. [ 644.533939][T14729] netlink: 'syz.1.2464': attribute type 3 has an invalid length. [ 644.546423][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2464'. [ 647.671025][T14753] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2471'. [ 647.738857][T14753] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 647.777025][T14753] CPU: 0 PID: 14753 Comm: syz.3.2471 Not tainted syzkaller #0 [ 647.784610][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.794725][T14753] Call Trace: [ 647.798048][T14753] [ 647.801025][T14753] dump_stack_lvl+0x188/0x24e [ 647.805785][T14753] ? show_regs_print_info+0x12/0x12 [ 647.811057][T14753] ? load_image+0x410/0x410 [ 647.815638][T14753] sysfs_warn_dup+0x8a/0xa0 [ 647.820205][T14753] sysfs_do_create_link_sd+0xc0/0x110 [ 647.825641][T14753] device_add+0x83b/0x1050 [ 647.830110][T14753] wiphy_register+0x1d8b/0x2aa0 [ 647.835059][T14753] ? cfg80211_event_work+0x40/0x40 [ 647.840215][T14753] ? minstrel_ht_alloc+0x894/0xa20 [ 647.845379][T14753] ? strcmp+0x24/0xb0 [ 647.849400][T14753] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 647.855512][T14753] ieee80211_register_hw+0x2d48/0x39f0 [ 647.861048][T14753] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 647.867262][T14753] ? ieee80211_register_hw+0xf71/0x39f0 [ 647.872848][T14753] ? ieee80211_register_hw+0xe71/0x39f0 [ 647.878440][T14753] ? ieee80211_tasklet_handler+0x20/0x20 [ 647.884129][T14753] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 647.890065][T14753] ? __debug_object_init+0xed/0x440 [ 647.895343][T14753] ? memset+0x1e/0x40 [ 647.899364][T14753] ? __hrtimer_init+0x189/0x270 [ 647.904257][T14753] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 647.910032][T14753] ? memcpy+0x3c/0x60 [ 647.914076][T14753] hwsim_new_radio_nl+0xab7/0xc90 [ 647.919165][T14753] genl_family_rcv_msg_doit+0x22f/0x350 [ 647.924767][T14753] ? end_current_label_crit_section+0x170/0x170 [ 647.931055][T14753] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 647.936990][T14753] ? bpf_lsm_capable+0x5/0x10 [ 647.941706][T14753] ? security_capable+0x85/0xb0 [ 647.946612][T14753] genl_rcv_msg+0x601/0x790 [ 647.951162][T14753] ? genl_bind+0x360/0x360 [ 647.955623][T14753] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 647.962006][T14753] netlink_rcv_skb+0x1ef/0x440 [ 647.966816][T14753] ? genl_bind+0x360/0x360 [ 647.971270][T14753] ? netlink_ack+0x1160/0x1160 [ 647.976089][T14753] ? down_read+0x1a8/0x2d0 [ 647.980544][T14753] genl_rcv+0x24/0x40 [ 647.984561][T14753] netlink_unicast+0x7ad/0x920 [ 647.989381][T14753] netlink_sendmsg+0x8ad/0xbd0 [ 647.994188][T14753] ? netlink_getsockopt+0x550/0x550 [ 647.999502][T14753] ? apparmor_socket_sendmsg+0x8a/0x330 [ 648.005105][T14753] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 648.010536][T14753] ? security_socket_sendmsg+0x7c/0xa0 [ 648.016032][T14753] ? netlink_getsockopt+0x550/0x550 [ 648.021267][T14753] ____sys_sendmsg+0x5ed/0x9a0 [ 648.026123][T14753] ? __sys_sendmsg_sock+0x30/0x30 [ 648.031211][T14753] ? __import_iovec+0x306/0x510 [ 648.036125][T14753] ? import_iovec+0x6f/0xa0 [ 648.040685][T14753] ___sys_sendmsg+0x2a2/0x360 [ 648.045416][T14753] ? __sys_sendmsg+0x2a0/0x2a0 [ 648.050235][T14753] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 648.056308][T14753] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 648.062518][T14753] ? lockdep_hardirqs_on+0x94/0x140 [ 648.067775][T14753] ? __se_sys_sendmsg+0xee/0x2b0 [ 648.072758][T14753] ? kasan_check_range+0x80/0x290 [ 648.077835][T14753] __se_sys_sendmsg+0x1c3/0x2b0 [ 648.082757][T14753] ? __x64_sys_sendmsg+0x80/0x80 [ 648.087776][T14753] ? lockdep_hardirqs_on+0x94/0x140 [ 648.093893][T14753] do_syscall_64+0x4c/0xa0 [ 648.098369][T14753] ? clear_bhb_loop+0x60/0xb0 [ 648.103107][T14753] ? clear_bhb_loop+0x60/0xb0 [ 648.107846][T14753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 648.113780][T14753] RIP: 0033:0x7f3d76f9e159 [ 648.118256][T14753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.137901][T14753] RSP: 002b:00007f3d751d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 648.146356][T14753] RAX: ffffffffffffffda RBX: 00007f3d77226090 RCX: 00007f3d76f9e159 [ 648.154373][T14753] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 648.162462][T14753] RBP: 00007f3d77035024 R08: 0000000000000000 R09: 0000000000000000 [ 648.170482][T14753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.178491][T14753] R13: 00007f3d77226128 R14: 00007f3d77226090 R15: 00007ffcf13a1fa8 [ 648.186561][T14753] [ 648.764358][T14773] netlink: 'syz.4.2476': attribute type 10 has an invalid length. [ 648.791151][T14773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2476'. [ 648.805554][T14773] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 649.221300][T14789] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2480'. [ 649.321922][T14791] netlink: 'syz.2.2482': attribute type 4 has an invalid length. [ 649.345910][T14791] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2482'. [ 649.457061][T14796] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2483'. [ 649.811733][T14808] netlink: 'syz.3.2485': attribute type 11 has an invalid length. [ 649.870873][T14803] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 649.919670][T14803] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2484'. [ 649.957671][T14803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.017493][T14803] device hsr0 entered promiscuous mode [ 650.065021][T14803] bridge0: port 2(hsr0) entered blocking state [ 650.099490][T14803] bridge0: port 2(hsr0) entered disabled state [ 650.757131][T14825] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2490'. [ 650.838660][T14825] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2490'. [ 650.857023][T14830] netlink: 'syz.2.2487': attribute type 2 has an invalid length. [ 650.886600][T14825] netlink: zone id is out of range [ 650.897501][T14830] netlink: 'syz.2.2487': attribute type 8 has an invalid length. [ 650.932785][T14825] netlink: zone id is out of range [ 650.953901][T14825] netlink: zone id is out of range [ 650.961094][T14830] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2487'. [ 650.978454][T14825] netlink: zone id is out of range [ 651.025023][T14821] netlink: 'syz.2.2487': attribute type 2 has an invalid length. [ 651.086694][T14821] netlink: 'syz.2.2487': attribute type 8 has an invalid length. [ 651.108964][T14821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2487'. [ 651.124523][T14841] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2493'. [ 651.164632][T14839] netlink: 'syz.0.2492': attribute type 10 has an invalid length. [ 651.192543][T14839] device ipvlan1 entered promiscuous mode [ 651.273364][T14839] bridge0: port 5(ipvlan1) entered blocking state [ 651.341438][T14839] bridge0: port 5(ipvlan1) entered disabled state [ 651.426615][T14839] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 651.789719][T14859] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.797136][T14859] IPv6: NLM_F_CREATE should be set when creating new route [ 651.804567][T14859] IPv6: NLM_F_CREATE should be set when creating new route [ 651.811912][T14859] IPv6: NLM_F_CREATE should be set when creating new route [ 652.048034][T14869] openvswitch: netlink: Key type 386 is out of range max 32 [ 653.468056][T14897] netlink: 'syz.0.2504': attribute type 12 has an invalid length. [ 653.760330][T13694] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 653.822645][T13694] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 653.876839][T14908] netlink: 'syz.1.2502': attribute type 1 has an invalid length. [ 654.038382][T14908] __nla_validate_parse: 5 callbacks suppressed [ 654.038401][T14908] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2502'. [ 656.038808][T14933] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2510'. [ 656.050788][T14936] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2512'. [ 656.068882][T14936] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2512'. [ 656.544587][T14946] device lo entered promiscuous mode [ 656.672759][T14946] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 657.000389][T14963] device lo left promiscuous mode [ 657.051446][T14965] device lo entered promiscuous mode [ 657.059921][T14965] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 657.642358][T14982] device pim6reg1 entered promiscuous mode [ 657.829276][T14993] netlink: 'syz.2.2518': attribute type 3 has an invalid length. [ 657.918851][T14993] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2518'. [ 658.784609][T15006] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.2523'. [ 658.858169][T15006] netlink: zone id is out of range [ 658.872177][T15006] netlink: zone id is out of range [ 658.908290][T15006] netlink: zone id is out of range [ 658.923085][T15006] netlink: zone id is out of range [ 658.948743][T15006] netlink: zone id is out of range [ 658.967211][T15006] netlink: zone id is out of range [ 658.996247][T15006] netlink: zone id is out of range [ 659.023477][T15006] netlink: zone id is out of range [ 659.037513][T15006] netlink: zone id is out of range [ 659.058378][T15006] netlink: zone id is out of range [ 659.136808][T15013] can: request_module (can-proto-0) failed. [ 659.273625][T15021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 659.299982][T15021] tc_dump_action: action bad kind [ 659.652954][T15032] netlink: 'syz.2.2530': attribute type 5 has an invalid length. [ 659.767335][T15032] netlink: 'syz.2.2530': attribute type 17 has an invalid length. [ 659.848140][T15032] netlink: 'syz.2.2530': attribute type 16 has an invalid length. [ 659.886231][T15032] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2530'. [ 660.435530][T15047] netlink: 'syz.0.2532': attribute type 2 has an invalid length. [ 660.610823][T15047] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2532'. [ 661.396438][T15060] device syzkaller0 entered promiscuous mode [ 666.335465][T15128] netlink: 'syz.1.2549': attribute type 27 has an invalid length. [ 666.353179][T15128] netlink: 'syz.1.2549': attribute type 4 has an invalid length. [ 666.373660][T15128] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2549'. [ 666.421151][T15128] net_ratelimit: 3660 callbacks suppressed [ 666.421167][T15128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 666.498316][T13694] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 666.526117][T15140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2552'. [ 666.585882][T15140] netlink: 'syz.0.2552': attribute type 3 has an invalid length. [ 666.631668][T15140] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2552'. [ 667.020322][T15150] netlink: 'syz.3.2557': attribute type 21 has an invalid length. [ 667.028987][T15150] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2557'. [ 667.514462][T15162] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2556'. [ 667.688078][T15162] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 668.024294][T15174] netlink: 'syz.1.2559': attribute type 3 has an invalid length. [ 668.090526][T15174] netlink: 'syz.1.2559': attribute type 153 has an invalid length. [ 668.098723][T15174] netlink: 85736 bytes leftover after parsing attributes in process `syz.1.2559'. [ 669.059832][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 669.121061][T15185] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 669.127149][T15185] syzkaller1: linktype set to 786 [ 669.290713][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 669.327753][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 669.399708][T15185] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 669.478364][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 669.526104][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 669.588741][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 669.826164][T15181] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 670.964258][T15217] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2570'. [ 671.473238][T15222] netlink: 'syz.2.2572': attribute type 10 has an invalid length. [ 671.511789][T15222] team0: Device hsr_slave_0 failed to register rx_handler [ 671.580304][T15224] netlink: 'syz.2.2572': attribute type 10 has an invalid length. [ 671.609872][T15224] team0: Device hsr_slave_0 failed to register rx_handler [ 672.909444][T15247] netlink: 'syz.0.2577': attribute type 25 has an invalid length. [ 672.959840][T15247] netlink: 'syz.0.2577': attribute type 5 has an invalid length. [ 673.063926][ C1] bridge0: port 3(hsr0) entered learning state [ 673.094919][T15247] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2577'. [ 673.260419][T15254] netlink: 'syz.2.2578': attribute type 21 has an invalid length. [ 673.332686][T15254] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2578'. [ 675.679182][T15281] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2586'. [ 675.829551][T15285] netlink: 'syz.0.2585': attribute type 3 has an invalid length. [ 675.976436][T15285] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2585'. [ 676.318635][T15293] netlink: 'syz.2.2588': attribute type 2 has an invalid length. [ 676.410335][T15293] netlink: 'syz.2.2588': attribute type 8 has an invalid length. [ 676.459724][T15293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2588'. [ 676.765620][T15300] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2589'. [ 678.400926][T13694] Bluetooth: Frame is too long (len 149, expected len 4) [ 680.760726][T15358] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 680.979701][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 681.001727][T15365] netlink: 'syz.3.2604': attribute type 10 has an invalid length. [ 681.048986][T15365] team0: Device vxcan1 is of different type [ 681.459864][T15374] netlink: 'syz.4.2605': attribute type 2 has an invalid length. [ 681.639501][T15375] netlink: 'syz.4.2605': attribute type 2 has an invalid length. [ 682.790718][T15389] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 682.811458][T15389] bond0: (slave batadv0): Releasing backup interface [ 682.939536][T15389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.036489][T15389] team0: Port device batadv0 added [ 683.059540][T15391] netlink: 'syz.1.2608': attribute type 10 has an invalid length. [ 683.226636][T15394] netlink: 4735 bytes leftover after parsing attributes in process `syz.0.2609'. [ 685.648095][T15427] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2621'. [ 685.865083][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.871644][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.934435][T15435] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2620'. [ 686.107628][T15431] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2619'. [ 687.393506][T15449] netlink: 'syz.4.2625': attribute type 10 has an invalid length. [ 691.227086][T15503] tap0: tun_chr_ioctl cmd 1074812118 [ 693.274346][T15516] tipc: Started in network mode [ 693.280291][T15516] tipc: Node identity 9215a268, cluster identity 4711 [ 693.305221][T15516] tipc: Node number set to 2450891368 [ 693.567400][T15523] netlink: 'syz.0.2647': attribute type 10 has an invalid length. [ 693.616276][T15523] device wlan1 left promiscuous mode [ 693.680973][T15527] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2646'. [ 694.377488][T15544] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 694.495952][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2652'. [ 694.867244][T15566] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2656'. [ 696.118233][T15585] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 696.134754][T15585] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2660'. [ 697.019267][T15610] netlink: 'syz.4.2666': attribute type 2 has an invalid length. [ 697.335983][T15610] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2666'. [ 697.417968][T15625] netlink: 'syz.3.2668': attribute type 21 has an invalid length. [ 697.507102][T15625] netlink: 'syz.3.2668': attribute type 10 has an invalid length. [ 697.589772][T15625] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.637978][T15625] device bridge_slave_1 left promiscuous mode [ 697.646126][T15625] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.884461][T15630] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.160241][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2669'. [ 698.364038][T15646] netlink: 'syz.3.2672': attribute type 27 has an invalid length. [ 698.384305][T15646] netlink: 'syz.3.2672': attribute type 25 has an invalid length. [ 698.793233][T15661] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2675'. [ 698.840455][T15661] openvswitch: netlink: Flow actions attr not present in new flow. [ 699.039970][T15668] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2680'. [ 699.686093][T15682] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 699.800703][T15682] bridge0: port 2(netdevsim0) entered blocking state [ 699.838084][T15682] bridge0: port 2(netdevsim0) entered disabled state [ 699.898903][T15682] device netdevsim0 entered promiscuous mode [ 700.032074][T15691] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2686'. [ 700.078520][T15690] netlink: 'syz.0.2684': attribute type 2 has an invalid length. [ 700.113139][T15694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2687'. [ 700.136315][T15690] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2684'. [ 700.701216][T15696] delete_channel: no stack [ 701.037847][T15707] netlink: 'syz.3.2692': attribute type 13 has an invalid length. [ 701.063551][T15707] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.2692'. [ 701.296153][T13694] Bluetooth: hci4: ISO packet for unknown connection handle 2355 [ 701.308393][T15717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2696'. [ 701.317959][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2696'. [ 701.327237][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2696'. [ 701.338448][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2696'. [ 701.405070][T15724] netlink: 'syz.1.2697': attribute type 46 has an invalid length. [ 701.427031][T15725] netlink: 'syz.1.2697': attribute type 46 has an invalid length. [ 701.625869][T15734] netlink: 'syz.4.2698': attribute type 10 has an invalid length. [ 701.765775][T15734] team0: Port device hsr_slave_0 added [ 701.787092][ T6004] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 701.830770][T15733] netlink: 'syz.1.2700': attribute type 10 has an invalid length. [ 702.774852][T15772] netlink: 'syz.3.2709': attribute type 33 has an invalid length. [ 703.140199][ C1] bridge0: port 3(hsr0) entered forwarding state [ 703.146674][ C1] bridge0: topology change detected, propagating [ 703.169210][T15790] syz.3.2712[15790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.169388][T15790] syz.3.2712[15790] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 703.314262][T15794] netlink: 'syz.0.2714': attribute type 21 has an invalid length. [ 705.383660][T15828] __nla_validate_parse: 5 callbacks suppressed [ 705.383678][T15828] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2724'. [ 705.514429][T15838] netlink: 'syz.3.2727': attribute type 10 has an invalid length. [ 706.342724][T15838] team0 (unregistering): Port device team_slave_0 removed [ 706.378401][T15838] team0 (unregistering): Port device team_slave_1 removed [ 706.414251][T15842] netlink: 'syz.0.2728': attribute type 22 has an invalid length. [ 706.424848][T15847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2728'. [ 706.438965][T15846] netlink: 'syz.1.2729': attribute type 2 has an invalid length. [ 706.457720][T15846] netlink: 'syz.1.2729': attribute type 4 has an invalid length. [ 706.466108][T15846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2729'. [ 706.487035][T15850] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 706.525760][T15850] device netdevsim0 left promiscuous mode [ 706.595175][T15850] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 706.705821][T15859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2732'. [ 706.924569][T15871] netlink: 'syz.1.2734': attribute type 21 has an invalid length. [ 706.974469][T15871] netlink: 'syz.1.2734': attribute type 22 has an invalid length. [ 707.050447][T15871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 707.307761][T15888] netlink: 'syz.4.2737': attribute type 21 has an invalid length. [ 707.475157][T15892] netlink: 'syz.2.2740': attribute type 29 has an invalid length. [ 707.490639][T15892] netlink: 'syz.2.2740': attribute type 29 has an invalid length. [ 707.852961][T15900] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2745'. [ 708.140305][T15924] sctp: [Deprecated]: syz.3.2749 (pid 15924) Use of int in maxseg socket option. [ 708.140305][T15924] Use struct sctp_assoc_value instead [ 714.600185][T15986] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2762'. [ 715.452185][T16007] validate_nla: 3 callbacks suppressed [ 715.452202][T16007] netlink: 'syz.0.2769': attribute type 21 has an invalid length. [ 715.478592][T16013] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2768'. [ 715.491189][T16013] openvswitch: netlink: Flow actions attr not present in new flow. [ 715.756199][T16016] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2771'. [ 715.808704][T16016] netlink: zone id is out of range [ 715.867754][T16016] netlink: zone id is out of range [ 715.874205][T16016] netlink: zone id is out of range [ 715.894389][T16016] netlink: zone id is out of range [ 715.923496][T16016] netlink: zone id is out of range [ 715.928962][T16016] netlink: zone id is out of range [ 715.944948][T16027] device sit0 left promiscuous mode [ 715.990045][T16016] netlink: zone id is out of range [ 715.998868][T16016] netlink: zone id is out of range [ 716.045002][T16016] netlink: zone id is out of range [ 716.078867][T16030] device sit0 entered promiscuous mode [ 716.329172][T16029] netlink: 'syz.1.2774': attribute type 16 has an invalid length. [ 716.370244][T16029] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2774'. [ 716.387986][T16036] netlink: 'syz.1.2774': attribute type 2 has an invalid length. [ 716.438698][T16036] netlink: 'syz.1.2774': attribute type 1 has an invalid length. [ 716.456795][T16036] netlink: 'syz.1.2774': attribute type 4 has an invalid length. [ 716.499195][T16036] netlink: 208312 bytes leftover after parsing attributes in process `syz.1.2774'. [ 717.403978][T13694] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 717.404017][T16061] netlink: 'syz.2.2780': attribute type 21 has an invalid length. [ 718.776981][T16098] pimreg: tun_chr_ioctl cmd 1074025677 [ 718.793874][T16098] pimreg: linktype set to 270 [ 718.820302][T16100] pimreg: tun_chr_ioctl cmd 1074025677 [ 718.874413][T16100] pimreg: linktype set to 270 [ 718.879775][T16101] pimreg: tun_chr_ioctl cmd 1074025673 [ 719.317222][T16107] netlink: 'syz.0.2791': attribute type 19 has an invalid length. [ 719.352146][T16107] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2791'. [ 719.469094][T16111] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 719.501215][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2793'. [ 720.043511][ T6008] tipc: Subscription rejected, illegal request [ 720.561060][ T4276] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 720.569694][ T4276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 720.590351][ T4276] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 720.600158][ T4276] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 720.633686][ T4276] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 720.649233][ T4276] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 720.899216][T16141] netlink: 'syz.0.2805': attribute type 10 has an invalid length. [ 720.989651][T16139] netlink: 'syz.3.2804': attribute type 10 has an invalid length. [ 721.002623][T16139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2804'. [ 721.099605][T16139] net_ratelimit: 5 callbacks suppressed [ 721.099644][T16139] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 721.133148][T16146] tap0: tun_chr_ioctl cmd 1074025677 [ 721.138891][T16146] tap0: linktype set to 1 [ 721.337417][T16153] netlink: 15039 bytes leftover after parsing attributes in process `syz.4.2810'. [ 721.355442][T16154] netlink: 15039 bytes leftover after parsing attributes in process `syz.4.2810'. [ 721.509018][T16161] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2809'. [ 721.533773][T15380] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.597336][T16161] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 721.715770][T15380] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.759233][T16134] chnl_net:caif_netlink_parms(): no params data found [ 721.786543][T16158] netlink: 'syz.2.2807': attribute type 5 has an invalid length. [ 721.829225][T16158] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2807'. [ 721.988180][T16169] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2809'. [ 722.088848][T15380] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.142144][T16169] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 722.150858][T16169] CPU: 0 PID: 16169 Comm: syz.3.2809 Not tainted syzkaller #0 [ 722.158397][T16169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.168502][T16169] Call Trace: [ 722.171829][T16169] [ 722.174798][T16169] dump_stack_lvl+0x188/0x24e [ 722.179536][T16169] ? show_regs_print_info+0x12/0x12 [ 722.184793][T16169] ? load_image+0x410/0x410 [ 722.189371][T16169] sysfs_warn_dup+0x8a/0xa0 [ 722.193946][T16169] sysfs_do_create_link_sd+0xc0/0x110 [ 722.199385][T16169] device_add+0x83b/0x1050 [ 722.203866][T16169] wiphy_register+0x1d8b/0x2aa0 [ 722.208798][T16169] ? cfg80211_event_work+0x40/0x40 [ 722.213970][T16169] ? minstrel_ht_alloc+0x894/0xa20 [ 722.219152][T16169] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 722.225281][T16169] ieee80211_register_hw+0x2d48/0x39f0 [ 722.230823][T16169] ? ieee80211_register_hw+0xf71/0x39f0 [ 722.236611][T16169] ? ieee80211_register_hw+0xe71/0x39f0 [ 722.242273][T16169] ? ieee80211_tasklet_handler+0x20/0x20 [ 722.247968][T16169] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 722.253936][T16169] ? __debug_object_init+0xed/0x440 [ 722.259190][T16169] ? memset+0x1e/0x40 [ 722.263327][T16169] ? __hrtimer_init+0x189/0x270 [ 722.268239][T16169] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 722.274032][T16169] ? memcpy+0x3c/0x60 [ 722.278079][T16169] hwsim_new_radio_nl+0xab7/0xc90 [ 722.283176][T16169] genl_family_rcv_msg_doit+0x22f/0x350 [ 722.288870][T16169] ? end_current_label_crit_section+0x170/0x170 [ 722.295439][T16169] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 722.301399][T16169] ? bpf_lsm_capable+0x5/0x10 [ 722.306157][T16169] ? security_capable+0x85/0xb0 [ 722.311090][T16169] genl_rcv_msg+0x601/0x790 [ 722.315654][T16169] ? genl_bind+0x360/0x360 [ 722.320129][T16169] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 722.326544][T16169] netlink_rcv_skb+0x1ef/0x440 [ 722.331368][T16169] ? genl_bind+0x360/0x360 [ 722.335845][T16169] ? netlink_ack+0x1160/0x1160 [ 722.340689][T16169] ? down_read+0x1a8/0x2d0 [ 722.345170][T16169] genl_rcv+0x24/0x40 [ 722.349214][T16169] netlink_unicast+0x7ad/0x920 [ 722.354049][T16169] netlink_sendmsg+0x8ad/0xbd0 [ 722.358877][T16169] ? netlink_getsockopt+0x550/0x550 [ 722.364135][T16169] ? apparmor_socket_sendmsg+0x8a/0x330 [ 722.369754][T16169] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 722.375101][T16169] ? security_socket_sendmsg+0x7c/0xa0 [ 722.380615][T16169] ? netlink_getsockopt+0x550/0x550 [ 722.385868][T16169] ____sys_sendmsg+0x5ed/0x9a0 [ 722.390708][T16169] ? __sys_sendmsg_sock+0x30/0x30 [ 722.395788][T16169] ? __import_iovec+0x306/0x510 [ 722.400735][T16169] ? import_iovec+0x6f/0xa0 [ 722.405328][T16169] ___sys_sendmsg+0x2a2/0x360 [ 722.410073][T16169] ? handle_mm_fault+0x33f5/0x3d40 [ 722.415252][T16169] ? __sys_sendmsg+0x2a0/0x2a0 [ 722.420148][T16169] __se_sys_sendmsg+0x1c3/0x2b0 [ 722.425077][T16169] ? lockdep_hardirqs_on+0x94/0x140 [ 722.430339][T16169] ? __x64_sys_sendmsg+0x80/0x80 [ 722.435371][T16169] ? lockdep_hardirqs_on+0x94/0x140 [ 722.440623][T16169] do_syscall_64+0x4c/0xa0 [ 722.445115][T16169] ? clear_bhb_loop+0x60/0xb0 [ 722.449866][T16169] ? clear_bhb_loop+0x60/0xb0 [ 722.454629][T16169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.460582][T16169] RIP: 0033:0x7f3d76f9e159 [ 722.465131][T16169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.484795][T16169] RSP: 002b:00007f3d75151028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 722.493278][T16169] RAX: ffffffffffffffda RBX: 00007f3d77226450 RCX: 00007f3d76f9e159 [ 722.501314][T16169] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 722.509337][T16169] RBP: 00007f3d77035024 R08: 0000000000000000 R09: 0000000000000000 [ 722.517364][T16169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 722.525385][T16169] R13: 00007f3d772264e8 R14: 00007f3d77226450 R15: 00007ffcf13a1fa8 [ 722.533437][T16169] [ 722.624521][T15380] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.740247][T13694] Bluetooth: hci5: command 0x0409 tx timeout [ 722.952225][T16134] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.959417][T16134] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.012000][T16134] device bridge_slave_0 entered promiscuous mode [ 723.085777][T16134] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.109104][T16195] netlink: 'syz.3.2816': attribute type 3 has an invalid length. [ 723.130385][T16134] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.143162][T16134] device bridge_slave_1 entered promiscuous mode [ 723.180938][T16195] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2816'. [ 723.405192][T16134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.454363][T16134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.616716][T16134] team0: Port device team_slave_0 added [ 723.949094][T16134] team0: Port device team_slave_1 added [ 724.036159][T16134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.072161][T16134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.150177][T16134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.308683][T15380] device ip6gretap0 left promiscuous mode [ 724.323309][T15380] : port 1(ip6gretap0) entered disabled state [ 724.377501][T16134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.397783][T16134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.495224][T16134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.542326][T16221] netlink: 'syz.3.2823': attribute type 1 has an invalid length. [ 724.560107][T16221] netlink: 'syz.3.2823': attribute type 4 has an invalid length. [ 724.580407][T16221] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2823'. [ 724.653936][T16229] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2824'. [ 724.830483][T13694] Bluetooth: hci5: command 0x041b tx timeout [ 725.723416][T16226] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2824'. [ 726.029445][T16257] delete_channel: no stack [ 726.058991][T16257] delete_channel: no stack [ 726.068175][T16134] device hsr_slave_0 entered promiscuous mode [ 726.125140][T16134] device hsr_slave_1 entered promiscuous mode [ 726.132717][T16134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 726.160844][T16134] Cannot create hsr debugfs directory [ 726.301635][T16264] __nla_validate_parse: 1 callbacks suppressed [ 726.301654][T16264] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2831'. [ 726.685675][T16271] can: request_module (can-proto-0) failed. [ 726.900951][T13694] Bluetooth: hci5: command 0x040f tx timeout [ 726.944814][T16283] netlink: 'syz.4.2835': attribute type 21 has an invalid length. [ 726.966879][T16283] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2835'. [ 728.000244][T16304] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2841'. [ 728.319121][T16314] sock: sock_set_timeout: `syz.3.2842' (pid 16314) tries to set negative timeout [ 728.933847][T16325] netlink: 'syz.0.2845': attribute type 10 has an invalid length. [ 728.951917][T16325] device nlmon0 entered promiscuous mode [ 728.968066][T16325] team0: Device nlmon0 is of different type [ 728.998275][T13694] Bluetooth: hci5: command 0x0419 tx timeout [ 730.245031][T16346] netlink: 'syz.3.2850': attribute type 21 has an invalid length. [ 730.387580][T15380] device hsr_slave_0 left promiscuous mode [ 730.401620][T15380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.412586][T15380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.442145][T15380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.468954][T15380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.499260][T15380] bridge0: port 2(hsr0) entered disabled state [ 730.507954][T15380] device bridge_slave_0 left promiscuous mode [ 730.550391][T15380] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.583811][T15380] device veth1_vlan left promiscuous mode [ 730.726126][T16368] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 731.452142][T15380] team0 (unregistering): Port device vlan0 removed [ 731.703951][T15380] team0 (unregistering): Port device team_slave_1 removed [ 731.750877][T15380] team0 (unregistering): Port device team_slave_0 removed [ 731.798180][T15380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.844775][T15380] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 732.063005][T15380] team0 (unregistering): Port device batadv0 removed [ 732.140840][T15380] bond0 (unregistering): Released all slaves [ 732.236232][T16134] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.254641][T16373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2858'. [ 732.275246][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.295225][T16374] device bridge0 left promiscuous mode [ 732.329610][T16375] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.336844][T16375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.350272][T16375] device bridge0 entered promiscuous mode [ 732.395520][T16134] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.537544][T16134] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 732.721302][T16134] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.624329][T16409] netlink: 'syz.0.2863': attribute type 1 has an invalid length. [ 733.672601][T16409] netlink: 15970 bytes leftover after parsing attributes in process `syz.0.2863'. [ 734.010596][T16134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.223815][T16399] device syzkaller0 entered promiscuous mode [ 736.724277][T16424] netlink: 'syz.3.2865': attribute type 2 has an invalid length. [ 736.737007][T16424] netlink: 'syz.3.2865': attribute type 8 has an invalid length. [ 736.745933][T16424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2865'. [ 736.788936][T16439] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2870'. [ 736.868470][T16134] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.080094][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 737.101329][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 737.147056][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 737.159406][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 737.185871][ T6008] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.193150][ T6008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.210293][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 737.219717][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 737.244344][ T6008] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.251592][ T6008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.282702][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 737.292726][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 737.366830][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 737.815624][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 737.880485][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 738.591745][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 738.641390][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 738.791486][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 738.878542][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 738.965160][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 739.186803][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 739.216700][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 739.247339][T16134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 739.703638][T16469] netlink: 'syz.4.2874': attribute type 10 has an invalid length. [ 740.160627][T16469] team0: Device gre0 is of different type [ 741.083833][T16498] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2877'. [ 741.718167][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 741.748451][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 741.807452][T16134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.990682][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 742.027657][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 742.091586][T16522] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 742.099504][T16522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2880'. [ 742.244116][T16134] device veth0_vlan entered promiscuous mode [ 742.310460][T16522] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 742.318379][T16522] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2880'. [ 742.367650][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 742.388544][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 742.422157][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 742.446815][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 742.498179][T16134] device veth1_vlan entered promiscuous mode [ 742.602787][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 742.634298][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 742.647818][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 742.669586][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 742.693271][T16134] device veth0_macvtap entered promiscuous mode [ 745.641504][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 745.663942][T16134] device veth1_macvtap entered promiscuous mode [ 745.717034][T16134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 745.755962][T16134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.789604][T16134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.809207][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 745.823434][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 745.845956][T16549] netlink: 'syz.0.2889': attribute type 10 has an invalid length. [ 745.886775][T16549] bridge0: port 4(batadv0) entered disabled state [ 745.895194][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.903139][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.931432][T16549] team0: Device bridge0 is already an upper device of the team interface [ 745.944940][T16134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.957304][T16134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.967661][T16134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 745.993232][T16134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.006121][T16134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.019674][T16134] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.031576][T16134] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.043904][T16134] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.054213][T16134] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.137461][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 746.165853][ T8595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 746.176932][T16557] netlink: 'syz.4.2890': attribute type 21 has an invalid length. [ 746.188478][T16557] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2890'. [ 746.199696][T16557] netlink: 'syz.4.2890': attribute type 4 has an invalid length. [ 746.215854][T16557] netlink: 'syz.4.2890': attribute type 3 has an invalid length. [ 746.226863][T16557] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2890'. [ 746.461615][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.490113][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.526997][ T6008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 746.589564][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.604588][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.614838][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 746.730650][T16575] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2894'. [ 746.823778][T16575] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 747.081688][T16583] netlink: 'syz.1.2798': attribute type 1 has an invalid length. [ 747.110845][T16583] netlink: 'syz.1.2798': attribute type 4 has an invalid length. [ 747.165795][T16583] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2798'. [ 747.297110][T16592] netlink: 'syz.0.2899': attribute type 11 has an invalid length. [ 747.319455][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.319563][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.341108][T16592] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2899'. [ 747.406176][T16589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 747.615203][T13694] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 747.840372][T16608] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 748.037574][T16610] netlink: 'syz.4.2905': attribute type 3 has an invalid length. [ 748.049262][T16610] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.2905'. [ 748.192610][T16617] netlink: 'syz.1.2907': attribute type 9 has an invalid length. [ 748.218966][T16617] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2907'. [ 748.239846][T16623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2909'. [ 748.380579][T16623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.452609][T16623] bond0 (unregistering): Released all slaves [ 749.017930][T16649] netlink: 'syz.3.2915': attribute type 3 has an invalid length. [ 749.024828][T16657] netlink: 'syz.3.2915': attribute type 3 has an invalid length. [ 749.092770][T16649] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2915'. [ 749.222894][T16657] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2915'. [ 749.956610][T16669] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 749.991055][T16669] syzkaller1: linktype set to 0 [ 750.269405][ T4275] device syz_tun left promiscuous mode [ 750.280160][ T4275] ¥: port 2(syz_tun) entered disabled state [ 750.294450][ T4276] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 750.305549][ T4276] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.315600][ T4276] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.325858][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.334329][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 750.342126][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.047663][ T8595] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.117204][T16681] chnl_net:caif_netlink_parms(): no params data found [ 752.421094][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 752.503099][ T8595] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.618953][ T8595] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.683324][T16714] __nla_validate_parse: 1 callbacks suppressed [ 752.683343][T16714] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2930'. [ 752.893646][ T8595] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.008822][T16681] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.043965][T16681] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.065944][T16681] device bridge_slave_0 entered promiscuous mode [ 753.082872][T16681] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.099369][T16681] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.117869][T16681] device bridge_slave_1 entered promiscuous mode [ 753.241488][T16681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.315958][T16681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.528103][T16681] team0: Port device team_slave_0 added [ 753.615082][T16681] team0: Port device team_slave_1 added [ 753.695374][T16681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.716812][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.756414][T16743] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2936'. [ 753.787499][T16681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.086604][T16681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.098732][T16681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.158161][T16681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.184293][T16744] validate_nla: 2 callbacks suppressed [ 754.184312][T16744] netlink: 'syz.1.2936': attribute type 10 has an invalid length. [ 754.240271][T16744] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 754.367267][ T8595] tipc: Left network mode [ 754.500205][T13694] Bluetooth: hci0: command 0x041b tx timeout [ 754.832889][T16681] device hsr_slave_0 entered promiscuous mode [ 754.870213][T16681] device hsr_slave_1 entered promiscuous mode [ 755.955173][T16782] netlink: 'syz.1.2942': attribute type 10 has an invalid length. [ 756.492725][T16797] tun0: tun_chr_ioctl cmd 1074812118 [ 756.580222][T13694] Bluetooth: hci0: command 0x040f tx timeout [ 756.876103][ T8595] device erspan0 left promiscuous mode [ 756.882204][ T8595] ¥: port 1(erspan0) entered disabled state [ 757.103623][T16818] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2947'. [ 757.243250][T16818] team0: Port device team_slave_0 removed [ 757.283317][T16818] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 758.371228][T16847] netlink: 'syz.3.2949': attribute type 10 has an invalid length. [ 758.660216][T13694] Bluetooth: hci0: command 0x0419 tx timeout [ 758.863261][T16681] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 758.936769][T16681] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 759.019652][T16681] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 759.107155][T16681] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 759.156396][T16865] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2952'. [ 759.734803][T16875] netlink: 'syz.2.2954': attribute type 10 has an invalid length. [ 759.808103][T16875] team0: Device wg1 is of different type [ 760.041112][ T8595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.048843][ T8595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.114085][ T8595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.142242][ T8595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.190499][ T8595] device batadv0 left promiscuous mode [ 760.225085][ T8595] bridge0: port 4(batadv0) entered disabled state [ 760.246078][ T8595] bridge0: port 3(team0) entered disabled state [ 760.279616][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.298873][ T8595] device bridge_slave_0 left promiscuous mode [ 760.354358][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.414178][ T8595] device veth1_macvtap left promiscuous mode [ 760.430398][ T8595] device veth0_macvtap left promiscuous mode [ 760.445544][ T8595] device veth1_vlan left promiscuous mode [ 760.866519][ T8595] device geneve1 left promiscuous mode [ 760.899473][ T8595] team0 (unregistering): Port device geneve1 removed [ 761.583765][ T8595] device team_slave_1 left promiscuous mode [ 761.594882][ T8595] team0 (unregistering): Port device team_slave_1 removed [ 761.638488][ T8595] device team_slave_0 left promiscuous mode [ 761.646287][ T8595] team0 (unregistering): Port device team_slave_0 removed [ 762.055857][T16892] netlink: 'syz.4.2955': attribute type 10 has an invalid length. [ 762.063878][T16892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2955'. [ 762.074685][T16892] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 762.117150][T16681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.224366][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 762.251536][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 762.313019][T16681] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.366958][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 762.380627][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 762.437645][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.444878][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.536185][T16923] netlink: 'syz.4.2960': attribute type 21 has an invalid length. [ 762.594137][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 762.618560][T16920] netlink: 'syz.2.2961': attribute type 2 has an invalid length. [ 762.623926][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 762.681511][T16920] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2961'. [ 762.720959][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 762.729606][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.736828][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.827569][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 762.854298][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 762.985751][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 763.042522][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 763.120657][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 763.223045][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 763.282454][T16935] netlink: 'syz.1.2963': attribute type 10 has an invalid length. [ 763.344702][T16935] team0: Device hsr_slave_0 failed to register rx_handler [ 763.487721][T16950] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.2965'. [ 763.546304][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 763.575434][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 763.605797][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 763.624457][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 763.645753][T16958] ================================================================== [ 763.652409][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 763.653877][T16958] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 763.653913][T16958] Write of size 104 at addr ffff88807e57c410 by task syz.4.2966/16958 [ 763.677652][T16958] [ 763.680011][T16958] CPU: 1 PID: 16958 Comm: syz.4.2966 Not tainted syzkaller #0 [ 763.687513][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.697610][T16958] Call Trace: [ 763.700928][T16958] [ 763.703896][T16958] dump_stack_lvl+0x188/0x24e [ 763.708642][T16958] ? __lock_acquire+0x7c40/0x7c40 [ 763.713723][T16958] ? show_regs_print_info+0x12/0x12 [ 763.718987][T16958] ? load_image+0x410/0x410 [ 763.723566][T16958] ? __virt_addr_valid+0x467/0x540 [ 763.728730][T16958] ? __bpf_get_stackid+0x6c9/0x920 [ 763.733893][T16958] print_report+0xa8/0x210 [ 763.738457][T16958] kasan_report+0x10b/0x140 [ 763.743018][T16958] ? __bpf_get_stackid+0x6c9/0x920 [ 763.748188][T16958] kasan_check_range+0x235/0x290 [ 763.753184][T16958] ? __bpf_get_stackid+0x6c9/0x920 [ 763.758348][T16958] memcpy+0x3c/0x60 [ 763.762205][T16958] __bpf_get_stackid+0x6c9/0x920 [ 763.767208][T16958] bpf_get_stackid_pe+0x33f/0x400 [ 763.772278][T16958] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 763.777783][T16958] bpf_overflow_handler+0x50b/0x790 [ 763.783031][T16958] ? bpf_overflow_handler+0xd9/0x790 [ 763.788369][T16958] ? perf_swevent_overflow+0x230/0x230 [ 763.793903][T16958] ? __perf_event_account_interrupt+0x187/0x280 [ 763.800200][T16958] __perf_event_overflow+0x457/0x630 [ 763.805548][T16958] ? perf_swevent_event+0x1d5/0x570 [ 763.810978][T16958] perf_swevent_event+0x315/0x570 [ 763.816060][T16958] ? perf_tp_event+0xc10/0xc10 [ 763.820885][T16958] ___perf_sw_event+0x498/0x6d0 [ 763.825796][T16958] ? ___perf_sw_event+0x184/0x6d0 [ 763.830945][T16958] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 763.837434][T16958] ? mark_lock+0x94/0x320 [ 763.841829][T16958] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 763.847866][T16958] ? lock_chain_count+0x20/0x20 [ 763.852777][T16958] __perf_sw_event+0x135/0x260 [ 763.857687][T16958] do_user_addr_fault+0x497/0xb20 [ 763.862788][T16958] ? trace_hardirqs_off_finish+0x86/0x180 [ 763.868567][T16958] exc_page_fault+0x60/0x100 [ 763.873242][T16958] asm_exc_page_fault+0x22/0x30 [ 763.878153][T16958] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 763.884799][T16958] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 763.904459][T16958] RSP: 0018:ffffc900034ff3e8 EFLAGS: 00050206 [ 763.910584][T16958] RAX: ffffffff8413d901 RBX: 00000000000005ac RCX: 00000000000001d4 [ 763.918605][T16958] RDX: 00000000000005ac RSI: 0000200000002000 RDI: ffff88805f1b33e8 [ 763.926632][T16958] RBP: 0000000000000000 R08: ffff88805f1b35bb R09: 1ffff1100be366b7 [ 763.934650][T16958] R10: dffffc0000000000 R11: ffffed100be366b8 R12: 00007fffffffea54 [ 763.942932][T16958] R13: 00000000000015e8 R14: 0000200000001c28 R15: ffff88805f1b3010 [ 763.951083][T16958] ? copyin+0x61/0x120 [ 763.955212][T16958] copyin+0xe7/0x120 [ 763.959154][T16958] _copy_from_iter+0x447/0x1130 [ 763.964081][T16958] ? slab_post_alloc_hook+0x67/0x490 [ 763.969422][T16958] ? copyout_mc+0x110/0x110 [ 763.974596][T16958] ? __virt_addr_valid+0x188/0x540 [ 763.979848][T16958] ? __virt_addr_valid+0x188/0x540 [ 763.985184][T16958] ? __virt_addr_valid+0x467/0x540 [ 763.990388][T16958] ? __phys_addr_symbol+0x2b/0x70 [ 763.995569][T16958] ? __check_object_size+0x4f6/0xa70 [ 764.000909][T16958] sctp_user_addto_chunk+0x80/0x210 [ 764.006201][T16958] sctp_datamsg_from_user+0x749/0xed0 [ 764.011821][T16958] sctp_sendmsg_to_asoc+0xfd9/0x17e0 [ 764.017175][T16958] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 764.023041][T16958] ? __sctp_connect+0xd80/0xd80 [ 764.027945][T16958] ? __local_bh_enable_ip+0x136/0x1c0 [ 764.033384][T16958] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 764.038987][T16958] ? security_sctp_bind_connect+0x85/0xb0 [ 764.044769][T16958] sctp_sendmsg+0x1b8a/0x2940 [ 764.049526][T16958] ? sctp_getsockopt+0x8a0/0x8a0 [ 764.054526][T16958] ? __might_fault+0xa6/0x120 [ 764.059276][T16958] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 764.065752][T16958] ? aa_sock_msg_perm+0x94/0x150 [ 764.070751][T16958] ? inet_sendmsg+0xca/0x2a0 [ 764.075481][T16958] ? inet_send_prepare+0x250/0x250 [ 764.080647][T16958] ____sys_sendmsg+0x5ed/0x9a0 [ 764.085477][T16958] ? __sys_sendmsg_sock+0x30/0x30 [ 764.090677][T16958] ? __import_iovec+0x306/0x510 [ 764.095622][T16958] ? import_iovec+0x6f/0xa0 [ 764.100180][T16958] ___sys_sendmsg+0x2a2/0x360 [ 764.104926][T16958] ? __sys_sendmsg+0x2a0/0x2a0 [ 764.109788][T16958] __se_sys_sendmsg+0x1c3/0x2b0 [ 764.114713][T16958] ? ct_nmi_exit+0x145/0x1c0 [ 764.119373][T16958] ? __x64_sys_sendmsg+0x80/0x80 [ 764.124390][T16958] ? lockdep_hardirqs_on+0x94/0x140 [ 764.129910][T16958] do_syscall_64+0x4c/0xa0 [ 764.134387][T16958] ? clear_bhb_loop+0x60/0xb0 [ 764.139117][T16958] ? clear_bhb_loop+0x60/0xb0 [ 764.143950][T16958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.149908][T16958] RIP: 0033:0x7fe6bd79e159 [ 764.154383][T16958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.175871][T16958] RSP: 002b:00007fe6be715028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.184344][T16958] RAX: ffffffffffffffda RBX: 00007fe6bda25fa0 RCX: 00007fe6bd79e159 [ 764.192367][T16958] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000009 [ 764.200399][T16958] RBP: 00007fe6bd835024 R08: 0000000000000000 R09: 0000000000000000 [ 764.208414][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.216517][T16958] R13: 00007fe6bda26038 R14: 00007fe6bda25fa0 R15: 00007ffc19651468 [ 764.224548][T16958] [ 764.227608][T16958] [ 764.229970][T16958] Allocated by task 16958: [ 764.234857][T16958] kasan_set_track+0x4b/0x70 [ 764.239512][T16958] __kasan_kmalloc+0x8e/0xa0 [ 764.244161][T16958] __kmalloc_node+0xb2/0x240 [ 764.248811][T16958] bpf_map_area_alloc+0x47/0xe0 [ 764.253722][T16958] prealloc_elems_and_freelist+0x86/0x1c0 [ 764.259580][T16958] stack_map_alloc+0x386/0x510 [ 764.264392][T16958] map_create+0x524/0xff0 [ 764.268786][T16958] __sys_bpf+0x38b/0x780 [ 764.273094][T16958] __x64_sys_bpf+0x78/0x90 [ 764.277678][T16958] do_syscall_64+0x4c/0xa0 [ 764.282587][T16958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.288543][T16958] [ 764.290925][T16958] Last potentially related work creation: [ 764.296804][T16958] kasan_save_stack+0x3a/0x60 [ 764.301545][T16958] __kasan_record_aux_stack+0xb2/0xc0 [ 764.306962][T16958] call_rcu+0x14f/0x950 [ 764.311173][T16958] nf_unregister_net_hooks+0xc7/0x130 [ 764.316640][T16958] nf_ct_netns_put+0x2ce/0x510 [ 764.321556][T16958] nf_conncount_destroy+0x3d/0x150 [ 764.326716][T16958] ovs_ct_exit+0x98/0x200 [ 764.331100][T16958] ovs_exit_net+0xe9/0x7a0 [ 764.335566][T16958] cleanup_net+0x703/0xba0 [ 764.340040][T16958] process_one_work+0x8ab/0x1160 [ 764.345035][T16958] worker_thread+0xaf5/0x12a0 [ 764.349887][T16958] kthread+0x29d/0x330 [ 764.354001][T16958] ret_from_fork+0x1f/0x30 [ 764.358471][T16958] [ 764.360829][T16958] Second to last potentially related work creation: [ 764.367446][T16958] kasan_save_stack+0x3a/0x60 [ 764.372177][T16958] __kasan_record_aux_stack+0xb2/0xc0 [ 764.377598][T16958] call_rcu+0x14f/0x950 [ 764.381804][T16958] __nf_register_net_hook+0x787/0x910 [ 764.387243][T16958] nf_register_net_hook+0xae/0x190 [ 764.392585][T16958] nf_register_net_hooks+0x40/0x1a0 [ 764.397838][T16958] nf_ct_netns_do_get+0x20f/0x5b0 [ 764.402916][T16958] nf_ct_netns_inet_get+0x3b/0x150 [ 764.408114][T16958] nf_conncount_init+0x123/0x380 [ 764.413103][T16958] ovs_ct_init+0x312/0x480 [ 764.417560][T16958] ovs_init_net+0x1e2/0x240 [ 764.422124][T16958] ops_init+0x360/0x5e0 [ 764.426331][T16958] setup_net+0x4f2/0xbd0 [ 764.430627][T16958] copy_net_ns+0x33e/0x5b0 [ 764.435091][T16958] create_new_namespaces+0x3ce/0x700 [ 764.440421][T16958] copy_namespaces+0x3ae/0x410 [ 764.445257][T16958] copy_process+0x199b/0x4070 [ 764.449983][T16958] kernel_clone+0x24b/0x900 [ 764.454541][T16958] __x64_sys_clone+0x1a7/0x220 [ 764.459358][T16958] do_syscall_64+0x4c/0xa0 [ 764.463830][T16958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.469780][T16958] [ 764.472174][T16958] The buggy address belongs to the object at ffff88807e57c400 [ 764.472174][T16958] which belongs to the cache kmalloc-cg-64 of size 64 [ 764.486369][T16958] The buggy address is located 16 bytes inside of [ 764.486369][T16958] 64-byte region [ffff88807e57c400, ffff88807e57c440) [ 764.499523][T16958] [ 764.501885][T16958] The buggy address belongs to the physical page: [ 764.508348][T16958] page:ffffea0001f95f00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e57c [ 764.518550][T16958] memcg:ffff8880290c7e01 [ 764.522827][T16958] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 764.530466][T16958] raw: 00fff00000000200 ffffea0000bff680 dead000000000004 ffff888017442780 [ 764.539105][T16958] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880290c7e01 [ 764.547733][T16958] page dumped because: kasan: bad access detected [ 764.554243][T16958] page_owner tracks the page as allocated [ 764.559998][T16958] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4738, tgid 4738 (syz-executor), ts 129378086680, free_ts 129377557490 [ 764.578462][T16958] post_alloc_hook+0x173/0x1a0 [ 764.583322][T16958] get_page_from_freelist+0x206b/0x2180 [ 764.588929][T16958] __alloc_pages+0x1ec/0x4f0 [ 764.593579][T16958] alloc_slab_page+0x5d/0x180 [ 764.598311][T16958] new_slab+0x87/0x2d0 [ 764.602437][T16958] ___slab_alloc+0xbc5/0x1240 [ 764.607248][T16958] __kmem_cache_alloc_node+0x126/0x270 [ 764.612760][T16958] __kmalloc_node+0xa2/0x240 [ 764.617404][T16958] kvmalloc_node+0x6c/0x180 [ 764.621958][T16958] nf_hook_entries_grow+0x31a/0x760 [ 764.627210][T16958] nf_hook_entries_insert_raw+0x47/0x300 [ 764.633330][T16958] nf_nat_register_fn+0x1d9/0x540 [ 764.638405][T16958] ip6table_nat_table_init+0x19c/0x2c0 [ 764.643926][T16958] xt_find_table_lock+0x220/0x360 [ 764.649005][T16958] xt_request_find_table_lock+0x22/0x100 [ 764.654692][T16958] do_ip6t_get_ctl+0x5e8/0x11c0 [ 764.659604][T16958] page last free stack trace: [ 764.664301][T16958] free_unref_page_prepare+0x8e5/0x9e0 [ 764.669815][T16958] free_unref_page+0x2e/0x3f0 [ 764.674548][T16958] __vunmap+0x874/0xa40 [ 764.678761][T16958] do_ip6t_get_ctl+0xea2/0x11c0 [ 764.683665][T16958] nf_getsockopt+0x25e/0x280 [ 764.688304][T16958] ipv6_getsockopt+0x22f/0x2e0 [ 764.693211][T16958] __sys_getsockopt+0x1b0/0x230 [ 764.698185][T16958] __x64_sys_getsockopt+0xb1/0xc0 [ 764.703358][T16958] do_syscall_64+0x4c/0xa0 [ 764.707833][T16958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.713785][T16958] [ 764.716149][T16958] Memory state around the buggy address: [ 764.721812][T16958] ffff88807e57c300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 764.729920][T16958] ffff88807e57c380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 764.738029][T16958] >ffff88807e57c400: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 764.746135][T16958] ^ [ 764.751549][T16958] ffff88807e57c480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 764.759655][T16958] ffff88807e57c500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 764.767760][T16958] ================================================================== [ 764.775873][T16958] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 764.783108][T16958] CPU: 1 PID: 16958 Comm: syz.4.2966 Not tainted syzkaller #0 [ 764.790614][T16958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.800721][T16958] Call Trace: [ 764.804039][T16958] [ 764.807006][T16958] dump_stack_lvl+0x188/0x24e [ 764.811736][T16958] ? memcpy+0x3c/0x60 [ 764.815784][T16958] ? show_regs_print_info+0x12/0x12 [ 764.821065][T16958] ? load_image+0x410/0x410 [ 764.825645][T16958] panic+0x2d3/0x710 [ 764.829618][T16958] ? bpf_jit_dump+0xd0/0xd0 [ 764.834273][T16958] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 764.840243][T16958] ? _raw_spin_unlock+0x40/0x40 [ 764.845171][T16958] ? print_memory_metadata+0x314/0x400 [ 764.850710][T16958] check_panic_on_warn+0x80/0xa0 [ 764.855724][T16958] ? __bpf_get_stackid+0x6c9/0x920 [ 764.860892][T16958] end_report+0x66/0x110 [ 764.865208][T16958] kasan_report+0x118/0x140 [ 764.869788][T16958] ? __bpf_get_stackid+0x6c9/0x920 [ 764.874971][T16958] kasan_check_range+0x235/0x290 [ 764.880014][T16958] ? __bpf_get_stackid+0x6c9/0x920 [ 764.885192][T16958] memcpy+0x3c/0x60 [ 764.889068][T16958] __bpf_get_stackid+0x6c9/0x920 [ 764.894072][T16958] bpf_get_stackid_pe+0x33f/0x400 [ 764.899157][T16958] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 764.904673][T16958] bpf_overflow_handler+0x50b/0x790 [ 764.909933][T16958] ? bpf_overflow_handler+0xd9/0x790 [ 764.915296][T16958] ? perf_swevent_overflow+0x230/0x230 [ 764.920826][T16958] ? __perf_event_account_interrupt+0x187/0x280 [ 764.927143][T16958] __perf_event_overflow+0x457/0x630 [ 764.932497][T16958] ? perf_swevent_event+0x1d5/0x570 [ 764.937850][T16958] perf_swevent_event+0x315/0x570 [ 764.943526][T16958] ? perf_tp_event+0xc10/0xc10 [ 764.948380][T16958] ___perf_sw_event+0x498/0x6d0 [ 764.953313][T16958] ? ___perf_sw_event+0x184/0x6d0 [ 764.958408][T16958] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 764.964918][T16958] ? mark_lock+0x94/0x320 [ 764.969320][T16958] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 764.975373][T16958] ? lock_chain_count+0x20/0x20 [ 764.980386][T16958] __perf_sw_event+0x135/0x260 [ 764.985229][T16958] do_user_addr_fault+0x497/0xb20 [ 764.990325][T16958] ? trace_hardirqs_off_finish+0x86/0x180 [ 764.996117][T16958] exc_page_fault+0x60/0x100 [ 765.000781][T16958] asm_exc_page_fault+0x22/0x30 [ 765.005694][T16958] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 765.012352][T16958] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 765.032015][T16958] RSP: 0018:ffffc900034ff3e8 EFLAGS: 00050206 [ 765.038137][T16958] RAX: ffffffff8413d901 RBX: 00000000000005ac RCX: 00000000000001d4 [ 765.046164][T16958] RDX: 00000000000005ac RSI: 0000200000002000 RDI: ffff88805f1b33e8 [ 765.054201][T16958] RBP: 0000000000000000 R08: ffff88805f1b35bb R09: 1ffff1100be366b7 [ 765.062225][T16958] R10: dffffc0000000000 R11: ffffed100be366b8 R12: 00007fffffffea54 [ 765.070455][T16958] R13: 00000000000015e8 R14: 0000200000001c28 R15: ffff88805f1b3010 [ 765.079091][T16958] ? copyin+0x61/0x120 [ 765.083234][T16958] copyin+0xe7/0x120 [ 765.087217][T16958] _copy_from_iter+0x447/0x1130 [ 765.092579][T16958] ? slab_post_alloc_hook+0x67/0x490 [ 765.098489][T16958] ? copyout_mc+0x110/0x110 [ 765.103253][T16958] ? __virt_addr_valid+0x188/0x540 [ 765.108433][T16958] ? __virt_addr_valid+0x188/0x540 [ 765.113631][T16958] ? __virt_addr_valid+0x467/0x540 [ 765.118816][T16958] ? __phys_addr_symbol+0x2b/0x70 [ 765.123899][T16958] ? __check_object_size+0x4f6/0xa70 [ 765.129328][T16958] sctp_user_addto_chunk+0x80/0x210 [ 765.134590][T16958] sctp_datamsg_from_user+0x749/0xed0 [ 765.140029][T16958] sctp_sendmsg_to_asoc+0xfd9/0x17e0 [ 765.145396][T16958] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 765.151372][T16958] ? __sctp_connect+0xd80/0xd80 [ 765.156289][T16958] ? __local_bh_enable_ip+0x136/0x1c0 [ 765.161739][T16958] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 765.167354][T16958] ? security_sctp_bind_connect+0x85/0xb0 [ 765.174663][T16958] sctp_sendmsg+0x1b8a/0x2940 [ 765.179421][T16958] ? sctp_getsockopt+0x8a0/0x8a0 [ 765.184438][T16958] ? __might_fault+0xa6/0x120 [ 765.189169][T16958] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 765.195687][T16958] ? aa_sock_msg_perm+0x94/0x150 [ 765.200685][T16958] ? inet_sendmsg+0xca/0x2a0 [ 765.205337][T16958] ? inet_send_prepare+0x250/0x250 [ 765.210546][T16958] ____sys_sendmsg+0x5ed/0x9a0 [ 765.215385][T16958] ? __sys_sendmsg_sock+0x30/0x30 [ 765.220472][T16958] ? __import_iovec+0x306/0x510 [ 765.225393][T16958] ? import_iovec+0x6f/0xa0 [ 765.229992][T16958] ___sys_sendmsg+0x2a2/0x360 [ 765.234737][T16958] ? __sys_sendmsg+0x2a0/0x2a0 [ 765.239581][T16958] __se_sys_sendmsg+0x1c3/0x2b0 [ 765.244488][T16958] ? ct_nmi_exit+0x145/0x1c0 [ 765.249127][T16958] ? __x64_sys_sendmsg+0x80/0x80 [ 765.254140][T16958] ? lockdep_hardirqs_on+0x94/0x140 [ 765.259418][T16958] do_syscall_64+0x4c/0xa0 [ 765.263900][T16958] ? clear_bhb_loop+0x60/0xb0 [ 765.268637][T16958] ? clear_bhb_loop+0x60/0xb0 [ 765.273379][T16958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 765.279331][T16958] RIP: 0033:0x7fe6bd79e159 [ 765.283796][T16958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.303453][T16958] RSP: 002b:00007fe6be715028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.311919][T16958] RAX: ffffffffffffffda RBX: 00007fe6bda25fa0 RCX: 00007fe6bd79e159 [ 765.319945][T16958] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000009 [ 765.327975][T16958] RBP: 00007fe6bd835024 R08: 0000000000000000 R09: 0000000000000000 [ 765.336001][T16958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.344026][T16958] R13: 00007fe6bda26038 R14: 00007fe6bda25fa0 R15: 00007ffc19651468 [ 765.352075][T16958] [ 765.355304][T16958] Kernel Offset: disabled [ 765.359649][T16958] Rebooting in 86400 seconds..