last executing test programs: 34.545241704s ago: executing program 3 (id=4961): ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={0xffffffffffffffff, 0x0, 0x77, 0x45, &(0x7f0000000080)="d63e72fa7c323be2d47430d7675036c6189b5260020816ef776aa0ff95a37edd01f5dde6ed6e67ca0406149258528471c22925c8b0baf567ab9f5932c4bae8ace267e0b7cca14cebb2d0887405d0b82e4ff29e36f23616323810fadda83810d2140b4180b630514456387abed86cd0e22f37b9829f976d", &(0x7f0000000100)=""/69, 0x9, 0x0, 0x1000, 0x79, &(0x7f0000000180)="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", &(0x7f0000001180)="35e7e1dcf80c2986bc6d180894e41c9ddbf0181dfc68ecf555da7c3bac16405255960ad107c106a6cace221c43671ba3f0623a034f0c1d524c36120a405b5aa299e8d7fd1370232e14ff248daaaa508e663a9fa19edafc521d84a35e1f396605c24929681804f2af838fde58bd4104f66bf87c890b0ba6fd15", 0x4, 0x0, 0x10001}, 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000012c0)='\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f00000013c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000001600)=0xfff) sendmsg$kcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001640)="5a9b53f3bd57cbfe11", 0x9}, {&(0x7f0000001680)="465056ef6f0ffc677194604267c9c5fcaba84bcdb9c48e7a9da9df6cf5fd4c2e0bd9bacd2553090eda23150de070794dc1b7f2de6e71ec1cc49598b81dddb5692714fc9246cc12b95d0d02ab18bdd40e5227b4a0", 0x54}, {&(0x7f0000001700)="87be00bb268e1ec70b5890795cee53123514ad5530312e2a12786f7286b63b3ac42c48b62cc755469d77f39f3cd4ec68c1939d372f289df0de063d8c1cc24519c0ad87fc2afb3c1950b1c1ad99dd9eb8699d40799935ac03508e40435cc86e201a657c7f1d1602944ca3b5", 0x6b}, {&(0x7f0000001780)="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", 0xfd}, {&(0x7f0000001880)="56d45aba071a5919692019f001d42e290317795d7ce9af73003f1c094528a6c0afe6777dea4f2325c9f0e30116c57b2638514729b21f8528ab5edcebcc34ffd4d4022db4130588e0ea519c04e1e512a41b02d5292126cca14e7b57702f463bd1d12c321a00964dde29af7281327170eb5a3ff3bebf54e5be699bfa3d04aedc3d43d2c9b4378ba14722c47c4846ffc9d6dd2a3774a8bf73ad9d4090ce0d48c9f3caf16327dfa2ee7b86ff9ff9", 0xac}], 0x5, &(0x7f00000019c0)=[{0x100, 0x110, 0x6bd, "5b4291b67177641c2cfd87d3d305ac501d5f72c88f70dcbf750162fcce26d2351544e6828edfa00cce10beb50adcbae5b5c3f9afa3ecf57cb6d765261059e2e1dc18f05c05b44b4e97cb8518e7763972e7a2a12ae61a00a27133e2af5f06970c8f3da81b92c4ab1795ab114d63de45599562eaecda6f94fe79144a603f19a2a4aeb0a219dfa2ee88a24b55312cfced1c2f29fc6df4ef68a933301b8b7536f551f9a5e368d45015a5d5a278882e7969c2d5ecffb750d28d75327f61270ff7dc5677d37e856da3419e2c1ec1284fbbbef465380267becc8652a94559efe61a708080a9b7b16a85aefda0b8d9b6d754bcac"}, {0x38, 0x10a, 0x7, "fe826e8845a99dbe9570d283333c2536fba3ef036f5cbdba4cde343d672606dc211d8a62a0"}], 0x138}, 0x4044084) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e00)={0x6, 0xf, &(0x7f0000001b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit]}, &(0x7f0000001bc0)='syzkaller\x00', 0x10001, 0xba, &(0x7f0000001c00)=""/186, 0x40f00, 0x31, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0x4, 0x0, 0xfff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001d40)=[r1, 0xffffffffffffffff, r1, r1, r1, r1, r1, r1], &(0x7f0000001d80)=[{0x2, 0x2, 0x1, 0x3}, {0x4, 0x1, 0x8, 0xb}, {0x0, 0x4, 0xc, 0x8}, {0x0, 0x3, 0x7, 0x8}, {0x5, 0x5, 0xe, 0x2}], 0x10, 0x80000001}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000022c0)={0x6, 0x10, &(0x7f0000002140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x8, 0xe, 0x9, 0x6, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000021c0)='syzkaller\x00', 0xda, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002200)={0x1, 0xc, 0x7, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002240)=[r1, r1, r1, 0x1], &(0x7f0000002280)=[{0x0, 0x4, 0x10, 0xc}, {0x3, 0x4, 0x5, 0xb}, {0x3, 0x2, 0xa}]}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x1d, &(0x7f0000001ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5d, 0x0, 0x0, 0x0, 0x60000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x5, 0x4, 0x8, 0xfffffffffffffff0, 0x8}, @call={0x85, 0x0, 0x0, 0x90}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001fc0)='syzkaller\x00', 0xf, 0xf8, &(0x7f0000002000)=""/248, 0x41000, 0x14, '\x00', r2, @fallback=0x33, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002100)={0x2, 0xc, 0x3, 0x5}, 0x10, r3, r5, 0x2, 0x0, &(0x7f0000002380)=[{0x0, 0x3, 0x10, 0x3}, {0x5, 0x3, 0x8}], 0x10, 0x7f}, 0x94) sendmsg$inet(r0, &(0x7f0000002740)={&(0x7f0000002480)={0x2, 0x4, @empty}, 0x10, &(0x7f0000002640)=[{&(0x7f00000024c0)="c3a2a71989257b26aa818dcd9f1c7e6415b44ca2b3d94afd38996fb43fa77201c57aab954ba56ceb27ab42be9f8fe9c243c49a123f4274e4573f9100049ec602aa9ed2d924380b0cc5e1e11cdac4384c9e91995b9e14093cf8a1cca353dbea61a5b2ab96d8f356976ce5", 0x6a}, {&(0x7f0000002540)="74f1b8f928b6a67ca035fd0046342bf83c47e455438be60080bd83acc45861ca8129daa6d6149a13db006ecc783c5bb3810cc119eeb77fe43a74f9459ebfa412801fa9310ace223603cd2930b89c3d2addbbab3f37929b1a8ba4c71161949e36baff51b9bc7fc7382390011aac9a0e68499add88fde9251a037ae745826ccaa99371f67e65fbd67739625159279a461470bfd3a776bcbc2a6302fccee8315a5054dd16ee3a635650d5b0b5702df1b63ebb703c317efaaf44b8432a032c8b1f271be0bdd25a74d36267042012247f54a55db919fab3e6", 0xd6}], 0x2, &(0x7f0000002680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1000}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x89}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @dev={0xac, 0x14, 0x14, 0x41}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x90}, 0x480c8) sendmsg$unix(r1, &(0x7f0000002a40)={&(0x7f0000002780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002800)="43f8df07d80eeb4b918a02688bdae9ba5edc1fecf4dd78e68124ca6803d97004af0890c7a1f00c1b8290d5af13f5ce683e5cd366663670231630884f4ee16426648ab2930b30c1cc7bd26eb5ce8d80ff46d6e110fafe3d5662881c3037f5d217e22da6fff8dd62b1781e8ac7773e8e7974d5f0387e44b51143d6915eb0546ab5a7a3f2f07cc75ef76b0f8b170dee8d16823c8a788ba8e14a987f79f193c24d15ad2bee5d1bcc", 0xa6}, {&(0x7f00000028c0)="d4b1670c54fad694a0e9edcf04aae95c7f1a6be8e1b6f33decc72d3b421558a640765196d73be82882b5b4c1b70f0ac7ffd286bff7a195c64e4442728ab25ff6e32b6d95019fe561e66469e49872b31cbb416fe253ddc91056e71888b5c0aeb03c98fbc2cf5b3c72e74bbaf139b39ef72862f5be2347cfd5efb393ddacd7a19d27a06a9e01d9b638db01cc0f864650a76991556c96a192c0a026558f40dd4738b0446350bcaedd62c03d34a0cc49b084fbb6a92ac8d21ebeebe8612fa32f472485be1ffd60258bb31f5783baa31c99431338", 0xd2}, {&(0x7f00000029c0)="4ff00d120cab38d0fe72900b0fb5efb16f164fb60c3c8a5a4f5be190298e92f43310834de51ee9822646466ef6b353e41b74b0f33f5f1def7357f78ffe1569", 0x3f}], 0x3, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002a80)={r5, r1}, 0xc) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000002ac0)) r7 = openat$cgroup_ro(r1, &(0x7f0000002b80)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000002b00)={0x4, 0x80, 0x1, 0xc, 0x49, 0x0, 0x0, 0x7, 0x42, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x40}, 0x500, 0x1, 0x0, 0x8, 0x100000000, 0x1, 0x10, 0x0, 0x0, 0x0, 0xc}, r7, 0x10, r1, 0x0) r9 = openat$cgroup_type(r7, &(0x7f0000002bc0), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000002c00), 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c40)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002c80)={@ifindex=r2, r6, 0x33, 0x4028, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000002cc0)=r7) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f0000002d00)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002e40)={@ifindex=r2, 0x33, 0x0, 0x5, &(0x7f0000002d40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e00)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002e80)={@fallback=r10, r1, 0x12, 0x2028, 0x0, @void, @void, @value=0xffffffffffffffff, @void, r11}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002ec0)={@fallback=r4, r7, 0x4, 0x0, r1, @void, @value=r7, @void, @void, r11}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003080)={&(0x7f0000002f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x7, [@ptr, @union={0x6, 0x8, 0x0, 0x5, 0x1, 0x1, [{0x5, 0x4, 0xfff}, {0x5, 0x5, 0x9}, {0x0, 0x1, 0xc165}, {0xd, 0x4, 0x80000000}, {0x6, 0x2, 0x7e11}, {0xd, 0x1, 0x3}, {0xc, 0x3, 0x8}, {0xb, 0x3, 0xd6e}]}, @fwd={0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @union={0xb, 0x1, 0x0, 0x5, 0x1, 0x6, [{0x4, 0x2, 0x9}]}, @struct={0x1, 0x6, 0x0, 0x4, 0x1, 0x27, [{0x9, 0x2, 0x2}, {0xd, 0x3, 0x3}, {0x7, 0x5, 0x4}, {0x5, 0x5, 0x9}, {0x2, 0x5, 0x5e3f}, {0x9, 0x0, 0x96}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x30, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000003040)=""/14, 0x12b, 0xe, 0x0, 0x200, 0x10000, @value=r1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r1) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000030c0)=r4, 0x4) 34.497417535s ago: executing program 3 (id=4963): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="00476cc5c07f264f0000000000000000000000000000000000000000feae7dcb1ea5b85696f58e4d31d201dcc3ae564ef7eab724a23e5d92dedf762532cf6e3748ff018337eea90f0b07e88aa9"], 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800010006000000831afae4bc836119292cbfce053fc73f000000000000000085000000370600000000000000000000ce52293fc9bfd7f91fc8990f8aa4d258518c54296aa948f8fd5bf0122d490cac3e33054142be15884b7263f91326773c709f7670d5d42ba57b521e8d7addf9ef915bd8ea6e0fb69ee741304fde1e5265f58a0f775220d440affa5be1042ff0442bd01be862b583a6d388d27170782e5f5c435139ce19c91b2f342d0e1d5c1907d84a9a367b38ebf442464443fd303b6d82a0230b42407c1809a22839a86c95509e2ac72fe6a2285dd4c365329108d20ecb9bf9b27729d063ce567d5ca0946605a1903af7c73ca771255a6c772f98433bf157c7c6e2cb45c4b014f702ba9735d264ada00444c3a15425"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaa\x04{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2\x00\x00\x00\xf8\x1dG\x00}H\'\xed\x00\x00\x00\x00\x00\x00\x00\x00') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5", @ANYRES32=r7, @ANYBLOB="000200000500000085100000ffffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18290000", @ANYRES32=r6, @ANYBLOB="800000004000000018120800b7923dbb1c2bb78e0ca0c646743007622efb21d7883314699dade0a0fc21e0a935691702ee10f2f3f14d516a354c9e22ced82aea2e791f3c15f7baaafd2d2c152ec754aaca006488c7644aa287d49b55222652775d9076fa82f236ce06e07458b8e8dcbc5b08820416b9aaf94242ccd23d085e6464ee07118e55da30961adf43", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000540000000f300a0006000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r9 = socket$kcm(0x11, 0x0, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x18, 0x0, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0) socketpair(0x29, 0x800, 0x0, &(0x7f00000003c0)) r11 = socket$kcm(0x10, 0x4, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10004}]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$kcm(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1, 0x0, 0x29}, 0x44004) 34.157381212s ago: executing program 3 (id=4966): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x2, 0x2, 0x8, 0x1, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xe3}, 0x100002, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={&(0x7f0000000200)="c493b9a25c77456d292e364e8895d2d2779088152a7142990e609af9c4ae1cdcddebe0e925a48550ce9130451ab0d7e5c49eb58253f00e12c6f76046d226422591984b2fc8a318213be3646673bc210e56cd69d111d4d31ee5d53711b7f963f2cdda4be2460b41df156ccc6ccc83bb5616966d1e4a08eadc2224d0075f72d5ec4f24619ee83ee0f66cd674", &(0x7f00000002c0)=""/141, &(0x7f0000000500)="6c3e25d823945a8a3de3ef5d5178c4b1f78fe8683d69c70dce0ff170d433083ca5aa95581263bb6c6b85260624692a5f25fdcd133d80d6748a0b905cba1f8f19d3f80230a55b61ba60f5fd22afbb0f8a929569bc76fced8b60d7fe4add5807cccd3b5405f030397ac1aeb6dc039bde8448d1983f20038ab17cf2f465786838d40c5d4db76a3c993a088af59e57723de04ef8d1fe95d1ab3ecd98fb3d26de5f04c3ddb4d372f59601900ea7d9b77c4d6c79", &(0x7f00000005c0)="9ab43c9b0832201213722d1e1243ae6a18cf782aae039e8d4a54a0e7e23426c9edf8cc14f441479509c47cf25a1129cc3db5afc70d24cfd1cf80868ab99765b55c4262b3a646d00f20d175f4f954b0821e18b36642fbe187713664b81a306533c5199914bf5d6572102eea816e34c56b614d9919311c5476c2d8886d51905b0fed04493b729ecde4afc743c4fe0b49a52615849fee55a4f8befaa90b1683d62be285c62f4207da1daf09be62c762f319bd78f2890c30a701f54c39c8f8846784ec9eb1c7eb9ac6", 0x58, r8, 0x4}, 0x38) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8927, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'gre0\x00', @random="0200"}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x121000, 0x0) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x0) ioctl$TUNGETSNDBUF(r11, 0x800454d3, &(0x7f0000000080)) 33.035512035s ago: executing program 3 (id=4976): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYRES8=r0, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="00476cc5c07f264f0000000000000000000000000000000000000000feae7dcb1ea5b85696f58e4d31d201dcc3ae564ef7eab724a23e5d92dedf762532cf6e3748ff018337eea90f0b07e88aa9"], 0x50) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaa\x04{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2\x00\x00\x00\xf8\x1dG\x00}H\'\xed\x00\x00\x00\x00\x00\x00\x00\x00') socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4f}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x2f, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x30}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8923, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5", @ANYRES32=r7, @ANYBLOB="000200000500000085100000ffffffff9500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a01000000000061114c0000000000850000001a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18290000", @ANYRES32=r6, @ANYBLOB="800000004000000018120800b7923dbb1c2bb78e0ca0c646743007622efb21d7883314699dade0a0fc21e0a935691702ee10f2f3f14d516a354c9e22ced82aea2e791f3c15f7baaafd2d2c152ec754aaca006488c7644aa287d49b55222652775d9076fa82f236ce06e07458b8e8dcbc5b08820416b9aaf94242ccd23d085e6464ee07118e55da30961adf43", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000540000000f300a0006000000"], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8, r1}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r9 = socket$kcm(0x11, 0x0, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x18, 0x0, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='G', 0x1}], 0x1}, 0x480c0) socketpair(0x29, 0x800, 0x0, &(0x7f00000003c0)) r11 = socket$kcm(0x10, 0x4, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10004}]}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c200000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) sendmsg$kcm(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1, 0x0, 0x29}, 0x44004) 32.682748883s ago: executing program 3 (id=4980): socket$kcm(0x2, 0x5, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 64) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000400791060000000000015000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x268, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0xffffffffffffffee}, 0x48) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xffe, &(0x7f0000001c40)=[{&(0x7f0000000800)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c880) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRES16=r3], 0xffdd) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-'], 0x6a) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x20044890) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x9}, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xdd6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)=0x4902, 0x12) (async, rerun: 32) socket$kcm(0xf, 0x3, 0x2) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 32.212071862s ago: executing program 3 (id=4992): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x88) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x800}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x20048013) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa, 0x88c}, 0x50) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) 17.184327534s ago: executing program 32 (id=4992): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x110805, 0x0, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x88) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x47, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x800}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x20048013) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa, 0x88c}, 0x50) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) 7.804656729s ago: executing program 2 (id=5181): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000040000000000001801000020646c2500000000002020205b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000080000009500000000000000fd634e638d18ad64197c137c16b443f5a3a6578c324b4d30b0f404a3ac21081874ea412e4bd8cd0cdb61ddb5e177e070531b01c3427ae2f7ca734c0766a94c4ab6879e579a11f1f2a0fda9c58e7d32f588c12711997b22eed5bb1019daf3485d9af9feb1638b0d49469ea27e4350f7416c2e6adad7c9966be51593d11b24"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000600)={0x0, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7c, &(0x7f0000000000)=r4, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xfffffffd, 0x0, r4, 0x6, '\x00', r5, 0xffffffffffffffff, 0x2, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000640)={0x0, 0x80, 0x5, 0xa9, 0x5, 0x1, 0x0, 0x6, 0x11800, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0xa2518bcfbd877d39, @perf_config_ext={0xfff, 0xf49}, 0x10203, 0x80000000, 0xc80a0a8f, 0x0, 0x0, 0x1ff, 0x1, 0x0, 0x10001, 0x0, 0x4f8}, r1, 0x10, 0xffffffffffffffff, 0x6) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f0000000280)='ns/mnt\x00') socket$kcm(0x29, 0x2, 0x0) 6.801000789s ago: executing program 2 (id=5188): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x0, 0x0}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000900)=""/250, 0xfa}, {0x0}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000780)=""/11, 0xb}], 0x5}, 0x10000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) socket$kcm(0x2, 0x3, 0x2) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b870030000000000000", 0x1b}, {&(0x7f0000000140)="d8661035880157ca1b5e1b5a6d131d", 0xf}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x1, 0xfe, 0x4, 0x0, 0x3d, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x8}, 0x8, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x1000, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe}, 0x0, 0xa, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 6.107355674s ago: executing program 2 (id=5190): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000140)=r2}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x6, 0x0, &(0x7f0000000000)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x1028, 0x0, 0x3ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0], 0x0, 0x1e, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000040)="cf0018ea0f1841601b897e0255fadf283c84bfa78454cc497aa60e70fdedbcbffea3a7be32c29ae5d6578641221127ae96491365b2eb6a417d28a82ebade6092df9b9f9ad588766a2ba2337d0425136dcfb96b0b92e52f6a0300000000000000b72fddf381203c13182d0f9f5ff4e2ebf5e641a83f42a710d7f91fdbd33feb2cb31b15e1cebe0af1392c080eacb91de66b6b57d1", 0x94}, {&(0x7f0000000300)="3cf009f7bb1a1e029fba740ab5e5a30ea4acb9d780ade51f8835dc56e946aaf39957affc6027dc010f3b3799059180e2eb8849a97f7fc5b53566c058c5174b1095f3cebc22e9f6d2194c6299f82bf70286c7460ce153ce1834cebf12e8e50b7670fcd3027ef5b9c50352b720c21d6d7c7655cdd0847f16557b4e655b76e91714c8838b28bc81acdc2c3a8ad0973908914cacd04271d7ef60248fcc6ed469b99da0e52f80b06883ae5a4447ca5bb112312b3677c36ea782c672448a2d", 0xbc}], 0x2, &(0x7f0000001100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @multicast2}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xf9, 0x0, 0xd, [0x9, 0xe]}, @noop, @rr={0x7, 0xb, 0x5f, [@local, @rand_addr=0x64010101]}, @timestamp={0x44, 0x4, 0x4f, 0x0, 0x2}, @timestamp={0x44, 0x24, 0xe3, 0x0, 0x1, [0x9, 0x4, 0x2, 0x4, 0x7f, 0x3, 0x3, 0x9]}, @ra={0x94, 0x4, 0x1}]}}}], 0x90}, 0x20008020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000980)={'pimreg1\x00', 0x400}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a00"], 0xfe33) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 5.121026374s ago: executing program 2 (id=5195): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x11, 0x2, 0x0) close(r4) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x1, @perf_bp={0x0}, 0x60, 0x0, 0x80, 0x5, 0x0, 0xffff0000, 0x40, 0x0, 0x40, 0x0, 0xfffffffffefffff1}, 0x0, 0x20100000000, r2, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890c, &(0x7f0000000100)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x5}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180), 0x8) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000002380)='GPL\x00', 0x5, 0x252, &(0x7f00000023c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd4}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) socket$kcm(0x11, 0x2, 0x0) (async) close(r4) (async) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x1, @perf_bp={0x0}, 0x60, 0x0, 0x80, 0x5, 0x0, 0xffff0000, 0x40, 0x0, 0x40, 0x0, 0xfffffffffefffff1}, 0x0, 0x20100000000, r2, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async) 4.210032333s ago: executing program 2 (id=5200): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}]}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0) (async) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) (async) 3.681697134s ago: executing program 2 (id=5203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x2c, 0x0, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[], 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x68, 0x115, 0x80000000, "b2acf7352862fcbb54dceb8c7d41ea091fad290b01a0e16161e2939c00463d754115ebf06b9a87685e336cfed89849e668890d02a20fa2c3eb05a96d98825514f05b63112aec71a2b6ca6f1f28aee5544a8b0bcd0cf711be"}, {0x10, 0x19c, 0x3bf}, {0xb8, 0x10e, 0x0, "77791f5e80e635ff78dff7f7e02a2221ef3dd898ff64ed7d9240953aa89ff3667dd30d6cd1b47b1457c70e0f492106ad913787861d9ecfe1c972235b1c2839ba9a08cd84b359d48f7cc39cff4f563f8f627488d6e878edb426773b85ec28608c3e14ae21933183a02051e5bec28bf2b1178003913e43864c8bda07876eee34a6433e526179632c18af4cbdac310515238e0c928756978b8a4a7f2b81f093f7a9ddde20efb6"}, {0x10, 0x0, 0x401}], 0x140}, 0x40000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x4000010) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x22}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 3.268160632s ago: executing program 4 (id=5207): socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000001000000010000ca", @ANYRES32=r2, @ANYRES32=r1], 0x18, 0x80c0}, 0x2000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000440)=[{0x28, 0x9a, 0x8, 0xfffff004}, {0x6, 0xaf, 0x5, 0x40000000}]}) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@cred={{0x1c}}], 0x20}, 0x12140) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xdf, &(0x7f0000000780)=""/223}, 0x94) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x41, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x5}, 0x0, 0x1, 0x0, 0x4, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000001000000010000ca", @ANYRES32=r2, @ANYRES32=r1], 0x18, 0x80c0}, 0x2000000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pimreg\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000440)=[{0x28, 0x9a, 0x8, 0xfffff004}, {0x6, 0xaf, 0x5, 0x40000000}]}) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[@cred={{0x1c}}], 0x20}, 0x12140) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xdf, &(0x7f0000000780)=""/223}, 0x94) (async) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x41, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x5}, 0x0, 0x1, 0x0, 0x4, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) 2.581477427s ago: executing program 4 (id=5209): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x11, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003b) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r3], 0xa) ioctl$TUNSETLINK(r2, 0x400454cd, 0x304) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.345010312s ago: executing program 1 (id=5211): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x1}, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00000000691022009500"/24], &(0x7f0000000480)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000180), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x20) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c250000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={&(0x7f0000000040)="08ce0fd5ee8bd00ea5ccc010affc3b0f17c38ce969600d4687f547b39486593c", &(0x7f00000001c0)=""/222, &(0x7f00000002c0)="36a7cec20f0be35af976a2e762f842410f6ba2009fa1ab8cdd589f258917cc2e820e97eba352abc4b7991af168543c", &(0x7f0000000740)="a90b3287b9d7493c093de87cf62da7da714cf4f56a884000e02e30c9723c1bae01bbc894d5d5fd76bbdb7a91f8116b75c8b5c907ccd7174be6ca3976cc31960113dd9d1bbd54380359e78708c68621e34855f19de0b73d66648ba8f11a98b139be15253516eb75350c3b3ed24e311def0d529c056fabb6ede35d7196b28dde952495c9eefba5a04fc79bb60e0296a05d642bc9954dee85850e116422b5a5fd49e7a060f3f0eacb8aae33aa851328806014689830cc28e45774c60fa465ec41230733dcb7", 0x8, r0}, 0x38) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 2.317430863s ago: executing program 0 (id=5212): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) recvmsg$unix(r1, 0x0, 0x2040) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xe, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008510000001000000950000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006300000095"], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r2}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r11}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', r13, r7, 0x1, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x27, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7f, 0x0, 0x0, 0x0, 0xffff0dd9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x9, 0x8d, &(0x7f0000000600)=""/141, 0x41000, 0x5, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r4], &(0x7f0000000780)=[{0x3, 0x3, 0x3}, {0x5, 0x5, 0x4, 0xb}, {0x0, 0x4, 0x7, 0x9}, {0x4, 0x1, 0xa, 0x1}, {0x4, 0x5, 0x2, 0x8}, {0x1, 0x5, 0x4, 0x5}], 0x10, 0x3d}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0x31}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) 1.93423266s ago: executing program 5 (id=5120): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x3d, 0x17655bf9, 0x1, 0x9, 0x200, r0, 0xffffa45a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfffffffb, '\x00', r2, r3, 0x1, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000011c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x3}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.929661791s ago: executing program 0 (id=5222): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) write$cgroup_devices(r4, &(0x7f0000000540)=ANY=[@ANYBLOB='b '], 0x9) 1.614912027s ago: executing program 5 (id=5213): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f0000000040), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r7, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0), &(0x7f0000000c40)=[0x0, 0x0], 0x0, 0x6c, &(0x7f0000000c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000cc0), &(0x7f0000000d80), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x9, &(0x7f0000000180)=[{&(0x7f0000000080)="ba", 0x1}, {&(0x7f00000000c0)="5b0ac91183c6d146f005b006", 0xc}], 0x2}, 0x4008804) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002200)={&(0x7f0000001040)="562561cbca796c46550e94c4e35bebb9829a29fb81dd23df68735dba7e57df0f2de50bcc96d81f9a29742e6970c8b1c62180437ebdf52c86b35a8d2166ff90c3e73461052c7b3849f02a6e47e35c98e1f7da6366", &(0x7f00000010c0)=""/4096, &(0x7f00000020c0)="b7015ae5dc021583e11aca836c5c69b5cf101e738f97accfed13", &(0x7f0000002100)="d4b4fe96890a1bf046eb9c9e2748650f7dcc32c254467dc535118e766e8e0242798f34552b67626fb9249715e2d812c4f59fe0fe42c6c3364c2dd0d60c5d2070dc1ba4", 0xffff827b}, 0x38) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000026c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002680)={@cgroup=r11, 0x10, 0x1, 0x2, &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000025c0)=[0x0, 0x0, 0x0], &(0x7f0000002600), &(0x7f0000002640)=[0x0, 0x0, 0x0]}, 0x40) r12 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x7, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @mcast2, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40), 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x3, 0x10, &(0x7f0000002480)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000515f3bfab7a58b1acaa9adac521b3d08f1f1fe7f9105260fa4bfc2bd5e0da3885979ceed7efc0a26949d9a922d89d7ee363fb1fc2dd33d6045c2d2d8168dda574be743457dba67580f7808e18bb570f2488661a61844"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000022c0)={r7, 0x58, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000023c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="9feb010018000000050000001800000000000000070000000a0000000000001203000000031600eef200000c030000000061005f5f0000"], &(0x7f0000002340)=""/118, 0x37, 0x76, 0x1, 0x5a31, 0x10000, @value=r13}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002400)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x6, '\x00', r15, r16, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r14, 0x0, 0x7, 0x8, &(0x7f00000002c0)="0000ffffffffa0", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r17 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r17) 1.610421367s ago: executing program 0 (id=5224): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(r0, 0x40086602, 0x1000000000000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0}, 0x0, 0x10001}, 0x0, 0xb, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10}]}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) sendmsg$inet(r3, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = socket$kcm(0x28, 0x5, 0x0) close(r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02c000000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)=0x1) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1954, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1954, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e145802000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.48067748s ago: executing program 4 (id=5214): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x101, 0x830d}, 0x30, 0x2, 0x8, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x0, 0x0}, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f0000000380)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000011d600a0680d4bbd6df1db6f1078bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000a00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000700)=""/88, 0x58}, {&(0x7f0000000780)=""/11, 0xb}], 0x4}, 0x10000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r1, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) socket$kcm(0x2, 0x3, 0x2) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b870030000000000000", 0x1b}, {&(0x7f0000000140)="d8661035880157ca1b5e1b5a6d131d", 0xf}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4e, 0x1, 0xfe, 0x4, 0x0, 0x3d, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x8}, 0x8, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x1000, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe}, 0x0, 0xa, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 1.413778571s ago: executing program 1 (id=5215): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x7ffb, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x7fbffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(r1) r4 = socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6, 0xfffc}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) 1.199580605s ago: executing program 1 (id=5216): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000005c0)={&(0x7f00000002c0)="f584983b8d04ca7f9c65d42965d5edade394390ac396280ba45e2219b831ed1b7962f9b062dc2f6b7221c8685bb493ac6ac1127ba3223d2cf0da4c977a6c61e472658ab553f74d9a7010b71093f65793041f33a8c43cae3944b078b88e748a636e515612ff2879adee2aaa9a400fe4add2503c675a8ce486d509fefe015ad7f7c3642a7ed3cd8fc9bc5029f20c024077b2f3cfea4b0b8a47a66707554a09730d83", &(0x7f0000000440)=""/220, &(0x7f0000000540)="036fa4b613bb68eebf414983bd98abfac057404f3a33029080e2f1ef6bf54aedfd06a02bbf82298fe90cad82845f", &(0x7f0000000580)="92421fe47c4ef18d21fc537b349dd5a7f8530183bc455569881aa4", 0x9, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, r1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x22, 0x0, 0x11) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x80, 0x4b, 0xfffff020}, {0x6, 0x0, 0x0, 0x8}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x15, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 1.157235636s ago: executing program 5 (id=5217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x2000000000000216, &(0x7f0000000100)=ANY=[], 0x0, 0x5868, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex, r0, 0x13, 0x1, 0xffffffffffffffff, @void, @value=r0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000740)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) (async) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10802, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, r2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000003f01f00660000007f00003a8b04b1b98281e125eb0001000000", @ANYRES32, @ANYRES64=r0, @ANYRES16, @ANYRES32, @ANYBLOB="000000000000f1ff00"/28], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r3}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) sendmsg$inet(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="a9fb47b876a2baab0145dacfd78086240f92a68d7834bd5f28b925aa8ad40451082be8153d7131a9557d281e0552f46721bbe2d17ca5891c981b5174393ec632fb6d20628be21dfc3eb3dc515a9cbb92620b9490ca08064f11301a09f864ea8b34cdbaff6feede3d1bd8bb7b12b83371ff985d1ad64db7fe4fbbd6793fbb94827481c4e0ae4f91df8635eadd67b7973298c87a320340e8a706720f5de6a8ac5f650ddddcd79a32d4", 0xa8}, {&(0x7f0000000980)="5a92e48974447ff646e77e91cea2caa8732836e1b336753292e8213f372585bf47f69830ae00181de03e7907d989044cc728f59c0f4911be89af23115fbee65b9ffd04cce60a9f57deaf8f0a2a5d0b8e7c4375e4ef28299c17d491659058f1b79b5c547b5cddde6957", 0x69}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="367ff1a4fc9177e1383e1c7e53c73b1d564a043a0d936a8778426345d1f269e832a5f9d3e1c388354216e4391aff7b0909dbfd588b14e84321c8e4439676da71f5432c379c9a905727c61a92154f743891ebe66d48762918c460e1cb679baab5128628b76c86a6d87200db74c969337928fefe62d3754b60d89059c4c016ed40ffee4c5594a33de4345378bcbb918f3218d8867267e90152e692fd28c785e1389654cac126c24c6d95ac3b28b2c98c9b", 0xb0}, {&(0x7f0000000b00)="eccb79cc8cfc2e8ff8c49152cd0f04f205d6b224133e571c901db38e6b2257455a45150f2ee369b160be6c3bc9dfc187fd9cf476c74d1d41b3f0cc48d8a1df41914924d8abdedf8c556df7d25c269c9b94decdbfbe4fb87aa84ab0e75f72b9431be2b9f3e5f58e96201ba589434c4a08d6619b3f2354999802c6c7c959b62f122263584ee2c3fac3c1", 0x89}, {0x0}, {&(0x7f0000000c80)="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", 0xfe}], 0x7}, 0x800) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x8) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="9c8c00000000000000000010c7c892886d9496f23017dafe1304000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000200"/28], 0x50) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000200), 0x4) socket$kcm(0xa, 0x3, 0x73) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74002000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014007282800026004009bbc7a46e3988285dcdf12f21308f8", 0x67}], 0x1}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000003004b4dc6fd2bea01000000"], 0x18}, 0x4004080) (async) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) 1.078688908s ago: executing program 0 (id=5218): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x446402, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000280)={0x4, &(0x7f0000000180)=[{0x6, 0x3, 0xa, 0x9}, {0x0, 0x10, 0x40, 0x1ff}, {0x4, 0x6, 0x4, 0x1}, {0x6, 0x9, 0x5, 0x7f}]}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000340)=""/171) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x5, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r4, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 1.00250253s ago: executing program 4 (id=5219): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f00000000c0)="8fa519a2cd3b", 0x0}, 0x20) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x15, 0x0, 0x0, 0xfffffffe}, {0x6}]}) 897.803192ms ago: executing program 0 (id=5220): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x21, 0x2, 0x5, 0x4, 0x31084, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x9c) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="c37a64", 0x3}], 0x1}, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000840)="5c00000013006bcd8e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d0029000701ebff9ee537d34460bc08eab556a705251e8e6182949a3651f60a84c9f5d1938837e779a6d0bdd735310ed709c5bb5a40f698", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000080000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\x00') 794.123894ms ago: executing program 1 (id=5221): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$sock_attach_bpf(r0, 0x0, 0x26, 0x0, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000040)=r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 749.865235ms ago: executing program 4 (id=5223): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x4}, 0xa001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x4, 0x20020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9, 0x586a000000000000}, 0xc800, 0x185, 0xfffffffc, 0x9, 0xb0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x9, &(0x7f0000000000)='\xc6(\\/[\x88{/\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 522.59521ms ago: executing program 1 (id=5225): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$kcm(0x10, 0x2, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000400), 0x4}, 0x102065, 0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404a) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/173, 0xad}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xf, &(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bc09080000000000b60a0100000000000f000000000000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000fb3f699432f8a7d6db5fd170c7dc9831fd6a2619ab0d244747"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000880000000c000000e8000000000000001800000008000000000000000100"/48], 0x30}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x2000}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) 411.485142ms ago: executing program 5 (id=5226): r0 = socket$kcm(0xa, 0x2, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, &(0x7f0000000100), 0x4) 386.270002ms ago: executing program 0 (id=5227): r0 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0xffffffff}]}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x80000000, @private1, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}, 0x8c1) 222.035606ms ago: executing program 5 (id=5228): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1c001800000000000000240000002400000002000000000000000000000400000003000000000000000900000000000000000000000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYRES8=r1], 0x0, 0x5, 0xfffffef2}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x6, 0xfffffefffffffffe}, 0x0, 0xeea, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r6}, 0x1e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000005000000b7080000000000007b8af8ff00000000b70800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$sock(r8, &(0x7f0000001940)={0x0, 0x0, 0x0}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x7fbffffc}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x94) close(r0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x6, 0xffff}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffff8a}, 0xd0a0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r11, 0x1c) 14.33119ms ago: executing program 1 (id=5229): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000200), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="2008020022003507d25a806f8c6394f90524fc600df01341090005000400000037153e370248038011f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000005580)={0x0, 0x0, 0x0}, 0x20) 0s ago: executing program 4 (id=5230): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x5, 0x98128, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0xfffffffe, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000002"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x6a) (async) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x6a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.1.3725'. [ 479.536078][T17984] netlink: 'syz.4.3726': attribute type 22 has an invalid length. [ 479.548458][T17984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3726'. [ 479.590179][T17984] netlink: 'syz.4.3726': attribute type 3 has an invalid length. [ 479.607934][T17984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3726'. [ 479.697254][T17981] netlink: 'syz.0.3724': attribute type 2 has an invalid length. [ 479.711996][T17981] netlink: 'syz.0.3724': attribute type 4 has an invalid length. [ 479.719895][T17981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3724'. [ 479.765716][T17987] netlink: 'syz.0.3724': attribute type 2 has an invalid length. [ 479.796228][T17987] netlink: 'syz.0.3724': attribute type 8 has an invalid length. [ 479.805307][T17987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3724'. [ 480.116864][T17999] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3731'. [ 480.214470][T18006] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3731'. [ 480.231435][T18023] FAULT_INJECTION: forcing a failure. [ 480.231435][T18023] name failslab, interval 1, probability 0, space 0, times 0 [ 480.329688][T18023] CPU: 1 PID: 18023 Comm: syz.3.3737 Not tainted syzkaller #0 [ 480.337196][T18023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.347260][T18023] Call Trace: [ 480.350544][T18023] [ 480.353479][T18023] dump_stack_lvl+0x188/0x250 [ 480.358173][T18023] ? show_regs_print_info+0x20/0x20 [ 480.363380][T18023] ? load_image+0x410/0x410 [ 480.367882][T18023] should_fail+0x383/0x4b0 [ 480.372292][T18023] should_failslab+0x5/0x20 [ 480.376804][T18023] slab_pre_alloc_hook+0x51/0xc0 [ 480.381746][T18023] ? dst_alloc+0x101/0x160 [ 480.386166][T18023] kmem_cache_alloc+0x3d/0x280 [ 480.390938][T18023] dst_alloc+0x101/0x160 [ 480.395188][T18023] ip_route_output_key_hash_rcu+0x15b9/0x24f0 [ 480.401343][T18023] ? ip_route_output_key_hash_rcu+0x1231/0x24f0 [ 480.407599][T18023] ip_route_output_key_hash+0x1c6/0x300 [ 480.413151][T18023] ? ip_route_input_rcu+0x30e0/0x30e0 [ 480.418530][T18023] ? ip_cmsg_send+0x9a5/0xa50 [ 480.423224][T18023] ip_route_output_flow+0x26/0x150 [ 480.428339][T18023] ? security_sk_classify_flow+0x77/0x90 [ 480.433976][T18023] udp_sendmsg+0x15b5/0x2350 [ 480.438568][T18023] ? release_sock+0x2b/0x1b0 [ 480.443172][T18023] ? ip_skb_dst_mtu+0x860/0x860 [ 480.448021][T18023] ? udp_cmsg_send+0x350/0x350 [ 480.452798][T18023] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 480.458785][T18023] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 480.464772][T18023] ? __local_bh_enable_ip+0x136/0x1c0 [ 480.470147][T18023] ? _local_bh_enable+0xa0/0xa0 [ 480.475002][T18023] ? do_raw_spin_unlock+0x11d/0x230 [ 480.480198][T18023] ? inet_sendmsg+0x109/0x2a0 [ 480.484880][T18023] ? inet_sendmsg+0x109/0x2a0 [ 480.489570][T18023] ? inet_send_prepare+0x250/0x250 [ 480.494682][T18023] ____sys_sendmsg+0x5be/0x8f0 [ 480.499456][T18023] ? __sys_sendmsg_sock+0x30/0x30 [ 480.504486][T18023] ? import_iovec+0x6f/0xa0 [ 480.508994][T18023] ___sys_sendmsg+0x236/0x2e0 [ 480.513686][T18023] ? __sys_sendmsg+0x290/0x290 [ 480.518493][T18023] __se_sys_sendmsg+0x1b7/0x2a0 [ 480.523346][T18023] ? __x64_sys_sendmsg+0x80/0x80 [ 480.528280][T18023] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 480.534276][T18023] ? lockdep_hardirqs_on+0x94/0x140 [ 480.539482][T18023] do_syscall_64+0x4c/0xa0 [ 480.543896][T18023] ? clear_bhb_loop+0x30/0x80 [ 480.548568][T18023] ? clear_bhb_loop+0x30/0x80 [ 480.553242][T18023] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.559132][T18023] RIP: 0033:0x7f46c8f31159 [ 480.563549][T18023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.583153][T18023] RSP: 002b:00007f46c7189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.591569][T18023] RAX: ffffffffffffffda RBX: 00007f46c91b8fa0 RCX: 00007f46c8f31159 [ 480.599541][T18023] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 480.607513][T18023] RBP: 00007f46c7189090 R08: 0000000000000000 R09: 0000000000000000 [ 480.615480][T18023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.623445][T18023] R13: 00007f46c91b9038 R14: 00007f46c91b8fa0 R15: 00007ffdbb816588 [ 480.631435][T18023] [ 480.798860][T18039] netlink: 'syz.0.3741': attribute type 13 has an invalid length. [ 480.827776][T18039] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3741'. [ 480.837570][T18039] erspan0: refused to change device tx_queue_len [ 480.899058][T18041] netlink: 'syz.3.3740': attribute type 2 has an invalid length. [ 480.985505][T18047] device bridge_slave_1 left promiscuous mode [ 480.993515][T18047] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.017153][T18047] device bridge_slave_0 left promiscuous mode [ 481.035996][T18047] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.287618][T18051] device syzkaller0 entered promiscuous mode [ 481.310357][T18076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.326534][T18076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.490785][T18081] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 481.622987][ T154] wlan1: Trigger new scan to find an IBSS to join [ 482.213056][T18127] FAULT_INJECTION: forcing a failure. [ 482.213056][T18127] name failslab, interval 1, probability 0, space 0, times 0 [ 482.255193][T18127] CPU: 0 PID: 18127 Comm: syz.0.3768 Not tainted syzkaller #0 [ 482.262693][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.272736][T18127] Call Trace: [ 482.276000][T18127] [ 482.278912][T18127] dump_stack_lvl+0x188/0x250 [ 482.283588][T18127] ? show_regs_print_info+0x20/0x20 [ 482.288771][T18127] ? load_image+0x410/0x410 [ 482.293260][T18127] ? __might_sleep+0xf0/0xf0 [ 482.297833][T18127] ? __lock_acquire+0x7b50/0x7b50 [ 482.302844][T18127] should_fail+0x383/0x4b0 [ 482.307246][T18127] should_failslab+0x5/0x20 [ 482.311729][T18127] slab_pre_alloc_hook+0x51/0xc0 [ 482.316660][T18127] kmem_cache_alloc_node+0x47/0x2c0 [ 482.321840][T18127] ? __alloc_skb+0xf4/0x750 [ 482.326328][T18127] __alloc_skb+0xf4/0x750 [ 482.330640][T18127] alloc_skb_with_frags+0xa7/0x720 [ 482.335736][T18127] ? 0xffffffffa0034000 [ 482.339871][T18127] ? is_bpf_text_address+0x254/0x270 [ 482.345141][T18127] sock_alloc_send_pskb+0x87f/0x9a0 [ 482.350319][T18127] ? unwind_get_return_address+0x49/0x80 [ 482.355973][T18127] ? sock_kzfree_s+0x50/0x50 [ 482.360547][T18127] ? cpu_online+0x30/0x30 [ 482.364869][T18127] __ip_append_data+0x2089/0x3320 [ 482.369876][T18127] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 482.374885][T18127] ? do_syscall_64+0x4c/0xa0 [ 482.379463][T18127] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.385530][T18127] ? ip_skb_dst_mtu+0x860/0x860 [ 482.390365][T18127] ? ip_setup_cork+0x870/0x870 [ 482.395110][T18127] ? ip_setup_cork+0x48f/0x870 [ 482.399854][T18127] ip_make_skb+0x227/0x440 [ 482.404254][T18127] ? ip_skb_dst_mtu+0x860/0x860 [ 482.409087][T18127] ? ip_flush_pending_frames+0x250/0x250 [ 482.414713][T18127] udp_sendmsg+0x1a85/0x2350 [ 482.419320][T18127] ? release_sock+0x2b/0x1b0 [ 482.423924][T18127] ? ip_skb_dst_mtu+0x860/0x860 [ 482.428773][T18127] ? udp_cmsg_send+0x350/0x350 [ 482.433525][T18127] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.439499][T18127] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 482.445474][T18127] ? __local_bh_enable_ip+0x136/0x1c0 [ 482.450835][T18127] ? _local_bh_enable+0xa0/0xa0 [ 482.455675][T18127] ? inet_sendmsg+0x109/0x2a0 [ 482.460339][T18127] ? inet_sendmsg+0x109/0x2a0 [ 482.465002][T18127] ? inet_send_prepare+0x250/0x250 [ 482.470098][T18127] ____sys_sendmsg+0x5be/0x8f0 [ 482.474859][T18127] ? __sys_sendmsg_sock+0x30/0x30 [ 482.479876][T18127] ? import_iovec+0x6f/0xa0 [ 482.484371][T18127] ___sys_sendmsg+0x236/0x2e0 [ 482.489039][T18127] ? __sys_sendmsg+0x290/0x290 [ 482.493813][T18127] __se_sys_sendmsg+0x1b7/0x2a0 [ 482.498654][T18127] ? __x64_sys_sendmsg+0x80/0x80 [ 482.503572][T18127] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.509546][T18127] ? lockdep_hardirqs_on+0x94/0x140 [ 482.514730][T18127] do_syscall_64+0x4c/0xa0 [ 482.519129][T18127] ? clear_bhb_loop+0x30/0x80 [ 482.523791][T18127] ? clear_bhb_loop+0x30/0x80 [ 482.528451][T18127] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.534326][T18127] RIP: 0033:0x7fc3d9c0c159 [ 482.538725][T18127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.558310][T18127] RSP: 002b:00007fc3d7e64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.566709][T18127] RAX: ffffffffffffffda RBX: 00007fc3d9e93fa0 RCX: 00007fc3d9c0c159 [ 482.574664][T18127] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 482.582619][T18127] RBP: 00007fc3d7e64090 R08: 0000000000000000 R09: 0000000000000000 [ 482.590575][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.598527][T18127] R13: 00007fc3d9e94038 R14: 00007fc3d9e93fa0 R15: 00007ffc8f2e41a8 [ 482.606493][T18127] [ 482.787960][T18146] FAULT_INJECTION: forcing a failure. [ 482.787960][T18146] name failslab, interval 1, probability 0, space 0, times 0 [ 482.800464][T18142] validate_nla: 11 callbacks suppressed [ 482.800478][T18142] netlink: 'syz.3.3774': attribute type 29 has an invalid length. [ 482.805964][T18146] CPU: 1 PID: 18146 Comm: syz.4.3772 Not tainted syzkaller #0 [ 482.821373][T18146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.831433][T18146] Call Trace: [ 482.834717][T18146] [ 482.837646][T18146] dump_stack_lvl+0x188/0x250 [ 482.842352][T18146] ? show_regs_print_info+0x20/0x20 [ 482.847558][T18146] ? load_image+0x410/0x410 [ 482.851894][ T7713] Bluetooth: hci0: command 0x0406 tx timeout [ 482.852071][T18146] ? __might_sleep+0xf0/0xf0 [ 482.862612][T18146] ? __lock_acquire+0x7b50/0x7b50 [ 482.867645][T18146] ? netlink_insert+0xe90/0x11f0 [ 482.872597][T18146] should_fail+0x383/0x4b0 [ 482.877028][T18146] should_failslab+0x5/0x20 [ 482.881540][T18146] slab_pre_alloc_hook+0x51/0xc0 [ 482.886487][T18146] kmem_cache_alloc_node+0x47/0x2c0 [ 482.891692][T18146] ? __alloc_skb+0xf4/0x750 [ 482.896210][T18146] __alloc_skb+0xf4/0x750 [ 482.900553][T18146] netlink_sendmsg+0x654/0xbe0 [ 482.905341][T18146] ? netlink_getsockopt+0x570/0x570 [ 482.910546][T18146] ? aa_sock_msg_perm+0x94/0x150 [ 482.915490][T18146] ? apparmor_socket_sendmsg+0x88/0x230 [ 482.921040][T18146] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 482.926338][T18146] ? security_socket_sendmsg+0x7c/0xa0 [ 482.931909][T18146] ? netlink_getsockopt+0x570/0x570 [ 482.937117][T18146] ____sys_sendmsg+0x5be/0x8f0 [ 482.941894][T18146] ? __sys_sendmsg_sock+0x30/0x30 [ 482.946935][T18146] ? import_iovec+0x6f/0xa0 [ 482.951447][T18146] ___sys_sendmsg+0x236/0x2e0 [ 482.956138][T18146] ? __sys_sendmsg+0x290/0x290 [ 482.960923][T18146] ? trace_event_raw_event_lock+0x250/0x250 [ 482.966844][T18146] __se_sys_sendmsg+0x1b7/0x2a0 [ 482.971704][T18146] ? __x64_sys_sendmsg+0x80/0x80 [ 482.976641][T18146] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.982634][T18146] ? lockdep_hardirqs_on+0x94/0x140 [ 482.987838][T18146] do_syscall_64+0x4c/0xa0 [ 482.992278][T18146] ? clear_bhb_loop+0x30/0x80 [ 482.996959][T18146] ? clear_bhb_loop+0x30/0x80 [ 483.001678][T18146] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 483.007572][T18146] RIP: 0033:0x7f3495be8159 [ 483.011988][T18146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.031588][T18146] RSP: 002b:00007f3493e40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.039993][T18146] RAX: ffffffffffffffda RBX: 00007f3495e6ffa0 RCX: 00007f3495be8159 [ 483.047950][T18146] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 483.055906][T18146] RBP: 00007f3493e40090 R08: 0000000000000000 R09: 0000000000000000 [ 483.063863][T18146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.071824][T18146] R13: 00007f3495e70038 R14: 00007f3495e6ffa0 R15: 00007fff4bd15b08 [ 483.079794][T18146] [ 483.085324][T18137] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 483.284675][T18155] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 483.407174][T18155] bond0: (slave wlan1): Releasing backup interface [ 483.477128][T18155] team0: Port device wlan1 added [ 483.492754][T18162] __nla_validate_parse: 8 callbacks suppressed [ 483.492769][T18162] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3779'. [ 483.773958][T18187] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3786'. [ 483.804994][T18187] netlink: 'syz.3.3786': attribute type 2 has an invalid length. [ 483.817247][T18189] FAULT_INJECTION: forcing a failure. [ 483.817247][T18189] name failslab, interval 1, probability 0, space 0, times 0 [ 483.834485][T18191] FAULT_INJECTION: forcing a failure. [ 483.834485][T18191] name failslab, interval 1, probability 0, space 0, times 0 [ 483.860841][T18189] CPU: 0 PID: 18189 Comm: syz.2.3788 Not tainted syzkaller #0 [ 483.868339][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.878401][T18189] Call Trace: [ 483.881686][T18189] [ 483.884613][T18189] dump_stack_lvl+0x188/0x250 [ 483.889286][T18189] ? show_regs_print_info+0x20/0x20 [ 483.894473][T18189] ? load_image+0x410/0x410 [ 483.898964][T18189] ? __might_sleep+0xf0/0xf0 [ 483.903543][T18189] ? __lock_acquire+0x7b50/0x7b50 [ 483.908556][T18189] should_fail+0x383/0x4b0 [ 483.912961][T18189] should_failslab+0x5/0x20 [ 483.917448][T18189] slab_pre_alloc_hook+0x51/0xc0 [ 483.922371][T18189] __kmalloc_node_track_caller+0x68/0x3a0 [ 483.928195][T18189] ? alloc_skb_with_frags+0xa7/0x720 [ 483.933478][T18189] ? __alloc_skb+0xf4/0x750 [ 483.937972][T18189] ? alloc_skb_with_frags+0xa7/0x720 [ 483.943246][T18189] __alloc_skb+0x22c/0x750 [ 483.947660][T18189] alloc_skb_with_frags+0xa7/0x720 [ 483.952761][T18189] ? is_bpf_text_address+0x254/0x270 [ 483.958038][T18189] sock_alloc_send_pskb+0x87f/0x9a0 [ 483.963221][T18189] ? unwind_get_return_address+0x49/0x80 [ 483.968849][T18189] ? sock_kzfree_s+0x50/0x50 [ 483.973423][T18189] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 483.980005][T18189] __ip_append_data+0x2089/0x3320 [ 483.985014][T18189] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 483.990021][T18189] ? do_syscall_64+0x4c/0xa0 [ 483.994594][T18189] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.000664][T18189] ? ip_skb_dst_mtu+0x860/0x860 [ 484.005503][T18189] ? ip_setup_cork+0x870/0x870 [ 484.010264][T18189] ? ip_setup_cork+0x48f/0x870 [ 484.015017][T18189] ip_make_skb+0x227/0x440 [ 484.019430][T18189] ? ip_skb_dst_mtu+0x860/0x860 [ 484.024275][T18189] ? ip_flush_pending_frames+0x250/0x250 [ 484.029906][T18189] udp_sendmsg+0x1a85/0x2350 [ 484.034485][T18189] ? release_sock+0x2b/0x1b0 [ 484.039071][T18189] ? ip_skb_dst_mtu+0x860/0x860 [ 484.043908][T18189] ? udp_cmsg_send+0x350/0x350 [ 484.048658][T18189] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.054630][T18189] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 484.060604][T18189] ? __local_bh_enable_ip+0x136/0x1c0 [ 484.065969][T18189] ? _local_bh_enable+0xa0/0xa0 [ 484.070806][T18189] ? inet_sendmsg+0x109/0x2a0 [ 484.075470][T18189] ? inet_sendmsg+0x109/0x2a0 [ 484.080136][T18189] ? inet_send_prepare+0x250/0x250 [ 484.085232][T18189] ____sys_sendmsg+0x5be/0x8f0 [ 484.089988][T18189] ? __sys_sendmsg_sock+0x30/0x30 [ 484.095000][T18189] ? import_iovec+0x6f/0xa0 [ 484.099489][T18189] ___sys_sendmsg+0x236/0x2e0 [ 484.104156][T18189] ? __sys_sendmsg+0x290/0x290 [ 484.108928][T18189] __se_sys_sendmsg+0x1b7/0x2a0 [ 484.113763][T18189] ? __x64_sys_sendmsg+0x80/0x80 [ 484.118681][T18189] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.124655][T18189] ? lockdep_hardirqs_on+0x94/0x140 [ 484.129844][T18189] do_syscall_64+0x4c/0xa0 [ 484.134244][T18189] ? clear_bhb_loop+0x30/0x80 [ 484.138903][T18189] ? clear_bhb_loop+0x30/0x80 [ 484.143566][T18189] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.149441][T18189] RIP: 0033:0x7f7d7e9d9159 [ 484.153842][T18189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.173429][T18189] RSP: 002b:00007f7d7cc31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.181828][T18189] RAX: ffffffffffffffda RBX: 00007f7d7ec60fa0 RCX: 00007f7d7e9d9159 [ 484.189781][T18189] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 484.197735][T18189] RBP: 00007f7d7cc31090 R08: 0000000000000000 R09: 0000000000000000 [ 484.205688][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.213642][T18189] R13: 00007f7d7ec61038 R14: 00007f7d7ec60fa0 R15: 00007ffd2b1b8e08 [ 484.221610][T18189] [ 484.235645][T18191] CPU: 1 PID: 18191 Comm: syz.0.3787 Not tainted syzkaller #0 [ 484.243133][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.253171][T18191] Call Trace: [ 484.256434][T18191] [ 484.259351][T18191] dump_stack_lvl+0x188/0x250 [ 484.264025][T18191] ? show_regs_print_info+0x20/0x20 [ 484.269217][T18191] ? load_image+0x410/0x410 [ 484.273717][T18191] ? __might_sleep+0xf0/0xf0 [ 484.278308][T18191] ? __lock_acquire+0x7b50/0x7b50 [ 484.283328][T18191] should_fail+0x383/0x4b0 [ 484.287748][T18191] should_failslab+0x5/0x20 [ 484.292241][T18191] slab_pre_alloc_hook+0x51/0xc0 [ 484.297175][T18191] __kmalloc_node_track_caller+0x68/0x3a0 [ 484.302891][T18191] ? netlink_sendmsg+0x654/0xbe0 [ 484.307822][T18191] ? __alloc_skb+0xf4/0x750 [ 484.312315][T18191] ? netlink_sendmsg+0x654/0xbe0 [ 484.317244][T18191] __alloc_skb+0x22c/0x750 [ 484.321648][T18191] netlink_sendmsg+0x654/0xbe0 [ 484.326410][T18191] ? netlink_getsockopt+0x570/0x570 [ 484.331593][T18191] ? aa_sock_msg_perm+0x94/0x150 [ 484.336521][T18191] ? apparmor_socket_sendmsg+0x88/0x230 [ 484.342050][T18191] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 484.347321][T18191] ? security_socket_sendmsg+0x7c/0xa0 [ 484.352764][T18191] ? netlink_getsockopt+0x570/0x570 [ 484.357948][T18191] ____sys_sendmsg+0x5be/0x8f0 [ 484.362702][T18191] ? __sys_sendmsg_sock+0x30/0x30 [ 484.367719][T18191] ? import_iovec+0x6f/0xa0 [ 484.372210][T18191] ___sys_sendmsg+0x236/0x2e0 [ 484.376881][T18191] ? __sys_sendmsg+0x290/0x290 [ 484.381652][T18191] __se_sys_sendmsg+0x1b7/0x2a0 [ 484.386488][T18191] ? __x64_sys_sendmsg+0x80/0x80 [ 484.391405][T18191] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.397378][T18191] ? lockdep_hardirqs_on+0x94/0x140 [ 484.402565][T18191] do_syscall_64+0x4c/0xa0 [ 484.406964][T18191] ? clear_bhb_loop+0x30/0x80 [ 484.411630][T18191] ? clear_bhb_loop+0x30/0x80 [ 484.416291][T18191] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 484.422167][T18191] RIP: 0033:0x7fc3d9c0c159 [ 484.426579][T18191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.446168][T18191] RSP: 002b:00007fc3d7e64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.454569][T18191] RAX: ffffffffffffffda RBX: 00007fc3d9e93fa0 RCX: 00007fc3d9c0c159 [ 484.462526][T18191] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 484.470490][T18191] RBP: 00007fc3d7e64090 R08: 0000000000000000 R09: 0000000000000000 [ 484.478443][T18191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.486399][T18191] R13: 00007fc3d9e94038 R14: 00007fc3d9e93fa0 R15: 00007ffc8f2e41a8 [ 484.494365][T18191] [ 484.735113][T18206] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3793'. [ 484.989891][T18218] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 485.045344][T18218] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3796'. [ 485.232532][T18227] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 485.264408][T18227] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3796'. [ 485.623585][ T154] wlan1: Trigger new scan to find an IBSS to join [ 485.871170][T18236] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3799'. [ 485.905181][T18246] FAULT_INJECTION: forcing a failure. [ 485.905181][T18246] name failslab, interval 1, probability 0, space 0, times 0 [ 485.945063][T18236] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 485.954984][T18248] syz.1.3801[18248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.955070][T18248] syz.1.3801[18248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.974421][T18236] CPU: 0 PID: 18236 Comm: syz.4.3799 Not tainted syzkaller #0 [ 485.993260][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.003320][T18236] Call Trace: [ 486.006603][T18236] [ 486.009541][T18236] dump_stack_lvl+0x188/0x250 [ 486.014237][T18236] ? show_regs_print_info+0x20/0x20 [ 486.019452][T18236] ? load_image+0x410/0x410 [ 486.023979][T18236] sysfs_warn_dup+0x8a/0xa0 [ 486.028496][T18236] sysfs_do_create_link_sd+0xc0/0x110 [ 486.033874][T18236] device_add+0x83b/0x1050 [ 486.038291][T18236] wiphy_register+0x1e74/0x2c40 [ 486.043157][T18236] ? cfg80211_event_work+0x40/0x40 [ 486.048271][T18236] ? minstrel_ht_alloc+0x807/0x980 [ 486.053383][T18236] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 486.059448][T18236] ieee80211_register_hw+0x2a03/0x3a60 [ 486.064903][T18236] ? ieee80211_register_hw+0xaa1/0x3a60 [ 486.070445][T18236] ? ieee80211_tasklet_handler+0x20/0x20 [ 486.076070][T18236] ? rcu_is_watching+0x11/0xa0 [ 486.080832][T18236] ? hrtimer_init+0x10c/0x220 [ 486.085503][T18236] mac80211_hwsim_new_radio+0x209d/0x4050 [ 486.091229][T18236] hwsim_new_radio_nl+0xa7d/0xc50 [ 486.096254][T18236] genl_rcv_msg+0xd0b/0xfa0 [ 486.100752][T18236] ? genl_bind+0x370/0x370 [ 486.105160][T18236] ? __dev_queue_xmit+0x1b64/0x2e50 [ 486.110341][T18236] ? verify_lock_unused+0x140/0x140 [ 486.115536][T18236] ? dev_queue_xmit+0x20/0x20 [ 486.120193][T18236] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 486.126517][T18236] netlink_rcv_skb+0x1e9/0x430 [ 486.131270][T18236] ? genl_bind+0x370/0x370 [ 486.135668][T18236] ? netlink_ack+0xb10/0xb10 [ 486.140249][T18236] ? down_read+0x1aa/0x2e0 [ 486.144651][T18236] genl_rcv+0x24/0x40 [ 486.148615][T18236] netlink_unicast+0x78f/0x940 [ 486.153373][T18236] netlink_sendmsg+0x8ba/0xbe0 [ 486.158133][T18236] ? netlink_getsockopt+0x570/0x570 [ 486.163315][T18236] ? aa_sock_msg_perm+0x94/0x150 [ 486.168238][T18236] ? apparmor_socket_sendmsg+0x88/0x230 [ 486.173766][T18236] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 486.179042][T18236] ? security_socket_sendmsg+0x7c/0xa0 [ 486.184484][T18236] ? netlink_getsockopt+0x570/0x570 [ 486.189669][T18236] ____sys_sendmsg+0x5be/0x8f0 [ 486.194430][T18236] ? __sys_sendmsg_sock+0x30/0x30 [ 486.199443][T18236] ? import_iovec+0x6f/0xa0 [ 486.203932][T18236] ___sys_sendmsg+0x236/0x2e0 [ 486.208598][T18236] ? __sys_sendmsg+0x290/0x290 [ 486.213355][T18236] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 486.219599][T18236] __se_sys_sendmsg+0x1b7/0x2a0 [ 486.224440][T18236] ? __x64_sys_sendmsg+0x80/0x80 [ 486.229359][T18236] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 486.235365][T18236] ? lockdep_hardirqs_on+0x94/0x140 [ 486.240553][T18236] do_syscall_64+0x4c/0xa0 [ 486.244954][T18236] ? clear_bhb_loop+0x30/0x80 [ 486.249613][T18236] ? clear_bhb_loop+0x30/0x80 [ 486.254274][T18236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.260149][T18236] RIP: 0033:0x7f3495be8159 [ 486.264550][T18236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.284141][T18236] RSP: 002b:00007f3493e40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.292545][T18236] RAX: ffffffffffffffda RBX: 00007f3495e6ffa0 RCX: 00007f3495be8159 [ 486.300500][T18236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 486.308540][T18236] RBP: 00007f3495c7f024 R08: 0000000000000000 R09: 0000000000000000 [ 486.316494][T18236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.324447][T18236] R13: 00007f3495e70038 R14: 00007f3495e6ffa0 R15: 00007fff4bd15b08 [ 486.332414][T18236] [ 486.339595][T18246] CPU: 0 PID: 18246 Comm: syz.3.3802 Not tainted syzkaller #0 [ 486.347074][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.357123][T18246] Call Trace: [ 486.360393][T18246] [ 486.363313][T18246] dump_stack_lvl+0x188/0x250 [ 486.367985][T18246] ? show_regs_print_info+0x20/0x20 [ 486.373189][T18246] ? load_image+0x410/0x410 [ 486.377685][T18246] ? rcu_lock_release+0x5/0x20 [ 486.382516][T18246] should_fail+0x383/0x4b0 [ 486.386920][T18246] should_failslab+0x5/0x20 [ 486.391406][T18246] slab_pre_alloc_hook+0x51/0xc0 [ 486.396341][T18246] ? __nf_conntrack_alloc+0x93/0x370 [ 486.401610][T18246] kmem_cache_alloc+0x3d/0x280 [ 486.406360][T18246] __nf_conntrack_alloc+0x93/0x370 [ 486.411456][T18246] init_conntrack+0x2fd/0x1530 [ 486.416203][T18246] ? get_l4proto+0x670/0x670 [ 486.420776][T18246] ? early_drop+0x800/0x800 [ 486.425260][T18246] ? nf_conntrack_find_get+0x640/0x640 [ 486.430702][T18246] ? __siphash_unaligned+0x286/0x3d0 [ 486.436005][T18246] nf_conntrack_in+0xd76/0x17b0 [ 486.440853][T18246] ? nf_ct_pernet+0x240/0x240 [ 486.445530][T18246] ? ipv4_conntrack_defrag+0x284/0x590 [ 486.451037][T18246] ? slab_free_freelist_hook+0xec/0x170 [ 486.456563][T18246] ? ipv4_conntrack_local+0x11f/0x200 [ 486.461959][T18246] ? ipv4_conntrack_in+0x20/0x20 [ 486.466877][T18246] nf_hook_slow+0xb9/0x200 [ 486.471280][T18246] ? nf_hook+0x360/0x360 [ 486.475519][T18246] nf_hook+0x205/0x360 [ 486.479586][T18246] ? __ip_local_out+0x5e0/0x5e0 [ 486.484434][T18246] ? nf_hook+0x360/0x360 [ 486.488675][T18246] __ip_local_out+0x4b7/0x5e0 [ 486.493342][T18246] ? nf_hook+0x360/0x360 [ 486.497574][T18246] ip_send_skb+0x48/0x1d0 [ 486.501897][T18246] udp_send_skb+0x93f/0x1330 [ 486.506483][T18246] udp_sendmsg+0x1ac7/0x2350 [ 486.511061][T18246] ? release_sock+0x2b/0x1b0 [ 486.515646][T18246] ? ip_skb_dst_mtu+0x860/0x860 [ 486.520482][T18246] ? udp_cmsg_send+0x350/0x350 [ 486.525230][T18246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 486.531197][T18246] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 486.537166][T18246] ? __local_bh_enable_ip+0x136/0x1c0 [ 486.542522][T18246] ? _local_bh_enable+0xa0/0xa0 [ 486.547377][T18246] ? inet_sendmsg+0x109/0x2a0 [ 486.552041][T18246] ? inet_sendmsg+0x109/0x2a0 [ 486.556699][T18246] ? inet_send_prepare+0x250/0x250 [ 486.561809][T18246] ____sys_sendmsg+0x5be/0x8f0 [ 486.566566][T18246] ? __sys_sendmsg_sock+0x30/0x30 [ 486.571584][T18246] ? import_iovec+0x6f/0xa0 [ 486.576077][T18246] ___sys_sendmsg+0x236/0x2e0 [ 486.580740][T18246] ? __sys_sendmsg+0x290/0x290 [ 486.585532][T18246] __se_sys_sendmsg+0x1b7/0x2a0 [ 486.590367][T18246] ? __x64_sys_sendmsg+0x80/0x80 [ 486.595285][T18246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 486.601255][T18246] ? lockdep_hardirqs_on+0x94/0x140 [ 486.606437][T18246] do_syscall_64+0x4c/0xa0 [ 486.610837][T18246] ? clear_bhb_loop+0x30/0x80 [ 486.615497][T18246] ? clear_bhb_loop+0x30/0x80 [ 486.620158][T18246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.626032][T18246] RIP: 0033:0x7f46c8f31159 [ 486.630432][T18246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.650018][T18246] RSP: 002b:00007f46c7189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.658413][T18246] RAX: ffffffffffffffda RBX: 00007f46c91b8fa0 RCX: 00007f46c8f31159 [ 486.666374][T18246] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 486.674325][T18246] RBP: 00007f46c7189090 R08: 0000000000000000 R09: 0000000000000000 [ 486.682279][T18246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.690234][T18246] R13: 00007f46c91b9038 R14: 00007f46c91b8fa0 R15: 00007ffdbb816588 [ 486.698199][T18246] [ 486.806744][T18261] FAULT_INJECTION: forcing a failure. [ 486.806744][T18261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.820547][T18261] CPU: 1 PID: 18261 Comm: syz.3.3807 Not tainted syzkaller #0 [ 486.828019][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 486.838086][T18261] Call Trace: [ 486.841367][T18261] [ 486.844301][T18261] dump_stack_lvl+0x188/0x250 [ 486.848987][T18261] ? show_regs_print_info+0x20/0x20 [ 486.854195][T18261] ? load_image+0x410/0x410 [ 486.858712][T18261] ? __lock_acquire+0x7b50/0x7b50 [ 486.863758][T18261] should_fail+0x383/0x4b0 [ 486.868181][T18261] _copy_from_iter+0x234/0x1160 [ 486.873041][T18261] ? __lock_acquire+0x7b50/0x7b50 [ 486.878084][T18261] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 486.883460][T18261] ? __virt_addr_valid+0x3c6/0x470 [ 486.888664][T18261] ? __phys_addr_symbol+0x2b/0x70 [ 486.893686][T18261] ? __check_object_size+0x30c/0x410 [ 486.898978][T18261] netlink_sendmsg+0x758/0xbe0 [ 486.903755][T18261] ? netlink_getsockopt+0x570/0x570 [ 486.909040][T18261] ? aa_sock_msg_perm+0x94/0x150 [ 486.913987][T18261] ? apparmor_socket_sendmsg+0x88/0x230 [ 486.919532][T18261] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 486.924818][T18261] ? security_socket_sendmsg+0x7c/0xa0 [ 486.930283][T18261] ? netlink_getsockopt+0x570/0x570 [ 486.935493][T18261] ____sys_sendmsg+0x5be/0x8f0 [ 486.940270][T18261] ? __sys_sendmsg_sock+0x30/0x30 [ 486.945305][T18261] ? import_iovec+0x6f/0xa0 [ 486.949807][T18261] ___sys_sendmsg+0x236/0x2e0 [ 486.954492][T18261] ? __sys_sendmsg+0x290/0x290 [ 486.959293][T18261] __se_sys_sendmsg+0x1b7/0x2a0 [ 486.964152][T18261] ? __x64_sys_sendmsg+0x80/0x80 [ 486.969097][T18261] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 486.975098][T18261] ? lockdep_hardirqs_on+0x94/0x140 [ 486.980300][T18261] do_syscall_64+0x4c/0xa0 [ 486.984714][T18261] ? clear_bhb_loop+0x30/0x80 [ 486.989396][T18261] ? clear_bhb_loop+0x30/0x80 [ 486.994082][T18261] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.999976][T18261] RIP: 0033:0x7f46c8f31159 [ 487.004390][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.024000][T18261] RSP: 002b:00007f46c7189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.032426][T18261] RAX: ffffffffffffffda RBX: 00007f46c91b8fa0 RCX: 00007f46c8f31159 [ 487.040403][T18261] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 487.048377][T18261] RBP: 00007f46c7189090 R08: 0000000000000000 R09: 0000000000000000 [ 487.056352][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.064323][T18261] R13: 00007f46c91b9038 R14: 00007f46c91b8fa0 R15: 00007ffdbb816588 [ 487.072311][T18261] [ 487.648548][T18282] netlink: 'syz.0.3810': attribute type 9 has an invalid length. [ 487.688995][T18282] netlink: 189600 bytes leftover after parsing attributes in process `syz.0.3810'. [ 488.005555][T18294] syz.2.3817[18294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.005816][T18294] syz.2.3817[18294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.159945][T18302] syz.2.3817[18302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.271136][T18302] syz.2.3817[18302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.308848][T18315] netlink: 'syz.3.3820': attribute type 39 has an invalid length. [ 488.715448][T18338] netlink: 'syz.3.3826': attribute type 3 has an invalid length. [ 488.741866][T18338] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3826'. [ 489.622956][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 489.789195][T18386] netlink: 'syz.1.3838': attribute type 29 has an invalid length. [ 489.839493][T18386] netlink: 'syz.1.3838': attribute type 29 has an invalid length. [ 489.874917][T18394] netlink: 'syz.1.3838': attribute type 29 has an invalid length. [ 489.896385][T18393] netlink: 'syz.0.3839': attribute type 10 has an invalid length. [ 489.951538][T18393] team0: Port device dummy0 added [ 490.018057][T18399] pim6reg: tun_chr_ioctl cmd 1074025677 [ 490.044858][T18399] pim6reg: linktype set to 778 [ 490.062195][T18400] pim6reg: tun_chr_ioctl cmd 1074025677 [ 490.067875][T18400] pim6reg: linktype set to 778 [ 490.105523][T18407] netlink: 'syz.1.3845': attribute type 3 has an invalid length. [ 490.127446][T18407] netlink: 'syz.1.3845': attribute type 6 has an invalid length. [ 490.169295][T18407] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.3845'. [ 490.347392][T18420] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3849'. [ 490.400108][T18420] netlink: 196432 bytes leftover after parsing attributes in process `syz.4.3849'. [ 490.558456][ T154] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 490.576073][T18437] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 490.603560][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.815153][T18444] netlink: 'syz.0.3856': attribute type 29 has an invalid length. [ 491.274379][T18461] team0: Device wg1 is of different type [ 491.729485][T18472] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 491.753647][T18472] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 492.801814][T18489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3866'. [ 493.026905][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3873'. [ 493.061751][ T7738] Bluetooth: hci3: command 0x0406 tx timeout [ 493.096715][T18500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3873'. [ 493.255896][T18517] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3881'. [ 493.286712][T18517] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.3881'. [ 493.328870][T18517] tc_dump_action: action bad kind [ 493.360933][T18529] validate_nla: 6 callbacks suppressed [ 493.360950][T18529] netlink: 'syz.1.3880': attribute type 21 has an invalid length. [ 493.400945][T18529] netlink: 'syz.1.3880': attribute type 10 has an invalid length. [ 493.433465][T18529] netlink: 'syz.1.3880': attribute type 12 has an invalid length. [ 493.450637][T18529] netlink: 'syz.1.3880': attribute type 13 has an invalid length. [ 493.475202][T18529] netlink: 'syz.1.3880': attribute type 14 has an invalid length. [ 493.492825][T18529] netlink: 'syz.1.3880': attribute type 15 has an invalid length. [ 493.510675][T18529] netlink: 'syz.1.3880': attribute type 16 has an invalid length. [ 493.528943][T18529] netlink: 'syz.1.3880': attribute type 19 has an invalid length. [ 493.557970][T18529] netlink: 'syz.1.3880': attribute type 21 has an invalid length. [ 493.576179][T18529] netlink: 'syz.1.3880': attribute type 22 has an invalid length. [ 493.597343][T18529] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.3880'. [ 493.742699][T18538] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 494.119073][T18521] delete_channel: no stack [ 494.390353][T18554] __nla_validate_parse: 1 callbacks suppressed [ 494.390386][T18554] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.3889'. [ 494.553932][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3890'. [ 494.988544][T18579] bridge0: port 3(dummy0) entered disabled state [ 494.995076][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.002467][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.122988][T18579] bridge0: port 3(dummy0) entered disabled state [ 495.182607][T18579] device bridge_slave_1 left promiscuous mode [ 495.189933][T18579] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.206453][T18579] device bridge_slave_0 left promiscuous mode [ 495.216378][T18579] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.354544][T18597] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3900'. [ 498.409173][T18602] FAULT_INJECTION: forcing a failure. [ 498.409173][T18602] name failslab, interval 1, probability 0, space 0, times 0 [ 498.430666][T18602] CPU: 1 PID: 18602 Comm: syz.4.3902 Not tainted syzkaller #0 [ 498.438154][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.448248][T18602] Call Trace: [ 498.451522][T18602] [ 498.454444][T18602] dump_stack_lvl+0x188/0x250 [ 498.459118][T18602] ? show_regs_print_info+0x20/0x20 [ 498.464306][T18602] ? load_image+0x410/0x410 [ 498.468800][T18602] ? __might_sleep+0xf0/0xf0 [ 498.473371][T18602] ? __lock_acquire+0x7b50/0x7b50 [ 498.478380][T18602] should_fail+0x383/0x4b0 [ 498.482787][T18602] should_failslab+0x5/0x20 [ 498.487281][T18602] slab_pre_alloc_hook+0x51/0xc0 [ 498.492206][T18602] __kmalloc_node_track_caller+0x68/0x3a0 [ 498.497906][T18602] ? netlink_ack+0x35c/0xb10 [ 498.502479][T18602] ? __alloc_skb+0xf4/0x750 [ 498.506963][T18602] ? netlink_ack+0x35c/0xb10 [ 498.511538][T18602] __alloc_skb+0x22c/0x750 [ 498.515944][T18602] netlink_ack+0x35c/0xb10 [ 498.520348][T18602] ? memcpy+0x3c/0x60 [ 498.524436][T18602] ? netlink_dump+0xdd0/0xdd0 [ 498.529097][T18602] ? __copy_skb_header+0x3ba/0x4f0 [ 498.534196][T18602] netlink_rcv_skb+0x267/0x430 [ 498.538948][T18602] ? rtnetlink_bind+0x80/0x80 [ 498.543614][T18602] ? netlink_ack+0xb10/0xb10 [ 498.548208][T18602] netlink_unicast+0x78f/0x940 [ 498.552962][T18602] netlink_sendmsg+0x8ba/0xbe0 [ 498.557714][T18602] ? netlink_getsockopt+0x570/0x570 [ 498.562891][T18602] ? aa_sock_msg_perm+0x94/0x150 [ 498.567813][T18602] ? apparmor_socket_sendmsg+0x88/0x230 [ 498.573341][T18602] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 498.578608][T18602] ? security_socket_sendmsg+0x7c/0xa0 [ 498.584046][T18602] ? netlink_getsockopt+0x570/0x570 [ 498.589226][T18602] ____sys_sendmsg+0x5be/0x8f0 [ 498.593982][T18602] ? __sys_sendmsg_sock+0x30/0x30 [ 498.598996][T18602] ? import_iovec+0x6f/0xa0 [ 498.603489][T18602] ___sys_sendmsg+0x236/0x2e0 [ 498.608156][T18602] ? __sys_sendmsg+0x290/0x290 [ 498.612933][T18602] __se_sys_sendmsg+0x1b7/0x2a0 [ 498.617767][T18602] ? __x64_sys_sendmsg+0x80/0x80 [ 498.622686][T18602] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 498.628661][T18602] ? lockdep_hardirqs_on+0x94/0x140 [ 498.633844][T18602] do_syscall_64+0x4c/0xa0 [ 498.638246][T18602] ? clear_bhb_loop+0x30/0x80 [ 498.642904][T18602] ? clear_bhb_loop+0x30/0x80 [ 498.647565][T18602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 498.653438][T18602] RIP: 0033:0x7f3495be8159 [ 498.657836][T18602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.677421][T18602] RSP: 002b:00007f3493e40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.685819][T18602] RAX: ffffffffffffffda RBX: 00007f3495e6ffa0 RCX: 00007f3495be8159 [ 498.693774][T18602] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 498.701725][T18602] RBP: 00007f3493e40090 R08: 0000000000000000 R09: 0000000000000000 [ 498.709676][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.717629][T18602] R13: 00007f3495e70038 R14: 00007f3495e6ffa0 R15: 00007fff4bd15b08 [ 498.725593][T18602] [ 499.129858][T18624] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3909'. [ 499.387971][T18635] validate_nla: 5 callbacks suppressed [ 499.387987][T18635] netlink: 'syz.0.3912': attribute type 21 has an invalid length. [ 499.417460][T18648] FAULT_INJECTION: forcing a failure. [ 499.417460][T18648] name failslab, interval 1, probability 0, space 0, times 0 [ 499.467300][T18648] CPU: 0 PID: 18648 Comm: syz.3.3916 Not tainted syzkaller #0 [ 499.474798][T18648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.484855][T18648] Call Trace: [ 499.488140][T18648] [ 499.491073][T18648] dump_stack_lvl+0x188/0x250 [ 499.495753][T18648] ? verify_lock_unused+0x140/0x140 [ 499.500945][T18648] ? show_regs_print_info+0x20/0x20 [ 499.506136][T18648] ? load_image+0x410/0x410 [ 499.510630][T18648] ? perf_trace_lock_acquire+0xed/0x3f0 [ 499.516172][T18648] should_fail+0x383/0x4b0 [ 499.520577][T18648] should_failslab+0x5/0x20 [ 499.525065][T18648] slab_pre_alloc_hook+0x51/0xc0 [ 499.529984][T18648] ? skb_clone+0x1bd/0x350 [ 499.534385][T18648] kmem_cache_alloc+0x3d/0x280 [ 499.539134][T18648] skb_clone+0x1bd/0x350 [ 499.543369][T18648] __netlink_deliver_tap+0x3cb/0x7c0 [ 499.548655][T18648] netlink_deliver_tap+0x16c/0x180 [ 499.553751][T18648] netlink_sendskb+0x64/0x130 [ 499.558413][T18648] netlink_ack+0x856/0xb10 [ 499.562820][T18648] ? netlink_dump+0xdd0/0xdd0 [ 499.567478][T18648] ? __copy_skb_header+0x3ba/0x4f0 [ 499.572580][T18648] netlink_rcv_skb+0x267/0x430 [ 499.577333][T18648] ? rtnetlink_bind+0x80/0x80 [ 499.581998][T18648] ? netlink_ack+0xb10/0xb10 [ 499.586583][T18648] netlink_unicast+0x78f/0x940 [ 499.591340][T18648] netlink_sendmsg+0x8ba/0xbe0 [ 499.596097][T18648] ? netlink_getsockopt+0x570/0x570 [ 499.601276][T18648] ? aa_sock_msg_perm+0x94/0x150 [ 499.606198][T18648] ? apparmor_socket_sendmsg+0x88/0x230 [ 499.611728][T18648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 499.616996][T18648] ? security_socket_sendmsg+0x7c/0xa0 [ 499.622437][T18648] ? netlink_getsockopt+0x570/0x570 [ 499.627622][T18648] ____sys_sendmsg+0x5be/0x8f0 [ 499.632388][T18648] ? __sys_sendmsg_sock+0x30/0x30 [ 499.637403][T18648] ? import_iovec+0x6f/0xa0 [ 499.641892][T18648] ___sys_sendmsg+0x236/0x2e0 [ 499.646558][T18648] ? __sys_sendmsg+0x290/0x290 [ 499.651313][T18648] ? trace_event_raw_event_lock+0x250/0x250 [ 499.657211][T18648] __se_sys_sendmsg+0x1b7/0x2a0 [ 499.662049][T18648] ? __x64_sys_sendmsg+0x80/0x80 [ 499.666966][T18648] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 499.672937][T18648] ? lockdep_hardirqs_on+0x94/0x140 [ 499.678121][T18648] do_syscall_64+0x4c/0xa0 [ 499.682535][T18648] ? clear_bhb_loop+0x30/0x80 [ 499.687194][T18648] ? clear_bhb_loop+0x30/0x80 [ 499.691852][T18648] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.697727][T18648] RIP: 0033:0x7f46c8f31159 [ 499.702127][T18648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.721716][T18648] RSP: 002b:00007f46c7189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.730116][T18648] RAX: ffffffffffffffda RBX: 00007f46c91b8fa0 RCX: 00007f46c8f31159 [ 499.738071][T18648] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 499.746027][T18648] RBP: 00007f46c7189090 R08: 0000000000000000 R09: 0000000000000000 [ 499.753979][T18648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.761933][T18648] R13: 00007f46c91b9038 R14: 00007f46c91b8fa0 R15: 00007ffdbb816588 [ 499.769898][T18648] [ 499.891290][T18655] device syzkaller0 entered promiscuous mode [ 500.580154][T18706] FAULT_INJECTION: forcing a failure. [ 500.580154][T18706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.612040][T18706] CPU: 0 PID: 18706 Comm: syz.3.3931 Not tainted syzkaller #0 [ 500.619544][T18706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.629602][T18706] Call Trace: [ 500.632881][T18706] [ 500.635812][T18706] dump_stack_lvl+0x188/0x250 [ 500.640502][T18706] ? show_regs_print_info+0x20/0x20 [ 500.645711][T18706] ? load_image+0x410/0x410 [ 500.650224][T18706] ? __lock_acquire+0x7b50/0x7b50 [ 500.655275][T18706] should_fail+0x383/0x4b0 [ 500.659703][T18706] _copy_to_user+0x2e/0x130 [ 500.664219][T18706] simple_read_from_buffer+0xe3/0x150 [ 500.669599][T18706] proc_fail_nth_read+0x1a6/0x220 [ 500.674638][T18706] ? proc_fault_inject_write+0x310/0x310 [ 500.680278][T18706] ? fsnotify_perm+0x254/0x560 [ 500.685043][T18706] ? proc_fault_inject_write+0x310/0x310 [ 500.690679][T18706] vfs_read+0x2ff/0xd50 [ 500.694841][T18706] ? __lock_acquire+0x7b50/0x7b50 [ 500.699877][T18706] ? kernel_read+0x1e0/0x1e0 [ 500.704483][T18706] ? mutex_lock_nested+0x17/0x20 [ 500.709432][T18706] ? __fdget_pos+0x2bf/0x370 [ 500.714023][T18706] ? ksys_read+0x70/0x260 [ 500.718365][T18706] ksys_read+0x153/0x260 [ 500.722624][T18706] ? vfs_write+0xd70/0xd70 [ 500.727053][T18706] ? lockdep_hardirqs_on+0x94/0x140 [ 500.732264][T18706] do_syscall_64+0x4c/0xa0 [ 500.736689][T18706] ? clear_bhb_loop+0x30/0x80 [ 500.741374][T18706] ? clear_bhb_loop+0x30/0x80 [ 500.746057][T18706] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 500.751960][T18706] RIP: 0033:0x7f46c8ef198e [ 500.756379][T18706] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 500.775987][T18706] RSP: 002b:00007f46c7188fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.784409][T18706] RAX: ffffffffffffffda RBX: 00007f46c71896c0 RCX: 00007f46c8ef198e [ 500.787268][T18709] netlink: 'syz.2.3930': attribute type 21 has an invalid length. [ 500.792382][T18706] RDX: 000000000000000f RSI: 00007f46c71890a0 RDI: 0000000000000004 [ 500.792399][T18706] RBP: 00007f46c7189090 R08: 0000000000000000 R09: 0000000000000000 [ 500.792410][T18706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 500.792421][T18706] R13: 00007f46c91b9038 R14: 00007f46c91b8fa0 R15: 00007ffdbb816588 [ 500.792449][T18706] [ 501.166991][T18715] netlink: 'syz.2.3934': attribute type 10 has an invalid length. [ 501.225507][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.231835][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.263136][T18725] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3936'. [ 502.110392][T18767] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3946'. [ 502.212488][T18767] netlink: 21648 bytes leftover after parsing attributes in process `syz.4.3946'. [ 502.259631][T18769] netlink: 164384 bytes leftover after parsing attributes in process `syz.4.3946'. [ 502.539868][T18773] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3948'. [ 502.585548][T18773] netlink: 'syz.3.3948': attribute type 1 has an invalid length. [ 502.621812][T18773] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.3948'. [ 502.651096][T18777] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.658511][T18777] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.761565][T18777] device bridge_slave_1 left promiscuous mode [ 502.791261][T18777] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.905242][T18777] device bridge_slave_0 left promiscuous mode [ 502.905491][T18793] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3953'. [ 502.915397][T18777] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.352516][ T4250] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 503.447307][T18816] netlink: 'syz.4.3960': attribute type 17 has an invalid length. [ 503.455720][T18816] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3960'. [ 503.879859][T18833] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3964'. [ 504.356192][T18860] netlink: 'syz.0.3972': attribute type 3 has an invalid length. [ 504.371652][T18860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3972'. [ 504.382190][T18862] netlink: 'syz.2.3973': attribute type 9 has an invalid length. [ 506.022320][T18945] device bond0 entered promiscuous mode [ 506.039102][T18945] device bond_slave_0 entered promiscuous mode [ 506.056655][T18945] device bond_slave_1 entered promiscuous mode [ 506.179318][T18954] netlink: 'syz.1.3998': attribute type 8 has an invalid length. [ 506.395580][T18964] netlink: 'syz.3.4000': attribute type 21 has an invalid length. [ 507.162276][T19007] __nla_validate_parse: 6 callbacks suppressed [ 507.162295][T19007] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4013'. [ 507.181946][T19007] netlink: del zone limit has 4 unknown bytes [ 507.195296][T19007] netlink: 'syz.2.4013': attribute type 10 has an invalid length. [ 507.213160][T19007] netlink: 209860 bytes leftover after parsing attributes in process `syz.2.4013'. [ 507.233789][T19007] openvswitch: netlink: Message has 4 unknown bytes. [ 507.667861][T19015] device syzkaller0 entered promiscuous mode [ 507.683077][T19015] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 507.846326][T19025] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4021'. [ 507.963274][T19030] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4022'. [ 508.017473][T19029] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4024'. [ 508.146007][T19040] netlink: 'syz.3.4028': attribute type 10 has an invalid length. [ 508.331865][T19042] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4029'. [ 508.630812][T19037] netlink: 'syz.4.4027': attribute type 10 has an invalid length. [ 508.680988][T19055] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4032'. [ 508.944314][T19064] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 508.964839][T19064] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4036'. [ 508.993038][T19064] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4036'. [ 509.018535][T19072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4038'. [ 509.424723][T19092] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 509.542084][T19100] netlink: 'syz.4.4044': attribute type 39 has an invalid length. [ 509.570622][T19100] device macvlan0 entered promiscuous mode [ 509.845293][T19116] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 512.217344][T19129] __nla_validate_parse: 2 callbacks suppressed [ 512.217359][T19129] netlink: 192 bytes leftover after parsing attributes in process `syz.1.4055'. [ 512.518200][T19141] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4059'. [ 512.556732][T19141] bridge_slave_1: default FDB implementation only supports local addresses [ 512.667195][T19149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4061'. [ 512.852651][T19163] netlink: 'syz.3.4064': attribute type 1 has an invalid length. [ 512.902436][T19163] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.4064'. [ 513.000657][T19172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.030242][T19172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.046721][T19172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.056044][T19172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.542885][ T7730] Bluetooth: hci1: command 0x0406 tx timeout [ 514.713692][T19216] netlink: 'syz.0.4083': attribute type 21 has an invalid length. [ 514.754228][T19216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4083'. [ 514.783700][T19216] netlink: 'syz.0.4083': attribute type 1 has an invalid length. [ 514.801334][T19212] device syzkaller0 entered promiscuous mode [ 514.876553][T19229] syz.2.4085[19229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.876682][T19229] syz.2.4085[19229] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.972898][T19234] netlink: 'syz.0.4086': attribute type 9 has an invalid length. [ 515.081616][T19234] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4086'. [ 515.161900][T19231] netlink: 'syz.0.4086': attribute type 9 has an invalid length. [ 515.184251][T19231] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4086'. [ 515.248656][T19246] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4089'. [ 515.890542][T19284] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4102'. [ 516.028723][T19284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.087045][T19284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.122643][T19284] bond0 (unregistering): Released all slaves [ 516.160027][T19288] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4102'. [ 516.248145][T19288] team0: Port device team_slave_0 removed [ 516.437080][T19302] netlink: 'syz.4.4107': attribute type 48 has an invalid length. [ 516.585067][T19314] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 516.681155][T19313] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 517.136454][T19342] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 517.165134][T19338] device syzkaller0 entered promiscuous mode [ 517.214940][T19338] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 518.083217][T19367] netlink: 'syz.3.4130': attribute type 3 has an invalid length. [ 518.091116][T19367] __nla_validate_parse: 9 callbacks suppressed [ 518.091131][T19367] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4130'. [ 518.173610][T19366] netlink: 'syz.0.4132': attribute type 2 has an invalid length. [ 518.181473][T19366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4132'. [ 518.198847][T19368] netlink: 'syz.0.4132': attribute type 2 has an invalid length. [ 518.207678][T19368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4132'. [ 518.377966][T19374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4133'. [ 518.454725][T19374] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 518.485387][T19384] netlink: 'syz.1.4138': attribute type 29 has an invalid length. [ 518.657523][T19387] netlink: 21 bytes leftover after parsing attributes in process `syz.0.4137'. [ 518.669397][T19384] netlink: 'syz.1.4138': attribute type 29 has an invalid length. [ 518.732283][T19389] netlink: 'syz.1.4138': attribute type 29 has an invalid length. [ 518.740455][T19387] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 518.766506][T19393] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 518.791751][T19393] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.4138'. [ 519.341066][T19405] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4144'. [ 519.615755][T19432] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4151'. [ 519.699230][T19432] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4151'. [ 519.716160][T19432] netlink: 'syz.4.4151': attribute type 3 has an invalid length. [ 519.731751][T19432] netlink: 'syz.4.4151': attribute type 4 has an invalid length. [ 519.749135][T19432] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.4151'. [ 522.535511][T19502] device sit0 entered promiscuous mode [ 523.783978][ T7730] Bluetooth: hci2: command 0x0406 tx timeout [ 525.765633][ T9] tipc: Subscription rejected, illegal request [ 526.145992][T19552] __nla_validate_parse: 3 callbacks suppressed [ 526.146023][T19552] netlink: 189104 bytes leftover after parsing attributes in process `syz.1.4191'. [ 526.263545][T19572] netlink: 'syz.3.4195': attribute type 9 has an invalid length. [ 526.271413][T19572] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4195'. [ 526.628303][T19597] netlink: 'syz.2.4200': attribute type 10 has an invalid length. [ 526.647914][T19597] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4200'. [ 526.879500][T19607] netlink: 'syz.0.4203': attribute type 10 has an invalid length. [ 527.551977][T19616] device sit0 entered promiscuous mode [ 527.687912][T19630] netlink: 'syz.0.4209': attribute type 10 has an invalid length. [ 527.760827][T19630] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.798848][T19630] bond0: (slave team0): Enslaving as an active interface with an up link [ 527.933356][T19636] netlink: 'syz.2.4213': attribute type 10 has an invalid length. [ 528.020774][T19636] team0: Port device netdevsim0 added [ 528.549177][T19668] netlink: 'syz.2.4224': attribute type 3 has an invalid length. [ 528.563195][T19668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4224'. [ 528.636667][T19671] netlink: 'syz.1.4225': attribute type 10 has an invalid length. [ 528.645741][T19671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4225'. [ 528.726192][T19675] netlink: 'syz.1.4226': attribute type 29 has an invalid length. [ 528.736983][T19675] netlink: 'syz.1.4226': attribute type 29 has an invalid length. [ 528.747648][T19675] netlink: 'syz.1.4226': attribute type 29 has an invalid length. [ 529.304197][T19687] delete_channel: no stack [ 529.369330][T19692] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4231'. [ 530.387900][T19714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4239'. [ 530.648043][T19716] delete_channel: no stack [ 530.655194][T19716] delete_channel: no stack [ 530.731062][T19729] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4242'. [ 530.770050][T19732] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4244'. [ 530.886650][T19735] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.4245'. [ 531.729317][T19774] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4252'. [ 531.843337][T19774] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 532.000595][T19778] device syzkaller0 entered promiscuous mode [ 532.065404][T19774] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 532.198276][T19787] validate_nla: 9 callbacks suppressed [ 532.198297][T19787] netlink: 'syz.0.4254': attribute type 46 has an invalid length. [ 532.201416][T19795] netlink: 399 bytes leftover after parsing attributes in process `syz.4.4257'. [ 533.515950][T19816] device wlan0 left promiscuous mode [ 533.543572][T19819] netlink: 'syz.3.4263': attribute type 9 has an invalid length. [ 533.551342][T19819] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4263'. [ 534.163230][T19844] netlink: 'syz.3.4270': attribute type 4 has an invalid length. [ 534.200421][T19846] netlink: 'syz.3.4270': attribute type 21 has an invalid length. [ 534.220861][T19846] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4270'. [ 534.231222][T19852] netlink: 'syz.4.4272': attribute type 3 has an invalid length. [ 534.244073][T19846] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4270'. [ 534.256379][T19852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4272'. [ 534.393088][ T4250] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 534.990879][T19887] netlink: 'syz.3.4280': attribute type 1 has an invalid length. [ 535.046094][T19887] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4280'. [ 535.071770][T19887] netlink: 'syz.3.4280': attribute type 1 has an invalid length. [ 535.079731][T19885] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4280'. [ 535.293180][T19916] netlink: 'syz.4.4284': attribute type 10 has an invalid length. [ 535.321788][T19916] device netdevsim0 entered promiscuous mode [ 535.542394][T19920] device syzkaller0 entered promiscuous mode [ 535.760608][T19924] netlink: 'syz.3.4287': attribute type 21 has an invalid length. [ 535.786344][T19924] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4287'. [ 536.851031][T19969] netlink: 'syz.1.4293': attribute type 3 has an invalid length. [ 537.078026][T19969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4293'. [ 537.924375][T20001] netlink: 'syz.2.4302': attribute type 10 has an invalid length. [ 537.975493][T20001] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4302'. [ 538.244445][T20013] netlink: 'syz.4.4308': attribute type 2 has an invalid length. [ 538.291680][T20013] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4308'. [ 538.373364][T20014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4306'. [ 538.964202][T20026] netlink: 'syz.3.4313': attribute type 3 has an invalid length. [ 538.998298][T20026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4313'. [ 539.756519][T20037] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.4315'. [ 539.775371][T20040] netlink: 'syz.3.4316': attribute type 10 has an invalid length. [ 539.862522][T20040] netlink: 'syz.3.4316': attribute type 4 has an invalid length. [ 539.890649][T20040] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4316'. [ 539.949814][T20040] virt_wifi0: mtu greater than device maximum [ 539.964215][T20040] team0: Device virt_wifi0 failed to change mtu [ 539.978173][T20037] netlink: 6256 bytes leftover after parsing attributes in process `syz.4.4315'. [ 540.014627][T20044] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.4315'. [ 540.075941][T20044] netlink: 6256 bytes leftover after parsing attributes in process `syz.4.4315'. [ 540.650435][T20074] netlink: 'syz.4.4322': attribute type 4 has an invalid length. [ 540.684831][T20074] netlink: 'syz.4.4322': attribute type 3 has an invalid length. [ 541.137729][T20095] netlink: 'syz.4.4328': attribute type 2 has an invalid length. [ 541.153870][T20095] netlink: 'syz.4.4328': attribute type 8 has an invalid length. [ 541.889671][T20118] netlink: 'syz.4.4336': attribute type 10 has an invalid length. [ 543.119228][T20163] netlink: 'syz.0.4343': attribute type 2 has an invalid length. [ 543.141734][T20163] netlink: 'syz.0.4343': attribute type 8 has an invalid length. [ 543.180684][T20163] __nla_validate_parse: 2 callbacks suppressed [ 543.180722][T20163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4343'. [ 543.284256][T20172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4345'. [ 543.308806][T20173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4345'. [ 543.365348][T20171] netlink: 'syz.3.4345': attribute type 10 has an invalid length. [ 543.392161][T20171] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4345'. [ 543.494665][T20177] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4347'. [ 543.884320][T20171] team0: Port device virt_wifi0 removed [ 544.094014][T20176] device wlan0 entered promiscuous mode [ 544.425685][T20187] device ipvlan1 left promiscuous mode [ 545.501102][T20222] pimreg1: tun_chr_ioctl cmd 35108 [ 545.549261][T20228] netlink: 'syz.1.4361': attribute type 2 has an invalid length. [ 545.572417][T20228] netlink: 'syz.1.4361': attribute type 8 has an invalid length. [ 545.600562][T20228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4361'. [ 545.816147][T20237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4359'. [ 545.969606][T20245] device syzkaller0 entered promiscuous mode [ 546.500028][T20286] delete_channel: no stack [ 546.717170][T20308] netlink: 'syz.2.4382': attribute type 1 has an invalid length. [ 546.733306][T20308] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4382'. [ 546.769065][T20308] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4382'. [ 546.913913][T20316] netlink: 'syz.1.4380': attribute type 16 has an invalid length. [ 546.930654][T20316] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4380'. [ 547.303283][T20357] netlink: 'syz.3.4392': attribute type 4 has an invalid length. [ 548.086751][T20377] netlink: 'syz.4.4395': attribute type 29 has an invalid length. [ 548.193877][T20377] netlink: 'syz.4.4395': attribute type 29 has an invalid length. [ 548.263382][T20378] netlink: 'syz.4.4395': attribute type 29 has an invalid length. [ 548.432255][T20390] __nla_validate_parse: 3 callbacks suppressed [ 548.432299][T20390] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4397'. [ 548.570989][T20402] tap0: tun_chr_ioctl cmd 1074025681 [ 548.668163][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 548.928654][T20410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4402'. [ 548.965915][T20420] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4401'. [ 548.975839][T20422] mac80211_hwsim hwsim48 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 549.248071][T20443] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4410'. [ 549.501515][T20465] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4413'. [ 549.556180][T20474] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4413'. [ 549.611217][T20463] device syzkaller0 entered promiscuous mode [ 549.773018][T20486] netlink: 'syz.3.4418': attribute type 30 has an invalid length. [ 549.787871][T20486] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4418'. [ 549.852780][T20486] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.4418'. [ 549.895219][T20488] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.4419'. [ 549.995468][T20461] delete_channel: no stack [ 550.569409][T20525] sctp: [Deprecated]: syz.1.4433 (pid 20525) Use of int in max_burst socket option deprecated. [ 550.569409][T20525] Use struct sctp_assoc_value instead [ 550.915141][T20549] netlink: 'syz.2.4442': attribute type 10 has an invalid length. [ 550.962383][T20549] device veth0_vlan left promiscuous mode [ 550.978555][T20549] device veth0_vlan entered promiscuous mode [ 551.017254][T20549] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 551.074537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.098321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.159354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.634669][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 552.206400][T20621] netlink: 'syz.3.4457': attribute type 9 has an invalid length. [ 552.329608][T20626] netlink: 'syz.3.4459': attribute type 4 has an invalid length. [ 552.874776][T20658] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.882119][T20658] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.994040][T20661] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.001393][T20661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.009126][T20661] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.016329][T20661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.061422][T20661] device bridge0 entered promiscuous mode [ 553.469460][T20676] netlink: 'syz.2.4475': attribute type 3 has an invalid length. [ 553.506067][T20676] __nla_validate_parse: 4 callbacks suppressed [ 553.506083][T20676] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4475'. [ 553.573378][T20684] netlink: 'syz.2.4475': attribute type 3 has an invalid length. [ 553.601691][T20684] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4475'. [ 553.659886][T20689] netlink: 'syz.3.4478': attribute type 10 has an invalid length. [ 553.681198][T20689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.722242][T20689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.775506][T20689] device batadv_slave_0 entered promiscuous mode [ 553.787398][T20689] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 553.986959][T20703] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4484'. [ 554.181070][T20703] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 554.240810][T20703] CPU: 0 PID: 20703 Comm: syz.3.4484 Not tainted syzkaller #0 [ 554.248329][T20703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.258393][T20703] Call Trace: [ 554.261675][T20703] [ 554.264621][T20703] dump_stack_lvl+0x188/0x250 [ 554.269342][T20703] ? show_regs_print_info+0x20/0x20 [ 554.274562][T20703] ? load_image+0x410/0x410 [ 554.279128][T20703] sysfs_warn_dup+0x8a/0xa0 [ 554.283667][T20703] sysfs_do_create_link_sd+0xc0/0x110 [ 554.289073][T20703] device_add+0x83b/0x1050 [ 554.293532][T20703] wiphy_register+0x1e74/0x2c40 [ 554.298466][T20703] ? cfg80211_event_work+0x40/0x40 [ 554.303604][T20703] ? minstrel_ht_alloc+0x807/0x980 [ 554.308763][T20703] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 554.314852][T20703] ieee80211_register_hw+0x2a03/0x3a60 [ 554.320336][T20703] ? ieee80211_register_hw+0xaa1/0x3a60 [ 554.325922][T20703] ? ieee80211_tasklet_handler+0x20/0x20 [ 554.331602][T20703] ? rcu_is_watching+0x11/0xa0 [ 554.336398][T20703] ? hrtimer_init+0x10c/0x220 [ 554.341089][T20703] mac80211_hwsim_new_radio+0x209d/0x4050 [ 554.346850][T20703] hwsim_new_radio_nl+0xa7d/0xc50 [ 554.351912][T20703] genl_rcv_msg+0xd0b/0xfa0 [ 554.356437][T20703] ? genl_bind+0x370/0x370 [ 554.360873][T20703] ? verify_lock_unused+0x140/0x140 [ 554.366074][T20703] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 554.372692][T20703] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 554.379048][T20703] netlink_rcv_skb+0x1e9/0x430 [ 554.383813][T20703] ? genl_bind+0x370/0x370 [ 554.388229][T20703] ? netlink_ack+0xb10/0xb10 [ 554.392839][T20703] ? down_read+0x1aa/0x2e0 [ 554.397296][T20703] genl_rcv+0x24/0x40 [ 554.401272][T20703] netlink_unicast+0x78f/0x940 [ 554.406059][T20703] netlink_sendmsg+0x8ba/0xbe0 [ 554.410841][T20703] ? netlink_getsockopt+0x570/0x570 [ 554.416045][T20703] ? aa_sock_msg_perm+0x94/0x150 [ 554.420987][T20703] ? apparmor_socket_sendmsg+0x88/0x230 [ 554.426530][T20703] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 554.431810][T20703] ? security_socket_sendmsg+0x7c/0xa0 [ 554.437261][T20703] ? netlink_getsockopt+0x570/0x570 [ 554.442462][T20703] ____sys_sendmsg+0x5be/0x8f0 [ 554.447244][T20703] ? __sys_sendmsg_sock+0x30/0x30 [ 554.452285][T20703] ? import_iovec+0x6f/0xa0 [ 554.456793][T20703] ___sys_sendmsg+0x236/0x2e0 [ 554.461485][T20703] ? __sys_sendmsg+0x290/0x290 [ 554.466329][T20703] __se_sys_sendmsg+0x1b7/0x2a0 [ 554.471181][T20703] ? __x64_sys_sendmsg+0x80/0x80 [ 554.476111][T20703] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 554.482120][T20703] ? lockdep_hardirqs_on+0x94/0x140 [ 554.487324][T20703] do_syscall_64+0x4c/0xa0 [ 554.491733][T20703] ? clear_bhb_loop+0x30/0x80 [ 554.496403][T20703] ? clear_bhb_loop+0x30/0x80 [ 554.501076][T20703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 554.507138][T20703] RIP: 0033:0x7f46c8f31159 [ 554.511555][T20703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.531161][T20703] RSP: 002b:00007f46c7189028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.539575][T20703] RAX: ffffffffffffffda RBX: 00007f46c91b8fa0 RCX: 00007f46c8f31159 [ 554.547539][T20703] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 554.555501][T20703] RBP: 00007f46c8fc8024 R08: 0000000000000000 R09: 0000000000000000 [ 554.563464][T20703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.571424][T20703] R13: 00007f46c91b9038 R14: 00007f46c91b8fa0 R15: 00007ffdbb816588 [ 554.579423][T20703] [ 554.598894][ T7682] Bluetooth: hci5: command 0x0406 tx timeout [ 555.059333][T20726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4490'. [ 555.102182][T20723] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4490'. [ 555.190135][T20733] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.4492'. [ 555.254743][T20735] netlink: 'syz.3.4494': attribute type 10 has an invalid length. [ 555.290359][T20735] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4494'. [ 555.349295][T20735] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 555.570061][T20747] device syzkaller0 entered promiscuous mode [ 558.725425][T20768] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.4505'. [ 558.799569][T20776] netlink: 'syz.2.4505': attribute type 21 has an invalid length. [ 558.835797][T20784] netlink: 'syz.3.4508': attribute type 29 has an invalid length. [ 558.887765][T20776] netlink: 'syz.2.4505': attribute type 7 has an invalid length. [ 558.939423][T20784] netlink: 'syz.3.4508': attribute type 29 has an invalid length. [ 558.969327][T20797] netlink: 'syz.3.4508': attribute type 29 has an invalid length. [ 559.505786][T20813] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4515'. [ 559.577472][T20814] tap0: tun_chr_ioctl cmd 2147767519 [ 560.412573][T20856] netlink: 'syz.3.4529': attribute type 3 has an invalid length. [ 560.533455][T20856] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4529'. [ 560.606246][T20856] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 560.930467][T20864] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4532'. [ 560.983280][T20867] netlink: 'syz.1.4533': attribute type 11 has an invalid length. [ 561.493872][T20906] IPv6: pim6reg1: Disabled Multicast RS [ 561.583491][T20911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.598891][T20911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.644212][T20911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.670500][T20911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.664415][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.670781][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.475146][T20926] device wlan1 entered promiscuous mode [ 564.064786][T20962] netlink: 'syz.4.4560': attribute type 21 has an invalid length. [ 564.131857][T20962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4560'. [ 564.220737][T20980] can: request_module (can-proto-0) failed. [ 564.286327][T20980] device sit0 left promiscuous mode [ 564.440227][T20986] device sit0 entered promiscuous mode [ 564.726766][T21020] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.4568'. [ 565.008174][T21042] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.4574'. [ 565.326785][T21056] netlink: 'syz.1.4580': attribute type 2 has an invalid length. [ 565.357837][T21056] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4580'. [ 565.372615][T21059] device aaaaaaaaaaaaaaa entered promiscuous mode [ 565.477453][T21054] device batadv0 entered promiscuous mode [ 566.443057][T21109] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4590'. [ 566.454154][T21111] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.4591'. [ 566.471415][T21111] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.4591'. [ 566.524235][T21111] tc_dump_action: action bad kind [ 567.360171][T21145] tun0: tun_chr_ioctl cmd 1074025676 [ 567.421681][T21145] tun0: owner set to 0 [ 568.179176][T21173] netlink: 'syz.3.4608': attribute type 2 has an invalid length. [ 568.290282][T21173] netlink: 'syz.3.4608': attribute type 4 has an invalid length. [ 568.301642][T21189] tap0: tun_chr_ioctl cmd 2147767519 [ 568.349145][T21173] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4608'. [ 568.390167][T21191] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4608'. [ 568.591755][T21195] netlink: 'syz.1.4610': attribute type 2 has an invalid length. [ 568.645025][T21195] netlink: 'syz.1.4610': attribute type 8 has an invalid length. [ 568.681720][T21195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4610'. [ 569.220262][T21232] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.4619'. [ 569.571083][T21244] netlink: 'syz.0.4623': attribute type 2 has an invalid length. [ 569.601204][T21244] netlink: 'syz.0.4623': attribute type 3 has an invalid length. [ 569.643767][T21244] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4623'. [ 569.908427][T21258] netlink: 'syz.2.4629': attribute type 10 has an invalid length. [ 570.026421][T21257] netlink: 'syz.3.4626': attribute type 3 has an invalid length. [ 570.060307][T21259] can: request_module (can-proto-0) failed. [ 570.088332][T21258] team0: Port device geneve1 added [ 570.101080][T21257] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4626'. [ 570.132495][T21263] netlink: 'syz.2.4629': attribute type 9 has an invalid length. [ 570.151194][T21263] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4629'. [ 570.194490][T21265] device sit0 left promiscuous mode [ 570.317764][T21259] device sit0 entered promiscuous mode [ 571.284095][T21281] netlink: 'syz.4.4635': attribute type 39 has an invalid length. [ 572.179077][T21328] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4649'. [ 572.255475][T21328] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 572.312110][T21328] CPU: 1 PID: 21328 Comm: syz.3.4649 Not tainted syzkaller #0 [ 572.319632][T21328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.329700][T21328] Call Trace: [ 572.332994][T21328] [ 572.335932][T21328] dump_stack_lvl+0x188/0x250 [ 572.340628][T21328] ? show_regs_print_info+0x20/0x20 [ 572.345840][T21328] ? load_image+0x410/0x410 [ 572.350371][T21328] sysfs_warn_dup+0x8a/0xa0 [ 572.354882][T21328] sysfs_do_create_link_sd+0xc0/0x110 [ 572.360244][T21328] device_add+0x83b/0x1050 [ 572.364649][T21328] wiphy_register+0x1e74/0x2c40 [ 572.369502][T21328] ? cfg80211_event_work+0x40/0x40 [ 572.374598][T21328] ? minstrel_ht_alloc+0x807/0x980 [ 572.379699][T21328] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 572.385757][T21328] ieee80211_register_hw+0x2a03/0x3a60 [ 572.391205][T21328] ? ieee80211_register_hw+0xaa1/0x3a60 [ 572.396739][T21328] ? ieee80211_tasklet_handler+0x20/0x20 [ 572.402363][T21328] ? rcu_is_watching+0x11/0xa0 [ 572.407117][T21328] ? hrtimer_init+0x10c/0x220 [ 572.411782][T21328] mac80211_hwsim_new_radio+0x209d/0x4050 [ 572.417503][T21328] hwsim_new_radio_nl+0xa7d/0xc50 [ 572.422523][T21328] genl_rcv_msg+0xd0b/0xfa0 [ 572.427024][T21328] ? genl_bind+0x370/0x370 [ 572.431431][T21328] ? __dev_queue_xmit+0x1b64/0x2e50 [ 572.436615][T21328] ? verify_lock_unused+0x140/0x140 [ 572.441806][T21328] ? perf_trace_lock+0xe4/0x390 [ 572.446646][T21328] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 572.452975][T21328] netlink_rcv_skb+0x1e9/0x430 [ 572.457725][T21328] ? genl_bind+0x370/0x370 [ 572.462127][T21328] ? netlink_ack+0xb10/0xb10 [ 572.466709][T21328] ? down_read+0x1aa/0x2e0 [ 572.471111][T21328] genl_rcv+0x24/0x40 [ 572.475074][T21328] netlink_unicast+0x78f/0x940 [ 572.479829][T21328] netlink_sendmsg+0x8ba/0xbe0 [ 572.484581][T21328] ? netlink_getsockopt+0x570/0x570 [ 572.489760][T21328] ? aa_sock_msg_perm+0x94/0x150 [ 572.494683][T21328] ? apparmor_socket_sendmsg+0x88/0x230 [ 572.500211][T21328] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 572.505481][T21328] ? security_socket_sendmsg+0x7c/0xa0 [ 572.510921][T21328] ? netlink_getsockopt+0x570/0x570 [ 572.516106][T21328] ____sys_sendmsg+0x5be/0x8f0 [ 572.520863][T21328] ? __sys_sendmsg_sock+0x30/0x30 [ 572.525876][T21328] ? import_iovec+0x6f/0xa0 [ 572.530370][T21328] ___sys_sendmsg+0x236/0x2e0 [ 572.535038][T21328] ? __sys_sendmsg+0x290/0x290 [ 572.539793][T21328] ? trace_event_raw_event_lock+0x250/0x250 [ 572.545692][T21328] __se_sys_sendmsg+0x1b7/0x2a0 [ 572.550528][T21328] ? __x64_sys_sendmsg+0x80/0x80 [ 572.555444][T21328] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 572.561417][T21328] ? trace_sys_enter+0x1f/0x80 [ 572.566170][T21328] do_syscall_64+0x4c/0xa0 [ 572.570568][T21328] ? clear_bhb_loop+0x30/0x80 [ 572.575228][T21328] ? clear_bhb_loop+0x30/0x80 [ 572.579889][T21328] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 572.585763][T21328] RIP: 0033:0x7f46c8f31159 [ 572.590170][T21328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.609759][T21328] RSP: 002b:00007f46c7105028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.618165][T21328] RAX: ffffffffffffffda RBX: 00007f46c91b9360 RCX: 00007f46c8f31159 [ 572.626121][T21328] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 572.634082][T21328] RBP: 00007f46c8fc8024 R08: 0000000000000000 R09: 0000000000000000 [ 572.642034][T21328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.649990][T21328] R13: 00007f46c91b93f8 R14: 00007f46c91b9360 R15: 00007ffdbb816588 [ 572.657964][T21328] [ 574.877761][T21349] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.4652'. [ 575.056061][T21355] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4658'. [ 575.326734][T21365] netlink: 'syz.1.4660': attribute type 2 has an invalid length. [ 575.341111][T21366] netlink: 'syz.4.4661': attribute type 3 has an invalid length. [ 575.361323][T21366] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.4661'. [ 575.386940][T21365] netlink: 'syz.1.4660': attribute type 4 has an invalid length. [ 575.432504][T21371] netlink: 'syz.3.4663': attribute type 10 has an invalid length. [ 575.451330][T21372] netlink: 'syz.0.4662': attribute type 29 has an invalid length. [ 575.454960][T21365] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4660'. [ 575.504851][T21371] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.560984][T21371] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.683169][T21371] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.788299][T21371] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.897040][T21371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.911228][T21371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.921132][T21371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.932518][T21371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.970886][T21371] team0: Port device geneve1 added [ 575.995169][T21368] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4660'. [ 576.056442][T21368] bridge0: port 3(dummy0) entered disabled state [ 576.099431][T21368] bridge0: port 3(dummy0) entered disabled state [ 576.207028][T21372] netlink: 'syz.0.4662': attribute type 29 has an invalid length. [ 576.712500][T21416] netlink: 'syz.2.4678': attribute type 10 has an invalid length. [ 577.084024][T21419] netlink: 'syz.0.4677': attribute type 10 has an invalid length. [ 577.249748][T21419] team0: Port device geneve1 added [ 577.261468][T21402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.403255][T21442] netlink: 'syz.2.4683': attribute type 29 has an invalid length. [ 577.417109][T21444] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4686'. [ 577.428285][T21442] netlink: 'syz.2.4683': attribute type 29 has an invalid length. [ 577.787559][T21459] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4690'. [ 577.841687][T21459] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 577.906080][T21474] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.4695'. [ 578.592679][T21491] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4697'. [ 579.137616][T21534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4711'. [ 583.120901][T21591] validate_nla: 10 callbacks suppressed [ 583.120919][T21591] netlink: 'syz.3.4726': attribute type 10 has an invalid length. [ 583.151525][T21591] device syz_tun entered promiscuous mode [ 583.165982][T21593] netlink: 'syz.4.4727': attribute type 29 has an invalid length. [ 583.241491][T21591] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 583.271669][T21593] netlink: 'syz.4.4727': attribute type 29 has an invalid length. [ 583.289870][T21598] netlink: 'syz.3.4726': attribute type 10 has an invalid length. [ 583.325321][T21598] device bond0 left promiscuous mode [ 583.341160][T21598] device bond_slave_0 left promiscuous mode [ 583.350823][T21598] device bond_slave_1 left promiscuous mode [ 583.390623][T21598] device batadv_slave_0 left promiscuous mode [ 583.467681][T21598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.497864][T21598] team0: Port device bond0 added [ 583.603991][T21604] netlink: 'syz.4.4731': attribute type 9 has an invalid length. [ 583.617984][T21604] netlink: 189600 bytes leftover after parsing attributes in process `syz.4.4731'. [ 583.782962][T21606] netlink: 'syz.4.4731': attribute type 9 has an invalid length. [ 583.808590][T21606] netlink: 201792 bytes leftover after parsing attributes in process `syz.4.4731'. [ 583.947870][T21613] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4732'. [ 584.982656][T21643] netlink: 'syz.3.4741': attribute type 29 has an invalid length. [ 585.064625][T21643] netlink: 'syz.3.4741': attribute type 29 has an invalid length. [ 585.377225][T21656] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4744'. [ 585.422814][T21662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4746'. [ 585.433914][T21656] netlink: 'syz.1.4744': attribute type 3 has an invalid length. [ 585.442308][T21662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4746'. [ 585.452280][T21656] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4744'. [ 585.455759][T21662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4746'. [ 585.504014][T21662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4746'. [ 585.523785][T21662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4746'. [ 585.676125][T21682] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 585.853856][T21689] netlink: 'syz.2.4753': attribute type 29 has an invalid length. [ 587.134167][T21752] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 587.567150][T21757] device syzkaller0 entered promiscuous mode [ 587.802203][T21785] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 588.908911][T21843] __nla_validate_parse: 33 callbacks suppressed [ 588.908930][T21843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4792'. [ 589.280231][T21854] validate_nla: 12 callbacks suppressed [ 589.280263][T21854] netlink: 'syz.0.4795': attribute type 29 has an invalid length. [ 589.370337][T21854] netlink: 'syz.0.4795': attribute type 29 has an invalid length. [ 589.406926][T21857] netlink: 'syz.0.4795': attribute type 29 has an invalid length. [ 589.576388][T21863] netlink: 'syz.2.4800': attribute type 4 has an invalid length. [ 589.639250][T21864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4798'. [ 589.716410][T21863] netlink: 'syz.2.4800': attribute type 21 has an invalid length. [ 589.759116][T21863] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4800'. [ 589.764408][T21877] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4800'. [ 589.792046][T21863] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4800'. [ 589.858396][T21873] netlink: 'syz.4.4798': attribute type 10 has an invalid length. [ 589.886876][T21873] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4798'. [ 590.209868][T21885] netlink: 'syz.1.4804': attribute type 3 has an invalid length. [ 590.261870][T21885] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.4804'. [ 590.689208][T21909] netlink: 'syz.0.4810': attribute type 3 has an invalid length. [ 590.755866][T21911] netlink: 'syz.1.4813': attribute type 29 has an invalid length. [ 590.851304][T21911] netlink: 'syz.1.4813': attribute type 29 has an invalid length. [ 591.564665][T21944] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4823'. [ 592.388816][T21978] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4832'. [ 592.495355][T21977] device syzkaller0 entered promiscuous mode [ 592.654571][T21985] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.4835'. [ 594.318668][T22064] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 594.328081][T22058] tap0: tun_chr_ioctl cmd 2148553947 [ 594.350580][T22058] tap0: tun_chr_ioctl cmd 1074025681 [ 594.588426][T22071] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4859'. [ 594.756303][T22093] validate_nla: 22 callbacks suppressed [ 594.756320][T22093] netlink: 'syz.2.4861': attribute type 11 has an invalid length. [ 594.824564][T22093] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4861'. [ 595.248674][T22115] netlink: 'syz.2.4868': attribute type 29 has an invalid length. [ 595.344719][T22114] device syzkaller0 entered promiscuous mode [ 595.371418][T22115] netlink: 'syz.2.4868': attribute type 29 has an invalid length. [ 595.412917][T22119] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4869'. [ 595.437922][T22120] netlink: 'syz.2.4868': attribute type 29 has an invalid length. [ 595.559377][T22133] netlink: 'syz.3.4871': attribute type 1 has an invalid length. [ 595.593704][T22133] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.4871'. [ 595.782942][T22137] netlink: 'syz.3.4872': attribute type 17 has an invalid length. [ 595.800610][T22137] netlink: 'syz.3.4872': attribute type 16 has an invalid length. [ 595.828894][T22137] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4872'. [ 599.409569][T22174] netlink: 'syz.2.4881': attribute type 19 has an invalid length. [ 599.439454][T22174] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4881'. [ 599.555924][T22174] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4881'. [ 599.631265][T22174] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 599.733538][T22174] CPU: 0 PID: 22174 Comm: syz.2.4881 Not tainted syzkaller #0 [ 599.741047][T22174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.751109][T22174] Call Trace: [ 599.754397][T22174] [ 599.757329][T22174] dump_stack_lvl+0x188/0x250 [ 599.762023][T22174] ? show_regs_print_info+0x20/0x20 [ 599.767228][T22174] ? load_image+0x410/0x410 [ 599.771755][T22174] sysfs_warn_dup+0x8a/0xa0 [ 599.776263][T22174] sysfs_do_create_link_sd+0xc0/0x110 [ 599.781637][T22174] device_add+0x83b/0x1050 [ 599.786074][T22174] wiphy_register+0x1e74/0x2c40 [ 599.790985][T22174] ? cfg80211_event_work+0x40/0x40 [ 599.796119][T22174] ? minstrel_ht_alloc+0x807/0x980 [ 599.801253][T22174] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 599.807338][T22174] ieee80211_register_hw+0x2a03/0x3a60 [ 599.812819][T22174] ? ieee80211_register_hw+0xaa1/0x3a60 [ 599.818383][T22174] ? ieee80211_tasklet_handler+0x20/0x20 [ 599.824034][T22174] ? rcu_is_watching+0x11/0xa0 [ 599.828813][T22174] ? hrtimer_init+0x10c/0x220 [ 599.833503][T22174] mac80211_hwsim_new_radio+0x209d/0x4050 [ 599.839250][T22174] hwsim_new_radio_nl+0xa7d/0xc50 [ 599.844292][T22174] genl_rcv_msg+0xd0b/0xfa0 [ 599.848790][T22174] ? genl_bind+0x370/0x370 [ 599.853210][T22174] ? verify_lock_unused+0x140/0x140 [ 599.854885][T22192] netlink: 'syz.4.4884': attribute type 29 has an invalid length. [ 599.858423][T22174] ? perf_trace_lock_acquire+0xed/0x3f0 [ 599.858458][T22174] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 599.858487][T22174] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 599.884733][T22174] netlink_rcv_skb+0x1e9/0x430 [ 599.889522][T22174] ? genl_bind+0x370/0x370 [ 599.893957][T22174] ? netlink_ack+0xb10/0xb10 [ 599.898559][T22174] ? down_read+0x1aa/0x2e0 [ 599.902970][T22174] genl_rcv+0x24/0x40 [ 599.906954][T22174] netlink_unicast+0x78f/0x940 [ 599.911724][T22174] netlink_sendmsg+0x8ba/0xbe0 [ 599.916496][T22174] ? netlink_getsockopt+0x570/0x570 [ 599.921685][T22174] ? aa_sock_msg_perm+0x94/0x150 [ 599.926606][T22174] ? apparmor_socket_sendmsg+0x88/0x230 [ 599.932153][T22174] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 599.937444][T22174] ? security_socket_sendmsg+0x7c/0xa0 [ 599.942918][T22174] ? netlink_getsockopt+0x570/0x570 [ 599.948127][T22174] ____sys_sendmsg+0x5be/0x8f0 [ 599.952920][T22174] ? __sys_sendmsg_sock+0x30/0x30 [ 599.957959][T22174] ? import_iovec+0x6f/0xa0 [ 599.962477][T22174] ___sys_sendmsg+0x236/0x2e0 [ 599.967177][T22174] ? __sys_sendmsg+0x290/0x290 [ 599.971962][T22174] ? __might_fault+0xb3/0x110 [ 599.976674][T22174] __se_sys_sendmsg+0x1b7/0x2a0 [ 599.981542][T22174] ? __x64_sys_sendmsg+0x80/0x80 [ 599.986483][T22174] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 599.992487][T22174] ? lockdep_hardirqs_on+0x94/0x140 [ 599.997696][T22174] do_syscall_64+0x4c/0xa0 [ 600.002116][T22174] ? clear_bhb_loop+0x30/0x80 [ 600.006804][T22174] ? clear_bhb_loop+0x30/0x80 [ 600.011495][T22174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 600.017397][T22174] RIP: 0033:0x7f7d7e9d9159 [ 600.021819][T22174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.041426][T22174] RSP: 002b:00007f7d7cc31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.049843][T22174] RAX: ffffffffffffffda RBX: 00007f7d7ec60fa0 RCX: 00007f7d7e9d9159 [ 600.057818][T22174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 600.065786][T22174] RBP: 00007f7d7ea70024 R08: 0000000000000000 R09: 0000000000000000 [ 600.073759][T22174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.081735][T22174] R13: 00007f7d7ec61038 R14: 00007f7d7ec60fa0 R15: 00007ffd2b1b8e08 [ 600.089733][T22174] [ 600.190022][T22192] netlink: 'syz.4.4884': attribute type 29 has an invalid length. [ 600.493446][T22222] netlink: 'syz.2.4889': attribute type 3 has an invalid length. [ 600.501216][T22222] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4889'. [ 600.599897][T22216] netlink: 'syz.2.4889': attribute type 10 has an invalid length. [ 600.664531][T22216] team0: Port device virt_wifi0 added [ 600.962223][T22248] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.4893'. [ 601.624018][T22259] netlink: 'syz.1.4897': attribute type 29 has an invalid length. [ 601.663230][T22259] netlink: 'syz.1.4897': attribute type 29 has an invalid length. [ 601.699246][T22261] netlink: 'syz.1.4897': attribute type 29 has an invalid length. [ 601.722360][T22259] netlink: 'syz.1.4897': attribute type 29 has an invalid length. [ 604.682766][T22273] netlink: 'syz.3.4900': attribute type 10 has an invalid length. [ 604.693709][T22273] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.728472][T22273] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.738042][T22273] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.748833][T22273] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.773497][T22278] netlink: 'syz.1.4901': attribute type 29 has an invalid length. [ 604.972561][T22285] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4903'. [ 605.147181][T22295] validate_nla: 2 callbacks suppressed [ 605.147196][T22295] netlink: 'syz.3.4906': attribute type 10 has an invalid length. [ 605.330790][T22300] netlink: 'syz.4.4907': attribute type 10 has an invalid length. [ 605.915388][T22330] netlink: 'syz.3.4916': attribute type 29 has an invalid length. [ 605.940089][T22330] netlink: 'syz.3.4916': attribute type 29 has an invalid length. [ 605.983457][T22330] netlink: 'syz.3.4916': attribute type 29 has an invalid length. [ 606.069659][T22342] netlink: 'syz.4.4919': attribute type 10 has an invalid length. [ 606.182527][T22350] netlink: 'syz.1.4920': attribute type 1 has an invalid length. [ 606.201981][T22357] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4921'. [ 606.217188][T22350] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4920'. [ 606.250881][T22353] netlink: 153060 bytes leftover after parsing attributes in process `syz.1.4920'. [ 606.313005][T22361] netlink: 'syz.4.4922': attribute type 29 has an invalid length. [ 606.324473][T22353] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 606.424108][T22361] netlink: 'syz.4.4922': attribute type 29 has an invalid length. [ 606.486552][T22362] netlink: 'syz.4.4922': attribute type 29 has an invalid length. [ 607.174225][T22408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4934'. [ 607.244518][T22408] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4934'. [ 607.302912][T22409] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4934'. [ 607.375160][T22416] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4934'. [ 607.403666][T22417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4934'. [ 607.657550][T22440] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.4942'. [ 608.273915][T22486] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.4952'. [ 609.577004][ T9] tipc: Subscription rejected, illegal request [ 610.579585][T22603] validate_nla: 6 callbacks suppressed [ 610.579616][T22603] netlink: 'syz.0.4973': attribute type 29 has an invalid length. [ 610.647578][T22614] netlink: 'syz.2.4975': attribute type 9 has an invalid length. [ 610.740314][T22603] netlink: 'syz.0.4973': attribute type 29 has an invalid length. [ 610.792642][T22616] netlink: 'syz.0.4973': attribute type 29 has an invalid length. [ 611.847592][T22678] netlink: 'syz.2.4997': attribute type 29 has an invalid length. [ 611.978646][T22678] netlink: 'syz.2.4997': attribute type 29 has an invalid length. [ 611.990856][T22683] netlink: 'syz.2.4997': attribute type 29 has an invalid length. [ 612.003709][T22682] __nla_validate_parse: 3 callbacks suppressed [ 612.003726][T22682] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.4999'. [ 612.069664][T22684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4999'. [ 612.104858][T22684] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 612.401478][T22698] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5003'. [ 612.815922][T22729] netlink: 'syz.1.5013': attribute type 29 has an invalid length. [ 612.833280][T22730] netlink: 'syz.2.5012': attribute type 2 has an invalid length. [ 613.011018][T22729] netlink: 'syz.1.5013': attribute type 29 has an invalid length. [ 613.028095][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5015'. [ 613.123527][T22742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5017'. [ 615.316911][T22807] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.5032'. [ 615.351025][T22810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5035'. [ 615.897224][T22831] validate_nla: 40 callbacks suppressed [ 615.897258][T22831] netlink: 'syz.4.5040': attribute type 10 has an invalid length. [ 616.049244][T22839] netlink: 'syz.0.5041': attribute type 29 has an invalid length. [ 616.199301][T22839] netlink: 'syz.0.5041': attribute type 29 has an invalid length. [ 616.261354][T22840] netlink: 'syz.0.5041': attribute type 29 has an invalid length. [ 616.708279][T22851] netlink: 'syz.0.5044': attribute type 8 has an invalid length. [ 616.756663][T22851] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5044'. [ 616.775096][T22853] FAULT_INJECTION: forcing a failure. [ 616.775096][T22853] name failslab, interval 1, probability 0, space 0, times 0 [ 616.847086][T22851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5044'. [ 616.860779][T22853] CPU: 0 PID: 22853 Comm: syz.1.5046 Not tainted syzkaller #0 [ 616.868272][T22853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.878332][T22853] Call Trace: [ 616.881619][T22853] [ 616.884555][T22853] dump_stack_lvl+0x188/0x250 [ 616.889252][T22853] ? show_regs_print_info+0x20/0x20 [ 616.894463][T22853] ? load_image+0x410/0x410 [ 616.898980][T22853] ? __might_sleep+0xf0/0xf0 [ 616.903578][T22853] ? __lock_acquire+0x7b50/0x7b50 [ 616.908619][T22853] ? __lock_acquire+0x7b50/0x7b50 [ 616.913659][T22853] should_fail+0x383/0x4b0 [ 616.918097][T22853] should_failslab+0x5/0x20 [ 616.922644][T22853] slab_pre_alloc_hook+0x51/0xc0 [ 616.927591][T22853] ? __sys_setsockopt+0x2bf/0x3d0 [ 616.932629][T22853] __kmalloc_track_caller+0x69/0x330 [ 616.937921][T22853] ? __sys_setsockopt+0x2bf/0x3d0 [ 616.942965][T22853] sctp_setsockopt+0x7d/0xf80 [ 616.947651][T22853] ? sock_common_recvmsg+0x1c0/0x1c0 [ 616.952951][T22853] __sys_setsockopt+0x2bf/0x3d0 [ 616.957818][T22853] __x64_sys_setsockopt+0xb1/0xc0 [ 616.962859][T22853] do_syscall_64+0x4c/0xa0 [ 616.967280][T22853] ? clear_bhb_loop+0x30/0x80 [ 616.971963][T22853] ? clear_bhb_loop+0x30/0x80 [ 616.976649][T22853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 616.982546][T22853] RIP: 0033:0x7fefff37e159 [ 616.986968][T22853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.006593][T22853] RSP: 002b:00007feffd5d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 617.015015][T22853] RAX: ffffffffffffffda RBX: 00007fefff605fa0 RCX: 00007fefff37e159 [ 617.022993][T22853] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000004 [ 617.030973][T22853] RBP: 00007feffd5d6090 R08: 000000000000001c R09: 0000000000000000 [ 617.038947][T22853] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.046925][T22853] R13: 00007fefff606038 R14: 00007fefff605fa0 R15: 00007ffd4742ae08 [ 617.054934][T22853] [ 618.445509][T22893] netlink: 'syz.0.5058': attribute type 10 has an invalid length. [ 618.796744][T22900] syz.1.5059[22900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.796875][T22900] syz.1.5059[22900] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 618.972417][T22907] FAULT_INJECTION: forcing a failure. [ 618.972417][T22907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.011639][T22907] CPU: 0 PID: 22907 Comm: syz.4.5061 Not tainted syzkaller #0 [ 619.019129][T22907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 619.029183][T22907] Call Trace: [ 619.032459][T22907] [ 619.035384][T22907] dump_stack_lvl+0x188/0x250 [ 619.040057][T22907] ? show_regs_print_info+0x20/0x20 [ 619.045244][T22907] ? load_image+0x410/0x410 [ 619.049747][T22907] ? __lock_acquire+0x7b50/0x7b50 [ 619.054768][T22907] should_fail+0x383/0x4b0 [ 619.059179][T22907] _copy_from_user+0x2e/0x170 [ 619.063854][T22907] sctp_setsockopt+0x191/0xf80 [ 619.068608][T22907] ? sock_common_recvmsg+0x1c0/0x1c0 [ 619.073883][T22907] __sys_setsockopt+0x2bf/0x3d0 [ 619.078730][T22907] __x64_sys_setsockopt+0xb1/0xc0 [ 619.083745][T22907] do_syscall_64+0x4c/0xa0 [ 619.088145][T22907] ? clear_bhb_loop+0x30/0x80 [ 619.092809][T22907] ? clear_bhb_loop+0x30/0x80 [ 619.097476][T22907] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.103354][T22907] RIP: 0033:0x7f3495be8159 [ 619.107757][T22907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.127348][T22907] RSP: 002b:00007f3493e40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 619.135752][T22907] RAX: ffffffffffffffda RBX: 00007f3495e6ffa0 RCX: 00007f3495be8159 [ 619.143710][T22907] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000004 [ 619.151666][T22907] RBP: 00007f3493e40090 R08: 000000000000001c R09: 0000000000000000 [ 619.159621][T22907] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.167576][T22907] R13: 00007f3495e70038 R14: 00007f3495e6ffa0 R15: 00007fff4bd15b08 [ 619.175562][T22907] [ 619.627949][T22912] netlink: 'syz.4.5063': attribute type 9 has an invalid length. [ 619.668264][T22912] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5063'. [ 619.880102][T22925] netlink: 'syz.2.5066': attribute type 27 has an invalid length. [ 620.265824][T22936] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5069'. [ 620.309529][T22937] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5070'. [ 620.810267][T22947] FAULT_INJECTION: forcing a failure. [ 620.810267][T22947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.895928][T22947] CPU: 0 PID: 22947 Comm: syz.0.5073 Not tainted syzkaller #0 [ 620.903436][T22947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.913499][T22947] Call Trace: [ 620.916786][T22947] [ 620.919721][T22947] dump_stack_lvl+0x188/0x250 [ 620.924423][T22947] ? show_regs_print_info+0x20/0x20 [ 620.929635][T22947] ? load_image+0x410/0x410 [ 620.934166][T22947] ? __lock_acquire+0x7b50/0x7b50 [ 620.939211][T22947] should_fail+0x383/0x4b0 [ 620.943648][T22947] _copy_to_user+0x2e/0x130 [ 620.948173][T22947] simple_read_from_buffer+0xe3/0x150 [ 620.953573][T22947] proc_fail_nth_read+0x1a6/0x220 [ 620.958611][T22947] ? proc_fault_inject_write+0x310/0x310 [ 620.964258][T22947] ? fsnotify_perm+0x254/0x560 [ 620.969025][T22947] ? proc_fault_inject_write+0x310/0x310 [ 620.974659][T22947] vfs_read+0x2ff/0xd50 [ 620.978828][T22947] ? __lock_acquire+0x7b50/0x7b50 [ 620.983859][T22947] ? kernel_read+0x1e0/0x1e0 [ 620.988479][T22947] ? mutex_lock_nested+0x17/0x20 [ 620.993417][T22947] ? __fdget_pos+0x2bf/0x370 [ 620.998006][T22947] ? ksys_read+0x70/0x260 [ 621.002337][T22947] ksys_read+0x153/0x260 [ 621.006584][T22947] ? vfs_write+0xd70/0xd70 [ 621.011002][T22947] ? lockdep_hardirqs_on+0x94/0x140 [ 621.016206][T22947] do_syscall_64+0x4c/0xa0 [ 621.020617][T22947] ? clear_bhb_loop+0x30/0x80 [ 621.025287][T22947] ? clear_bhb_loop+0x30/0x80 [ 621.029964][T22947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 621.035859][T22947] RIP: 0033:0x7fc3d9bcc98e [ 621.040288][T22947] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 621.059896][T22947] RSP: 002b:00007fc3d7e63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 621.068317][T22947] RAX: ffffffffffffffda RBX: 00007fc3d7e646c0 RCX: 00007fc3d9bcc98e [ 621.076287][T22947] RDX: 000000000000000f RSI: 00007fc3d7e640a0 RDI: 0000000000000006 [ 621.084259][T22947] RBP: 00007fc3d7e64090 R08: 0000000000000000 R09: 0000000000000000 [ 621.092226][T22947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.100200][T22947] R13: 00007fc3d9e94038 R14: 00007fc3d9e93fa0 R15: 00007ffc8f2e41a8 [ 621.108197][T22947] [ 621.582225][T22953] device syzkaller0 entered promiscuous mode [ 622.031745][T22984] device wlan1 entered promiscuous mode [ 622.152408][T22984] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.5084'. [ 622.752141][T23005] netlink: 'syz.4.5090': attribute type 29 has an invalid length. [ 622.845105][T23005] netlink: 'syz.4.5090': attribute type 29 has an invalid length. [ 622.901937][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 623.042511][T23020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 623.049871][T23020] IPv6: NLM_F_CREATE should be set when creating new route [ 623.057364][T23020] IPv6: NLM_F_CREATE should be set when creating new route [ 623.064756][T23020] IPv6: NLM_F_CREATE should be set when creating new route [ 623.199976][T23019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.088869][T23060] netlink: 'syz.2.5103': attribute type 3 has an invalid length. [ 624.104552][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.110911][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.151166][T23060] netlink: 'syz.2.5103': attribute type 1 has an invalid length. [ 624.233842][T23060] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5103'. [ 624.288524][T23068] netlink: 61959 bytes leftover after parsing attributes in process `syz.0.5105'. [ 624.323341][T23068] tc_dump_action: action bad kind [ 624.337044][T23072] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 624.390135][T23072] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 624.531523][T23073] netlink: 'syz.1.5106': attribute type 29 has an invalid length. [ 626.088376][T23121] netlink: 'syz.2.5117': attribute type 2 has an invalid length. [ 626.136684][T23121] netlink: 'syz.2.5117': attribute type 11 has an invalid length. [ 626.217063][T23121] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.5117'. [ 626.275332][T23129] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5119'. [ 626.331835][T23130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5119'. [ 626.372041][T23130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5119'. [ 626.427098][T23129] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5119'. [ 626.595704][T23133] netlink: 'syz.2.5121': attribute type 29 has an invalid length. [ 626.869028][T23148] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5124'. [ 627.710372][T23160] bond0: (slave bond_slave_0): Releasing backup interface [ 628.387395][T23161] chnl_net:caif_netlink_parms(): no params data found [ 628.509007][T23195] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5136'. [ 628.555234][T23195] openvswitch: netlink: Flow key attribute not present in set flow. [ 628.571783][T23193] validate_nla: 6 callbacks suppressed [ 628.571800][T23193] netlink: 'syz.0.5134': attribute type 10 has an invalid length. [ 628.647064][T23193] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.689854][T23193] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.730468][T23193] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.760737][T23193] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.787586][T23193] device geneve0 entered promiscuous mode [ 628.871000][T23193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.900340][T23193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.929713][T23193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.940228][T23193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.969337][T23193] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 629.192383][T23161] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.221117][T23161] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.321750][T23161] device bridge_slave_0 entered promiscuous mode [ 629.381701][ T7724] Bluetooth: hci4: command 0x0409 tx timeout [ 629.400185][T23227] netlink: 'syz.1.5142': attribute type 27 has an invalid length. [ 629.785448][T23227] bond0: (slave bond_slave_0): Releasing backup interface [ 629.984714][T23161] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.995686][T23161] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.033427][T23161] device bridge_slave_1 entered promiscuous mode [ 630.217468][T23161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.342699][T23161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.545717][T23250] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5150'. [ 630.570821][T23161] team0: Port device team_slave_0 added [ 630.662684][T23250] openvswitch: netlink: Flow key attribute not present in set flow. [ 630.702433][T23161] team0: Port device team_slave_1 added [ 630.846336][T23161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.864929][T23253] netlink: 'syz.0.5151': attribute type 2 has an invalid length. [ 630.882431][T23161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.945794][T23253] netlink: 'syz.0.5151': attribute type 11 has an invalid length. [ 630.994870][T23253] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.5151'. [ 631.045483][T23161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.465085][ T7724] Bluetooth: hci4: command 0x041b tx timeout [ 631.564913][T23250] device syzkaller0 entered promiscuous mode [ 631.616566][T23262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5153'. [ 631.699128][T23161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.721591][T23161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.808507][T23161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.871195][T23266] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.5155'. [ 631.936490][T23265] netlink: 'syz.1.5155': attribute type 39 has an invalid length. [ 632.049887][T23265] device hsr_slave_0 left promiscuous mode [ 632.157791][T23271] netlink: 'syz.2.5158': attribute type 21 has an invalid length. [ 632.191042][T23161] device hsr_slave_0 entered promiscuous mode [ 632.208075][T23161] device hsr_slave_1 entered promiscuous mode [ 632.226938][T23161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.293309][T23161] Cannot create hsr debugfs directory [ 632.377728][T23271] netlink: 'syz.2.5158': attribute type 9 has an invalid length. [ 632.455922][T23271] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.5158'. [ 632.718794][T23283] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.5160'. [ 633.215010][T23294] netlink: 'syz.4.5164': attribute type 6 has an invalid length. [ 633.232468][T23294] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5164'. [ 633.414414][T23296] netlink: 'syz.1.5165': attribute type 2 has an invalid length. [ 633.462437][T23296] netlink: 'syz.1.5165': attribute type 11 has an invalid length. [ 633.482572][T23296] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.5165'. [ 633.551680][ T7739] Bluetooth: hci4: command 0x040f tx timeout [ 633.564592][T23161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 633.619416][T23161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 633.677491][T23161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 633.727103][T23161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.875365][T23305] netlink: 'syz.1.5168': attribute type 27 has an invalid length. [ 633.898833][T23305] netlink: 'syz.1.5168': attribute type 25 has an invalid length. [ 633.954542][T23317] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5167'. [ 634.013911][T23317] openvswitch: netlink: Flow key attribute not present in set flow. [ 634.169843][T23161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.272681][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 634.298634][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.375243][T23161] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.684041][T23317] device syzkaller0 entered promiscuous mode [ 634.771521][T23322] device syzkaller0 entered promiscuous mode [ 634.816314][T23339] netlink: 'syz.2.5174': attribute type 3 has an invalid length. [ 634.894599][T23339] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5174'. [ 634.966412][T23341] netlink: 'syz.1.5175': attribute type 29 has an invalid length. [ 635.014770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.032295][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.052172][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.059254][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.098441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.120034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.146135][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.153289][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.180330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.288074][T23341] netlink: 'syz.1.5175': attribute type 29 has an invalid length. [ 635.321743][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.337926][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.360346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 635.429342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 635.485002][T23342] netlink: 'syz.1.5175': attribute type 29 has an invalid length. [ 635.531819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.582755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 635.631919][ T7682] Bluetooth: hci4: command 0x0419 tx timeout [ 635.704987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.755335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.814857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.857249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.899130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.934418][T23161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 636.123145][T23368] netlink: 'syz.4.5183': attribute type 29 has an invalid length. [ 636.148099][T23368] netlink: 'syz.4.5183': attribute type 29 has an invalid length. [ 636.170913][T23368] netlink: 'syz.4.5183': attribute type 29 has an invalid length. [ 636.199833][T23368] netlink: 'syz.4.5183': attribute type 19 has an invalid length. [ 636.229123][T23368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5183'. [ 636.622093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.652038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 636.696123][T23161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.734819][T23379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5186'. [ 637.762769][T23404] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5190'. [ 638.371045][T23400] ref_ctr_offset mismatch. inode: 0x729 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 638.410525][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 638.438393][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 638.513672][T23415] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5194'. [ 638.543614][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 638.582514][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 638.646299][T23161] device veth0_vlan entered promiscuous mode [ 638.828680][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 638.862900][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.047524][T23161] device veth1_vlan entered promiscuous mode [ 639.258773][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 639.322465][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 639.415301][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.455722][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.480467][T23448] validate_nla: 5 callbacks suppressed [ 639.480496][T23448] netlink: 'syz.1.5199': attribute type 29 has an invalid length. [ 639.544645][T23161] device veth0_macvtap entered promiscuous mode [ 639.561795][T23452] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5200'. [ 639.595614][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.623000][T23448] netlink: 'syz.1.5199': attribute type 29 has an invalid length. [ 639.682139][T23453] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5200'. [ 639.758599][T23161] device veth1_macvtap entered promiscuous mode [ 639.797172][T23462] netlink: 'syz.1.5199': attribute type 29 has an invalid length. [ 639.875792][T23161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.940247][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.961368][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.032985][T23161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.071693][T23161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.138829][T23161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.364095][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.395119][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.522765][T23161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.575720][T23161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.605294][T23161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.633220][T23161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.659068][T23476] netlink: 'syz.1.5205': attribute type 22 has an invalid length. [ 640.671676][T23476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5205'. [ 641.178450][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.186449][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.216887][T23504] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 641.261428][ T895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.317056][T23526] syz.1.5211[23526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 641.343462][T23504] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5209'. [ 641.364694][ T895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.396671][ T895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.445194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.764511][T23532] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.5120'. [ 641.819294][T23532] netlink: 16126 bytes leftover after parsing attributes in process `syz.5.5120'. [ 642.063627][T23536] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.5224'. [ 642.200328][T23542] netlink: 'syz.4.5214': attribute type 29 has an invalid length. [ 642.215231][T23536] netlink: 'syz.0.5224': attribute type 10 has an invalid length. [ 642.314956][T23542] netlink: 'syz.4.5214': attribute type 29 has an invalid length. [ 642.778098][T23561] netlink: 'syz.0.5220': attribute type 41 has an invalid length. [ 642.833632][T23561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5220'. [ 642.900281][T23561] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 643.269635][ T144] tipc: Subscription rejected, illegal request [ 643.320266][T23579] netlink: 203292 bytes leftover after parsing attributes in process `syz.0.5227'. [ 643.427154][T23579] netlink: del zone limit has 8 unknown bytes [ 643.501889][T23579] netlink: 203292 bytes leftover after parsing attributes in process `syz.0.5227'. [ 643.602974][T23579] netlink: del zone limit has 8 unknown bytes [ 643.650172][T23579] netlink: 203292 bytes leftover after parsing attributes in process `syz.0.5227'. [ 643.768513][ C0] ------------[ cut here ]------------ [ 643.768546][ C0] WARNING: CPU: 0 PID: 23590 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 643.768645][ C0] Modules linked in: [ 643.768656][ C0] CPU: 0 PID: 23590 Comm: syz.1.5229 Not tainted syzkaller #0 [ 643.768672][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.768682][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 643.768700][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d 93 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 643.768714][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 643.768728][ C0] RAX: ffffffff81a07f90 RBX: 0000000000000008 RCX: ffff888023235940 [ 643.768740][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.768750][ C0] RBP: 0000000000000000 R08: ffff888023235947 R09: 1ffff11004646b28 [ 643.768760][ C0] R10: dffffc0000000000 R11: ffffed1004646b29 R12: ffff8880232370c8 [ 643.768771][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000020000000 [ 643.768782][ C0] FS: 00007feffd5d66c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 643.768796][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 643.768807][ C0] CR2: 000000110c344469 CR3: 000000002604b000 CR4: 00000000003506f0 [ 643.768820][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 643.768830][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 643.768841][ C0] Call Trace: [ 643.768846][ C0] <#DB> [ 643.768859][ C0] bpf_probe_read_compat+0xdd/0x170 [ 643.768916][ C0] bpf_prog_ba6f4f59b8fe48b1+0x40/0xa04 [ 643.768929][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 643.768955][ C0] ? perf_event_switch_output+0x730/0x730 [ 643.768975][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 643.768989][ C0] __perf_event_overflow+0x35f/0x550 [ 643.769012][ C0] perf_bp_event+0x276/0x320 [ 643.769030][ C0] ? perf_trace_lock_acquire+0x341/0x3f0 [ 643.769050][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 643.769101][ C0] ? rcu_lock_acquire+0x9/0x30 [ 643.769173][ C0] ? read_lock_is_recursive+0x10/0x10 [ 643.769203][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 643.769253][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 643.769276][ C0] notify_die+0x141/0x1a0 [ 643.769296][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 643.769321][ C0] ? exc_debug+0x6e/0x130 [ 643.769340][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 643.769362][ C0] notify_debug+0x20/0x30 [ 643.769413][ C0] exc_debug+0xcf/0x130 [ 643.769434][ C0] asm_exc_debug+0x1a/0x40 [ 643.769450][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 643.769501][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 643.769514][ C0] RSP: 0018:ffffc90002ecf7f8 EFLAGS: 00050206 [ 643.769528][ C0] RAX: ffffffff83e69201 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 643.769540][ C0] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc90003321300 [ 643.769551][ C0] RBP: ffffc90002ecf950 R08: ffffc90003354fdf R09: 1ffff9200066a9fb [ 643.769563][ C0] R10: dffffc0000000000 R11: fffff5200066a9fc R12: ffffc90003321000 [ 643.769574][ C0] R13: 0000000000033fff R14: 0000200000000040 R15: 0000000000000000 [ 643.769595][ C0] ? _copy_from_iter+0x211/0x1160 [ 643.769621][ C0] [ 643.769626][ C0] [ 643.769630][ C0] _copy_from_iter+0x322/0x1160 [ 643.769662][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 643.769677][ C0] ? __build_skb+0x26/0x2e0 [ 643.769695][ C0] ? rcu_is_watching+0x11/0xa0 [ 643.769710][ C0] ? __build_skb+0x26/0x2e0 [ 643.769725][ C0] ? kmem_cache_alloc+0x189/0x280 [ 643.769741][ C0] ? __virt_addr_valid+0xbd/0x470 [ 643.769759][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 643.769774][ C0] ? __check_object_size+0x30c/0x410 [ 643.769796][ C0] netlink_sendmsg+0x758/0xbe0 [ 643.769827][ C0] ? netlink_getsockopt+0x570/0x570 [ 643.769843][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 643.769864][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 643.769890][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 643.769907][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 643.769925][ C0] ? netlink_getsockopt+0x570/0x570 [ 643.769946][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 643.769976][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 643.770005][ C0] ? import_iovec+0x6f/0xa0 [ 643.770027][ C0] ___sys_sendmsg+0x236/0x2e0 [ 643.770055][ C0] ? __sys_sendmsg+0x290/0x290 [ 643.770123][ C0] __se_sys_sendmsg+0x1b7/0x2a0 [ 643.770144][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 643.770159][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 643.770195][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 643.770217][ C0] do_syscall_64+0x4c/0xa0 [ 643.770231][ C0] ? clear_bhb_loop+0x30/0x80 [ 643.770246][ C0] ? clear_bhb_loop+0x30/0x80 [ 643.770264][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 643.770280][ C0] RIP: 0033:0x7fefff37e159 [ 643.770295][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.770308][ C0] RSP: 002b:00007feffd5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.770324][ C0] RAX: ffffffffffffffda RBX: 00007fefff605fa0 RCX: 00007fefff37e159 [ 643.770334][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 643.770344][ C0] RBP: 00007fefff415024 R08: 0000000000000000 R09: 0000000000000000 [ 643.770352][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.770361][ C0] R13: 00007fefff606038 R14: 00007fefff605fa0 R15: 00007ffd4742ae08 [ 643.770390][ C0] [ 643.770405][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 643.770413][ C0] CPU: 0 PID: 23590 Comm: syz.1.5229 Not tainted syzkaller #0 [ 643.770428][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.770436][ C0] Call Trace: [ 643.770442][ C0] <#DB> [ 643.770447][ C0] dump_stack_lvl+0x188/0x250 [ 643.770471][ C0] ? show_regs_print_info+0x20/0x20 [ 643.770490][ C0] ? load_image+0x410/0x410 [ 643.770525][ C0] panic+0x2f8/0x850 [ 643.770549][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 643.770581][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.770601][ C0] __warn+0x248/0x2b0 [ 643.770619][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.770640][ C0] report_bug+0x1b9/0x2e0 [ 643.770666][ C0] handle_bug+0x3a/0x70 [ 643.770681][ C0] exc_invalid_op+0x16/0x40 [ 643.770696][ C0] asm_exc_invalid_op+0x16/0x20 [ 643.770711][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 643.770729][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d 93 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 643.770742][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 643.770755][ C0] RAX: ffffffff81a07f90 RBX: 0000000000000008 RCX: ffff888023235940 [ 643.770766][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.770775][ C0] RBP: 0000000000000000 R08: ffff888023235947 R09: 1ffff11004646b28 [ 643.770786][ C0] R10: dffffc0000000000 R11: ffffed1004646b29 R12: ffff8880232370c8 [ 643.770797][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000020000000 [ 643.770818][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.770844][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.770866][ C0] bpf_probe_read_compat+0xdd/0x170 [ 643.770898][ C0] bpf_prog_ba6f4f59b8fe48b1+0x40/0xa04 [ 643.770914][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 643.770941][ C0] ? perf_event_switch_output+0x730/0x730 [ 643.770971][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 643.770992][ C0] __perf_event_overflow+0x35f/0x550 [ 643.771016][ C0] perf_bp_event+0x276/0x320 [ 643.771035][ C0] ? perf_trace_lock_acquire+0x341/0x3f0 [ 643.771056][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 643.771108][ C0] ? rcu_lock_acquire+0x9/0x30 [ 643.771129][ C0] ? read_lock_is_recursive+0x10/0x10 [ 643.771158][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 643.771181][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 643.771206][ C0] notify_die+0x141/0x1a0 [ 643.771226][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 643.771253][ C0] ? exc_debug+0x6e/0x130 [ 643.771269][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 643.771292][ C0] notify_debug+0x20/0x30 [ 643.771307][ C0] exc_debug+0xcf/0x130 [ 643.771328][ C0] asm_exc_debug+0x1a/0x40 [ 643.771342][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 643.771358][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 643.771370][ C0] RSP: 0018:ffffc90002ecf7f8 EFLAGS: 00050206 [ 643.771382][ C0] RAX: ffffffff83e69201 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 643.771393][ C0] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc90003321300 [ 643.771405][ C0] RBP: ffffc90002ecf950 R08: ffffc90003354fdf R09: 1ffff9200066a9fb [ 643.771416][ C0] R10: dffffc0000000000 R11: fffff5200066a9fc R12: ffffc90003321000 [ 643.771427][ C0] R13: 0000000000033fff R14: 0000200000000040 R15: 0000000000000000 [ 643.771447][ C0] ? _copy_from_iter+0x211/0x1160 [ 643.771471][ C0] [ 643.771476][ C0] [ 643.771481][ C0] _copy_from_iter+0x322/0x1160 [ 643.771512][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 643.771527][ C0] ? __build_skb+0x26/0x2e0 [ 643.771543][ C0] ? rcu_is_watching+0x11/0xa0 [ 643.771560][ C0] ? __build_skb+0x26/0x2e0 [ 643.771575][ C0] ? kmem_cache_alloc+0x189/0x280 [ 643.771590][ C0] ? __virt_addr_valid+0xbd/0x470 [ 643.771605][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 643.771620][ C0] ? __check_object_size+0x30c/0x410 [ 643.771642][ C0] netlink_sendmsg+0x758/0xbe0 [ 643.771671][ C0] ? netlink_getsockopt+0x570/0x570 [ 643.771688][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 643.771708][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 643.771726][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 643.771742][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 643.771759][ C0] ? netlink_getsockopt+0x570/0x570 [ 643.771780][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 643.771807][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 643.771836][ C0] ? import_iovec+0x6f/0xa0 [ 643.771864][ C0] ___sys_sendmsg+0x236/0x2e0 [ 643.771899][ C0] ? __sys_sendmsg+0x290/0x290 [ 643.771962][ C0] __se_sys_sendmsg+0x1b7/0x2a0 [ 643.771984][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 643.771998][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 643.772032][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 643.772054][ C0] do_syscall_64+0x4c/0xa0 [ 643.772068][ C0] ? clear_bhb_loop+0x30/0x80 [ 643.772083][ C0] ? clear_bhb_loop+0x30/0x80 [ 643.772101][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 643.772117][ C0] RIP: 0033:0x7fefff37e159 [ 643.772132][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.772145][ C0] RSP: 002b:00007feffd5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.772161][ C0] RAX: ffffffffffffffda RBX: 00007fefff605fa0 RCX: 00007fefff37e159 [ 643.772171][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 643.772181][ C0] RBP: 00007fefff415024 R08: 0000000000000000 R09: 0000000000000000 [ 643.772190][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.772200][ C0] R13: 00007fefff606038 R14: 00007fefff605fa0 R15: 00007ffd4742ae08 [ 643.772231][ C0] [ 643.772441][ C0] Kernel Offset: disabled [ 643.772458][ C0] [ 643.772460][ C0] ================================ [ 643.772462][ C0] WARNING: inconsistent lock state [ 643.772497][ C0] syzkaller #0 Not tainted [ 643.772502][ C0] -------------------------------- [ 643.772505][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 643.772509][ C0] syz.1.5229/23590 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 643.772518][ C0] ffffffff8c313a38 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 643.772539][ C0] {INITIAL USE} state was registered at: [ 643.772543][ C0] irq event stamp: 1328 [ 643.772545][ C0] hardirqs last enabled at (1327): [] seqcount_lockdep_reader_access+0x106/0x190 [ 643.772557][ C0] hardirqs last disabled at (1328): [] exc_debug+0x6e/0x130 [ 643.772566][ C0] softirqs last enabled at (1090): [] netlink_insert+0xe90/0x11f0 [ 643.772577][ C0] softirqs last disabled at (1088): [] release_sock+0x2b/0x1b0 [ 643.772587][ C0] [ 643.772587][ C0] other info that might help us debug this: [ 643.772590][ C0] Possible unsafe locking scenario: [ 643.772590][ C0] [ 643.772592][ C0] CPU0 [ 643.772594][ C0] ---- [ 643.772595][ C0] lock((console_sem).lock); [ 643.772600][ C0] [ 643.772601][ C0] lock((console_sem).lock); [ 643.772606][ C0] [ 643.772606][ C0] *** DEADLOCK *** [ 643.772606][ C0] [ 643.772608][ C0] no locks held by syz.1.5229/23590. [ 643.772612][ C0] [ 643.772612][ C0] stack backtrace: [ 643.772614][ C0] CPU: 0 PID: 23590 Comm: syz.1.5229 Not tainted syzkaller #0 [ 643.772622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 643.772627][ C0] Call Trace: [ 643.772630][ C0] <#DB> [ 643.772634][ C0] dump_stack_lvl+0x188/0x250 [ 643.772646][ C0] ? show_regs_print_info+0x20/0x20 [ 643.772660][ C0] ? print_usage_bug+0x42a/0x690 [ 643.772668][ C0] ? verify_lock_unused+0x15/0x140 [ 643.772680][ C0] lock_acquire+0x2c3/0x400 [ 643.772691][ C0] ? down_trylock+0x1c/0xa0 [ 643.772701][ C0] ? read_lock_is_recursive+0x10/0x10 [ 643.772715][ C0] ? perf_trace_lock+0xe4/0x390 [ 643.772725][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 643.772734][ C0] ? down_trylock+0x1c/0xa0 [ 643.772742][ C0] ? _raw_spin_lock+0x40/0x40 [ 643.772751][ C0] ? verify_lock_unused+0x15/0x140 [ 643.772764][ C0] down_trylock+0x1c/0xa0 [ 643.772774][ C0] __down_trylock_console_sem+0xd4/0x1f0 [ 643.772784][ C0] ? is_console_locked+0x5/0x10 [ 643.772791][ C0] ? panic+0x395/0x850 [ 643.772800][ C0] ? console_trylock+0x70/0x70 [ 643.772808][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 643.772818][ C0] ? give_up_console+0x20/0x20 [ 643.772863][ C0] console_unblank+0x28/0x180 [ 643.772878][ C0] panic+0x395/0x850 [ 643.772891][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 643.772906][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.772916][ C0] __warn+0x248/0x2b0 [ 643.772925][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.772936][ C0] report_bug+0x1b9/0x2e0 [ 643.772949][ C0] handle_bug+0x3a/0x70 [ 643.772956][ C0] exc_invalid_op+0x16/0x40 [ 643.772965][ C0] asm_exc_invalid_op+0x16/0x20 [ 643.772973][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 643.772982][ C0] Code: 24 45 31 f6 31 ff 89 de e8 8d 93 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 643.772989][ C0] RSP: 0018:fffffe0000016958 EFLAGS: 00010006 [ 643.772996][ C0] RAX: ffffffff81a07f90 RBX: 0000000000000008 RCX: ffff888023235940 [ 643.773003][ C0] RDX: 0000000000110000 RSI: 0000000000000000 RDI: 0000000000000000 [ 643.773008][ C0] RBP: 0000000000000000 R08: ffff888023235947 R09: 1ffff11004646b28 [ 643.773013][ C0] R10: dffffc0000000000 R11: ffffed1004646b29 R12: ffff8880232370c8 [ 643.773019][ C0] R13: 00007ffffffff000 R14: fffffe00000169c8 R15: 0000000020000000 [ 643.773029][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.773047][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 643.773058][ C0] bpf_probe_read_compat+0xdd/0x170 [ 643.773070][ C0] bpf_prog_ba6f4f59b8fe48b1+0x40/0xa04 [ 643.773079][ C0] bpf_overflow_handler+0x3fd/0x4a0 [ 643.773093][ C0] ? perf_event_switch_output+0x730/0x730 [ 643.773107][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 643.773118][ C0] __perf_event_overflow+0x35f/0x550 [ 643.773130][ C0] perf_bp_event+0x276/0x320 [ 643.773139][ C0] ? perf_trace_lock_acquire+0x341/0x3f0 [ 643.773150][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 643.773174][ C0] ? rcu_lock_acquire+0x9/0x30 [ 643.773184][ C0] ? read_lock_is_recursive+0x10/0x10 [ 643.773201][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 643.773221][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 643.773234][ C0] notify_die+0x141/0x1a0 [ 643.773244][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 643.773257][ C0] ? exc_debug+0x6e/0x130 [ 643.773265][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 643.773277][ C0] notify_debug+0x20/0x30 [ 643.773286][ C0] exc_debug+0xcf/0x130 [ 643.773296][ C0] asm_exc_debug+0x1a/0x40 [ 643.773303][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 643.773313][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 643.773319][ C0] RSP: 0018:ffffc90002ecf7f8 EFLAGS: 00050206 [ 643.773326][ C0] RAX: ffffffff83e69201 RBX: 0000000000033fe0 RCX: 0000000000033ce0 [ 643.773332][ C0] RDX: 0000000000033fe0 RSI: 0000200000000340 RDI: ffffc90003321300 [ 643.773337][ C0] RBP: ffffc90002ecf950 R08: ffffc90003354fdf R09: 1ffff9200066a9fb [ 643.773343][ C0] R10: dffffc0000000000 R11: fffff5200066a9fc R12: ffffc90003321000 [ 643.773349][ C0] R13: 0000000000033fff R14: 0000200000000040 R15: 0000000000000000 [ 643.773364][ C0] ? _copy_from_iter+0x211/0x1160 [ 643.773379][ C0] [ 643.773382][ C0] [ 643.773384][ C0] _copy_from_iter+0x322/0x1160 [ 643.773399][ C0] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 643.773407][ C0] ? __build_skb+0x26/0x2e0 [ 643.773416][ C0] ? rcu_is_watching+0x11/0xa0 [ 643.773423][ C0] ? __build_skb+0x26/0x2e0 [ 643.773431][ C0] ? kmem_cache_alloc+0x189/0x280 [ 643.773444][ C0] ? __virt_addr_valid+0xbd/0x470 [ 643.773452][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 643.773460][ C0] ? __check_object_size+0x30c/0x410 [ 643.773472][ C0] netlink_sendmsg+0x758/0xbe0 [ 643.773487][ C0] ? netlink_getsockopt+0x570/0x570 [ 643.773495][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 643.773505][ C0] ? apparmor_socket_sendmsg+0x88/0x230 [ 643.773514][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 643.773523][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 643.773532][ C0] ? netlink_getsockopt+0x570/0x570 [ 643.773543][ C0] ____sys_sendmsg+0x5be/0x8f0 [ 643.773557][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 643.773571][ C0] ? import_iovec+0x6f/0xa0 [ 643.773581][ C0] ___sys_sendmsg+0x236/0x2e0 [ 643.773595][ C0] ? __sys_sendmsg+0x290/0x290 [ 643.773625][ C0] __se_sys_sendmsg+0x1b7/0x2a0 [ 643.773635][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 643.773643][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 643.773660][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 643.773671][ C0] do_syscall_64+0x4c/0xa0 [ 643.773678][ C0] ? clear_bhb_loop+0x30/0x80 [ 643.773686][ C0] ? clear_bhb_loop+0x30/0x80 [ 643.773695][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 643.773703][ C0] RIP: 0033:0x7fefff37e159 [ 643.773711][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.773718][ C0] RSP: 002b:00007feffd5d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.773726][ C0] RAX: ffffffffffffffda RBX: 00007fefff605fa0 RCX: 00007fefff37e159 [ 643.773732][ C0] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 643.773737][ C0] RBP: 00007fefff415024 R08: 0000000000000000 R09: 0000000000000000 [ 643.773742][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.773747][ C0] R13: 00007fefff606038 R14: 00007fefff605fa0 R15: 00007ffd4742ae08 [ 643.773761][ C0]