last executing test programs: 9.411785903s ago: executing program 4 (id=1691): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000800000000000000faffffff8500000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x6fa6c04eee5c85fd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/158, 0x9e}], 0x1, &(0x7f0000000380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}, 0x40012120) 9.159097809s ago: executing program 3 (id=1693): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x5, 0x12) socket$kcm(0xf, 0x0, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d25a806f8c6394f90524fc600d00030009000100ff3582c137153e370248018010000000d1bd", 0x33fe0}], 0x1}, 0x0) 8.993146623s ago: executing program 3 (id=1694): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.931262195s ago: executing program 1 (id=1696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x1, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000003340)={&(0x7f0000000c40)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000e00)="90", 0x1}], 0x1}, 0x240008c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x80, 0x0}}, 0x10, &(0x7f0000000200)}, 0x20000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000)=r4, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r0) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc3ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x5, 0x6, 0xe, 0x0, 0x8, 0x452a, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x6}, 0x50, 0x3, 0x9, 0x0, 0x8, 0x3, 0xa3b, 0x0, 0xb292, 0x0, 0x5}, r8, 0xc, r7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200009d080000000000000200000085000000200000009500000000000000de24530a2ade94db589d280682f1b9c51e679f095b0d014c3f4867ea710b91846e5aee072c98098cc189d57d0681fa556d6837869703b73053d48cf912741816610cd74e9bd6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x3373f26b34e5d9bf) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xa, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0x1218, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x1, 0xfffffffc, 0x6, 0x8, 0x5, 0x806, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r1, &(0x7f0000003340)={&(0x7f0000000c40)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f00000031c0)=[{&(0x7f0000000e00)="90", 0x1}], 0x1}, 0x240008c0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r5, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x80, 0x0}}, 0x10, &(0x7f0000000200)}, 0x20000000) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x23, &(0x7f0000000000)=r4, 0x8) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) close(r0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc3ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x5, 0x6, 0xe, 0x0, 0x8, 0x452a, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x6}, 0x50, 0x3, 0x9, 0x0, 0x8, 0x3, 0xa3b, 0x0, 0xb292, 0x0, 0x5}, r8, 0xc, r7, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200009d080000000000000200000085000000200000009500000000000000de24530a2ade94db589d280682f1b9c51e679f095b0d014c3f4867ea710b91846e5aee072c98098cc189d57d0681fa556d6837869703b73053d48cf912741816610cd74e9bd6"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x3373f26b34e5d9bf) (async) 6.723288908s ago: executing program 1 (id=1699): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x0) mkdir(0x0, 0x0) (async) mkdir(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="1400000028000b05d2600d00030009000100ff35", 0x14}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./cgroup/../file0\x00', 0x0, 0x0, r0}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./cgroup/../file0\x00', 0x0, 0x0, r0}, 0x18) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0xe3, 0x0, 0x81, 0x0, 0x0, 0xc, 0x3a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000000000000001}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x891) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x40, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r3, 0x0, 0xa0028000}, 0x38) syz_open_procfs$namespace(r2, &(0x7f0000000540)='ns/user\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6.593658351s ago: executing program 4 (id=1701): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x88, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x88, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xa, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffff}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffc0, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0x8, 0x7, 0xffffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x1, 0x4, 0x5, 0x3}, {0x1, 0x5, 0xb, 0x7}, {0x4, 0x4, 0x10, 0x7}, {0x5, 0x3, 0x0, 0x5}, {0x1, 0x3, 0x4, 0x5}], 0x10, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4010}, 0x18) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4010}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1a, 0x1d, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @generic={0x0, 0x2, 0x3, 0x1, 0x9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x0, 0x8, 0x0, 0x2500, 0x7fffffff}], &(0x7f0000000200)='GPL\x00', 0xa5db, 0x5, &(0x7f0000000240)=""/5, 0x41000, 0x10, '\x00', 0x0, @fallback=0x35, r2, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x10, 0xcc4, 0x5}, 0x10, r4, r5, 0x9, &(0x7f0000000a80)=[r6, r7, r8], &(0x7f0000000ac0)=[{0x5, 0x5, 0x2, 0xb}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0xe, 0x3}, {0x5, 0x1, 0xa, 0xa}, {0x1, 0x5, 0x1, 0x5}, {0x2, 0x1, 0x10, 0x4}, {0x4, 0x5, 0x2, 0xb}, {0x3, 0x2, 0x4, 0xb}, {0x1, 0x3, 0x2}], 0x10, 0x6}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1a, 0x1d, &(0x7f0000000100)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @generic={0x0, 0x2, 0x3, 0x1, 0x9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}, @generic={0x0, 0x8, 0x0, 0x2500, 0x7fffffff}], &(0x7f0000000200)='GPL\x00', 0xa5db, 0x5, &(0x7f0000000240)=""/5, 0x41000, 0x10, '\x00', 0x0, @fallback=0x35, r2, 0x8, &(0x7f00000002c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x10, 0xcc4, 0x5}, 0x10, r4, r5, 0x9, &(0x7f0000000a80)=[r6, r7, r8], &(0x7f0000000ac0)=[{0x5, 0x5, 0x2, 0xb}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0xe, 0x3}, {0x5, 0x1, 0xa, 0xa}, {0x1, 0x5, 0x1, 0x5}, {0x2, 0x1, 0x10, 0x4}, {0x4, 0x5, 0x2, 0xb}, {0x3, 0x2, 0x4, 0xb}, {0x1, 0x3, 0x2}], 0x10, 0x6}, 0x94) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000c40)={0x1, 0x4, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @local, @random="d0e3e29b0f9b", @local]}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80)={r1}, 0x8) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000cc0)={'vxcan1\x00', 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001e80)={r0, 0x0, 0x45, 0x42, &(0x7f0000000d00)="36ca054e96e11656a0062c3763efcda9fd8b9e5bf85195fc3876209478c1f4a79396e813a056c533e00cf2865cfe4dfca14ef0bc37c536bd7662d9a3534d21dd3344715f8e", &(0x7f0000000d80)=""/66, 0x6, 0x0, 0x1000, 0x47, &(0x7f0000000e00)="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", &(0x7f0000001e00)="bea6bec2edf7f426f3d0286a7029fc1cd945d9675061b7f27f7daca919d363c16290edd700d14d9369399cb08e6602c6188832f92e6ad58b58c0247a491ec183cbad390d0336bb", 0x1, 0x0, 0x7}, 0x50) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000001f00)=0x1) (async) ioctl$TUNSETVNETLE(r10, 0x400454dc, &(0x7f0000001f00)=0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003040)={&(0x7f0000001f40)="0a4fee431bf8e52cde7c9fcd5ff89b2b804c7df77d2a63ea", &(0x7f0000001f80)=""/4096, &(0x7f0000002f80)="408adb2b", &(0x7f0000002fc0)="43cc957188c83a7ceaf0244b9d132fcfc4b1de40a06f3cfb96d1cd7c6f179df6e99d02a733ba33e9b6c2e81176ea99777d6e581a292802ae466801f5d426976b475ad80fd4e0965235fce965f378862fa98a19aac03b04e410b699b15fb712581caba585d730543c8fdd", 0x9, r1, 0x4}, 0x38) sendmsg$inet(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003080), 0x0, &(0x7f00000030c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @rand_addr=0x64010102}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0x5788}]}, @timestamp_addr={0x44, 0xc, 0xf8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @noop, @rr={0x7, 0x7, 0x86, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0xb, [{@empty, 0xfffffffb}, {@rand_addr=0x64010102, 0x1ff}, {@local, 0x2}, {@rand_addr=0x64010102, 0x480000}, {@multicast1, 0x5}]}, @timestamp={0x44, 0x1c, 0xec, 0x0, 0x8, [0xa92, 0x69, 0x4, 0xfff00000, 0xf, 0x800]}, @timestamp={0x44, 0x14, 0xa7, 0x0, 0x1, [0x2, 0x4, 0x7fffffff, 0x101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @remote}}}], 0x138}, 0x40000) (async) sendmsg$inet(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003080), 0x0, &(0x7f00000030c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @rand_addr=0x64010102}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xf, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@private=0xa010102, 0x5788}]}, @timestamp_addr={0x44, 0xc, 0xf8, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @noop, @rr={0x7, 0x7, 0x86, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0xee, 0x3, 0xb, [{@empty, 0xfffffffb}, {@rand_addr=0x64010102, 0x1ff}, {@local, 0x2}, {@rand_addr=0x64010102, 0x480000}, {@multicast1, 0x5}]}, @timestamp={0x44, 0x1c, 0xec, 0x0, 0x8, [0xa92, 0x69, 0x4, 0xfff00000, 0xf, 0x800]}, @timestamp={0x44, 0x14, 0xa7, 0x0, 0x1, [0x2, 0x4, 0x7fffffff, 0x101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @remote}}}], 0x138}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000032c0)={r10, 0x58, &(0x7f0000003240)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000032c0)={r10, 0x58, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000035c0)={r9, 0x0, 0x92, 0xee, &(0x7f0000003300)="38ca163f0ab1b84492ffd17b0d0a967516312a52755659816a2066236b085d2ea86399e5a5609821e8c217d944fa7b9a894411ee819dff1573073a2fee9d51e535d65e675df64cb9fbf6770c3612fccabad382a9e8a4b88e7f55fb6d7c597883ed62fde7040459ed4b219df75d86c0209af68b41104d8c49fe9e2b30db574932966def49713311d53db11cdcb8c521b46421", &(0x7f00000033c0)=""/238, 0x8000, 0x0, 0x33, 0x95, &(0x7f00000034c0)="cbf580ed0244b5e12974b4728c1b8d416cd81661ac2c239fdf1be1b2c2708f51c7a96d0771a25934629a430a424804ea325a59", &(0x7f0000003500)="5af069d41026f600477f080ed8f76ad90dabaf88287f3cc84b21a8bf9db6223795d1ccd94b08c1c8dda398fa4059336d7a3175a581fa28346239b36afdff2be85f8b725ee25b318cd1821da7903cedc0bdda63b581660a37a1d13c17c76c3680965f7c1665edaa7f7fc79e6144405fb0ad2c610bcb32a88ac04ddced919f56b75f7d0e026cb480b6f5711c2abe5185d65942f61402", 0x5}, 0x50) r12 = openat$cgroup_ro(r10, &(0x7f0000003640)='memory.events\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x85, '\x00', r11, r12, 0x2, 0x4, 0x5}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x85, '\x00', r11, r12, 0x2, 0x4, 0x5}, 0x50) socketpair(0x27, 0x5, 0x101, &(0x7f0000003700)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) sendmsg$kcm(r14, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003740)='G', 0x1}, {&(0x7f0000003780)="4c6438af5093f7047aadefc1099ebd32a1fce6ea5be001376a65fae60b8213938497b9e0ecb2fac1ec8bbce5194e9f2bb230d269dd92ab05cdb6f2a7a357d049f967da81aa5f10e26511d721c2e7fde7c5c541ad7d55534ab5391947c0450eb8a674d6a6e8f40ef3dbe014b7a7de616818c2a0013d2f8dc08be7335be8a3fb2cb2c4613468702314724e3e1340c11cfa2ddc2ea86eafeeaf98510823b25c135f1d4e0b83b30d8d22b6aeddc910e98910", 0xb0}], 0x2, &(0x7f0000003880)=[{0xb8, 0x115, 0x3, "6404c9ee0583362bf5aba3c43541fb7ec72cd17ba687466306196bcd09c379aff8120b481fcb50f6d252d30d0be19fe1cc30a3db4cedddc187913215f0451d44191e1d103116d4a3b7e3c62ceb2709048c8296d9c018ab3c6b20397052c4506e35c15c12bcde98accc6f53ff13d20157aedb48f51fdbc32235b6e4f446e5267baea990958740f95fded92b0ddc8eea117d657cf882905abd73ab318a25ae8e44f97dceb4"}, {0x90, 0x114, 0x2, "2ebf402e4cf5d0ce1d5648a646de13e3903eecda76a4fc33c9010fde33787048a861d58f6745c83fa012f5518a16aa4ac1577c7644411c53ee2fb64ef996488363093fc129193e2b3ecedbfea3407c20c749061e86574252f9ff126682e028657bbd47c00308d0ed370bca3975dd1d72185de71761fd5df01822d1"}, {0xd8, 0x110, 0x3, "99aaef7b371b7a01bd63cbfa036236b718ea46f8e3ea4e2012ff3869509621f1619e03ee03961bc56c0732d2ad3bd2fe87276721780a62f4757b522cf29729c387800f2890489e310556c0c77853f820c5869c9028f2c5f0088a57d3aacb5f3348b96bf23fcfd12aded6b7c62db1e03132e0eeb47725df79e7b82c022c1ecb9a896c2a717d9d5bdd9585f58fc144d8e72ce282c9de42d4632bf76282bbf01caddf828edfcfcfc6d0da1bc719f25b3c6ae8f0274f82780628abd99147a81c41b7f2bf71a6"}, {0xa8, 0x116, 0x800, "cf01323a31a9bc135ae85b812f61c8bf879572dfba8af999ddc9cc60a76f0b21377041114c7d1977891dde8f138bc346096c0ddfc7ba23f2d15d8d1fd13398b0484cb87d9dedca57cbcd4d540a874ec4895cf4e7433b0c26ffb7633d333f9ca4278c94ae91c8cb5dc1ebce5ea428e15945ea2e818c4613266d247365373bb7f5137d5261fc9e537fd1e723f06b54a0e6fe860d2ec33de20a"}, {0x100, 0x113, 0x6, "714fb86cbaf834e2623a5d0672f9dc6f4c0fede877a3ca55edee5e3edaa93336389ac47cb12edeed33d0d7b664b3aa4f1838aed388b98aa7a50b1351785ca63f61680addab55baec992c96eaddccc5a564d2810d9db5b7f0d20e165dbc51026204a49d1c9469dabd854dd24afdaa689e1e8882d8f09a273d78996d0ad76dbbbb5f73ef98be710926712e3537d751e9771153069d073022d3df360b89cf05625c5b3c9615b4b93a54c1975f925cb2ee748a86599c910bd4eb95965b290da506dc55f3f9a9beed4e64322084f342a47515c49f79ca3da87a33042b45bb89dfb73602505376f3be58799689afdb"}], 0x3c8}, 0x4000090) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000003cc0)=r6, 0x4) sendmsg$unix(r0, &(0x7f0000003f80)={&(0x7f0000003d00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003f40)=[{&(0x7f0000003d80)="e08588026129425fc9e262aeb7859fb4ab23d0d7293947df402b73c39043e17b4fd77284c0161232a037dc08892b72b3c6de771c0fadb35adbf86087846de4f2fe2ce1f745be2cd38242f9f92aeed04c4691aa31298ceb67fdca573b1b918ac0348a8ab7b7f04a9a2e42b569988dd140648972a2c04211c694cb0dc6b309b41b8753", 0x82}, {&(0x7f0000003e40)="c4d4039421867df610c8e6dd48132a2cb420aebc3015b0ebf32f6cc4f724e8953a78bb107ef2439cb61bc4da908f147a15b626101d9342c6c658c217b60902934bc515ca0a7668c41be69967bc488c479d5780967748ce6adf31f1ecafa1669615c52cc22d25375dac6d83ea33a8b7d4eba8b96b3cb130f313cec5583856894be44fc51c0b2d774a129282b91b3d7d16de7ba45b6835e2809ea98f2000c3b6d5af4775a27e0d7dd1dee7566c0ad5e88dad8762ea0cf2d53c6b8dac10cd5171f87e", 0xc1}], 0x2, 0x0, 0x0, 0x4048000}, 0x85) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000003fc0)) (async) ioctl$TUNGETFEATURES(r10, 0x800454cf, &(0x7f0000003fc0)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000004040)={0x3, &(0x7f0000004000)=[{0x1, 0x3, 0x3, 0x6}, {0x5, 0x1}, {0x1, 0x61, 0xf9, 0x4}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000004040)={0x3, &(0x7f0000004000)=[{0x1, 0x3, 0x3, 0x6}, {0x5, 0x1}, {0x1, 0x61, 0xf9, 0x4}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004340)={r0, 0xe0, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000040c0)=[0x0], &(0x7f0000004100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6d, &(0x7f0000004140)=[{}], 0x8, 0x10, &(0x7f0000004180), &(0x7f00000041c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000004200)}}, 0x10) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000004380)=r9) (async) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000004380)=r9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005540)={&(0x7f00000043c0)="92feebcfc4a81b32951a8e1d19d70522d20847c61d80d1e2c2", &(0x7f0000004400)=""/4096, &(0x7f0000005400)="8eb4dd03871895db627eb634fd9887fc47be3e1ad5a3209d213fd24a923d0ebedb98a15d226f5c3b58d93f69b36ddcc0a9f9adabad77cbcdc3", &(0x7f0000005440)="972358e64f8994e354a73d856d470ac2fd7129f1ea811376369639eddc4d", 0x5, 0xffffffffffffffff, 0x4}, 0x38) 6.319040368s ago: executing program 4 (id=1702): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xffffffff, 0x0, 0x1}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000a80)) 5.677159013s ago: executing program 0 (id=1703): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000900)=[{&(0x7f00000001c0)="7ed5f8f7b6af22586647d9cbcb753d1a958e2a358cbe", 0x16}, {0x0}, {0x0}], 0x3, &(0x7f0000000940)=[{0x20, 0x88, 0xffff7fff, "3cea79a572b699e55d153f5b14c207c9"}, {0x78, 0x10e, 0x1, "b3f57cc02e6a074a20a78d26962a41fbe64b2fcf961208b5047215bf71bfb39c2d7ffa62bca5ab50609763f20ef0af358521b198054cbbe1fcd85f43892d12988dedc345f3fbc509ee7006fca1b004d864c29144dd88925591019945314fbdebc5636cc3a6e32b"}], 0x98}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x0, 0x36}, 0x28) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={0x0, 0x0, 0x10}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x21, 0x4, 0x15, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) write$cgroup_subtree(r2, 0x0, 0x280) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x600}, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 5.676793553s ago: executing program 2 (id=1704): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001605000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf530000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xffc0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b0000000d000000000000020400000000303061305f5161515f00c504aba001455446efd07b7aac1a7e4b260d9518153037b48a75e0ce29a37f96bea2d5e74e7ca41438f4b082488849690c2dcd1a7b4ce93b9666e40f2a2d46e249730d0252c16dbcefc34797531a7bf1c437c5ca1cbac1c869a01f3f35c9b8caeff52c9475cd97b4fd29b528415902f017e09f4169ec8ee3c5c0bd3300"/182], &(0x7f0000000080)=""/89, 0x2f, 0x59, 0x1, 0x1}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x1, '\x00', r5, r7, 0x0, 0x4, 0x2}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000100", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r5, 0x26, 0x1, 0x1cb, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0}, 0x40) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000580)=@raw=[@generic={0xe, 0x3, 0x2, 0x1, 0x7fffffff}, @ldst={0x0, 0x2, 0x3, 0x8, 0x4, 0x1, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd98f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000000640)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x67, '\x00', r5, 0x0, r4, 0x8, &(0x7f00000006c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r8, r4, r4, r4], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r7, r6, 0x13, 0x8, r2, @void, @value=r11, @void, @void, r10}, 0x20) 4.99493773s ago: executing program 4 (id=1705): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x100, 0x12) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x58, 0x12) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200200, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x6, 0x6, 0x4, 0x3}, {0x3, 0x8, 0xd, 0x7fffffff}]}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000240)={0x0, 0x80, 0x3, 0xc, 0x0, 0x3, 0x0, 0x1ff, 0x80000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000200), 0x9}, 0xcc0, 0x200, 0x2, 0x8, 0x80000001, 0x2481, 0x6, 0x0, 0xffffffff, 0x0, 0x1ff}) r4 = perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x1, 0x0, 0x2, 0x41, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x1100c, 0x1, 0x0, 0x0, 0x4, 0x5, 0x3, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000380)='/dev/net/tun\x00') ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000003c0)) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r5, &(0x7f0000000c40)={&(0x7f0000000540)=@xdp={0x2c, 0x2, r8, 0x3c}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000005c0)="d7490af88625903d97f28fb4ce60f58bf31956f08f1ca1550232c85571ed3f3d4ee5e517201a63a518d7fb34ab2dd50ce86d8de1b0e4df00736d4eba443143fe71a1eda3f7f9aae6d0e09f482f8a7178f2564d37fc1f597ed1cf1265e9995a7d82326e1cca8e1d712baf2c1ba3fc0fc7207d916cdbb1daee31dbb7dc9329beda2c8b0cb5f5646b41b29718add6fbc1bf48f1e5aef283c9a75e74c2a2851fb072c59551686f1dbea7a40c161fe30ff614af60eb934f9ededc4fcaf0e99e", 0xbd}, {&(0x7f0000000680)="60081a5aa6807fa35953b1c30c5ddb6b8d05466e812d670852675d4ac832c78b7b20614e4c522bbbb7c9b333c9ee6e0da416d70c6e5e6b4d6dd4737f2a40338ddedd881dcb490728969c402302e1f21813dbed51016fb3a8038b38860871cf4b", 0x60}, {&(0x7f0000000700)="c0318c43230351b2bcd4b4c01a98cf1ec59ded6824d315a70fc6a30a8d68a723a4c5882244fc7cff1ab1e18b64ee8b84196c2022d8a74b47ca25ff40c6a0232c46910f6f94d7e6432607d1329bc15288a07a2635d0ee8e22cc102d9a426712959982f06735128e9ea81dab33c55b823fc04bf5cab27a8f9fc72bd2f22d7cb9ba46c9d9b7dc0240c8ceae3da9397ede9e8248ad76a2483ac88ccebf088935dfd8b4dd2c29bc5309235559a35b28ef0de92fac5e031d9da09727ccb7680261d4e251d1078da8657b26427553e100f3578bc6914bb7f9fad2203cc226fe1bc48c48725fedcd200148ea9eeb2c", 0xeb}, {&(0x7f0000000800)="4609124fd15dc53b54cc4bf91aaf591e7273024a212b62a90ee5acb3dc7c25866c3a57b263a7afda043c11a9363337f01db07b63ba436f501008bf16120f7f797ef783368e2db7d6202672e67e9e63adf8840b3ffc5dbaca3600162b1a8a34dff714bb63326572c6a03bb514470e8081a669a9baddcb4da7e9c2cefae63a83b0f5f4467d62f0dba36149e3da60aaa467482536baf6db9b921ad8cf519c4ae484c9f1b765235788ac15a6b26809bb2b6cedfa6911651ea25174556b88dd872806c64cb366b81a5a970ae5b77f187d88b4fcc2de9417a0b5b4b54e6e228e77b0f44783d5d59aaeec1d271dab", 0xeb}, {&(0x7f0000000900)="a69644bffbe44ff35c0511f2044cb83aae7baf1f97103ec91debf1318848628ca7be05a1af93ce74b618ec18d9a9d4853c5e64e1f42fb1297dc90658aede7b67f846e7bb87aade1f5f798d3705001844d84ec72a1ed9cf07b144c38f33ff4a9fee5d029cc3cd3db6c45316432853d896b13e9b4a857af2a4614602bd0887fa6608aecab74547a65668c3785c106ad461a650a06c069622029e634ff989710473a32ad39ab9cea0a6ed57a27bfbc466c59830eb629157dcce83e6dae4fdce9263ea08b11082c7", 0xc6}, {&(0x7f0000000a00)="6ff03bad839aa57c7df58d748f46350d30744166992320ef3b9c5fcea4cded2ce936b30362b2ddd90af3bd0ed35e", 0x2e}, {&(0x7f0000000a40)="547d794015bcf46aaf8e4cae8c77b12ce6f6cce80a5f448435c708a85bf13b97ce9dc0c354416f8d5363fcc33afa1d260e478b2ba38b7bb5a7354e0e96eb1256b014e59111", 0x45}], 0x7, &(0x7f0000000b40)=[{0x58, 0x118, 0x6, "cd02c07b5a4fd2ae4cd262d7193199cafa2bfe330864963a8a0ba6f008f92e627b5f46008b356614eb942a03f2191f623d420332b524b19d95a7a6544e6f2baf71e40320ec75e922"}, {0x20, 0x10b, 0x6e, "52c4001bcfc0da9252af6c0e"}, {0x58, 0x118, 0x1, "fc577d0d7d14617963c97391b4f7a18db59798b9e7f0101859c642e21c6c74b52c477eceaba550f5921a2622e79e48525b93ddf6f2423c4cd4a6d1e42fe3dd3194a9908e32198e"}], 0xd0}, 0x8000) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30e) r9 = openat$cgroup(r0, &(0x7f0000000c80)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000cc0)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000d00)='freezer.state\x00') perf_event_open(&(0x7f0000000d80)={0x2, 0x80, 0x80, 0xe, 0x3, 0xf6, 0x0, 0x5, 0x8004, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000d40), 0x2}, 0x4, 0xea, 0x5, 0xf, 0x5, 0xfffffff9, 0x3, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xd, 0xffffffffffffffff, 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000e40)={0x5, &(0x7f0000000e00)=[{0x8, 0xb, 0x2, 0x4}, {0x4, 0x7, 0x8, 0x6}, {0x2, 0x5, 0x40, 0x7}, {0x4, 0x6, 0x0, 0xffffffff}, {0x5, 0x9, 0x6, 0x3}]}) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={r7, 0x737, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@enum64={0xf, 0x5, 0x0, 0x13, 0x0, 0x1, [{0x6, 0x9, 0xc00000}, {0x1, 0xd, 0x9}, {0x9, 0x0, 0x7}, {0x3, 0x1, 0x6}, {0xb, 0xffffff83, 0x5}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x5}, @fwd={0x3}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x2e, 0x61, 0x5f, 0x0, 0x5f]}}, &(0x7f00000011c0)=""/39, 0x8e, 0x27, 0x1, 0xc}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0x20, &(0x7f00000013c0)={&(0x7f00000012c0)=""/80, 0x50, 0x0, &(0x7f0000001340)=""/128, 0x80}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x1f, 0x25, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3cf5, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x38d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001580)='syzkaller\x00', 0x9, 0x1000, &(0x7f00000015c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000025c0)={0x4, 0x5, 0x2, 0x7}, 0x10, 0x0, r6, 0x9, 0x0, &(0x7f0000002600)=[{0x1, 0x3, 0x3, 0x6}, {0x2, 0x4, 0x10, 0x1}, {0x0, 0x5, 0x10, 0xc}, {0x1, 0x2, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0x3, 0x1, 0x10, 0x4}, {0x0, 0x5, 0xa, 0x5}, {0x3, 0x5, 0xc, 0x6}, {0x4, 0x5, 0x10}], 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002780), &(0x7f00000027c0)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x1e, 0x23, &(0x7f0000000f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc2, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf7}}, @map_val={0x18, 0xa, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001040)='syzkaller\x00', 0xb, 0x7a, &(0x7f0000001080)=""/122, 0x40f00, 0x86, '\x00', r8, @fallback=0x3, r12, 0x8, &(0x7f0000001240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001280)={0x1, 0x2, 0x3f8, 0xfffffff0}, 0x10, r13, r14, 0x8, &(0x7f0000002840)=[r15, r6], &(0x7f0000002880)=[{0x2, 0x5, 0x6, 0x1}, {0x3, 0x5, 0x1}, {0x4, 0x2, 0x1, 0xa}, {0x4, 0x4, 0x3, 0x1}, {0x0, 0x3, 0xb}, {0x1, 0x2, 0x8, 0xa}, {0x5, 0x4, 0x1}, {0x2, 0x2, 0x9, 0xa}], 0x10, 0x1}, 0x94) mkdir(&(0x7f00000029c0)='./file0\x00', 0xa) 4.854400283s ago: executing program 3 (id=1706): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001000)='cpu&00\t&&') setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 4.733062056s ago: executing program 4 (id=1707): r0 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 4.677549777s ago: executing program 3 (id=1708): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x84, 0x7}], 0x10}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r9, 0x0, 0x10, 0x0, 0x11) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x38}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 4.629538338s ago: executing program 0 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x140) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40) socket$kcm(0x2a, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1bf274aa22d103000000ffffffff000000000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="fb1302346b81687dc6c1f216b2fdeb7231c106", 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x4}, 0x38) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc, 0x4, 0x0, 0x7, 0x0, 0x7fffffffffffffff}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) close(0x4) 4.409374394s ago: executing program 2 (id=1710): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) 4.15943036s ago: executing program 2 (id=1711): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x14, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5117}}, @map_val={0x18, 0x0, 0x2, 0x0, r3}], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x5d, &(0x7f00000001c0)=""/93, 0x41100, 0x10, '\x00', 0x0, @tracing=0x18, r4, 0x8, &(0x7f0000000280)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x1, 0x8, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x7, &(0x7f0000000380), &(0x7f00000003c0)=[{0x2, 0x2, 0xe, 0x6}, {0x4, 0x3, 0x0, 0x4}, {0x1, 0x5, 0x9, 0x2}, {0x0, 0x5, 0x3, 0x7}, {0x1, 0x1, 0x4, 0x8}, {0x5, 0x2, 0x9, 0x8}, {0x0, 0x3, 0x7, 0x1}], 0x10, 0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYRES8=r6, @ANYRESHEX, @ANYRESOCT=r3, @ANYRESOCT=r6], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.376224588s ago: executing program 0 (id=1712): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_config_ext, 0x10c012, 0x89, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {0x0}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)=0xff57000000000600) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='cpu==0||!') ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x10001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r2}, &(0x7f0000000fc0), &(0x7f0000001000)=r6}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) 3.183484283s ago: executing program 2 (id=1713): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x4000000000004, 0x20, 0xfffffffffffffffe}, 0x4) 3.182842443s ago: executing program 3 (id=1714): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x0, 0x56}, 0x28) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x8}, [@map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sched_cls, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0xde5, 0x0, 0xffffffffffffffff, 0x836, '\x00', r8, r1, 0x3, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r9, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd"], 0xfe33) recvmsg$kcm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000019c0)=""/221, 0xdd}, {&(0x7f0000001280)=""/194, 0xc2}, {&(0x7f00000006c0)=""/75, 0x4b}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000005c0)=""/182, 0xb6}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) recvmsg$kcm(r9, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r9, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) close(r4) recvmsg(r9, &(0x7f0000001080)={&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000001000)=[{&(0x7f0000000d00)=""/208, 0xd0}, {&(0x7f0000000e00)=""/204, 0xcc}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/53, 0x35}, {&(0x7f0000000f80)=""/121, 0x79}], 0x5}, 0x80) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) 3.032226997s ago: executing program 2 (id=1715): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) r6 = getpid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x3, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x8601, 0x2000000, 0x0, 0x0, 0x0, 0x10, 0x40, 0x0, 0x0, 0x0, 0x1}, r6, 0xffffffffffffffff, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x4800000) write$cgroup_pid(r8, &(0x7f00000005c0)=r1, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) 2.961823289s ago: executing program 0 (id=1716): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x18000000000002a0, 0x18, 0x0, &(0x7f0000000100)="bb0e04316844268cb89e14f0080045e0ffff0005000a002f", 0x0, 0x23, 0x60000000, 0x0, 0x1d, 0x0, 0x0, 0x5, 0x0, 0x5}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 2.759291483s ago: executing program 1 (id=1717): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe19}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x36, &(0x7f0000000100)=r3, 0x120) setsockopt$sock_attach_bpf(r1, 0x29, 0x37, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x2, 0x5}, {0x10000002, 0x2, 0x5, 0xc}]}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000)=r7, 0x8) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000060100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 599.258475ms ago: executing program 1 (id=1718): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000001000)='cpu&00\t&&') setsockopt$sock_attach_bpf(r0, 0x84, 0x64, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 582.425306ms ago: executing program 3 (id=1719): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000a40)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000900)=[{&(0x7f00000001c0)="7ed5f8f7b6af22586647d9cbcb753d1a958e2a358cbe", 0x16}, {0x0}, {0x0}], 0x3, &(0x7f0000000940)=[{0x20, 0x88, 0xffff7fff, "3cea79a572b699e55d153f5b14c207c9"}, {0x78, 0x10e, 0x1, "b3f57cc02e6a074a20a78d26962a41fbe64b2fcf961208b5047215bf71bfb39c2d7ffa62bca5ab50609763f20ef0af358521b198054cbbe1fcd85f43892d12988dedc345f3fbc509ee7006fca1b004d864c29144dd88925591019945314fbdebc5636cc3a6e32b"}], 0x98}, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x0, 0x36}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0xfff5) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={0x0, 0x0, 0x10}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x21, 0x4, 0x15, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$cgroup_subtree(r1, 0x0, 0x280) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x600}, 0x2000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) 531.559277ms ago: executing program 2 (id=1720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110bf00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000300)=""/207, 0xcf, 0x0, &(0x7f00000004c0)=""/250, 0xfa}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x1, 0x9, 0x2, 0x6120a, 0x1, 0x62, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x9}, 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8dc}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x2, 0x1, 0xa, 0xc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0xf8, &(0x7f0000000140)=""/248, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x34, r1, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0xb, 0x8, 0x3ff}, 0x10, r2, r0, 0x2, &(0x7f0000000780)=[r3, r4, r7], &(0x7f00000007c0)=[{0x5, 0x5, 0x9, 0xa}, {0x3, 0x4, 0xd, 0x5}], 0x10, 0xfffffe00}, 0x94) 475.474148ms ago: executing program 0 (id=1721): r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f0000000080)="d3f6cf9fa31be8c6cd37ada6f0abf269f64575f7e35e8695b346f5cabcbc6344920a98856cf828ee553f911daef44b4e4b7f97dfd238c502eef8192ee7f2fb2bb5271f21f7c6dbca96ca2332c648c1767a1a135335ce8da4872749c4e7aa71a4d65c2846a75d211743ad8d3defdd4d48a6a76d27f464972bfe16c488be46e4479f53e390623bfe32cc079c028ec1471c5997b9d7f5f6e909b99af12dedf7c6cfc3520285a10c53e475434593155927e9e39cbc70efb7b0b390c557f893f6f46a0e1eb1f272be8ad8b5a486544c4d775bef91fc3578205fb44a3af0c97a8b9f3bd20cef30fe4bb6da0c60c63f7c55067a85", &(0x7f0000000440)=""/4096, &(0x7f0000001440)="28ba90acf744ce7a1a8600315d69c9cf7b2ebb882b58d8c7c2aabff9e596cc90ebb5a46d810d699088bf5d9c916543a292ef517158953bc23753808feb217fb8b7497fe660900cec3931aaa840c5f6dad241565942a11ecaa75c8e7b7169015c34c06d6f008aaf2e31386491bc7ceb90cc1b847933c88e9630e3ce49761d433cb252a7d37a5d3a598b4e3b141d4d4c49bf443081a6e797c44104bef032c4597c0709faec51bcc7fd9fdc74741b39892eae7eecc98a4fe0be", &(0x7f0000001500)="a554633d57238422cf0228587156856a043cd4ecc5af69a6808d04eaea689aea214102c87d1fbe", 0x6, r1}, 0x38) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18}}], 0x18}, 0x40) socket$kcm(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f0000000080)="d3f6cf9fa31be8c6cd37ada6f0abf269f64575f7e35e8695b346f5cabcbc6344920a98856cf828ee553f911daef44b4e4b7f97dfd238c502eef8192ee7f2fb2bb5271f21f7c6dbca96ca2332c648c1767a1a135335ce8da4872749c4e7aa71a4d65c2846a75d211743ad8d3defdd4d48a6a76d27f464972bfe16c488be46e4479f53e390623bfe32cc079c028ec1471c5997b9d7f5f6e909b99af12dedf7c6cfc3520285a10c53e475434593155927e9e39cbc70efb7b0b390c557f893f6f46a0e1eb1f272be8ad8b5a486544c4d775bef91fc3578205fb44a3af0c97a8b9f3bd20cef30fe4bb6da0c60c63f7c55067a85", &(0x7f0000000440)=""/4096, &(0x7f0000001440)="28ba90acf744ce7a1a8600315d69c9cf7b2ebb882b58d8c7c2aabff9e596cc90ebb5a46d810d699088bf5d9c916543a292ef517158953bc23753808feb217fb8b7497fe660900cec3931aaa840c5f6dad241565942a11ecaa75c8e7b7169015c34c06d6f008aaf2e31386491bc7ceb90cc1b847933c88e9630e3ce49761d433cb252a7d37a5d3a598b4e3b141d4d4c49bf443081a6e797c44104bef032c4597c0709faec51bcc7fd9fdc74741b39892eae7eecc98a4fe0be", &(0x7f0000001500)="a554633d57238422cf0228587156856a043cd4ecc5af69a6808d04eaea689aea214102c87d1fbe", 0x6, r1}, 0x38) (async) socket$kcm(0xa, 0x2, 0x11) (async) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x18}}], 0x18}, 0x40) (async) 297.607113ms ago: executing program 1 (id=1722): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) (async) socket$kcm(0x2b, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) (async) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='A', 0x1}], 0x1}, 0x24008051) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000240)=r8, 0x8) (async, rerun: 64) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f00000001c0)=0x8000) (async, rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="2b63707561636374202b7020982adb6a21795d60ade8b84171c738ff1f3fe5130c186e9f18b615303bb199a6"], 0xf) (async, rerun: 64) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) (async) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) recvmsg$unix(r12, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYRES8=r13, @ANYBLOB="3eca", @ANYRES8=r14], 0x9a) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000009000000000000000100000058110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018540000030000000000000000000000184a0000080000000000000000000000183e0000030000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000", @ANYRESOCT=r1, @ANYBLOB="d9b55fc17389dc45dfadf5c7f6f55907e1389bb259b043a26a49e4657a08d98bd18efd433c5e7f3e"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x20880, 0x23, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000200)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, r11, r15, r16, r4], &(0x7f0000000680)=[{0x3, 0x4, 0x8, 0x5}, {0x2, 0x4, 0xa, 0xc}], 0x10, 0x8}, 0x94) 196.930175ms ago: executing program 0 (id=1723): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xe, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x142f1bfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000a3f}, 0x50) r1 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r2, 0x2b, 0x0, 0x63700, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r5, 0xffffffffffffffff, 0x2b, 0x2000, 0x0, @value=r6, @void, @void, @void, r4}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5ae) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a1085", @ANYRES8=r3, @ANYBLOB="8700"/20, @ANYRESDEC=r0, @ANYBLOB='\x00'/28], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000040000000300000000000084640f000000000000a58801879c8a5257"], &(0x7f0000002200)=""/4097, 0x28, 0x1001, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) r8 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(r9, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) 99.329027ms ago: executing program 4 (id=1724): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x740, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd2, 0x8, 0x2}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x740, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x4, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xd2, 0x8, 0x2}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) (async) 0s ago: executing program 1 (id=1725): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0xc8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x3, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x2ac5, 0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) socket$kcm(0xa, 0x3, 0x73) r7 = socket$kcm(0xa, 0x1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) recvmsg$unix(r8, &(0x7f00000005c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)=""/191, 0xbf}, {&(0x7f0000000300)=""/86, 0x56}, {&(0x7f0000000380)=""/124, 0x7c}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x10063) (async) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @mcast1}, 0x80, 0x0}, 0x20000001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r9}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) (async) socket$kcm(0x2b, 0x1, 0x0) kernel console output (not intermixed with test programs): lvl+0x188/0x24e [ 132.580499][ T5370] ? show_regs_print_info+0x12/0x12 [ 132.585745][ T5370] ? load_image+0x410/0x410 [ 132.590285][ T5370] ? is_bpf_text_address+0x28b/0x2a0 [ 132.595597][ T5370] ? is_bpf_text_address+0x22/0x2a0 [ 132.600825][ T5370] should_fail_ex+0x390/0x4c0 [ 132.605538][ T5370] should_failslab+0x5/0x20 [ 132.610064][ T5370] slab_pre_alloc_hook+0x59/0x300 [ 132.615118][ T5370] kmem_cache_alloc_node+0x5a/0x310 [ 132.620344][ T5370] ? tipc_own_addr+0x45/0x2a0 [ 132.625050][ T5370] ? __alloc_skb+0xf9/0x7d0 [ 132.629589][ T5370] __alloc_skb+0xf9/0x7d0 [ 132.633994][ T5370] tipc_msg_create+0x46/0x4b0 [ 132.638700][ T5370] ? tipc_own_addr+0x45/0x2a0 [ 132.643495][ T5370] tipc_group_proto_xmit+0xcd/0x870 [ 132.648730][ T5370] tipc_group_cong+0x4d4/0x5d0 [ 132.653535][ T5370] ? tipc_group_update_bc_members+0x4f0/0x4f0 [ 132.659633][ T5370] ? mark_lock+0x94/0x320 [ 132.663998][ T5370] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.670012][ T5370] ? tipc_dest_find+0xfe/0x120 [ 132.674819][ T5370] tipc_send_group_unicast+0x31c/0x550 [ 132.680334][ T5370] ? tipc_send_group_bcast+0xad0/0xad0 [ 132.685826][ T5370] ? wait_woken+0x1c0/0x1c0 [ 132.690366][ T5370] ? __kmem_cache_free+0xb6/0x200 [ 132.695422][ T5370] ? tipc_dest_pop+0x198/0x230 [ 132.700232][ T5370] __tipc_sendmsg+0x14f2/0x2c00 [ 132.705122][ T5370] ? rht_lock+0x150/0x150 [ 132.709484][ T5370] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.715497][ T5370] ? verify_lock_unused+0x140/0x140 [ 132.720727][ T5370] ? lock_chain_count+0x20/0x20 [ 132.725645][ T5370] ? lockdep_hardirqs_on+0x94/0x140 [ 132.730864][ T5370] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.737054][ T5370] ? mark_lock+0x94/0x320 [ 132.741426][ T5370] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.747440][ T5370] ? __local_bh_enable_ip+0x136/0x1c0 [ 132.752831][ T5370] ? lockdep_hardirqs_on+0x94/0x140 [ 132.758052][ T5370] ? __local_bh_enable_ip+0x136/0x1c0 [ 132.763446][ T5370] ? _local_bh_enable+0xa0/0xa0 [ 132.768324][ T5370] tipc_sendmsg+0x51/0x70 [ 132.772684][ T5370] ? tipc_recvmsg+0x13d0/0x13d0 [ 132.777567][ T5370] ____sys_sendmsg+0x5ed/0x9a0 [ 132.782371][ T5370] ? __sys_sendmsg_sock+0x30/0x30 [ 132.787424][ T5370] ? __import_iovec+0x306/0x510 [ 132.792317][ T5370] ? import_iovec+0x6f/0xa0 [ 132.796937][ T5370] ___sys_sendmsg+0x2a2/0x360 [ 132.801657][ T5370] ? __sys_sendmsg+0x2a0/0x2a0 [ 132.806474][ T5370] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 132.812673][ T5370] __se_sys_sendmsg+0x1c3/0x2b0 [ 132.817555][ T5370] ? __x64_sys_sendmsg+0x80/0x80 [ 132.822528][ T5370] ? lockdep_hardirqs_on+0x94/0x140 [ 132.827762][ T5370] ? __x64_sys_sendmsg+0x4f/0x80 [ 132.832732][ T5370] do_syscall_64+0x4c/0xa0 [ 132.837173][ T5370] ? clear_bhb_loop+0x60/0xb0 [ 132.841881][ T5370] ? clear_bhb_loop+0x60/0xb0 [ 132.846597][ T5370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.852517][ T5370] RIP: 0033:0x7f452fd9e0d9 [ 132.856953][ T5370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.876580][ T5370] RSP: 002b:00007f4530c9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.885021][ T5370] RAX: ffffffffffffffda RBX: 00007f4530025fa0 RCX: 00007f452fd9e0d9 [ 132.893011][ T5370] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 132.901002][ T5370] RBP: 00007f4530c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 132.909001][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.916993][ T5370] R13: 00007f4530026038 R14: 00007f4530025fa0 R15: 00007ffd30834f28 [ 132.924998][ T5370] [ 132.948364][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.955118][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.485541][ T5396] netlink: 'syz.4.293': attribute type 29 has an invalid length. [ 133.516547][ T5396] netlink: 'syz.4.293': attribute type 29 has an invalid length. [ 133.535442][ T5395] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.294'. [ 133.556519][ T5397] netlink: 'syz.4.293': attribute type 29 has an invalid length. [ 133.588821][ T5396] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 133.642573][ T5396] netlink: 183388 bytes leftover after parsing attributes in process `syz.4.293'. [ 133.698094][ T5391] delete_channel: no stack [ 134.574364][ T5419] FAULT_INJECTION: forcing a failure. [ 134.574364][ T5419] name failslab, interval 1, probability 0, space 0, times 0 [ 134.603627][ T5419] CPU: 1 PID: 5419 Comm: syz.2.302 Not tainted syzkaller #0 [ 134.611007][ T5419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.621127][ T5419] Call Trace: [ 134.624451][ T5419] [ 134.627424][ T5419] dump_stack_lvl+0x188/0x24e [ 134.632164][ T5419] ? show_regs_print_info+0x12/0x12 [ 134.637432][ T5419] ? load_image+0x410/0x410 [ 134.641995][ T5419] ? __lock_acquire+0x7c40/0x7c40 [ 134.647100][ T5419] should_fail_ex+0x390/0x4c0 [ 134.651851][ T5419] should_failslab+0x5/0x20 [ 134.656399][ T5419] slab_pre_alloc_hook+0x59/0x300 [ 134.661474][ T5419] ? stack_trace_snprint+0xe0/0xe0 [ 134.666684][ T5419] kmem_cache_alloc_node+0x5a/0x310 [ 134.671934][ T5419] ? __alloc_skb+0xf9/0x7d0 [ 134.676499][ T5419] __alloc_skb+0xf9/0x7d0 [ 134.680889][ T5419] tipc_msg_build+0xc9/0xde0 [ 134.685541][ T5419] ? net_generic+0x1e/0x240 [ 134.690107][ T5419] ? net_generic+0x1e/0x240 [ 134.694677][ T5419] ? tipc_group_bc_cong+0x158/0x210 [ 134.699943][ T5419] tipc_send_group_bcast+0x7d4/0xad0 [ 134.705301][ T5419] ? tipc_wait_for_connect+0x650/0x650 [ 134.710823][ T5419] ? wait_woken+0x1c0/0x1c0 [ 134.715382][ T5419] ? tipc_dest_list_purge+0x163/0x180 [ 134.720808][ T5419] __tipc_sendmsg+0x1e49/0x2c00 [ 134.725728][ T5419] ? rht_lock+0x150/0x150 [ 134.730124][ T5419] ? aa_sk_perm+0x950/0x950 [ 134.734684][ T5419] ? verify_lock_unused+0x140/0x140 [ 134.739940][ T5419] ? verify_lock_unused+0x140/0x140 [ 134.745224][ T5419] ? mark_lock+0x94/0x320 [ 134.749616][ T5419] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.755663][ T5419] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.761086][ T5419] ? lockdep_hardirqs_on+0x94/0x140 [ 134.766342][ T5419] ? __local_bh_enable_ip+0x136/0x1c0 [ 134.771761][ T5419] ? _local_bh_enable+0xa0/0xa0 [ 134.776665][ T5419] tipc_sendmsg+0x51/0x70 [ 134.781084][ T5419] ? tipc_recvmsg+0x13d0/0x13d0 [ 134.785987][ T5419] ____sys_sendmsg+0x5ed/0x9a0 [ 134.790811][ T5419] ? __lock_acquire+0x7c40/0x7c40 [ 134.795926][ T5419] ? __sys_sendmsg_sock+0x30/0x30 [ 134.801014][ T5419] ? __import_iovec+0x306/0x510 [ 134.805930][ T5419] ? import_iovec+0x6f/0xa0 [ 134.810489][ T5419] ___sys_sendmsg+0x2a2/0x360 [ 134.815262][ T5419] ? __sys_sendmsg+0x2a0/0x2a0 [ 134.820108][ T5419] ? ktime_get+0x7b/0x270 [ 134.824523][ T5419] __se_sys_sendmsg+0x1c3/0x2b0 [ 134.829434][ T5419] ? ct_nmi_exit+0x145/0x1c0 [ 134.834073][ T5419] ? __x64_sys_sendmsg+0x80/0x80 [ 134.839090][ T5419] ? lockdep_hardirqs_on+0x94/0x140 [ 134.844351][ T5419] do_syscall_64+0x4c/0xa0 [ 134.848826][ T5419] ? clear_bhb_loop+0x60/0xb0 [ 134.853559][ T5419] ? clear_bhb_loop+0x60/0xb0 [ 134.858293][ T5419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.864258][ T5419] RIP: 0033:0x7f8a12b9e0d9 [ 134.868723][ T5419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.888402][ T5419] RSP: 002b:00007f8a13a7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.896868][ T5419] RAX: ffffffffffffffda RBX: 00007f8a12e25fa0 RCX: 00007f8a12b9e0d9 [ 134.904894][ T5419] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 134.912914][ T5419] RBP: 00007f8a13a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 134.920950][ T5419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.928987][ T5419] R13: 00007f8a12e26038 R14: 00007f8a12e25fa0 R15: 00007ffda1a3b908 [ 134.937028][ T5419] [ 135.059629][ T5421] netlink: 'syz.1.303': attribute type 8 has an invalid length. [ 135.106226][ T5421] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.303'. [ 135.613091][ T5433] validate_nla: 1 callbacks suppressed [ 135.613109][ T5433] netlink: 'syz.2.307': attribute type 29 has an invalid length. [ 135.667155][ T5433] netlink: 'syz.2.307': attribute type 29 has an invalid length. [ 135.735805][ T5433] netlink: 'syz.2.307': attribute type 29 has an invalid length. [ 135.791714][ T5439] netlink: 'syz.2.307': attribute type 2 has an invalid length. [ 135.799866][ T5438] netlink: 184 bytes leftover after parsing attributes in process `syz.3.310'. [ 135.856544][ T5439] netlink: 183388 bytes leftover after parsing attributes in process `syz.2.307'. [ 136.372994][ T5459] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 136.453525][ T5458] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 136.500073][ T5463] FAULT_INJECTION: forcing a failure. [ 136.500073][ T5463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.541282][ T5463] CPU: 1 PID: 5463 Comm: syz.4.318 Not tainted syzkaller #0 [ 136.548753][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.558858][ T5463] Call Trace: [ 136.562182][ T5463] [ 136.565156][ T5463] dump_stack_lvl+0x188/0x24e [ 136.569902][ T5463] ? show_regs_print_info+0x12/0x12 [ 136.575154][ T5463] ? load_image+0x410/0x410 [ 136.579718][ T5463] ? __lock_acquire+0x7c40/0x7c40 [ 136.584795][ T5463] ? snprintf+0xe5/0x140 [ 136.589132][ T5463] should_fail_ex+0x390/0x4c0 [ 136.593875][ T5463] _copy_to_user+0x2c/0x130 [ 136.598439][ T5463] simple_read_from_buffer+0xe3/0x150 [ 136.603866][ T5463] proc_fail_nth_read+0x1a6/0x220 [ 136.608945][ T5463] ? proc_fault_inject_write+0x310/0x310 [ 136.614634][ T5463] ? fsnotify_perm+0x248/0x550 [ 136.619451][ T5463] ? proc_fault_inject_write+0x310/0x310 [ 136.625137][ T5463] vfs_read+0x2db/0x960 [ 136.629351][ T5463] ? kernel_read+0x1e0/0x1e0 [ 136.633991][ T5463] ? __fget_files+0x28/0x460 [ 136.638630][ T5463] ? __fget_files+0x3fc/0x460 [ 136.643345][ T5463] ? __fdget_pos+0x2ae/0x360 [ 136.647969][ T5463] ? ksys_read+0x70/0x260 [ 136.652326][ T5463] ksys_read+0x14d/0x260 [ 136.656605][ T5463] ? vfs_write+0x9a0/0x9a0 [ 136.661061][ T5463] ? syscall_enter_from_user_mode+0x2a/0x80 [ 136.666980][ T5463] do_syscall_64+0x4c/0xa0 [ 136.671440][ T5463] ? clear_bhb_loop+0x60/0xb0 [ 136.676151][ T5463] ? clear_bhb_loop+0x60/0xb0 [ 136.680862][ T5463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.686785][ T5463] RIP: 0033:0x7fa34d75e90e [ 136.691224][ T5463] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.710860][ T5463] RSP: 002b:00007fa34e742fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.719303][ T5463] RAX: ffffffffffffffda RBX: 00007fa34e7436c0 RCX: 00007fa34d75e90e [ 136.727301][ T5463] RDX: 000000000000000f RSI: 00007fa34e7430a0 RDI: 0000000000000008 [ 136.735316][ T5463] RBP: 00007fa34e743090 R08: 0000000000000000 R09: 0000000000000000 [ 136.743315][ T5463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.751307][ T5463] R13: 00007fa34da26038 R14: 00007fa34da25fa0 R15: 00007ffff571a468 [ 136.759318][ T5463] [ 137.507407][ T5495] netlink: 'syz.0.325': attribute type 29 has an invalid length. [ 137.535883][ T5495] netlink: 'syz.0.325': attribute type 29 has an invalid length. [ 137.599822][ T5501] netlink: 'syz.0.325': attribute type 29 has an invalid length. [ 137.657870][ T5495] netlink: 'syz.0.325': attribute type 2 has an invalid length. [ 137.746087][ T5495] netlink: 183388 bytes leftover after parsing attributes in process `syz.0.325'. [ 137.796862][ T5504] netlink: 'syz.4.328': attribute type 21 has an invalid length. [ 137.969192][ T5504] netlink: 128 bytes leftover after parsing attributes in process `syz.4.328'. [ 138.056356][ T5504] netlink: 'syz.4.328': attribute type 4 has an invalid length. [ 138.064107][ T5504] netlink: 3 bytes leftover after parsing attributes in process `syz.4.328'. [ 138.134923][ T5509] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.330'. [ 138.229407][ T5504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.328'. [ 139.903468][ T5504] device caif0 entered promiscuous mode [ 139.913617][ T5504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.949932][ T5549] validate_nla: 2 callbacks suppressed [ 140.949954][ T5549] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 140.986557][ T5534] device syzkaller0 entered promiscuous mode [ 141.062719][ T5551] netlink: 'syz.2.341': attribute type 2 has an invalid length. [ 141.196197][ T5551] netlink: 'syz.2.341': attribute type 7 has an invalid length. [ 141.265177][ T5551] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.341'. [ 141.353570][ T5549] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 141.773028][ T5564] netlink: 'syz.3.346': attribute type 2 has an invalid length. [ 141.783317][ T5564] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.346'. [ 143.496904][ T5550] netlink: 'syz.2.341': attribute type 29 has an invalid length. [ 145.234180][ T5594] netlink: 'syz.0.353': attribute type 3 has an invalid length. [ 145.259387][ T5594] netlink: 'syz.0.353': attribute type 16 has an invalid length. [ 145.271198][ T5594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.353'. [ 147.071093][ T5609] netlink: 'syz.1.358': attribute type 29 has an invalid length. [ 147.124801][ T5609] netlink: 'syz.1.358': attribute type 29 has an invalid length. [ 147.151885][ T5610] netlink: 'syz.1.358': attribute type 29 has an invalid length. [ 147.173259][ T5609] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 147.196248][ T5609] netlink: 183388 bytes leftover after parsing attributes in process `syz.1.358'. [ 147.632874][ T5637] netlink: 'syz.1.365': attribute type 2 has an invalid length. [ 148.353871][ T5637] device 0 entered promiscuous mode [ 148.381303][ T5651] netlink: 156 bytes leftover after parsing attributes in process `syz.3.371'. [ 148.407377][ T5654] netlink: 'syz.3.371': attribute type 2 has an invalid length. [ 148.415116][ T5654] netlink: 'syz.3.371': attribute type 4 has an invalid length. [ 148.446291][ T5654] netlink: 'syz.3.371': attribute type 8 has an invalid length. [ 148.454537][ T5654] netlink: 'syz.3.371': attribute type 9 has an invalid length. [ 148.772505][ T5663] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.373'. [ 148.808731][ T5666] netlink: 'syz.0.375': attribute type 29 has an invalid length. [ 148.850055][ T5666] netlink: 183388 bytes leftover after parsing attributes in process `syz.0.375'. [ 149.314199][ T5672] device syzkaller0 entered promiscuous mode [ 149.708333][ T5687] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.381'. [ 150.165176][ T5695] sctp: [Deprecated]: syz.2.384 (pid 5695) Use of int in max_burst socket option deprecated. [ 150.165176][ T5695] Use struct sctp_assoc_value instead [ 152.105644][ T5715] validate_nla: 3 callbacks suppressed [ 152.105664][ T5715] netlink: 'syz.4.388': attribute type 29 has an invalid length. [ 152.213192][ T5717] netlink: 'syz.4.388': attribute type 2 has an invalid length. [ 152.221069][ T5717] netlink: 'syz.4.388': attribute type 7 has an invalid length. [ 152.228982][ T5717] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.388'. [ 153.461154][ T5705] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 153.493294][ T5715] netlink: 'syz.4.388': attribute type 29 has an invalid length. [ 153.710171][ T5719] netlink: 128 bytes leftover after parsing attributes in process `syz.1.389'. [ 153.760533][ T5719] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.794970][ T5719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.924586][ T5727] netlink: 'syz.0.392': attribute type 4 has an invalid length. [ 153.972973][ T5727] netlink: 'syz.0.392': attribute type 8 has an invalid length. [ 154.040801][ T5727] netlink: 109560 bytes leftover after parsing attributes in process `syz.0.392'. [ 154.575915][ T5746] netlink: 152 bytes leftover after parsing attributes in process `syz.1.396'. [ 154.665919][ T5753] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.398'. [ 154.707272][ T5753] netlink: zone id is out of range [ 154.712517][ T5753] netlink: zone id is out of range [ 154.764146][ T5753] netlink: zone id is out of range [ 154.779774][ T5753] netlink: zone id is out of range [ 154.852849][ T5753] netlink: del zone limit has 4 unknown bytes [ 155.010124][ T5759] netlink: 'syz.2.401': attribute type 29 has an invalid length. [ 155.137038][ T5767] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 155.166787][ T5767] netlink: 'syz.2.401': attribute type 7 has an invalid length. [ 155.196559][ T5759] netlink: 'syz.2.401': attribute type 29 has an invalid length. [ 155.225271][ T5767] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.401'. [ 155.866229][ T4649] wlan1: Trigger new scan to find an IBSS to join [ 156.229952][ T5787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.408'. [ 156.433710][ T5795] IPv6: NLM_F_CREATE should be specified when creating new route [ 157.575170][ T5811] validate_nla: 2 callbacks suppressed [ 157.575190][ T5811] netlink: 'syz.4.415': attribute type 29 has an invalid length. [ 157.626892][ T5811] netlink: 'syz.4.415': attribute type 29 has an invalid length. [ 157.660894][ T5813] netlink: 'syz.4.415': attribute type 29 has an invalid length. [ 157.694860][ T5811] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 157.733939][ T5811] netlink: 183388 bytes leftover after parsing attributes in process `syz.4.415'. [ 158.857914][ T4663] wlan1: Trigger new scan to find an IBSS to join [ 159.171225][ T5846] netlink: 'syz.3.424': attribute type 5 has an invalid length. [ 159.351070][ T5845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 159.457964][ T5849] netlink: 'syz.4.427': attribute type 3 has an invalid length. [ 159.487051][ T5849] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.427'. [ 159.688285][ T5857] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 159.747437][ T5857] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 159.774244][ T5861] netlink: 'syz.2.428': attribute type 29 has an invalid length. [ 159.819589][ T5866] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 159.878125][ T5866] netlink: 183388 bytes leftover after parsing attributes in process `syz.2.428'. [ 160.237930][ T5869] netlink: 'syz.1.431': attribute type 11 has an invalid length. [ 160.275701][ T5869] netlink: 161460 bytes leftover after parsing attributes in process `syz.1.431'. [ 160.402389][ T5874] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.484728][ T5868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.062838][ T5902] netlink: 183388 bytes leftover after parsing attributes in process `syz.3.442'. [ 161.433682][ T5912] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.445'. [ 161.473923][ T5912] openvswitch: netlink: Flow actions attr not present in new flow. [ 161.827142][ T4663] wlan1: Trigger new scan to find an IBSS to join [ 162.162586][ T5939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.453'. [ 162.541600][ T5947] netlink: 183388 bytes leftover after parsing attributes in process `syz.1.455'. [ 162.772150][ T5936] netlink: 132 bytes leftover after parsing attributes in process `syz.2.451'. [ 162.853202][ T4649] wlan1: Creating new IBSS network, BSSID 7a:43:2f:49:c6:f4 [ 162.956434][ T4289] Bluetooth: hci4: ISO packet for unknown connection handle 34 [ 164.047134][ T5988] validate_nla: 11 callbacks suppressed [ 164.047152][ T5988] netlink: 'syz.2.469': attribute type 29 has an invalid length. [ 164.121573][ T5988] netlink: 'syz.2.469': attribute type 29 has an invalid length. [ 164.165055][ T5996] netlink: 'syz.2.469': attribute type 29 has an invalid length. [ 164.173546][ T5988] netlink: 'syz.2.469': attribute type 2 has an invalid length. [ 164.212050][ T5988] netlink: 183388 bytes leftover after parsing attributes in process `syz.2.469'. [ 164.332553][ T6000] netlink: 198388 bytes leftover after parsing attributes in process `syz.4.470'. [ 164.495821][ T6003] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 164.553316][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.694982][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.702881][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.870664][ T6003] team0: Port device bridge0 added [ 164.981919][ T6004] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 165.048966][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.619892][ T6041] netlink: 'syz.0.484': attribute type 29 has an invalid length. [ 165.774265][ T6052] netlink: 'syz.0.484': attribute type 2 has an invalid length. [ 165.841441][ T6052] netlink: 'syz.0.484': attribute type 7 has an invalid length. [ 165.891772][ T6052] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.484'. [ 166.102411][ T6048] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 166.190005][ T6048] team0: Device wg1 is of different type [ 167.244094][ T6075] device vcan0 entered promiscuous mode [ 167.396846][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.361562][ T6096] netlink: 183388 bytes leftover after parsing attributes in process `syz.0.501'. [ 169.245163][ T6108] validate_nla: 9 callbacks suppressed [ 169.245207][ T6108] netlink: 'syz.2.505': attribute type 30 has an invalid length. [ 169.561308][ T6113] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 169.569638][ T6113] netlink: 'syz.0.507': attribute type 8 has an invalid length. [ 169.579879][ T6113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.507'. [ 169.708834][ T6122] FAULT_INJECTION: forcing a failure. [ 169.708834][ T6122] name failslab, interval 1, probability 0, space 0, times 0 [ 169.759276][ T6122] CPU: 0 PID: 6122 Comm: syz.2.510 Not tainted syzkaller #0 [ 169.766652][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.776762][ T6122] Call Trace: [ 169.780087][ T6122] [ 169.783055][ T6122] dump_stack_lvl+0x188/0x24e [ 169.787794][ T6122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 169.794021][ T6122] ? show_regs_print_info+0x12/0x12 [ 169.799319][ T6122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 169.805554][ T6122] should_fail_ex+0x390/0x4c0 [ 169.810303][ T6122] should_failslab+0x5/0x20 [ 169.814861][ T6122] slab_pre_alloc_hook+0x59/0x300 [ 169.819943][ T6122] ? aa_sk_perm+0x950/0x950 [ 169.824500][ T6122] kmem_cache_alloc_node+0x5a/0x310 [ 169.829756][ T6122] ? __alloc_skb+0xf9/0x7d0 [ 169.834327][ T6122] __alloc_skb+0xf9/0x7d0 [ 169.838717][ T6122] pfkey_sendmsg+0x19e/0x1140 [ 169.843470][ T6122] ? pfkey_release+0x340/0x340 [ 169.848283][ T6122] ? aa_sk_perm+0x81f/0x950 [ 169.852842][ T6122] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 169.858630][ T6122] ? aa_af_perm+0x340/0x340 [ 169.863194][ T6122] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 169.869667][ T6122] ? aa_sock_msg_perm+0x94/0x150 [ 169.874684][ T6122] ? apparmor_socket_sendmsg+0x8a/0x330 [ 169.880297][ T6122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 169.885632][ T6122] ? security_socket_sendmsg+0x7c/0xa0 [ 169.891153][ T6122] sock_write_iter+0x2d5/0x3e0 [ 169.895975][ T6122] ? sock_read_iter+0x3a0/0x3a0 [ 169.900874][ T6122] ? lockdep_hardirqs_on+0x94/0x140 [ 169.906143][ T6122] ? security_file_permission+0x3d/0xa0 [ 169.911757][ T6122] vfs_write+0x482/0x9a0 [ 169.916072][ T6122] ? file_end_write+0x250/0x250 [ 169.920989][ T6122] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 169.927220][ T6122] ksys_write+0x14d/0x260 [ 169.931615][ T6122] ? __ia32_sys_read+0x80/0x80 [ 169.936445][ T6122] ? syscall_enter_from_user_mode+0x2a/0x80 [ 169.942396][ T6122] do_syscall_64+0x4c/0xa0 [ 169.946869][ T6122] ? clear_bhb_loop+0x60/0xb0 [ 169.951605][ T6122] ? clear_bhb_loop+0x60/0xb0 [ 169.956347][ T6122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.962288][ T6122] RIP: 0033:0x7f8a12b9e0d9 [ 169.966748][ T6122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.986417][ T6122] RSP: 002b:00007f8a13a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.994886][ T6122] RAX: ffffffffffffffda RBX: 00007f8a12e25fa0 RCX: 00007f8a12b9e0d9 [ 170.002905][ T6122] RDX: 000000000000fefb RSI: 0000000000000000 RDI: 0000000000000005 [ 170.010927][ T6122] RBP: 00007f8a13a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 170.018948][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.026970][ T6122] R13: 00007f8a12e26038 R14: 00007f8a12e25fa0 R15: 00007ffda1a3b908 [ 170.035017][ T6122] [ 172.712039][ T6130] netlink: 156 bytes leftover after parsing attributes in process `syz.2.512'. [ 172.736927][ T6129] netlink: 'syz.1.513': attribute type 29 has an invalid length. [ 172.762164][ T6130] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 172.846080][ T6130] netlink: 2 bytes leftover after parsing attributes in process `syz.2.512'. [ 172.849049][ T6136] netlink: 'syz.1.513': attribute type 2 has an invalid length. [ 172.926278][ T6129] netlink: 'syz.1.513': attribute type 29 has an invalid length. [ 172.926279][ T6136] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.513'. [ 172.986944][ T6130] netlink: 'syz.2.512': attribute type 3 has an invalid length. [ 173.007618][ T6134] netlink: 'syz.1.513': attribute type 29 has an invalid length. [ 173.016180][ T6130] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.512'. [ 173.243417][ T6139] netlink: 'syz.3.515': attribute type 3 has an invalid length. [ 173.332817][ T6139] netlink: 187436 bytes leftover after parsing attributes in process `syz.3.515'. [ 173.622916][ T6151] Ÿë: port 1(veth0_to_team) entered blocking state [ 173.640530][ T6151] Ÿë: port 1(veth0_to_team) entered disabled state [ 173.670724][ T6151] device veth0_to_team entered promiscuous mode [ 174.742304][ T6185] validate_nla: 1 callbacks suppressed [ 174.742324][ T6185] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 174.790775][ T6187] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.530'. [ 174.897366][ T6185] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 174.918962][ T6190] netlink: 'syz.3.529': attribute type 2 has an invalid length. [ 174.959436][ T6190] netlink: 'syz.3.529': attribute type 7 has an invalid length. [ 174.973134][ T6190] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.529'. [ 175.131408][ T6188] netlink: 'syz.3.529': attribute type 29 has an invalid length. [ 176.051429][ T6211] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.537'. [ 177.063829][ T6227] netlink: 'syz.4.541': attribute type 21 has an invalid length. [ 177.166380][ T6227] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 177.488381][ T6240] netlink: 'syz.0.546': attribute type 29 has an invalid length. [ 177.572565][ T6240] netlink: 'syz.0.546': attribute type 29 has an invalid length. [ 177.614792][ T6248] netlink: 'syz.0.546': attribute type 29 has an invalid length. [ 177.677577][ T6240] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.546'. [ 177.771882][ T6252] netlink: 55 bytes leftover after parsing attributes in process `syz.1.549'. [ 178.856467][ T11] wlan1: Trigger new scan to find an IBSS to join [ 179.145807][ T6265] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.555'. [ 179.281861][ T6274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.556'. [ 180.282455][ T6280] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 180.289882][ T6280] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 180.792587][ T6289] validate_nla: 23 callbacks suppressed [ 180.792608][ T6289] netlink: 'syz.3.564': attribute type 29 has an invalid length. [ 180.814417][ T6289] netlink: 'syz.3.564': attribute type 29 has an invalid length. [ 180.824616][ T6289] netlink: 'syz.3.564': attribute type 29 has an invalid length. [ 181.123964][ T6309] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.565'. [ 181.186931][ T6315] tap0: tun_chr_ioctl cmd 1074025681 [ 181.405630][ T6324] netlink: 164 bytes leftover after parsing attributes in process `syz.0.570'. [ 181.427439][ T6324] tc_dump_action: action bad kind [ 181.675644][ T6326] netlink: 76 bytes leftover after parsing attributes in process `syz.4.571'. [ 182.075939][ T6339] netlink: 'syz.4.573': attribute type 8 has an invalid length. [ 182.160244][ T6339] netlink: 156 bytes leftover after parsing attributes in process `syz.4.573'. [ 182.345621][ T6349] netlink: 'syz.1.576': attribute type 29 has an invalid length. [ 182.425613][ T6345] device syzkaller0 entered promiscuous mode [ 182.458714][ T6349] netlink: 'syz.1.576': attribute type 29 has an invalid length. [ 182.481955][ T6352] netlink: 'syz.1.576': attribute type 29 has an invalid length. [ 183.676844][ T6379] netlink: 'syz.4.585': attribute type 29 has an invalid length. [ 183.823037][ T4649] wlan1: Trigger new scan to find an IBSS to join [ 183.894222][ T6382] can: request_module (can-proto-0) failed. [ 184.622004][ T6388] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 184.630709][ T6388] netlink: 132 bytes leftover after parsing attributes in process `syz.2.586'. [ 184.791892][ T4663] wlan1: Creating new IBSS network, BSSID d2:11:3c:d7:eb:71 [ 185.375593][ T6361] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 185.383834][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.398329][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.443911][ T6361] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 185.465233][ T6375] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 185.496714][ T6375] syzkaller1: linktype set to 0 [ 186.944735][ T6447] validate_nla: 4 callbacks suppressed [ 186.944753][ T6447] netlink: 'syz.4.599': attribute type 17 has an invalid length. [ 187.049562][ T6447] netlink: 160 bytes leftover after parsing attributes in process `syz.4.599'. [ 187.343191][ T6457] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 187.376369][ T6457] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 187.437072][ T6459] netlink: 'syz.1.604': attribute type 29 has an invalid length. [ 188.376652][ T6471] device syzkaller0 entered promiscuous mode [ 188.400612][ T6478] netlink: 'syz.0.611': attribute type 19 has an invalid length. [ 191.129189][ T6497] netlink: 'syz.3.617': attribute type 29 has an invalid length. [ 191.225186][ T6497] netlink: 'syz.3.617': attribute type 29 has an invalid length. [ 191.319210][ T6502] netlink: 'syz.3.617': attribute type 29 has an invalid length. [ 192.216200][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.233491][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.252655][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.262344][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.282501][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.293991][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.330718][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.346470][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.361549][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.370179][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.394983][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.409372][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.427458][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.435549][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.472618][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.532195][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.564068][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.585286][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 192.631483][ T6526] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 192.668792][ T6526] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.624'. [ 193.892198][ T6557] sctp: [Deprecated]: syz.3.636 (pid 6557) Use of int in maxseg socket option. [ 193.892198][ T6557] Use struct sctp_assoc_value instead [ 194.229315][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.235773][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.403594][ T4275] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 196.876300][ T6620] can: request_module (can-proto-0) failed. [ 197.290529][ T6648] delete_channel: no stack [ 197.687457][ T6674] __nla_validate_parse: 26 callbacks suppressed [ 197.687478][ T6674] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.666'. [ 198.074844][ T6682] validate_nla: 36 callbacks suppressed [ 198.074864][ T6682] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 198.248723][ T6682] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 198.363464][ T6685] netlink: 'syz.0.672': attribute type 29 has an invalid length. [ 198.435768][ T6686] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.673'. [ 198.517068][ T6677] netlink: 'syz.2.670': attribute type 21 has an invalid length. [ 198.546896][ T6677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.670'. [ 199.632930][ T6710] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.677'. [ 200.193311][ T6727] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.683'. [ 200.613292][ T6727] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 200.822882][ T6737] netlink: 'syz.1.685': attribute type 29 has an invalid length. [ 201.183161][ T6745] netlink: 'syz.2.686': attribute type 29 has an invalid length. [ 201.186761][ T6737] netlink: 'syz.1.685': attribute type 29 has an invalid length. [ 201.261258][ T6740] netlink: 'syz.1.685': attribute type 29 has an invalid length. [ 201.289074][ T6745] netlink: 'syz.2.686': attribute type 29 has an invalid length. [ 201.366537][ T6746] netlink: 'syz.2.686': attribute type 29 has an invalid length. [ 201.416181][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 201.422489][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 201.428699][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 201.434764][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 201.441683][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 201.728698][ T6739] can: request_module (can-proto-0) failed. [ 203.368405][ T6766] validate_nla: 1 callbacks suppressed [ 203.368424][ T6766] netlink: 'syz.3.691': attribute type 27 has an invalid length. [ 203.780886][ T6766] bond0: (slave bond_slave_0): Releasing backup interface [ 204.152080][ T6785] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 205.082424][ T6785] device 0 entered promiscuous mode [ 205.510237][ T6797] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.702'. [ 205.535380][ T6793] netlink: 'syz.0.698': attribute type 27 has an invalid length. [ 205.738307][ T6793] bond0: (slave bond_slave_0): Releasing backup interface [ 205.940415][ T6797] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 207.402656][ T6824] netlink: 192 bytes leftover after parsing attributes in process `syz.1.711'. [ 207.515877][ T6824] netlink: 'syz.1.711': attribute type 10 has an invalid length. [ 207.620137][ T6824] team0: Device vxcan1 is of different type [ 207.821334][ T6827] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 208.227182][ T6834] netlink: 'syz.4.712': attribute type 27 has an invalid length. [ 209.015045][ T6853] netlink: 'syz.0.718': attribute type 9 has an invalid length. [ 209.034941][ T6853] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.718'. [ 209.560032][ T6865] netlink: 'syz.0.721': attribute type 11 has an invalid length. [ 209.606778][ T6865] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.721'. [ 209.627975][ T6867] netlink: 'syz.1.724': attribute type 29 has an invalid length. [ 209.643225][ T6864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.711130][ T6867] netlink: 'syz.1.724': attribute type 29 has an invalid length. [ 210.209010][ T6888] netlink: 'syz.2.730': attribute type 10 has an invalid length. [ 210.237692][ T6885] delete_channel: no stack [ 214.315314][ T6932] netlink: 'syz.2.739': attribute type 41 has an invalid length. [ 214.344099][ T6934] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 214.375289][ T6934] team0: Device hsr_slave_0 failed to register rx_handler [ 214.809729][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.387823][ T6944] netlink: 'syz.2.743': attribute type 21 has an invalid length. [ 215.407377][ T6944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.743'. [ 216.569917][ T6970] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 216.739748][ T6970] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.829640][ T6975] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.753'. [ 217.750988][ T6980] device sit0 entered promiscuous mode [ 217.992450][ T6988] netlink: 'syz.4.757': attribute type 29 has an invalid length. [ 218.038654][ T6988] netlink: 'syz.4.757': attribute type 29 has an invalid length. [ 218.126600][ T6991] netlink: 'syz.4.757': attribute type 29 has an invalid length. [ 218.257436][ T6991] netlink: 156 bytes leftover after parsing attributes in process `syz.4.757'. [ 218.858749][ T4649] wlan1: Trigger new scan to find an IBSS to join [ 219.013964][ T6998] device syzkaller0 entered promiscuous mode [ 223.816164][ T4655] wlan1: Trigger new scan to find an IBSS to join [ 224.082525][ T7039] netlink: 60 bytes leftover after parsing attributes in process `syz.1.771'. [ 224.864150][ T4649] wlan1: Creating new IBSS network, BSSID ba:66:3e:ea:60:a3 [ 226.426285][ T7104] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 226.434011][ T7104] netlink: 176 bytes leftover after parsing attributes in process `syz.0.787'. [ 226.513771][ T7105] device sit0 entered promiscuous mode [ 227.121515][ T7135] netlink: 'syz.0.794': attribute type 29 has an invalid length. [ 227.157016][ T7135] netlink: 'syz.0.794': attribute type 29 has an invalid length. [ 227.187738][ T7136] netlink: 'syz.0.794': attribute type 29 has an invalid length. [ 227.283384][ T7136] netlink: 'syz.0.794': attribute type 29 has an invalid length. [ 227.394596][ T7143] netlink: 'syz.4.795': attribute type 41 has an invalid length. [ 227.515602][ T7135] can: request_module (can-proto-0) failed. [ 228.441706][ T7175] netlink: 'syz.4.806': attribute type 3 has an invalid length. [ 228.490640][ T7175] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.806'. [ 228.937185][ T7187] bridge0: port 2(ip6gretap0) entered blocking state [ 228.972438][ T7187] bridge0: port 2(ip6gretap0) entered disabled state [ 229.033149][ T7187] device ip6gretap0 entered promiscuous mode [ 229.635021][ T7207] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.815'. [ 230.191372][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 230.902038][ T7234] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.824'. [ 231.023614][ T7231] netlink: 'syz.3.823': attribute type 21 has an invalid length. [ 231.083567][ T7231] netlink: 'syz.3.823': attribute type 3 has an invalid length. [ 231.101793][ T7231] netlink: 144 bytes leftover after parsing attributes in process `syz.3.823'. [ 233.955362][ T7270] netlink: 132 bytes leftover after parsing attributes in process `syz.4.836'. [ 234.008027][ T7270] tipc: Started in network mode [ 234.013163][ T7270] tipc: Node identity 9215a268, cluster identity 4711 [ 234.086664][ T7270] tipc: Node number set to 2450891368 [ 234.475425][ T7278] delete_channel: no stack [ 234.506167][ T7278] delete_channel: no stack [ 234.735400][ T7288] netlink: 176 bytes leftover after parsing attributes in process `syz.4.842'. [ 235.353590][ T7304] netlink: 'syz.2.847': attribute type 15 has an invalid length. [ 235.434110][ T7306] device veth1_macvtap left promiscuous mode [ 235.570680][ T7306] device veth1_macvtap entered promiscuous mode [ 235.587414][ T7306] device macsec0 entered promiscuous mode [ 235.643036][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 235.958490][ T7326] Driver unsupported XDP return value 0 on prog (id 644) dev N/A, expect packet loss! [ 236.807907][ T7346] netlink: 'syz.2.859': attribute type 21 has an invalid length. [ 237.595592][ T7366] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.865'. [ 237.662949][ T7366] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.865'. [ 238.365091][ T7384] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 240.955854][ T7384] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.963631][ T7384] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.014484][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.021778][ T7384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.029368][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.036632][ T7384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.061438][ T7384] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 241.641623][ T7400] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.872'. [ 241.659580][ T7398] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 241.719961][ T7400] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.872'. [ 241.723753][ T7398] netlink: 'syz.1.874': attribute type 3 has an invalid length. [ 241.806664][ T7398] netlink: 132 bytes leftover after parsing attributes in process `syz.1.874'. [ 242.434525][ T7423] netlink: 'syz.3.879': attribute type 39 has an invalid length. [ 243.021714][ T7440] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.886'. [ 243.169877][ T7446] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.888'. [ 243.893388][ T7465] device syzkaller0 entered promiscuous mode [ 243.949571][ T7466] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.893'. [ 246.335430][ T7496] netlink: 'syz.4.900': attribute type 29 has an invalid length. [ 247.655532][ T7476] netlink: 830 bytes leftover after parsing attributes in process `syz.0.895'. [ 247.677666][ T7496] netlink: 'syz.4.900': attribute type 29 has an invalid length. [ 248.315510][ T7513] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.905'. [ 248.348833][ T7513] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.905'. [ 248.368341][ T7517] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.905'. [ 248.899234][ T7520] netlink: 'syz.4.906': attribute type 21 has an invalid length. [ 248.958801][ T7520] netlink: 'syz.4.906': attribute type 3 has an invalid length. [ 248.984259][ T7520] netlink: 144 bytes leftover after parsing attributes in process `syz.4.906'. [ 249.383259][ T7536] device syzkaller0 entered promiscuous mode [ 249.808354][ T7557] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.916'. [ 252.119169][ T7562] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 252.135497][ T7557] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 252.166628][ T7557] CPU: 0 PID: 7557 Comm: syz.1.916 Not tainted syzkaller #0 [ 252.174014][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 252.184116][ T7557] Call Trace: [ 252.187438][ T7557] [ 252.190449][ T7557] dump_stack_lvl+0x188/0x24e [ 252.195189][ T7557] ? show_regs_print_info+0x12/0x12 [ 252.200439][ T7557] ? load_image+0x410/0x410 [ 252.205070][ T7557] sysfs_warn_dup+0x8a/0xa0 [ 252.209626][ T7557] sysfs_do_create_link_sd+0xc0/0x110 [ 252.215071][ T7557] device_add+0x83b/0x1050 [ 252.219589][ T7557] wiphy_register+0x1d8b/0x2aa0 [ 252.224512][ T7557] ? cfg80211_event_work+0x40/0x40 [ 252.229668][ T7557] ? minstrel_ht_alloc+0x894/0xa20 [ 252.234848][ T7557] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 252.241049][ T7557] ieee80211_register_hw+0x2d48/0x39f0 [ 252.246556][ T7557] ? ieee80211_register_hw+0xee1/0x39f0 [ 252.252154][ T7557] ? ieee80211_register_hw+0xee1/0x39f0 [ 252.257738][ T7557] ? ieee80211_tasklet_handler+0x20/0x20 [ 252.263406][ T7557] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 252.269587][ T7557] ? __debug_object_init+0xed/0x440 [ 252.274825][ T7557] ? memset+0x1e/0x40 [ 252.278831][ T7557] ? __hrtimer_init+0x189/0x270 [ 252.283975][ T7557] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 252.289773][ T7557] ? memcpy+0x3c/0x60 [ 252.293784][ T7557] hwsim_new_radio_nl+0xab7/0xc90 [ 252.298851][ T7557] genl_family_rcv_msg_doit+0x22f/0x350 [ 252.304419][ T7557] ? end_current_label_crit_section+0x170/0x170 [ 252.310691][ T7557] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 252.316613][ T7557] ? bpf_lsm_capable+0x5/0x10 [ 252.321321][ T7557] ? security_capable+0x85/0xb0 [ 252.326207][ T7557] genl_rcv_msg+0x601/0x790 [ 252.330744][ T7557] ? genl_bind+0x360/0x360 [ 252.335184][ T7557] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 252.341555][ T7557] netlink_rcv_skb+0x1ef/0x440 [ 252.346354][ T7557] ? genl_bind+0x360/0x360 [ 252.350795][ T7557] ? netlink_ack+0x1160/0x1160 [ 252.355601][ T7557] ? down_read+0x1a8/0x2d0 [ 252.360048][ T7557] genl_rcv+0x24/0x40 [ 252.364049][ T7557] netlink_unicast+0x7ad/0x920 [ 252.368851][ T7557] netlink_sendmsg+0x8ad/0xbd0 [ 252.373655][ T7557] ? netlink_getsockopt+0x550/0x550 [ 252.378891][ T7557] ? apparmor_socket_sendmsg+0x8a/0x330 [ 252.384473][ T7557] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 252.389783][ T7557] ? security_socket_sendmsg+0x7c/0xa0 [ 252.395271][ T7557] ? netlink_getsockopt+0x550/0x550 [ 252.400504][ T7557] ____sys_sendmsg+0x5ed/0x9a0 [ 252.405306][ T7557] ? __sys_sendmsg_sock+0x30/0x30 [ 252.410360][ T7557] ? __import_iovec+0x306/0x510 [ 252.415245][ T7557] ? import_iovec+0x6f/0xa0 [ 252.419781][ T7557] ___sys_sendmsg+0x2a2/0x360 [ 252.424521][ T7557] ? __sys_sendmsg+0x2a0/0x2a0 [ 252.429379][ T7557] __se_sys_sendmsg+0x1c3/0x2b0 [ 252.434284][ T7557] ? __x64_sys_sendmsg+0x80/0x80 [ 252.439280][ T7557] ? lockdep_hardirqs_on+0x94/0x140 [ 252.444514][ T7557] do_syscall_64+0x4c/0xa0 [ 252.448965][ T7557] ? clear_bhb_loop+0x60/0xb0 [ 252.453687][ T7557] ? clear_bhb_loop+0x60/0xb0 [ 252.458393][ T7557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.464315][ T7557] RIP: 0033:0x7f452fd9e0d9 [ 252.468761][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.488397][ T7557] RSP: 002b:00007f4530c3a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.496834][ T7557] RAX: ffffffffffffffda RBX: 00007f4530026270 RCX: 00007f452fd9e0d9 [ 252.504825][ T7557] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 252.512818][ T7557] RBP: 00007f452fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 252.520808][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.528801][ T7557] R13: 00007f4530026308 R14: 00007f4530026270 R15: 00007ffd30834f28 [ 252.536808][ T7557] [ 252.721011][ T7567] netlink: 'syz.4.920': attribute type 2 has an invalid length. [ 252.751337][ T7567] netlink: 10 bytes leftover after parsing attributes in process `syz.4.920'. [ 252.816619][ T7569] netlink: 'syz.3.921': attribute type 21 has an invalid length. [ 252.848670][ T7569] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 253.080582][ T7577] device syzkaller0 entered promiscuous mode [ 254.949899][ T4663] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.659076][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.665496][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.793507][ T7608] device syzkaller0 entered promiscuous mode [ 257.371156][ T7627] netlink: 'syz.4.936': attribute type 29 has an invalid length. [ 257.480352][ T7629] netlink: 'syz.4.936': attribute type 2 has an invalid length. [ 257.494714][ T7629] netlink: 'syz.4.936': attribute type 7 has an invalid length. [ 257.506107][ T7629] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.936'. [ 259.596038][ T7627] netlink: 'syz.4.936': attribute type 29 has an invalid length. [ 259.678231][ T7636] netlink: 'syz.2.939': attribute type 3 has an invalid length. [ 259.691962][ T7633] IPv6: NLM_F_CREATE should be specified when creating new route [ 259.713176][ T7633] netlink: 1 bytes leftover after parsing attributes in process `syz.1.938'. [ 259.736550][ T7636] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.939'. [ 260.824048][ T7674] device syzkaller0 entered promiscuous mode [ 263.012757][ T7685] netlink: 'syz.0.955': attribute type 21 has an invalid length. [ 263.025428][ T7685] netlink: 144 bytes leftover after parsing attributes in process `syz.0.955'. [ 263.073872][ T7698] netlink: 10 bytes leftover after parsing attributes in process `syz.3.959'. [ 263.292503][ T7703] netlink: 'syz.1.961': attribute type 3 has an invalid length. [ 263.330808][ T7703] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.961'. [ 263.626906][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 264.191975][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.971'. [ 264.214579][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.971'. [ 264.230214][ T7733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.971'. [ 264.240094][ T7731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.971'. [ 264.331774][ T7738] netlink: 'syz.4.973': attribute type 29 has an invalid length. [ 264.654896][ T7750] netlink: 'syz.4.973': attribute type 2 has an invalid length. [ 264.656280][ T7738] netlink: 'syz.4.973': attribute type 29 has an invalid length. [ 264.663714][ T7750] netlink: 'syz.4.973': attribute type 7 has an invalid length. [ 264.692905][ T7740] netlink: 'syz.4.973': attribute type 29 has an invalid length. [ 264.942504][ T7755] raw_sendmsg: syz.1.977 forgot to set AF_INET. Fix it! [ 265.144036][ T7762] __nla_validate_parse: 1 callbacks suppressed [ 265.144073][ T7762] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.979'. [ 265.761958][ T7782] device syzkaller0 entered promiscuous mode [ 265.768812][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 265.789442][ T7783] netlink: 14 bytes leftover after parsing attributes in process `syz.3.985'. [ 266.020457][ T7792] netlink: 'syz.2.989': attribute type 29 has an invalid length. [ 266.109249][ T7795] netlink: 'syz.2.989': attribute type 2 has an invalid length. [ 266.141502][ T7783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.151302][ T7795] netlink: 'syz.2.989': attribute type 7 has an invalid length. [ 266.181813][ T7795] netlink: 191412 bytes leftover after parsing attributes in process `syz.2.989'. [ 266.265209][ T7783] bond0 (unregistering): Released all slaves [ 266.361211][ T7800] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 266.368040][ T7800] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.567873][ T7792] netlink: 'syz.2.989': attribute type 29 has an invalid length. [ 267.309654][ T7821] netlink: 'syz.1.997': attribute type 2 has an invalid length. [ 267.324229][ T7822] netlink: 'syz.1.997': attribute type 2 has an invalid length. [ 267.340134][ T7827] netlink: 830 bytes leftover after parsing attributes in process `syz.2.998'. [ 268.506359][ T7865] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1008'. [ 268.517986][ T7862] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1007'. [ 269.712913][ T7892] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1015'. [ 277.124363][ T7990] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1044'. [ 277.160138][ T7988] validate_nla: 1 callbacks suppressed [ 277.160179][ T7988] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 277.255832][ T7988] netlink: 'syz.4.1043': attribute type 29 has an invalid length. [ 277.491431][ T7998] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 277.576430][ T7998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1046'. [ 277.810228][ T7998] batman_adv: batadv0: Adding interface: veth0_vlan [ 277.867399][ T7998] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.906799][ T7998] batman_adv: batadv0: Interface activated: veth0_vlan [ 278.963493][ T8019] netlink: 'syz.4.1053': attribute type 2 has an invalid length. [ 278.990396][ T8019] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1053'. [ 279.303591][ T8026] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1056'. [ 279.318154][ T8030] netlink: 'syz.4.1057': attribute type 29 has an invalid length. [ 279.338349][ T8031] netlink: 'syz.4.1057': attribute type 29 has an invalid length. [ 279.434386][ T8030] netlink: 'syz.4.1057': attribute type 29 has an invalid length. [ 279.858689][ T8049] netlink: 'syz.3.1062': attribute type 10 has an invalid length. [ 279.884139][ T8049] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1062'. [ 280.028147][ T8049] batman_adv: batadv0: Adding interface: veth0_vlan [ 280.036121][ T8049] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.087400][ T8049] batman_adv: batadv0: Interface activated: veth0_vlan [ 280.666306][ T8069] netlink: 'syz.1.1067': attribute type 10 has an invalid length. [ 280.680949][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.690211][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.763135][ T8069] bond0: (slave bridge0): Releasing backup interface [ 280.793106][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.802058][ T8069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.812764][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.821121][ T8069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.898309][ T8069] team0: Port device bridge0 added [ 281.204617][ T8085] netlink: 'syz.0.1073': attribute type 29 has an invalid length. [ 281.242440][ T8085] netlink: 183388 bytes leftover after parsing attributes in process `syz.0.1073'. [ 281.978156][ T8105] netlink: 183388 bytes leftover after parsing attributes in process `syz.0.1086'. [ 283.055304][ T8128] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1081'. [ 283.096346][ T8128] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 284.245094][ T8164] validate_nla: 7 callbacks suppressed [ 284.245112][ T8164] netlink: 'syz.4.1093': attribute type 29 has an invalid length. [ 284.303536][ T8164] netlink: 'syz.4.1093': attribute type 29 has an invalid length. [ 284.326651][ T8168] netlink: 'syz.4.1093': attribute type 29 has an invalid length. [ 284.389235][ T8169] netlink: 'syz.4.1093': attribute type 2 has an invalid length. [ 284.527866][ T8169] netlink: 183388 bytes leftover after parsing attributes in process `syz.4.1093'. [ 284.530396][ T8171] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 284.583182][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1095'. [ 284.631569][ T8171] batman_adv: batadv0: Adding interface: veth0_vlan [ 284.662621][ T8171] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.698800][ T8171] batman_adv: batadv0: Interface activated: veth0_vlan [ 285.011878][ T8178] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1097'. [ 285.120832][ T8178] team0: Port device team_slave_0 removed [ 285.138219][ T8178] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 285.874728][ T4660] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 290.319761][ T8227] netlink: 'syz.4.1109': attribute type 29 has an invalid length. [ 290.347254][ T8227] netlink: 'syz.4.1109': attribute type 29 has an invalid length. [ 290.356924][ T8233] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1110'. [ 290.377130][ T8227] netlink: 'syz.4.1109': attribute type 29 has an invalid length. [ 290.401887][ T8227] netlink: 'syz.4.1109': attribute type 2 has an invalid length. [ 290.417757][ T8227] netlink: 178532 bytes leftover after parsing attributes in process `syz.4.1109'. [ 291.872792][ T8282] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1123'. [ 291.874263][ T8271] delete_channel: no stack [ 291.920512][ T8282] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1123'. [ 291.947979][ T8282] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1123'. [ 291.949228][ T8271] delete_channel: no stack [ 292.639839][ T8294] netlink: 'syz.0.1128': attribute type 10 has an invalid length. [ 292.657431][ T8294] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.682944][ T8294] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.713697][ T8294] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.766481][ T8294] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.829000][ T8294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.846106][ T8294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.883003][ T8294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.906467][ T8294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.942550][ T8294] team0: Port device geneve1 added [ 292.955225][ T8295] netlink: 'syz.2.1130': attribute type 10 has an invalid length. [ 292.971004][ T8295] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1130'. [ 292.989147][ T8295] device hsr0 entered promiscuous mode [ 293.004895][ T8295] bridge0: port 4(hsr0) entered blocking state [ 293.014185][ T8295] bridge0: port 4(hsr0) entered disabled state [ 293.034513][ T8295] bridge0: port 4(hsr0) entered blocking state [ 293.043328][ T8295] bridge0: port 4(hsr0) entered forwarding state [ 293.061789][ T8309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1133'. [ 293.309181][ T8315] netlink: 'syz.2.1136': attribute type 10 has an invalid length. [ 293.357338][ T8323] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1136'. [ 293.364269][ T8315] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1136'. [ 293.402888][ T8319] netlink: 'syz.1.1135': attribute type 3 has an invalid length. [ 293.412521][ T8319] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1135'. [ 293.427109][ T8323] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 293.447065][ T8323] CPU: 0 PID: 8323 Comm: syz.2.1136 Not tainted syzkaller #0 [ 293.454555][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 293.464668][ T8323] Call Trace: [ 293.468000][ T8323] [ 293.470984][ T8323] dump_stack_lvl+0x188/0x24e [ 293.475734][ T8323] ? show_regs_print_info+0x12/0x12 [ 293.481008][ T8323] ? load_image+0x410/0x410 [ 293.485591][ T8323] sysfs_warn_dup+0x8a/0xa0 [ 293.490162][ T8323] sysfs_do_create_link_sd+0xc0/0x110 [ 293.495611][ T8323] device_add+0x83b/0x1050 [ 293.500100][ T8323] wiphy_register+0x1d8b/0x2aa0 [ 293.505061][ T8323] ? cfg80211_event_work+0x40/0x40 [ 293.510241][ T8323] ? minstrel_ht_alloc+0x894/0xa20 [ 293.515411][ T8323] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 293.521514][ T8323] ieee80211_register_hw+0x2d48/0x39f0 [ 293.527025][ T8323] ? ieee80211_register_hw+0xee1/0x39f0 [ 293.532625][ T8323] ? ieee80211_register_hw+0xee1/0x39f0 [ 293.538213][ T8323] ? ieee80211_tasklet_handler+0x20/0x20 [ 293.543873][ T8323] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 293.549802][ T8323] ? __debug_object_init+0xed/0x440 [ 293.555046][ T8323] ? memset+0x1e/0x40 [ 293.559080][ T8323] ? __hrtimer_init+0x189/0x270 [ 293.563968][ T8323] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 293.569737][ T8323] ? memcpy+0x3c/0x60 [ 293.573753][ T8323] hwsim_new_radio_nl+0xab7/0xc90 [ 293.578822][ T8323] genl_family_rcv_msg_doit+0x22f/0x350 [ 293.584401][ T8323] ? end_current_label_crit_section+0x170/0x170 [ 293.590683][ T8323] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 293.596616][ T8323] ? bpf_lsm_capable+0x5/0x10 [ 293.601322][ T8323] ? security_capable+0x85/0xb0 [ 293.606223][ T8323] genl_rcv_msg+0x601/0x790 [ 293.610765][ T8323] ? genl_bind+0x360/0x360 [ 293.615207][ T8323] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 293.621586][ T8323] netlink_rcv_skb+0x1ef/0x440 [ 293.626388][ T8323] ? genl_bind+0x360/0x360 [ 293.630830][ T8323] ? netlink_ack+0x1160/0x1160 [ 293.635638][ T8323] ? down_read+0x1a8/0x2d0 [ 293.640080][ T8323] genl_rcv+0x24/0x40 [ 293.644086][ T8323] netlink_unicast+0x7ad/0x920 [ 293.648898][ T8323] netlink_sendmsg+0x8ad/0xbd0 [ 293.653704][ T8323] ? netlink_getsockopt+0x550/0x550 [ 293.658938][ T8323] ? apparmor_socket_sendmsg+0x8a/0x330 [ 293.664522][ T8323] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 293.669839][ T8323] ? security_socket_sendmsg+0x7c/0xa0 [ 293.675323][ T8323] ? netlink_getsockopt+0x550/0x550 [ 293.680559][ T8323] ____sys_sendmsg+0x5ed/0x9a0 [ 293.685398][ T8323] ? __sys_sendmsg_sock+0x30/0x30 [ 293.690459][ T8323] ? __import_iovec+0x306/0x510 [ 293.695351][ T8323] ? import_iovec+0x6f/0xa0 [ 293.699890][ T8323] ___sys_sendmsg+0x2a2/0x360 [ 293.704607][ T8323] ? __sys_sendmsg+0x2a0/0x2a0 [ 293.709453][ T8323] __se_sys_sendmsg+0x1c3/0x2b0 [ 293.714343][ T8323] ? __x64_sys_sendmsg+0x80/0x80 [ 293.719328][ T8323] ? lockdep_hardirqs_on+0x94/0x140 [ 293.724563][ T8323] do_syscall_64+0x4c/0xa0 [ 293.729011][ T8323] ? clear_bhb_loop+0x60/0xb0 [ 293.733720][ T8323] ? clear_bhb_loop+0x60/0xb0 [ 293.738430][ T8323] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.744353][ T8323] RIP: 0033:0x7f8a12b9e0d9 [ 293.748793][ T8323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.768433][ T8323] RSP: 002b:00007f8a13a5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.776904][ T8323] RAX: ffffffffffffffda RBX: 00007f8a12e26090 RCX: 00007f8a12b9e0d9 [ 293.784902][ T8323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 293.792896][ T8323] RBP: 00007f8a12c35024 R08: 0000000000000000 R09: 0000000000000000 [ 293.800974][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.808975][ T8323] R13: 00007f8a12e26128 R14: 00007f8a12e26090 R15: 00007ffda1a3b908 [ 293.816991][ T8323] [ 294.138883][ T8330] netlink: 'syz.0.1140': attribute type 29 has an invalid length. [ 294.159854][ T8330] netlink: 'syz.0.1140': attribute type 29 has an invalid length. [ 294.300167][ T8334] netlink: zone id is out of range [ 294.337662][ T8334] netlink: zone id is out of range [ 294.704342][ T8334] netlink: zone id is out of range [ 294.774503][ T8334] netlink: zone id is out of range [ 294.829157][ T8334] netlink: zone id is out of range [ 294.872244][ T8334] netlink: zone id is out of range [ 294.906629][ T8334] netlink: zone id is out of range [ 294.942438][ T8334] netlink: zone id is out of range [ 295.017968][ T8334] netlink: zone id is out of range [ 295.024650][ T8334] netlink: zone id is out of range [ 295.582399][ T8352] validate_nla: 2 callbacks suppressed [ 295.582420][ T8352] netlink: 'syz.4.1146': attribute type 4 has an invalid length. [ 295.635514][ T8351] netlink: 'syz.4.1146': attribute type 4 has an invalid length. [ 296.778457][ T8376] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 296.826420][ T8376] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 296.876966][ T8378] netlink: 'syz.2.1156': attribute type 6 has an invalid length. [ 296.885837][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.894043][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.921935][ T8379] netlink: 'syz.2.1156': attribute type 29 has an invalid length. [ 296.954799][ T8374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.973693][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.989908][ T8378] __nla_validate_parse: 3 callbacks suppressed [ 296.989950][ T8378] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1156'. [ 297.150174][ T8384] netlink: 'syz.2.1156': attribute type 2 has an invalid length. [ 297.212605][ T8384] netlink: 'syz.2.1156': attribute type 7 has an invalid length. [ 297.312793][ T8384] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.1156'. [ 297.366143][ T8376] netlink: 'syz.3.1155': attribute type 29 has an invalid length. [ 297.426018][ T8379] netlink: 'syz.2.1156': attribute type 29 has an invalid length. [ 297.634558][ T8386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 297.773501][ T8388] tap0: tun_chr_ioctl cmd 1074025677 [ 297.807199][ T8388] tap0: linktype set to 776 [ 298.740240][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.770793][ T8396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.112209][ T8396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.199416][ T8396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.238798][ T8396] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 299.281434][ T8396] batman_adv: batadv0: Removing interface: veth0_vlan [ 299.596063][ T8397] device aaaaaaaaaaaaaaa entered promiscuous mode [ 301.024884][ T8422] validate_nla: 3 callbacks suppressed [ 301.024904][ T8422] netlink: 'syz.2.1169': attribute type 3 has an invalid length. [ 301.398607][ T8422] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1169'. [ 301.617404][ T8432] netlink: 'syz.1.1171': attribute type 29 has an invalid length. [ 301.686113][ T8432] netlink: 'syz.1.1171': attribute type 29 has an invalid length. [ 303.856626][ T8469] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1182'. [ 303.887574][ T8469] net_ratelimit: 137 callbacks suppressed [ 303.887593][ T8469] netlink: zone id is out of range [ 304.053602][ T8469] netlink: zone id is out of range [ 304.224168][ T8469] netlink: zone id is out of range [ 304.270564][ T8469] netlink: zone id is out of range [ 304.340225][ T8469] netlink: zone id is out of range [ 304.452372][ T8469] netlink: zone id is out of range [ 304.459265][ T8469] netlink: zone id is out of range [ 304.507501][ T8469] netlink: zone id is out of range [ 304.572643][ T8469] netlink: zone id is out of range [ 304.706887][ T8469] netlink: zone id is out of range [ 306.071229][ T8479] netlink: 'syz.3.1184': attribute type 29 has an invalid length. [ 306.101357][ T8479] netlink: 'syz.3.1184': attribute type 29 has an invalid length. [ 306.142280][ T8487] netlink: 'syz.3.1184': attribute type 29 has an invalid length. [ 306.449815][ T4287] Bluetooth: hci0: ISO packet for unknown connection handle 3850 [ 306.467517][ T8489] device syzkaller0 entered promiscuous mode [ 309.657027][ T8540] netlink: 'syz.4.1198': attribute type 11 has an invalid length. [ 309.664935][ T8540] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1198'. [ 309.923136][ T8554] netlink: 'syz.1.1201': attribute type 21 has an invalid length. [ 309.986721][ T8554] netlink: 'syz.1.1201': attribute type 10 has an invalid length. [ 310.026452][ T8554] netlink: 'syz.1.1201': attribute type 12 has an invalid length. [ 310.068772][ T8554] netlink: 'syz.1.1201': attribute type 13 has an invalid length. [ 310.096314][ T8554] netlink: 'syz.1.1201': attribute type 14 has an invalid length. [ 310.169773][ T8554] netlink: 'syz.1.1201': attribute type 15 has an invalid length. [ 310.200112][ T8554] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.1201'. [ 310.289416][ T8563] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1205'. [ 310.803096][ T8579] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1211'. [ 311.691337][ T8588] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1213'. [ 312.014671][ T8600] validate_nla: 8 callbacks suppressed [ 312.014691][ T8600] netlink: 'syz.3.1216': attribute type 41 has an invalid length. [ 312.157149][ T8601] netlink: 'syz.3.1216': attribute type 41 has an invalid length. [ 313.670425][ T8640] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1230'. [ 313.698248][ T8640] net_ratelimit: 137 callbacks suppressed [ 313.698313][ T8640] netlink: zone id is out of range [ 313.730797][ T8640] netlink: zone id is out of range [ 313.738774][ T8640] netlink: zone id is out of range [ 313.747603][ T8640] netlink: zone id is out of range [ 313.761989][ T8640] netlink: zone id is out of range [ 313.801260][ T8640] netlink: zone id is out of range [ 313.840381][ T8640] netlink: zone id is out of range [ 313.854728][ T8640] netlink: zone id is out of range [ 313.867444][ T8640] netlink: zone id is out of range [ 313.873996][ T8640] netlink: zone id is out of range [ 314.204886][ T8649] netlink: 'syz.1.1232': attribute type 3 has an invalid length. [ 314.223632][ T8649] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1232'. [ 314.458835][ T8657] netlink: 'syz.2.1234': attribute type 3 has an invalid length. [ 314.496521][ T8657] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 314.549996][ T8657] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1234'. [ 314.908473][ T8666] netlink: 'syz.3.1237': attribute type 3 has an invalid length. [ 314.934720][ T8666] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1237'. [ 315.002671][ T8668] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1238'. [ 315.095499][ T8668] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 315.117342][ T8668] CPU: 1 PID: 8668 Comm: syz.2.1238 Not tainted syzkaller #0 [ 315.124822][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.134939][ T8668] Call Trace: [ 315.138273][ T8668] [ 315.141337][ T8668] dump_stack_lvl+0x188/0x24e [ 315.146083][ T8668] ? show_regs_print_info+0x12/0x12 [ 315.151345][ T8668] ? load_image+0x410/0x410 [ 315.155910][ T8668] sysfs_warn_dup+0x8a/0xa0 [ 315.160467][ T8668] sysfs_do_create_link_sd+0xc0/0x110 [ 315.165913][ T8668] device_add+0x83b/0x1050 [ 315.170410][ T8668] wiphy_register+0x1d8b/0x2aa0 [ 315.175344][ T8668] ? cfg80211_event_work+0x40/0x40 [ 315.180537][ T8668] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 315.186778][ T8668] ieee80211_register_hw+0x2d48/0x39f0 [ 315.192311][ T8668] ? ieee80211_register_hw+0xee1/0x39f0 [ 315.197916][ T8668] ? ieee80211_register_hw+0xee1/0x39f0 [ 315.203544][ T8668] ? ieee80211_tasklet_handler+0x20/0x20 [ 315.209285][ T8668] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 315.215526][ T8668] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 315.221330][ T8668] ? memcpy+0x3c/0x60 [ 315.225375][ T8668] hwsim_new_radio_nl+0xab7/0xc90 [ 315.230480][ T8668] genl_family_rcv_msg_doit+0x22f/0x350 [ 315.236090][ T8668] ? end_current_label_crit_section+0x170/0x170 [ 315.242410][ T8668] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 315.248378][ T8668] ? bpf_lsm_capable+0x5/0x10 [ 315.253113][ T8668] ? security_capable+0x85/0xb0 [ 315.258036][ T8668] genl_rcv_msg+0x601/0x790 [ 315.262608][ T8668] ? genl_bind+0x360/0x360 [ 315.267080][ T8668] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 315.273486][ T8668] ? netlink_rcv_skb+0x1ce/0x440 [ 315.278504][ T8668] netlink_rcv_skb+0x1ef/0x440 [ 315.283338][ T8668] ? genl_bind+0x360/0x360 [ 315.287816][ T8668] ? netlink_ack+0x1160/0x1160 [ 315.292657][ T8668] ? down_read+0x1a8/0x2d0 [ 315.297141][ T8668] genl_rcv+0x24/0x40 [ 315.301172][ T8668] netlink_unicast+0x7ad/0x920 [ 315.306014][ T8668] netlink_sendmsg+0x8ad/0xbd0 [ 315.310862][ T8668] ? __sanitizer_cov_trace_pc+0x41/0x60 [ 315.316478][ T8668] ? netlink_getsockopt+0x550/0x550 [ 315.321750][ T8668] ? apparmor_socket_sendmsg+0x8a/0x330 [ 315.327361][ T8668] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 315.332710][ T8668] ? security_socket_sendmsg+0x7c/0xa0 [ 315.338232][ T8668] ? netlink_getsockopt+0x550/0x550 [ 315.343498][ T8668] ____sys_sendmsg+0x5ed/0x9a0 [ 315.348358][ T8668] ? __sys_sendmsg_sock+0x30/0x30 [ 315.353445][ T8668] ? __import_iovec+0x306/0x510 [ 315.358413][ T8668] ? import_iovec+0x6f/0xa0 [ 315.362987][ T8668] ___sys_sendmsg+0x2a2/0x360 [ 315.367743][ T8668] ? __sys_sendmsg+0x2a0/0x2a0 [ 315.372613][ T8668] ? ktime_get+0x7b/0x270 [ 315.377053][ T8668] __se_sys_sendmsg+0x1c3/0x2b0 [ 315.381989][ T8668] ? __x64_sys_sendmsg+0x80/0x80 [ 315.387035][ T8668] ? syscall_enter_from_user_mode+0x2a/0x80 [ 315.392993][ T8668] do_syscall_64+0x4c/0xa0 [ 315.397476][ T8668] ? clear_bhb_loop+0x60/0xb0 [ 315.402227][ T8668] ? clear_bhb_loop+0x60/0xb0 [ 315.407020][ T8668] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.407730][ T8673] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1240'. [ 315.412955][ T8668] RIP: 0033:0x7f8a12b9e0d9 [ 315.412980][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.413001][ T8668] RSP: 002b:00007f8a13a7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.413027][ T8668] RAX: ffffffffffffffda RBX: 00007f8a12e25fa0 RCX: 00007f8a12b9e0d9 [ 315.413045][ T8668] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 315.470813][ T8668] RBP: 00007f8a12c35024 R08: 0000000000000000 R09: 0000000000000000 [ 315.478847][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.486995][ T8668] R13: 00007f8a12e26038 R14: 00007f8a12e25fa0 R15: 00007ffda1a3b908 [ 315.495028][ T8668] [ 315.549802][ T8676] netlink: 'syz.3.1241': attribute type 10 has an invalid length. [ 315.958397][ T8686] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1244'. [ 316.011443][ T8686] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 316.025764][ T8686] CPU: 1 PID: 8686 Comm: syz.0.1244 Not tainted syzkaller #0 [ 316.033244][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 316.043348][ T8686] Call Trace: [ 316.046673][ T8686] [ 316.049642][ T8686] dump_stack_lvl+0x188/0x24e [ 316.054386][ T8686] ? show_regs_print_info+0x12/0x12 [ 316.060085][ T8686] ? load_image+0x410/0x410 [ 316.064660][ T8686] sysfs_warn_dup+0x8a/0xa0 [ 316.069226][ T8686] sysfs_do_create_link_sd+0xc0/0x110 [ 316.074657][ T8686] device_add+0x83b/0x1050 [ 316.079137][ T8686] wiphy_register+0x1d8b/0x2aa0 [ 316.084075][ T8686] ? cfg80211_event_work+0x40/0x40 [ 316.089247][ T8686] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 316.095511][ T8686] ? ieee80211_register_hw+0x2ca9/0x39f0 [ 316.101217][ T8686] ieee80211_register_hw+0x2d48/0x39f0 [ 316.106785][ T8686] ? ieee80211_register_hw+0xee1/0x39f0 [ 316.112404][ T8686] ? ieee80211_register_hw+0xee1/0x39f0 [ 316.118016][ T8686] ? ieee80211_tasklet_handler+0x20/0x20 [ 316.123711][ T8686] ? lockdep_hardirqs_on+0x94/0x140 [ 316.128997][ T8686] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 316.135234][ T8686] ? ieee80211_register_hw+0x1/0x39f0 [ 316.140670][ T8686] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 316.146463][ T8686] ? memcpy+0x3c/0x60 [ 316.150498][ T8686] hwsim_new_radio_nl+0xab7/0xc90 [ 316.155595][ T8686] genl_family_rcv_msg_doit+0x22f/0x350 [ 316.161212][ T8686] ? end_current_label_crit_section+0x170/0x170 [ 316.167530][ T8686] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 316.173490][ T8686] ? bpf_lsm_capable+0x5/0x10 [ 316.178232][ T8686] ? security_capable+0x85/0xb0 [ 316.183161][ T8686] genl_rcv_msg+0x601/0x790 [ 316.187727][ T8686] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 316.193949][ T8686] ? genl_bind+0x360/0x360 [ 316.198419][ T8686] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 316.204826][ T8686] ? lock_acquire+0x225/0x4a0 [ 316.209576][ T8686] netlink_rcv_skb+0x1ef/0x440 [ 316.214450][ T8686] ? genl_bind+0x360/0x360 [ 316.218919][ T8686] ? netlink_ack+0x1160/0x1160 [ 316.223756][ T8686] ? down_read+0x1a8/0x2d0 [ 316.228233][ T8686] genl_rcv+0x24/0x40 [ 316.232274][ T8686] netlink_unicast+0x7ad/0x920 [ 316.237115][ T8686] netlink_sendmsg+0x8ad/0xbd0 [ 316.241953][ T8686] ? netlink_getsockopt+0x550/0x550 [ 316.247255][ T8686] ? apparmor_socket_sendmsg+0x8a/0x330 [ 316.252882][ T8686] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 316.258223][ T8686] ? security_socket_sendmsg+0x7c/0xa0 [ 316.263749][ T8686] ? netlink_getsockopt+0x550/0x550 [ 316.269021][ T8686] ____sys_sendmsg+0x5ed/0x9a0 [ 316.273874][ T8686] ? __sys_sendmsg_sock+0x30/0x30 [ 316.278963][ T8686] ? __import_iovec+0x306/0x510 [ 316.283892][ T8686] ? import_iovec+0x6f/0xa0 [ 316.288458][ T8686] ___sys_sendmsg+0x2a2/0x360 [ 316.293203][ T8686] ? __sys_sendmsg+0x2a0/0x2a0 [ 316.298054][ T8686] ? ktime_get+0x7b/0x270 [ 316.302473][ T8686] __se_sys_sendmsg+0x1c3/0x2b0 [ 316.307379][ T8686] ? __x64_sys_sendmsg+0x80/0x80 [ 316.312409][ T8686] do_syscall_64+0x4c/0xa0 [ 316.316887][ T8686] ? clear_bhb_loop+0x60/0xb0 [ 316.321627][ T8686] ? clear_bhb_loop+0x60/0xb0 [ 316.326366][ T8686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.332310][ T8686] RIP: 0033:0x7fe45379e0d9 [ 316.336771][ T8686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.356433][ T8686] RSP: 002b:00007fe4546f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.364909][ T8686] RAX: ffffffffffffffda RBX: 00007fe453a25fa0 RCX: 00007fe45379e0d9 [ 316.373030][ T8686] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 316.381059][ T8686] RBP: 00007fe453835024 R08: 0000000000000000 R09: 0000000000000000 [ 316.389115][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.397140][ T8686] R13: 00007fe453a26038 R14: 00007fe453a25fa0 R15: 00007ffd5b7d3b88 [ 316.405185][ T8686] [ 316.902777][ T4651] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.128743][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135134][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.815212][ T8737] netlink: 'syz.0.1258': attribute type 2 has an invalid length. [ 317.858933][ T8737] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 317.992148][ T8734] device syzkaller0 entered promiscuous mode [ 320.275486][ T8744] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.1260'. [ 320.285258][ T8744] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.1260'. [ 320.295198][ T8744] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.1260'. [ 320.316667][ T8752] device sit0 left promiscuous mode [ 320.923738][ T8762] device syzkaller0 entered promiscuous mode [ 323.105332][ T8805] tap0: tun_chr_ioctl cmd 35108 [ 323.397062][ T8812] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1278'. [ 323.562566][ T8810] netlink: 'syz.0.1276': attribute type 3 has an invalid length. [ 323.885355][ T8828] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1281'. [ 323.923060][ T8828] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1281'. [ 323.970226][ T8828] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1281'. [ 324.099605][ T8835] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.1283'. [ 324.139758][ T8835] net_ratelimit: 3658 callbacks suppressed [ 324.139781][ T8835] netlink: zone id is out of range [ 324.179187][ T8835] netlink: get zone limit has 8 unknown bytes [ 324.492378][ T8839] device syzkaller0 entered promiscuous mode [ 329.365200][ T8850] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1288'. [ 329.386055][ T8850] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.413618][ T8850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.899250][ T8869] syz.0.1291 (8869) used obsolete PPPIOCDETACH ioctl [ 329.909664][ T8880] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1294'. [ 330.631789][ T8901] netlink: 'syz.2.1298': attribute type 3 has an invalid length. [ 330.707516][ T8901] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1298'. [ 330.799355][ T8900] device syzkaller0 entered promiscuous mode [ 331.022155][ T8911] device syzkaller0 entered promiscuous mode [ 334.120614][ T8933] FAULT_INJECTION: forcing a failure. [ 334.120614][ T8933] name failslab, interval 1, probability 0, space 0, times 0 [ 334.134446][ T8933] CPU: 0 PID: 8933 Comm: syz.0.1307 Not tainted syzkaller #0 [ 334.142413][ T8933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 334.152559][ T8933] Call Trace: [ 334.155889][ T8933] [ 334.158876][ T8933] dump_stack_lvl+0x188/0x24e [ 334.163611][ T8933] ? show_regs_print_info+0x12/0x12 [ 334.168840][ T8933] ? load_image+0x410/0x410 [ 334.173385][ T8933] ? __lock_acquire+0x7c40/0x7c40 [ 334.178434][ T8933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 334.184440][ T8933] should_fail_ex+0x390/0x4c0 [ 334.189139][ T8933] should_failslab+0x5/0x20 [ 334.193651][ T8933] slab_pre_alloc_hook+0x59/0x300 [ 334.198685][ T8933] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 334.204863][ T8933] kmem_cache_alloc_node+0x5a/0x310 [ 334.210095][ T8933] ? __alloc_skb+0xf9/0x7d0 [ 334.214646][ T8933] __alloc_skb+0xf9/0x7d0 [ 334.219016][ T8933] tipc_msg_build+0xc9/0xde0 [ 334.223639][ T8933] ? net_generic+0x1e/0x240 [ 334.228172][ T8933] ? net_generic+0x1e/0x240 [ 334.232721][ T8933] ? tipc_group_bc_cong+0x158/0x210 [ 334.237982][ T8933] tipc_send_group_bcast+0x7d4/0xad0 [ 334.243322][ T8933] ? tipc_wait_for_connect+0x650/0x650 [ 334.248827][ T8933] ? mark_lock+0x94/0x320 [ 334.253194][ T8933] ? wait_woken+0x1c0/0x1c0 [ 334.257805][ T8933] ? __lock_acquire+0x138a/0x7c40 [ 334.262863][ T8933] __tipc_sendmsg+0x313/0x2c00 [ 334.267669][ T8933] ? mark_lock+0x94/0x320 [ 334.272046][ T8933] ? rht_lock+0x150/0x150 [ 334.276415][ T8933] ? aa_sk_perm+0x950/0x950 [ 334.280949][ T8933] ? verify_lock_unused+0x140/0x140 [ 334.286221][ T8933] ? verify_lock_unused+0x140/0x140 [ 334.291507][ T8933] ? __might_sleep+0xd0/0xd0 [ 334.296124][ T8933] ? __lock_acquire+0x1465/0x7c40 [ 334.301192][ T8933] ? mark_lock+0x94/0x320 [ 334.305549][ T8933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 334.311561][ T8933] ? __local_bh_enable_ip+0x136/0x1c0 [ 334.316969][ T8933] ? lockdep_hardirqs_on+0x94/0x140 [ 334.322227][ T8933] ? __local_bh_enable_ip+0x136/0x1c0 [ 334.327617][ T8933] ? _local_bh_enable+0xa0/0xa0 [ 334.332490][ T8933] tipc_sendmsg+0x51/0x70 [ 334.336858][ T8933] ? tipc_recvmsg+0x13d0/0x13d0 [ 334.341837][ T8933] ____sys_sendmsg+0x5ed/0x9a0 [ 334.346626][ T8933] ? lockdep_hardirqs_on+0x94/0x140 [ 334.351874][ T8933] ? __sys_sendmsg_sock+0x30/0x30 [ 334.356923][ T8933] ? __import_iovec+0x306/0x510 [ 334.361806][ T8933] ? import_iovec+0x6f/0xa0 [ 334.366355][ T8933] ___sys_sendmsg+0x2a2/0x360 [ 334.371083][ T8933] ? __sys_sendmsg+0x2a0/0x2a0 [ 334.375916][ T8933] ? ktime_get+0x7b/0x270 [ 334.380293][ T8933] __se_sys_sendmsg+0x1c3/0x2b0 [ 334.385171][ T8933] ? __x64_sys_sendmsg+0x80/0x80 [ 334.390164][ T8933] ? lockdep_hardirqs_on+0x94/0x140 [ 334.395408][ T8933] do_syscall_64+0x4c/0xa0 [ 334.399846][ T8933] ? clear_bhb_loop+0x60/0xb0 [ 334.404565][ T8933] ? clear_bhb_loop+0x60/0xb0 [ 334.409308][ T8933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 334.415246][ T8933] RIP: 0033:0x7fe45379e0d9 [ 334.419691][ T8933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.439344][ T8933] RSP: 002b:00007fe4546f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.447782][ T8933] RAX: ffffffffffffffda RBX: 00007fe453a25fa0 RCX: 00007fe45379e0d9 [ 334.455883][ T8933] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 334.463908][ T8933] RBP: 00007fe4546f5090 R08: 0000000000000000 R09: 0000000000000000 [ 334.471918][ T8933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.479933][ T8933] R13: 00007fe453a26038 R14: 00007fe453a25fa0 R15: 00007ffd5b7d3b88 [ 334.487930][ T8933] [ 336.553804][ T8951] netlink: 'syz.4.1310': attribute type 17 has an invalid length. [ 336.596300][ T8951] netlink: 'syz.4.1310': attribute type 16 has an invalid length. [ 336.608774][ T8951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1310'. [ 337.420688][ T8965] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1319'. [ 338.536555][ T8983] : port 1(ip6gretap0) entered blocking state [ 338.549054][ T8983] : port 1(ip6gretap0) entered disabled state [ 338.585840][ T8983] device ip6gretap0 entered promiscuous mode [ 338.653459][ T8987] device ip6gretap0 left promiscuous mode [ 338.664054][ T8987] : port 1(ip6gretap0) entered disabled state [ 339.412491][ T9005] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1329'. [ 339.451206][ T9005] ksmbd: Unknown IPC event: 10, ignore. [ 339.637177][ T9012] netlink: 'syz.2.1333': attribute type 29 has an invalid length. [ 339.654114][ T9012] netlink: 'syz.2.1333': attribute type 29 has an invalid length. [ 339.676544][ T9012] netlink: 'syz.2.1333': attribute type 29 has an invalid length. [ 339.718687][ T9014] can: request_module (can-proto-0) failed. [ 340.393108][ T9032] netlink: 'syz.3.1338': attribute type 16 has an invalid length. [ 340.436035][ T9032] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1338'. [ 341.434983][ T9053] netlink: 'syz.3.1344': attribute type 17 has an invalid length. [ 341.466297][ T9053] netlink: 'syz.3.1344': attribute type 16 has an invalid length. [ 341.474233][ T9053] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1344'. [ 342.223715][ T9080] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1354'. [ 343.051116][ T9096] FAULT_INJECTION: forcing a failure. [ 343.051116][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 343.064236][ T9096] CPU: 1 PID: 9096 Comm: syz.0.1358 Not tainted syzkaller #0 [ 343.071663][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.081759][ T9096] Call Trace: [ 343.085077][ T9096] [ 343.088050][ T9096] dump_stack_lvl+0x188/0x24e [ 343.092794][ T9096] ? show_regs_print_info+0x12/0x12 [ 343.098037][ T9096] ? load_image+0x410/0x410 [ 343.102565][ T9096] ? mark_lock+0x94/0x320 [ 343.106941][ T9096] should_fail_ex+0x390/0x4c0 [ 343.111650][ T9096] should_failslab+0x5/0x20 [ 343.116183][ T9096] slab_pre_alloc_hook+0x59/0x300 [ 343.121251][ T9096] ? do_raw_spin_lock+0x128/0x2f0 [ 343.126305][ T9096] ? tipc_nametbl_lookup_mcast_sockets+0x6b7/0xd40 [ 343.132851][ T9096] __kmem_cache_alloc_node+0x4f/0x270 [ 343.138247][ T9096] ? tipc_nametbl_lookup_mcast_sockets+0x6b7/0xd40 [ 343.144775][ T9096] kmalloc_trace+0x26/0xe0 [ 343.149219][ T9096] tipc_nametbl_lookup_mcast_sockets+0x6b7/0xd40 [ 343.155579][ T9096] ? tipc_nametbl_lookup_mcast_sockets+0x57/0xd40 [ 343.162032][ T9096] tipc_sk_mcast_rcv+0x588/0xf00 [ 343.166989][ T9096] ? perf_trace_preemptirq_template+0x268/0x320 [ 343.173270][ T9096] ? tipc_sk_bind+0x2f0/0x2f0 [ 343.177979][ T9096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.184171][ T9096] ? tipc_mcast_xmit+0x120b/0x1890 [ 343.189336][ T9096] tipc_mcast_xmit+0x122a/0x1890 [ 343.194311][ T9096] ? tipc_bcbase_xmit+0x9b0/0x9b0 [ 343.199369][ T9096] ? __might_fault+0xc2/0x120 [ 343.204083][ T9096] ? __might_fault+0xa6/0x120 [ 343.208899][ T9096] ? _copy_from_iter+0x353/0x1130 [ 343.213984][ T9096] ? copyout_mc+0x110/0x110 [ 343.218523][ T9096] ? tipc_msg_build+0xc9/0xde0 [ 343.223351][ T9096] ? rcu_is_watching+0x11/0xa0 [ 343.228178][ T9096] ? tipc_msg_build+0xc9/0xde0 [ 343.232980][ T9096] ? tipc_msg_build+0x3f5/0xde0 [ 343.237866][ T9096] ? net_generic+0x1e/0x240 [ 343.242410][ T9096] ? tipc_group_bc_cong+0x158/0x210 [ 343.247645][ T9096] tipc_send_group_bcast+0x806/0xad0 [ 343.252979][ T9096] ? tipc_wait_for_connect+0x650/0x650 [ 343.258486][ T9096] ? wait_woken+0x1c0/0x1c0 [ 343.263037][ T9096] ? trace_call_bpf+0xbf/0x6b0 [ 343.267842][ T9096] __tipc_sendmsg+0x313/0x2c00 [ 343.272660][ T9096] ? trace_call_bpf+0xbf/0x6b0 [ 343.277470][ T9096] ? trace_call_bpf+0xbf/0x6b0 [ 343.282267][ T9096] ? trace_call_bpf+0xbf/0x6b0 [ 343.287071][ T9096] ? rht_lock+0x150/0x150 [ 343.291433][ T9096] ? trace_call_bpf+0xbf/0x6b0 [ 343.296230][ T9096] ? trace_call_bpf+0xbf/0x6b0 [ 343.301046][ T9096] ? trace_call_bpf+0x5d6/0x6b0 [ 343.305950][ T9096] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 343.311797][ T9096] ? perf_trace_preemptirq_template+0x268/0x320 [ 343.318073][ T9096] ? mark_lock+0x94/0x320 [ 343.322459][ T9096] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.328560][ T9096] ? lock_chain_count+0x20/0x20 [ 343.333448][ T9096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.339640][ T9096] ? lockdep_hardirqs_on+0x94/0x140 [ 343.344883][ T9096] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.351116][ T9096] ? __local_bh_enable_ip+0x13e/0x1c0 [ 343.356558][ T9096] ? _local_bh_enable+0xa0/0xa0 [ 343.361477][ T9096] tipc_sendmsg+0x51/0x70 [ 343.365848][ T9096] ? tipc_recvmsg+0x13d0/0x13d0 [ 343.370746][ T9096] ____sys_sendmsg+0x5ed/0x9a0 [ 343.375575][ T9096] ? __might_fault+0xa6/0x120 [ 343.380301][ T9096] ? __sys_sendmsg_sock+0x30/0x30 [ 343.385365][ T9096] ? __import_iovec+0x306/0x510 [ 343.390266][ T9096] ? import_iovec+0x6f/0xa0 [ 343.394811][ T9096] ___sys_sendmsg+0x2a2/0x360 [ 343.399534][ T9096] ? migrate_enable+0x148/0x220 [ 343.404425][ T9096] ? __sys_sendmsg+0x2a0/0x2a0 [ 343.409266][ T9096] __se_sys_sendmsg+0x1c3/0x2b0 [ 343.414161][ T9096] ? __x64_sys_sendmsg+0x80/0x80 [ 343.419173][ T9096] ? syscall_enter_from_user_mode+0x2a/0x80 [ 343.425096][ T9096] do_syscall_64+0x4c/0xa0 [ 343.429553][ T9096] ? clear_bhb_loop+0x60/0xb0 [ 343.434258][ T9096] ? clear_bhb_loop+0x60/0xb0 [ 343.439070][ T9096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.444998][ T9096] RIP: 0033:0x7fe45379e0d9 [ 343.449453][ T9096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.469104][ T9096] RSP: 002b:00007fe4546f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.477561][ T9096] RAX: ffffffffffffffda RBX: 00007fe453a25fa0 RCX: 00007fe45379e0d9 [ 343.485562][ T9096] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 343.493586][ T9096] RBP: 00007fe4546f5090 R08: 0000000000000000 R09: 0000000000000000 [ 343.501603][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.509693][ T9096] R13: 00007fe453a26038 R14: 00007fe453a25fa0 R15: 00007ffd5b7d3b88 [ 343.517712][ T9096] [ 343.998476][ T9111] FAULT_INJECTION: forcing a failure. [ 343.998476][ T9111] name failslab, interval 1, probability 0, space 0, times 0 [ 344.011328][ T9111] CPU: 0 PID: 9111 Comm: syz.0.1373 Not tainted syzkaller #0 [ 344.018854][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.028957][ T9111] Call Trace: [ 344.032278][ T9111] [ 344.035264][ T9111] dump_stack_lvl+0x188/0x24e [ 344.040035][ T9111] ? ____sys_sendmsg+0x5ed/0x9a0 [ 344.045000][ T9111] ? __se_sys_sendmsg+0x1c3/0x2b0 [ 344.050082][ T9111] ? show_regs_print_info+0x12/0x12 [ 344.055339][ T9111] ? load_image+0x410/0x410 [ 344.059919][ T9111] should_fail_ex+0x390/0x4c0 [ 344.064660][ T9111] should_failslab+0x5/0x20 [ 344.069209][ T9111] slab_pre_alloc_hook+0x59/0x300 [ 344.074305][ T9111] ? tipc_nametbl_lookup_mcast_sockets+0x6b7/0xd40 [ 344.080888][ T9111] __kmem_cache_alloc_node+0x4f/0x270 [ 344.086318][ T9111] ? tipc_nametbl_lookup_mcast_sockets+0x6b7/0xd40 [ 344.092893][ T9111] kmalloc_trace+0x26/0xe0 [ 344.097382][ T9111] tipc_nametbl_lookup_mcast_sockets+0x6b7/0xd40 [ 344.103773][ T9111] ? tipc_nametbl_lookup_mcast_sockets+0x57/0xd40 [ 344.110270][ T9111] tipc_sk_mcast_rcv+0x588/0xf00 [ 344.115262][ T9111] ? __kmem_cache_alloc_node+0x19d/0x270 [ 344.120971][ T9111] ? tipc_sk_bind+0x2f0/0x2f0 [ 344.125696][ T9111] ? __copy_skb_header+0x3ba/0x4f0 [ 344.131012][ T9111] tipc_mcast_xmit+0x122a/0x1890 [ 344.136027][ T9111] ? tipc_bcbase_xmit+0x9b0/0x9b0 [ 344.141127][ T9111] ? __might_fault+0xc2/0x120 [ 344.145859][ T9111] ? __might_fault+0xa6/0x120 [ 344.150595][ T9111] ? _copy_from_iter+0x353/0x1130 [ 344.155687][ T9111] ? copyout_mc+0x110/0x110 [ 344.160235][ T9111] ? tipc_msg_build+0xc9/0xde0 [ 344.165045][ T9111] ? rcu_is_watching+0x11/0xa0 [ 344.169890][ T9111] ? tipc_msg_build+0xc9/0xde0 [ 344.174698][ T9111] ? tipc_msg_build+0x3f5/0xde0 [ 344.179587][ T9111] ? net_generic+0x1e/0x240 [ 344.184224][ T9111] ? tipc_group_bc_cong+0x158/0x210 [ 344.189464][ T9111] tipc_send_group_bcast+0x806/0xad0 [ 344.194832][ T9111] ? tipc_wait_for_connect+0x650/0x650 [ 344.200441][ T9111] ? wait_woken+0x1c0/0x1c0 [ 344.204996][ T9111] ? __lock_acquire+0x138a/0x7c40 [ 344.210072][ T9111] __tipc_sendmsg+0x313/0x2c00 [ 344.214878][ T9111] ? mark_lock+0x94/0x320 [ 344.219345][ T9111] ? rht_lock+0x150/0x150 [ 344.223729][ T9111] ? tomoyo_check_path_number_acl+0x280/0x280 [ 344.229852][ T9111] ? aa_sk_perm+0x950/0x950 [ 344.234475][ T9111] ? verify_lock_unused+0x140/0x140 [ 344.239710][ T9111] ? verify_lock_unused+0x140/0x140 [ 344.244976][ T9111] ? __might_sleep+0xd0/0xd0 [ 344.249605][ T9111] ? is_bpf_text_address+0x22/0x2a0 [ 344.254848][ T9111] ? mark_lock+0x94/0x320 [ 344.259222][ T9111] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 344.265240][ T9111] ? __local_bh_enable_ip+0x136/0x1c0 [ 344.270656][ T9111] ? lockdep_hardirqs_on+0x94/0x140 [ 344.275889][ T9111] ? __local_bh_enable_ip+0x136/0x1c0 [ 344.281285][ T9111] ? _local_bh_enable+0xa0/0xa0 [ 344.286185][ T9111] tipc_sendmsg+0x51/0x70 [ 344.290547][ T9111] ? tipc_recvmsg+0x13d0/0x13d0 [ 344.295423][ T9111] ____sys_sendmsg+0x5ed/0x9a0 [ 344.300223][ T9111] ? __might_fault+0xa6/0x120 [ 344.304933][ T9111] ? __sys_sendmsg_sock+0x30/0x30 [ 344.309989][ T9111] ? __import_iovec+0x306/0x510 [ 344.314877][ T9111] ? import_iovec+0x6f/0xa0 [ 344.319417][ T9111] ___sys_sendmsg+0x2a2/0x360 [ 344.324142][ T9111] ? __sys_sendmsg+0x2a0/0x2a0 [ 344.328964][ T9111] ? __lock_acquire+0x7c40/0x7c40 [ 344.334045][ T9111] __se_sys_sendmsg+0x1c3/0x2b0 [ 344.338960][ T9111] ? __x64_sys_sendmsg+0x80/0x80 [ 344.343945][ T9111] ? lockdep_hardirqs_on+0x94/0x140 [ 344.349190][ T9111] do_syscall_64+0x4c/0xa0 [ 344.353637][ T9111] ? clear_bhb_loop+0x60/0xb0 [ 344.358343][ T9111] ? clear_bhb_loop+0x60/0xb0 [ 344.363052][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.369010][ T9111] RIP: 0033:0x7fe45379e0d9 [ 344.373497][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.393239][ T9111] RSP: 002b:00007fe4546f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.401690][ T9111] RAX: ffffffffffffffda RBX: 00007fe453a25fa0 RCX: 00007fe45379e0d9 [ 344.409704][ T9111] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 344.417701][ T9111] RBP: 00007fe4546f5090 R08: 0000000000000000 R09: 0000000000000000 [ 344.425700][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.433698][ T9111] R13: 00007fe453a26038 R14: 00007fe453a25fa0 R15: 00007ffd5b7d3b88 [ 344.441714][ T9111] [ 344.747272][ T9129] netlink: 'syz.2.1366': attribute type 2 has an invalid length. [ 344.827750][ T9129] device 1 entered promiscuous mode [ 345.053890][ T9140] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 345.094853][ T9140] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 345.112082][ T9145] netlink: 'syz.0.1372': attribute type 5 has an invalid length. [ 345.124596][ T9140] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1370'. [ 346.176220][ T9158] netlink: 'syz.3.1377': attribute type 12 has an invalid length. [ 346.192029][ T9158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1377'. [ 346.220973][ T9162] FAULT_INJECTION: forcing a failure. [ 346.220973][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 346.247718][ T9162] CPU: 0 PID: 9162 Comm: syz.2.1378 Not tainted syzkaller #0 [ 346.255206][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 346.265311][ T9162] Call Trace: [ 346.268631][ T9162] [ 346.271618][ T9162] dump_stack_lvl+0x188/0x24e [ 346.276357][ T9162] ? tipc_sendmsg+0x51/0x70 [ 346.280951][ T9162] ? ___sys_sendmsg+0x2a2/0x360 [ 346.285896][ T9162] ? show_regs_print_info+0x12/0x12 [ 346.291161][ T9162] ? load_image+0x410/0x410 [ 346.295735][ T9162] should_fail_ex+0x390/0x4c0 [ 346.300485][ T9162] should_failslab+0x5/0x20 [ 346.305042][ T9162] slab_pre_alloc_hook+0x59/0x300 [ 346.310133][ T9162] kmem_cache_alloc_node+0x5a/0x310 [ 346.315425][ T9162] ? kasan_quarantine_put+0xd4/0x210 [ 346.320766][ T9162] ? __alloc_skb+0xf9/0x7d0 [ 346.325336][ T9162] __alloc_skb+0xf9/0x7d0 [ 346.329727][ T9162] __pskb_copy_fclone+0xaa/0x1130 [ 346.334801][ T9162] ? tipc_dest_pop+0x198/0x230 [ 346.339652][ T9162] ? tipc_dest_pop+0x198/0x230 [ 346.344482][ T9162] tipc_sk_mcast_rcv+0x5c6/0xf00 [ 346.349577][ T9162] ? __kmem_cache_alloc_node+0x19d/0x270 [ 346.355295][ T9162] ? tipc_sk_bind+0x2f0/0x2f0 [ 346.360023][ T9162] ? __copy_skb_header+0x3ba/0x4f0 [ 346.365231][ T9162] tipc_mcast_xmit+0x122a/0x1890 [ 346.370264][ T9162] ? tipc_bcbase_xmit+0x9b0/0x9b0 [ 346.375349][ T9162] ? _copy_from_iter+0x13a/0x1130 [ 346.380433][ T9162] ? audit_tree_destroy_watch+0x20/0x20 [ 346.386028][ T9162] ? _copy_from_iter+0x353/0x1130 [ 346.391115][ T9162] ? copyout_mc+0x110/0x110 [ 346.395671][ T9162] ? tipc_msg_build+0xc9/0xde0 [ 346.400489][ T9162] ? rcu_is_watching+0x11/0xa0 [ 346.405322][ T9162] ? tipc_msg_build+0xc9/0xde0 [ 346.410142][ T9162] ? tipc_msg_build+0x3f5/0xde0 [ 346.415033][ T9162] ? net_generic+0x1e/0x240 [ 346.419570][ T9162] ? tipc_group_bc_cong+0x158/0x210 [ 346.424819][ T9162] tipc_send_group_bcast+0x806/0xad0 [ 346.430196][ T9162] ? tipc_wait_for_connect+0x650/0x650 [ 346.435723][ T9162] ? mark_lock+0x94/0x320 [ 346.440120][ T9162] ? wait_woken+0x1c0/0x1c0 [ 346.444676][ T9162] ? __lock_acquire+0x138a/0x7c40 [ 346.449767][ T9162] __tipc_sendmsg+0x313/0x2c00 [ 346.454572][ T9162] ? mark_lock+0x94/0x320 [ 346.458949][ T9162] ? rht_lock+0x150/0x150 [ 346.463315][ T9162] ? aa_sk_perm+0x950/0x950 [ 346.467847][ T9162] ? verify_lock_unused+0x140/0x140 [ 346.473087][ T9162] ? mark_lock+0x94/0x320 [ 346.477454][ T9162] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.483468][ T9162] ? lock_chain_count+0x20/0x20 [ 346.488357][ T9162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 346.494548][ T9162] ? lockdep_hardirqs_on+0x94/0x140 [ 346.499778][ T9162] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 346.506075][ T9162] ? __local_bh_enable_ip+0x13e/0x1c0 [ 346.511481][ T9162] ? _local_bh_enable+0xa0/0xa0 [ 346.516367][ T9162] tipc_sendmsg+0x51/0x70 [ 346.520722][ T9162] ? tipc_recvmsg+0x13d0/0x13d0 [ 346.525624][ T9162] ____sys_sendmsg+0x5ed/0x9a0 [ 346.530421][ T9162] ? __might_fault+0xa6/0x120 [ 346.535129][ T9162] ? __sys_sendmsg_sock+0x30/0x30 [ 346.540184][ T9162] ? __import_iovec+0x306/0x510 [ 346.545073][ T9162] ? import_iovec+0x6f/0xa0 [ 346.549615][ T9162] ___sys_sendmsg+0x2a2/0x360 [ 346.554330][ T9162] ? __sys_sendmsg+0x2a0/0x2a0 [ 346.559139][ T9162] ? ktime_get+0x7b/0x270 [ 346.563518][ T9162] __se_sys_sendmsg+0x1c3/0x2b0 [ 346.568408][ T9162] ? __x64_sys_sendmsg+0x80/0x80 [ 346.573396][ T9162] ? lockdep_hardirqs_on+0x94/0x140 [ 346.578620][ T9162] do_syscall_64+0x4c/0xa0 [ 346.583081][ T9162] ? clear_bhb_loop+0x60/0xb0 [ 346.587810][ T9162] ? clear_bhb_loop+0x60/0xb0 [ 346.592518][ T9162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.598444][ T9162] RIP: 0033:0x7f8a12b9e0d9 [ 346.602884][ T9162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.622519][ T9162] RSP: 002b:00007f8a13a7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.630960][ T9162] RAX: ffffffffffffffda RBX: 00007f8a12e25fa0 RCX: 00007f8a12b9e0d9 [ 346.639133][ T9162] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 346.647133][ T9162] RBP: 00007f8a13a7f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.655131][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.663126][ T9162] R13: 00007f8a12e26038 R14: 00007f8a12e25fa0 R15: 00007ffda1a3b908 [ 346.671137][ T9162] [ 346.693305][ T9162] tipc: Failed to clone mcast rcv buffer [ 347.689898][ T9199] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1390'. [ 347.875366][ T4658] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 348.507990][ T9211] can: request_module (can-proto-0) failed. [ 349.105311][ T9231] netlink: 'syz.4.1401': attribute type 10 has an invalid length. [ 349.208913][ T9231] team0 (unregistering): Port device team_slave_1 removed [ 349.519437][ T9247] FAULT_INJECTION: forcing a failure. [ 349.519437][ T9247] name failslab, interval 1, probability 0, space 0, times 0 [ 349.534162][ T9247] CPU: 0 PID: 9247 Comm: syz.4.1408 Not tainted syzkaller #0 [ 349.541614][ T9247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.551720][ T9247] Call Trace: [ 349.555029][ T9247] [ 349.557983][ T9247] dump_stack_lvl+0x188/0x24e [ 349.562696][ T9247] ? tipc_sendmsg+0x51/0x70 [ 349.567235][ T9247] ? ___sys_sendmsg+0x2a2/0x360 [ 349.572157][ T9247] ? show_regs_print_info+0x12/0x12 [ 349.577418][ T9247] ? load_image+0x410/0x410 [ 349.581964][ T9247] should_fail_ex+0x390/0x4c0 [ 349.586679][ T9247] should_failslab+0x5/0x20 [ 349.591239][ T9247] slab_pre_alloc_hook+0x59/0x300 [ 349.596294][ T9247] kmem_cache_alloc_node+0x5a/0x310 [ 349.601519][ T9247] ? kasan_quarantine_put+0xd4/0x210 [ 349.606854][ T9247] ? __alloc_skb+0xf9/0x7d0 [ 349.611410][ T9247] __alloc_skb+0xf9/0x7d0 [ 349.615772][ T9247] __pskb_copy_fclone+0xaa/0x1130 [ 349.620827][ T9247] ? tipc_dest_pop+0x198/0x230 [ 349.625632][ T9247] ? tipc_dest_pop+0x198/0x230 [ 349.630428][ T9247] tipc_sk_mcast_rcv+0x5c6/0xf00 [ 349.635388][ T9247] ? __kmem_cache_alloc_node+0x19d/0x270 [ 349.641058][ T9247] ? tipc_sk_bind+0x2f0/0x2f0 [ 349.645776][ T9247] ? __copy_skb_header+0x3ba/0x4f0 [ 349.650945][ T9247] tipc_mcast_xmit+0x122a/0x1890 [ 349.655923][ T9247] ? tipc_bcbase_xmit+0x9b0/0x9b0 [ 349.660983][ T9247] ? _copy_from_iter+0x130/0x1130 [ 349.666044][ T9247] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 349.671538][ T9247] ? _copy_from_iter+0x353/0x1130 [ 349.676603][ T9247] ? copyout_mc+0x110/0x110 [ 349.681142][ T9247] ? tipc_msg_build+0xc9/0xde0 [ 349.685935][ T9247] ? rcu_is_watching+0x11/0xa0 [ 349.690733][ T9247] ? tipc_msg_build+0xc9/0xde0 [ 349.695534][ T9247] ? tipc_msg_build+0x3f5/0xde0 [ 349.700455][ T9247] ? net_generic+0x1e/0x240 [ 349.705012][ T9247] ? tipc_group_bc_cong+0x158/0x210 [ 349.710250][ T9247] tipc_send_group_bcast+0x806/0xad0 [ 349.715592][ T9247] ? tipc_wait_for_connect+0x650/0x650 [ 349.721097][ T9247] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 349.727144][ T9247] ? wait_woken+0x1c0/0x1c0 [ 349.731692][ T9247] __tipc_sendmsg+0x313/0x2c00 [ 349.736574][ T9247] ? mark_lock+0x94/0x320 [ 349.740948][ T9247] ? rht_lock+0x150/0x150 [ 349.745311][ T9247] ? aa_sk_perm+0x950/0x950 [ 349.749836][ T9247] ? verify_lock_unused+0x140/0x140 [ 349.755087][ T9247] ? mark_lock+0x94/0x320 [ 349.759452][ T9247] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 349.765475][ T9247] ? lock_chain_count+0x20/0x20 [ 349.770371][ T9247] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 349.776557][ T9247] ? lockdep_hardirqs_on+0x94/0x140 [ 349.781788][ T9247] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 349.788008][ T9247] ? __local_bh_enable_ip+0x13e/0x1c0 [ 349.793404][ T9247] ? _local_bh_enable+0xa0/0xa0 [ 349.798285][ T9247] tipc_sendmsg+0x51/0x70 [ 349.802640][ T9247] ? tipc_recvmsg+0x13d0/0x13d0 [ 349.807518][ T9247] ____sys_sendmsg+0x5ed/0x9a0 [ 349.812402][ T9247] ? __might_fault+0xa6/0x120 [ 349.817112][ T9247] ? __sys_sendmsg_sock+0x30/0x30 [ 349.822170][ T9247] ? __import_iovec+0x306/0x510 [ 349.827091][ T9247] ? import_iovec+0x6f/0xa0 [ 349.831632][ T9247] ___sys_sendmsg+0x2a2/0x360 [ 349.836367][ T9247] ? __sys_sendmsg+0x2a0/0x2a0 [ 349.841183][ T9247] ? ktime_get+0x7b/0x270 [ 349.845562][ T9247] __se_sys_sendmsg+0x1c3/0x2b0 [ 349.850453][ T9247] ? __x64_sys_sendmsg+0x80/0x80 [ 349.855433][ T9247] ? lockdep_hardirqs_on+0x94/0x140 [ 349.860656][ T9247] do_syscall_64+0x4c/0xa0 [ 349.865106][ T9247] ? clear_bhb_loop+0x60/0xb0 [ 349.869809][ T9247] ? clear_bhb_loop+0x60/0xb0 [ 349.874519][ T9247] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.880436][ T9247] RIP: 0033:0x7fa34d79e0d9 [ 349.884876][ T9247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.904532][ T9247] RSP: 002b:00007fa34e743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.912993][ T9247] RAX: ffffffffffffffda RBX: 00007fa34da25fa0 RCX: 00007fa34d79e0d9 [ 349.920992][ T9247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 349.928987][ T9247] RBP: 00007fa34e743090 R08: 0000000000000000 R09: 0000000000000000 [ 349.937098][ T9247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.945097][ T9247] R13: 00007fa34da26038 R14: 00007fa34da25fa0 R15: 00007ffff571a468 [ 349.953120][ T9247] [ 350.144621][ T9247] tipc: Failed to clone mcast rcv buffer [ 351.046767][ T9269] netlink: 'syz.2.1414': attribute type 16 has an invalid length. [ 351.099830][ T9269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1414'. [ 351.176947][ T9268] delete_channel: no stack [ 352.001498][ T9295] tipc: Failed to clone mcast rcv buffer [ 352.455558][ T9306] netlink: 'syz.0.1424': attribute type 2 has an invalid length. [ 352.472402][ T9308] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 352.593130][ T9306] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1424'. [ 353.257913][ T9323] netlink: 'syz.3.1429': attribute type 29 has an invalid length. [ 353.276132][ T9323] netlink: 'syz.3.1429': attribute type 3 has an invalid length. [ 353.284147][ T9323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1429'. [ 353.421939][ T9333] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1433'. [ 354.119329][ T9355] netlink: 'syz.3.1441': attribute type 4 has an invalid length. [ 354.131588][ T9355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1441'. [ 354.774010][ T9363] netlink: 'syz.3.1445': attribute type 10 has an invalid length. [ 354.796451][ T9363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1445'. [ 354.879090][ T9363] device ipvlan1 entered promiscuous mode [ 355.116101][ T9363] bridge0: port 3(ipvlan1) entered blocking state [ 355.141635][ T9363] bridge0: port 3(ipvlan1) entered disabled state [ 355.233169][ T9363] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 355.548613][ T9367] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1445'. [ 355.617095][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 355.683005][ T9367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.786148][ T9368] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 356.284525][ T9384] netlink: 'syz.1.1451': attribute type 11 has an invalid length. [ 356.335730][ T9384] netlink: 'syz.1.1451': attribute type 11 has an invalid length. [ 356.377096][ T9384] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1451'. [ 358.175782][ T9398] netlink: 'syz.1.1456': attribute type 23 has an invalid length. [ 359.220862][ T9419] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 359.263310][ T9419] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1464'. [ 361.247291][ T9429] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.1468'. [ 361.349705][ T9429] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.1468'. [ 361.413813][ T9429] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.1468'. [ 361.564002][ T9439] netlink: 'syz.2.1471': attribute type 39 has an invalid length. [ 365.645466][ T9532] netlink: 'syz.2.1499': attribute type 10 has an invalid length. [ 365.671577][ T9532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.805625][ T9532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.130500][ T9532] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 367.297751][ T9568] netlink: 'syz.1.1509': attribute type 21 has an invalid length. [ 367.327398][ T9568] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 367.375286][ T9569] netlink: 'syz.1.1509': attribute type 21 has an invalid length. [ 367.420062][ T9569] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 367.871786][ T9574] device syzkaller0 entered promiscuous mode [ 367.896873][ T9577] netlink: 'syz.0.1512': attribute type 2 has an invalid length. [ 367.934614][ T9577] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1512'. [ 371.066877][ T9611] netlink: 'syz.1.1523': attribute type 2 has an invalid length. [ 371.125749][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1523'. [ 371.600776][ T9647] netlink: 'syz.0.1529': attribute type 9 has an invalid length. [ 371.648448][ T9647] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1529'. [ 371.698668][ T9651] netlink: 'syz.3.1528': attribute type 21 has an invalid length. [ 372.607506][ T9659] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1531'. [ 372.663873][ T9659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 372.702872][ T9659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.726447][ T9663] netlink: 'syz.1.1534': attribute type 27 has an invalid length. [ 372.875836][ T9662] delete_channel: no stack [ 374.640551][ T9705] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1547'. [ 374.728639][ T9705] device hsr_slave_0 left promiscuous mode [ 374.799872][ T9705] device hsr_slave_1 left promiscuous mode [ 375.668435][ T9735] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1555'. [ 375.819268][ T9742] netlink: 'syz.2.1557': attribute type 2 has an invalid length. [ 375.871231][ T9735] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 375.896049][ T9742] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1557'. [ 375.919962][ T9735] CPU: 0 PID: 9735 Comm: syz.1.1555 Not tainted syzkaller #0 [ 375.927439][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 375.937590][ T9735] Call Trace: [ 375.940933][ T9735] [ 375.943925][ T9735] dump_stack_lvl+0x188/0x24e [ 375.948692][ T9735] ? show_regs_print_info+0x12/0x12 [ 375.954004][ T9735] ? load_image+0x410/0x410 [ 375.958587][ T9735] sysfs_warn_dup+0x8a/0xa0 [ 375.963158][ T9735] sysfs_do_create_link_sd+0xc0/0x110 [ 375.968601][ T9735] device_add+0x83b/0x1050 [ 375.973082][ T9735] wiphy_register+0x1d8b/0x2aa0 [ 375.978019][ T9735] ? cfg80211_event_work+0x40/0x40 [ 375.983292][ T9735] ? minstrel_ht_alloc+0x894/0xa20 [ 375.988480][ T9735] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 375.994624][ T9735] ieee80211_register_hw+0x2d48/0x39f0 [ 376.000155][ T9735] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 376.006401][ T9735] ? ieee80211_register_hw+0xee1/0x39f0 [ 376.012059][ T9735] ? ieee80211_register_hw+0xee1/0x39f0 [ 376.017695][ T9735] ? ieee80211_tasklet_handler+0x20/0x20 [ 376.023395][ T9735] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 376.029443][ T9735] ? __debug_object_init+0xed/0x440 [ 376.034720][ T9735] ? memset+0x1e/0x40 [ 376.038755][ T9735] ? __hrtimer_init+0x189/0x270 [ 376.043668][ T9735] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 376.049510][ T9735] hwsim_new_radio_nl+0xab7/0xc90 [ 376.054680][ T9735] genl_family_rcv_msg_doit+0x22f/0x350 [ 376.060486][ T9735] ? end_current_label_crit_section+0x170/0x170 [ 376.066799][ T9735] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 376.072756][ T9735] ? bpf_lsm_capable+0x5/0x10 [ 376.077490][ T9735] ? security_capable+0x85/0xb0 [ 376.082420][ T9735] genl_rcv_msg+0x601/0x790 [ 376.086984][ T9735] ? genl_bind+0x360/0x360 [ 376.091454][ T9735] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 376.097862][ T9735] netlink_rcv_skb+0x1ef/0x440 [ 376.102690][ T9735] ? genl_bind+0x360/0x360 [ 376.107150][ T9735] ? netlink_ack+0x1160/0x1160 [ 376.111990][ T9735] ? down_read+0x1a8/0x2d0 [ 376.116468][ T9735] genl_rcv+0x24/0x40 [ 376.120487][ T9735] netlink_unicast+0x7ad/0x920 [ 376.125303][ T9735] netlink_sendmsg+0x8ad/0xbd0 [ 376.130120][ T9735] ? netlink_getsockopt+0x550/0x550 [ 376.135383][ T9735] ? apparmor_socket_sendmsg+0x8a/0x330 [ 376.140986][ T9735] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 376.146314][ T9735] ? security_socket_sendmsg+0x7c/0xa0 [ 376.151825][ T9735] ? netlink_getsockopt+0x550/0x550 [ 376.157092][ T9735] ____sys_sendmsg+0x5ed/0x9a0 [ 376.161931][ T9735] ? __sys_sendmsg_sock+0x30/0x30 [ 376.167051][ T9735] ? __import_iovec+0x306/0x510 [ 376.171971][ T9735] ? import_iovec+0x6f/0xa0 [ 376.176546][ T9735] ___sys_sendmsg+0x2a2/0x360 [ 376.181293][ T9735] ? __sys_sendmsg+0x2a0/0x2a0 [ 376.186162][ T9735] __se_sys_sendmsg+0x1c3/0x2b0 [ 376.191086][ T9735] ? __x64_sys_sendmsg+0x80/0x80 [ 376.196098][ T9735] ? syscall_enter_from_user_mode+0x2a/0x80 [ 376.202026][ T9735] do_syscall_64+0x4c/0xa0 [ 376.206474][ T9735] ? clear_bhb_loop+0x60/0xb0 [ 376.211185][ T9735] ? clear_bhb_loop+0x60/0xb0 [ 376.215904][ T9735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.221854][ T9735] RIP: 0033:0x7f452fd9e0d9 [ 376.226312][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.245962][ T9735] RSP: 002b:00007f4530c9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.254406][ T9735] RAX: ffffffffffffffda RBX: 00007f4530025fa0 RCX: 00007f452fd9e0d9 [ 376.262402][ T9735] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 376.270400][ T9735] RBP: 00007f452fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 376.278408][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.286401][ T9735] R13: 00007f4530026038 R14: 00007f4530025fa0 R15: 00007ffd30834f28 [ 376.294409][ T9735] [ 376.576557][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1558'. [ 376.590312][ T9747] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1558'. [ 376.776380][ T9765] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 376.842071][ T9765] team0: Device wg1 is of different type [ 376.913256][ T9748] device syzkaller0 entered promiscuous mode [ 378.373370][ T9806] netlink: 'syz.4.1572': attribute type 7 has an invalid length. [ 378.555399][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.561878][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.574224][ T9808] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1573'. [ 379.780446][ T9796] netlink: 'syz.3.1570': attribute type 1 has an invalid length. [ 379.788365][ T9796] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1570'. [ 382.994654][ T9809] netlink: 'syz.4.1573': attribute type 2 has an invalid length. [ 383.017401][ T9820] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 383.031764][ T9834] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1583'. [ 383.041021][ T9820] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 383.041052][ T9820] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 383.362387][ T9844] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1586'. [ 383.382664][ T9844] openvswitch: netlink: Flow actions attr not present in new flow. [ 383.938271][ T9854] device syzkaller0 entered promiscuous mode [ 385.350690][ T9878] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1595'. [ 388.464220][ T9868] netlink: 'syz.1.1592': attribute type 21 has an invalid length. [ 388.472455][ T9868] netlink: 'syz.1.1592': attribute type 11 has an invalid length. [ 388.514075][ T9904] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 388.538597][ T9904] syzkaller1: linktype set to 786 [ 388.982485][ T9918] netlink: 'syz.3.1606': attribute type 4 has an invalid length. [ 389.004849][ T9918] netlink: 'syz.3.1606': attribute type 7 has an invalid length. [ 389.023334][ T9918] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.1606'. [ 391.361616][ T9914] netlink: 'syz.0.1605': attribute type 10 has an invalid length. [ 391.378417][ T9914] team0: Device vxcan1 is of different type [ 391.397936][ T9919] netlink: 'syz.3.1606': attribute type 7 has an invalid length. [ 391.405748][ T9919] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1606'. [ 391.417166][ T9922] netlink: 'syz.3.1606': attribute type 7 has an invalid length. [ 391.424955][ T9922] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1606'. [ 393.465222][ T9935] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.1610'. [ 393.474617][ T9935] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.1610'. [ 393.483972][ T9935] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.1610'. [ 393.493595][ T9937] netlink: 'syz.0.1610': attribute type 17 has an invalid length. [ 393.505683][ T9937] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1610'. [ 394.174165][ T9961] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 395.409391][ T9982] device syzkaller0 entered promiscuous mode [ 397.850883][T10012] netlink: 'syz.4.1631': attribute type 9 has an invalid length. [ 397.858941][T10012] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1631'. [ 399.914123][T10034] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1638'. [ 399.947788][T10034] netlink: 'syz.1.1638': attribute type 5 has an invalid length. [ 400.070361][T10038] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 400.146105][T10038] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1637'. [ 400.226451][T10036] netlink: 'syz.0.1637': attribute type 2 has an invalid length. [ 400.271780][T10036] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1637'. [ 400.380803][T10048] netlink: 'syz.2.1641': attribute type 11 has an invalid length. [ 400.570801][T10052] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1643'. [ 400.752086][T10065] netlink: 'syz.3.1645': attribute type 21 has an invalid length. [ 400.797619][T10065] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1645'. [ 400.845041][T10065] netlink: 'syz.3.1645': attribute type 4 has an invalid length. [ 401.800687][T10074] netlink: 'syz.3.1649': attribute type 16 has an invalid length. [ 401.810351][T10074] netlink: 'syz.3.1649': attribute type 3 has an invalid length. [ 401.827440][T10074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1649'. [ 402.138262][T10079] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1651'. [ 403.990707][T10080] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1650'. [ 404.261623][T10096] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1656'. [ 404.303095][T10096] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 406.153758][T10175] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1676'. [ 406.245695][T10175] netlink: zone id is out of range [ 406.290747][T10175] netlink: zone id is out of range [ 406.314148][T10175] netlink: zone id is out of range [ 406.353120][T10175] netlink: zone id is out of range [ 406.389937][T10175] netlink: zone id is out of range [ 406.408936][T10175] netlink: zone id is out of range [ 406.422810][T10175] netlink: zone id is out of range [ 406.443657][T10175] netlink: zone id is out of range [ 406.462944][T10175] netlink: zone id is out of range [ 407.048245][T10188] netlink: 'syz.0.1681': attribute type 16 has an invalid length. [ 407.092917][T10188] netlink: 'syz.0.1681': attribute type 3 has an invalid length. [ 407.146355][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1681'. [ 407.514420][T10200] device syzkaller0 entered promiscuous mode [ 407.938426][T10219] device syzkaller0 entered promiscuous mode [ 407.951678][T10219] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 410.041223][T10236] netlink: 'syz.2.1695': attribute type 10 has an invalid length. [ 411.327722][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.336123][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.481382][T10265] device bridge_slave_1 left promiscuous mode [ 411.510759][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.557304][T10265] device bridge_slave_0 left promiscuous mode [ 411.563709][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.853378][T10282] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.522532][T10282] device bridge_slave_0 left promiscuous mode [ 413.531031][T10282] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.860817][T10301] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1712'. [ 414.120926][T10304] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1714'. [ 414.181096][T10304] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1714'. [ 414.225498][T10307] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1714'. [ 414.283529][T10309] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1714'. [ 414.515604][T10312] device syzkaller0 entered promiscuous mode [ 414.610659][T10314] sctp: [Deprecated]: syz.1.1717 (pid 10314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.610659][T10314] Use struct sctp_sack_info instead [ 416.495229][T10314] netlink: 'syz.1.1717': attribute type 2 has an invalid length. [ 416.503195][T10314] netlink: 'syz.1.1717': attribute type 8 has an invalid length. [ 416.511402][T10314] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1717'. [ 416.811519][T10324] netlink: 'syz.0.1721': attribute type 11 has an invalid length. [ 417.552638][T10344] ================================================================== [ 417.560804][T10344] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 417.568661][T10344] Write of size 48 at addr ffff888020a28790 by task syz.1.1725/10344 [ 417.576801][T10344] [ 417.579156][T10344] CPU: 1 PID: 10344 Comm: syz.1.1725 Not tainted syzkaller #0 [ 417.586650][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.596771][T10344] Call Trace: [ 417.600086][T10344] [ 417.603046][T10344] dump_stack_lvl+0x188/0x24e [ 417.607782][T10344] ? __lock_acquire+0x7c40/0x7c40 [ 417.612847][T10344] ? show_regs_print_info+0x12/0x12 [ 417.618089][T10344] ? load_image+0x410/0x410 [ 417.622634][T10344] ? __virt_addr_valid+0x467/0x540 [ 417.627793][T10344] ? __bpf_get_stackid+0x6c9/0x920 [ 417.632938][T10344] print_report+0xa8/0x210 [ 417.637398][T10344] kasan_report+0x10b/0x140 [ 417.641953][T10344] ? __bpf_get_stackid+0x6c9/0x920 [ 417.647109][T10344] kasan_check_range+0x235/0x290 [ 417.652091][T10344] ? __bpf_get_stackid+0x6c9/0x920 [ 417.657273][T10344] memcpy+0x3c/0x60 [ 417.661118][T10344] __bpf_get_stackid+0x6c9/0x920 [ 417.666105][T10344] bpf_get_stackid_pe+0x33f/0x400 [ 417.671174][T10344] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 417.676670][T10344] bpf_overflow_handler+0x50b/0x790 [ 417.681911][T10344] ? bpf_overflow_handler+0xd9/0x790 [ 417.687235][T10344] ? perf_swevent_overflow+0x230/0x230 [ 417.692738][T10344] ? __lock_acquire+0x7c40/0x7c40 [ 417.697814][T10344] ? __perf_event_account_interrupt+0x187/0x280 [ 417.704104][T10344] __perf_event_overflow+0x457/0x630 [ 417.709452][T10344] ? perf_swevent_event+0x1d5/0x570 [ 417.714711][T10344] perf_swevent_event+0x315/0x570 [ 417.719830][T10344] ? perf_tp_event+0xc10/0xc10 [ 417.724650][T10344] ? lock_chain_count+0x20/0x20 [ 417.729550][T10344] ___perf_sw_event+0x498/0x6d0 [ 417.734444][T10344] ? ___perf_sw_event+0x184/0x6d0 [ 417.739516][T10344] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 417.745985][T10344] ? __lock_acquire+0x1465/0x7c40 [ 417.751072][T10344] ? verify_lock_unused+0x140/0x140 [ 417.756326][T10344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 417.762357][T10344] ? schedule+0xd0/0x180 [ 417.766654][T10344] ? lock_chain_count+0x20/0x20 [ 417.771552][T10344] __perf_sw_event+0x135/0x260 [ 417.776371][T10344] do_user_addr_fault+0x497/0xb20 [ 417.781446][T10344] ? trace_hardirqs_off_finish+0x86/0x180 [ 417.787209][T10344] exc_page_fault+0x60/0x100 [ 417.791833][T10344] asm_exc_page_fault+0x22/0x30 [ 417.796726][T10344] RIP: 0010:__get_user_4+0x1c/0x30 [ 417.801902][T10344] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 417.821561][T10344] RSP: 0018:ffffc90004f5fd48 EFLAGS: 00050202 [ 417.827666][T10344] RAX: 0000000000000004 RBX: ffffc90004f5fe20 RCX: a7b05b850582a000 [ 417.835703][T10344] RDX: ffffffffffffffff RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 417.843722][T10344] RBP: ffffc90004f5ff10 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 417.851743][T10344] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000 [ 417.859768][T10344] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 417.867800][T10344] perf_copy_attr+0x45/0x840 [ 417.872435][T10344] __se_sys_perf_event_open+0xf5/0x1ec0 [ 417.878039][T10344] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 417.883739][T10344] ? lockdep_hardirqs_on+0x94/0x140 [ 417.888977][T10344] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 417.894675][T10344] do_syscall_64+0x4c/0xa0 [ 417.899171][T10344] ? clear_bhb_loop+0x60/0xb0 [ 417.903894][T10344] ? clear_bhb_loop+0x60/0xb0 [ 417.908625][T10344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.914569][T10344] RIP: 0033:0x7f452fd9e0d9 [ 417.919026][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.938670][T10344] RSP: 002b:00007f4530c9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 417.947125][T10344] RAX: ffffffffffffffda RBX: 00007f4530025fa0 RCX: 00007f452fd9e0d9 [ 417.955138][T10344] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 417.963142][T10344] RBP: 00007f452fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 417.971168][T10344] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 417.979206][T10344] R13: 00007f4530026038 R14: 00007f4530025fa0 R15: 00007ffd30834f28 [ 417.987231][T10344] [ 417.990267][T10344] [ 417.992605][T10344] Allocated by task 10344: [ 417.997030][T10344] kasan_set_track+0x4b/0x70 [ 418.001652][T10344] __kasan_kmalloc+0x8e/0xa0 [ 418.006267][T10344] __kmalloc_node+0xb2/0x240 [ 418.010881][T10344] bpf_map_area_alloc+0x47/0xe0 [ 418.015753][T10344] prealloc_elems_and_freelist+0x86/0x1c0 [ 418.021577][T10344] stack_map_alloc+0x386/0x510 [ 418.026392][T10344] map_create+0x524/0xff0 [ 418.030745][T10344] __sys_bpf+0x38b/0x780 [ 418.035005][T10344] __x64_sys_bpf+0x78/0x90 [ 418.039447][T10344] do_syscall_64+0x4c/0xa0 [ 418.043888][T10344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.049806][T10344] [ 418.052145][T10344] The buggy address belongs to the object at ffff888020a28780 [ 418.052145][T10344] which belongs to the cache kmalloc-cg-64 of size 64 [ 418.066330][T10344] The buggy address is located 16 bytes inside of [ 418.066330][T10344] 64-byte region [ffff888020a28780, ffff888020a287c0) [ 418.079455][T10344] [ 418.081791][T10344] The buggy address belongs to the physical page: [ 418.088232][T10344] page:ffffea0000828a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888020a28480 pfn:0x20a28 [ 418.099701][T10344] memcg:ffff888078163c01 [ 418.103978][T10344] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 418.111553][T10344] raw: 00fff00000000200 ffffea000073db80 dead000000000004 ffff888017442780 [ 418.120172][T10344] raw: ffff888020a28480 000000008020001e 00000001ffffffff ffff888078163c01 [ 418.128763][T10344] page dumped because: kasan: bad access detected [ 418.135215][T10344] page_owner tracks the page as allocated [ 418.140952][T10344] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 8083, tgid 8082 (syz.4.1071), ts 282228924920, free_ts 282017295090 [ 418.159210][T10344] post_alloc_hook+0x173/0x1a0 [ 418.164014][T10344] get_page_from_freelist+0x206b/0x2180 [ 418.169597][T10344] __alloc_pages+0x1ec/0x4f0 [ 418.174241][T10344] alloc_slab_page+0x5d/0x180 [ 418.178961][T10344] new_slab+0x87/0x2d0 [ 418.183053][T10344] ___slab_alloc+0xbc5/0x1240 [ 418.187780][T10344] __kmem_cache_alloc_node+0x126/0x270 [ 418.193261][T10344] __kmalloc_node+0xa2/0x240 [ 418.197877][T10344] kvmalloc_node+0x6c/0x180 [ 418.202407][T10344] nf_hook_entries_grow+0x31a/0x760 [ 418.207624][T10344] __nf_register_net_hook+0x2c9/0x910 [ 418.213023][T10344] nf_register_net_hook+0xae/0x190 [ 418.218154][T10344] nf_register_net_hooks+0x40/0x1a0 [ 418.223395][T10344] nf_defrag_ipv6_enable+0x83/0x110 [ 418.228622][T10344] nf_ct_netns_do_get+0x1e4/0x5b0 [ 418.233688][T10344] nf_ct_netns_inet_get+0x3b/0x150 [ 418.238819][T10344] page last free stack trace: [ 418.243506][T10344] free_unref_page_prepare+0x8e5/0x9e0 [ 418.248999][T10344] free_unref_page_list+0xbb/0x8e0 [ 418.254135][T10344] release_pages+0x20d1/0x2340 [ 418.258957][T10344] tlb_flush_mmu+0x105/0x220 [ 418.263574][T10344] tlb_finish_mmu+0xf0/0x220 [ 418.268187][T10344] exit_mmap+0x388/0x970 [ 418.272465][T10344] __mmput+0x118/0x3a0 [ 418.276563][T10344] exit_mm+0x24d/0x350 [ 418.280677][T10344] do_exit+0x958/0x2570 [ 418.284867][T10344] do_group_exit+0x229/0x2e0 [ 418.289520][T10344] get_signal+0x1259/0x1340 [ 418.294055][T10344] arch_do_signal_or_restart+0xc4/0x1310 [ 418.299715][T10344] exit_to_user_mode_loop+0x70/0x110 [ 418.305024][T10344] exit_to_user_mode_prepare+0xee/0x180 [ 418.310618][T10344] syscall_exit_to_user_mode+0x16/0x40 [ 418.316879][T10344] do_syscall_64+0x58/0xa0 [ 418.321333][T10344] [ 418.323691][T10344] Memory state around the buggy address: [ 418.329364][T10344] ffff888020a28680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 418.337446][T10344] ffff888020a28700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 418.345521][T10344] >ffff888020a28780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 418.353612][T10344] ^ [ 418.359003][T10344] ffff888020a28800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 418.367089][T10344] ffff888020a28880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 418.375164][T10344] ================================================================== [ 418.383253][T10344] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 418.390460][T10344] CPU: 1 PID: 10344 Comm: syz.1.1725 Not tainted syzkaller #0 [ 418.397933][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.408011][T10344] Call Trace: [ 418.411318][T10344] [ 418.414268][T10344] dump_stack_lvl+0x188/0x24e [ 418.418983][T10344] ? memcpy+0x3c/0x60 [ 418.422984][T10344] ? show_regs_print_info+0x12/0x12 [ 418.428231][T10344] ? load_image+0x410/0x410 [ 418.432788][T10344] panic+0x2d3/0x710 [ 418.436720][T10344] ? bpf_jit_dump+0xd0/0xd0 [ 418.441255][T10344] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 418.447174][T10344] ? _raw_spin_unlock+0x40/0x40 [ 418.452050][T10344] ? print_memory_metadata+0x314/0x400 [ 418.457537][T10344] check_panic_on_warn+0x80/0xa0 [ 418.462494][T10344] ? __bpf_get_stackid+0x6c9/0x920 [ 418.467629][T10344] end_report+0x66/0x110 [ 418.471898][T10344] kasan_report+0x118/0x140 [ 418.476453][T10344] ? __bpf_get_stackid+0x6c9/0x920 [ 418.481585][T10344] kasan_check_range+0x235/0x290 [ 418.486551][T10344] ? __bpf_get_stackid+0x6c9/0x920 [ 418.491685][T10344] memcpy+0x3c/0x60 [ 418.495526][T10344] __bpf_get_stackid+0x6c9/0x920 [ 418.500509][T10344] bpf_get_stackid_pe+0x33f/0x400 [ 418.505563][T10344] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 418.511042][T10344] bpf_overflow_handler+0x50b/0x790 [ 418.516273][T10344] ? bpf_overflow_handler+0xd9/0x790 [ 418.521577][T10344] ? perf_swevent_overflow+0x230/0x230 [ 418.527060][T10344] ? __lock_acquire+0x7c40/0x7c40 [ 418.532105][T10344] ? __perf_event_account_interrupt+0x187/0x280 [ 418.538372][T10344] __perf_event_overflow+0x457/0x630 [ 418.543704][T10344] ? perf_swevent_event+0x1d5/0x570 [ 418.548931][T10344] perf_swevent_event+0x315/0x570 [ 418.553984][T10344] ? perf_tp_event+0xc10/0xc10 [ 418.558772][T10344] ? lock_chain_count+0x20/0x20 [ 418.563650][T10344] ___perf_sw_event+0x498/0x6d0 [ 418.568552][T10344] ? ___perf_sw_event+0x184/0x6d0 [ 418.573604][T10344] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 418.580058][T10344] ? __lock_acquire+0x1465/0x7c40 [ 418.585120][T10344] ? verify_lock_unused+0x140/0x140 [ 418.590345][T10344] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 418.596350][T10344] ? schedule+0xd0/0x180 [ 418.600616][T10344] ? lock_chain_count+0x20/0x20 [ 418.605491][T10344] __perf_sw_event+0x135/0x260 [ 418.610317][T10344] do_user_addr_fault+0x497/0xb20 [ 418.615376][T10344] ? trace_hardirqs_off_finish+0x86/0x180 [ 418.621129][T10344] exc_page_fault+0x60/0x100 [ 418.625744][T10344] asm_exc_page_fault+0x22/0x30 [ 418.630622][T10344] RIP: 0010:__get_user_4+0x1c/0x30 [ 418.635764][T10344] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 418.655391][T10344] RSP: 0018:ffffc90004f5fd48 EFLAGS: 00050202 [ 418.661479][T10344] RAX: 0000000000000004 RBX: ffffc90004f5fe20 RCX: a7b05b850582a000 [ 418.669472][T10344] RDX: ffffffffffffffff RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 418.677464][T10344] RBP: ffffc90004f5ff10 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 418.685539][T10344] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000 [ 418.693550][T10344] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 418.701549][T10344] perf_copy_attr+0x45/0x840 [ 418.706176][T10344] __se_sys_perf_event_open+0xf5/0x1ec0 [ 418.711789][T10344] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 418.717478][T10344] ? lockdep_hardirqs_on+0x94/0x140 [ 418.722695][T10344] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 418.728378][T10344] do_syscall_64+0x4c/0xa0 [ 418.732822][T10344] ? clear_bhb_loop+0x60/0xb0 [ 418.737520][T10344] ? clear_bhb_loop+0x60/0xb0 [ 418.742219][T10344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.748148][T10344] RIP: 0033:0x7f452fd9e0d9 [ 418.752584][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.772212][T10344] RSP: 002b:00007f4530c9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 418.780654][T10344] RAX: ffffffffffffffda RBX: 00007f4530025fa0 RCX: 00007f452fd9e0d9 [ 418.788659][T10344] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 418.796655][T10344] RBP: 00007f452fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 418.804647][T10344] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 418.812633][T10344] R13: 00007f4530026038 R14: 00007f4530025fa0 R15: 00007ffd30834f28 [ 418.820635][T10344] [ 418.823842][T10344] Kernel Offset: disabled [ 418.828174][T10344] Rebooting in 86400 seconds..