last executing test programs: 23.429538318s ago: executing program 0 (id=6056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="450a0000000000006111b000000000001800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 23.129506209s ago: executing program 0 (id=6057): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f00000006c0)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r2, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd1, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0], 0x0, 0x60, &(0x7f0000000e80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={0xffffffffffffffff, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001140), &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f00000011c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x8, &(0x7f0000001380)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}], &(0x7f00000013c0)='GPL\x00', 0xd55, 0x9f, &(0x7f0000001400)=""/159, 0x41000, 0x54, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x4, 0xd, 0x0, 0x3}, 0x10, r7, 0x0, 0x1, &(0x7f0000001540)=[0xffffffffffffffff], &(0x7f0000001580)=[{0x4, 0x4, 0x3, 0x5}], 0x10, 0x2}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000015c0)={0xffffffffffffffff, 0x6, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0x27, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x81}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x2, 0xaa, &(0x7f0000000880)=""/170, 0x41100, 0x1, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x1, 0x1, 0xe, 0x2}, 0x10, r7, r4, 0x5, &(0x7f0000001600)=[r8], &(0x7f0000001640)=[{0x5, 0x1, 0xb, 0x2}, {0x2, 0x4, 0x9, 0x5}, {0x3, 0x2, 0xb, 0x1}, {0x3, 0x1, 0xb, 0x3}, {0x5, 0x1, 0x2, 0xa}], 0x10, 0x401}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_int(r9, &(0x7f0000000fc0)=0xa, 0x72) 22.025608521s ago: executing program 0 (id=6060): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0xfffffffd}, 0x28) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) (async) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r3}, 0x20) 21.854270449s ago: executing program 0 (id=6061): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000e000002a35467fff059a000000000060108765a4a56b56ffbb3eddada1898215e64f82e6e8917fa7a062a22e3c6b6d0857a4c8368ef9497ed12109e596829fdf11ea9f06607d47e24569d1f0f970dc46df09f5855e4bb0275034ebd1a592783803c2d2619e004acb9a5c9a56c32a48bd7a355a24283ff78add31b5b6516a6efeb86d40244ee6d28a8393f2855ec31001c5739494a64db96d9dd99eba62c3abe5871c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000100000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) r3 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, &(0x7f0000102280)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000102b40)='GPL\x00', 0x5, 0x252, &(0x7f0000102b80)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000102c80)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000102cc0)={'syzkaller1\x00', @remote}) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000102d00)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10310, 0xc8, 0x2, 0x8, 0x0, 0x1, 0xa, 0x0, 0x800, 0x0, 0xfffffffffffffffd}, 0x0, 0x400040000000009, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000102d80)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000102dc0)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000be0000000a00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000102e40)={0x10, 0x6, &(0x7f0000102f00)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r9}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000102f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000102f80)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000103000)={0x5, 0x3, &(0x7f00001030c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000103100)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000103140)={0x0, 0x0, &(0x7f0000103180)=[{&(0x7f00001031c0)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000103200), 0x51b200, 0x0) recvmsg$unix(r7, &(0x7f0000103240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000103280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r13, 0x0, 0xf9) sendmsg$kcm(r6, &(0x7f00001032c0)={0x0, 0x60, &(0x7f0000103300)=[{&(0x7f0000103340)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000005c0)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b700000000000000950000000000000085000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x1, 0x100000, &(0x7f0000002240)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000102240)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000700000000000000006a0000850000000500000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x1c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r14}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0100000000000055090100000000009500000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000dd1cba7e50afd8248dc13eebae8a44b0955d05b75a396ea8bc391a69058afaa75d4fa2ac937f0cd0a4b91b005b8d98c4a48e9751938ef6ee8a2220785692552bfe25d5f4512e89b8fd3142158e3a15a712f6409c73d6e0d30b2e26459c758f0de9cccaae20ce14a5c6b5d43869"], &(0x7f00000011c0)='GPL\x00', 0x3, 0x100f, &(0x7f0000001200)=""/4111, 0x41100, 0x2}, 0x94) 20.349061863s ago: executing program 0 (id=6065): socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x891, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10062) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x15) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r4 = socket$kcm(0x28, 0x1, 0x0) recvmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2160) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000b00)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x10, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x4004010) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0xfe1b) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000500)) 20.021692306s ago: executing program 0 (id=6068): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) socket$kcm(0x2, 0x5, 0x84) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r0}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x2, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e04, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x114, 0x3, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xa3, 0x8, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c3143, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 9.669415723s ago: executing program 2 (id=6123): r0 = gettid() r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff40df}], &(0x7f0000000040)='GPL\x00', 0x3, 0xd1, &(0x7f0000000080)=""/209, 0x40f00, 0x2, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x0, 0x99e9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0x1, 0x1], &(0x7f0000000240)=[{0x0, 0x3, 0x9, 0x2}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000380)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000003c0)={r1}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%-5lx \x00'}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x7, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0xc, 0x36, &(0x7f0000000640)=""/54, 0x41000, 0x0, '\x00', 0x0, 0x2624f2caea9e558c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x0, 0x9, 0x4}, 0x10, 0x98, r2, 0x2, &(0x7f0000000780)=[r6], &(0x7f00000007c0)=[{0x0, 0x4, 0x3, 0x7}, {0x4, 0x3, 0x5, 0x9}], 0x10, 0x100}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000bc0)={&(0x7f0000000900)="124f711b5e511702f6bc30c12e610ff4420370ac9f5c7531f2ab12b18f0a802d94b7fdf7c6281196ea449bbd672b98b870a693ecaf90438609537505ad5a13b2b2d223def11782f489cde2211d6c2934b55b4da65db8e889ecb09dc0e48214e1c0", &(0x7f0000000980)=""/81, &(0x7f0000000a00)="6d078883f5a0f16b4d54b21ee0eab3e8e4450dd50cd1467bb2415e189f3a7dd978c59ccad15df8ee76a0ac9fddb64184f28511210db80babb8812ab27a4ee947dfdea115304152c61a891eebc667f48f1be898a369d79e472b80a8da768bea3882ecc68e95e3e1a21512e23127673319ef4755f42cdf54780a1e712d413a2e90069a9e2520298444c1a4e5afe9ff85a90e0dab3cc2a7cc45465e86f24d098ec8", &(0x7f0000000ac0)="c52c3bec546195641cdfebbc22c8b5a6b6f14b64167d02cc5849a2ef2ff11ac84d3c8652358b80369454c1ff6d24e5ba8be62f41d842b4ca630a355b51272571811f1f700a335671256b717e32e0c560573a6ba51253690789a8fcf2989c650202c7354fed9c45ed354e262ac9dc55b942298434c9edaa91b1b3fed2e220832ce3d3a1593b91f5d7cef695b56f81b66a24e853b12edf5f29d378c2554c94f9b4d57043379e608398fa8ba68c259f03f9daaec54d07e72764b5ab8b6dd93bf0737bce44926ef6ed23999cff", 0x581a, r3, 0x4}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{r3, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%pB \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000010c0)={r3, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000e00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0, 0x0], 0x0, 0x6c, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000f00), &(0x7f0000000f40), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000f80)}}, 0x10) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@generic={&(0x7f0000001180)='./file0\x00', 0x0, 0x10}, 0x18) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1d, 0x5, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f0000000d00)='syzkaller\x00', 0x7, 0xad, &(0x7f0000000d40)=""/173, 0x41000, 0x40, '\x00', r11, @fallback=0xf, r8, 0x8, &(0x7f0000001100)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001140)={0x1, 0x9, 0x826, 0x10000}, 0x10, 0x0, r2, 0x7, &(0x7f0000001200)=[r6, r9, r9, r12, r3], &(0x7f0000001240)=[{0x3, 0x1, 0x3, 0x7}, {0x1, 0x5, 0x2}, {0x4, 0x1, 0xc, 0xa}, {0x1, 0x3, 0xa, 0x9}, {0x1, 0x2, 0xd, 0x2}, {0x0, 0x2, 0x10, 0x1}, {0x0, 0x5, 0x6, 0x4}], 0x10, 0x4}, 0x94) recvmsg$kcm(r5, &(0x7f0000001c00)={&(0x7f0000001380)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001400)=""/176, 0xb0}, {&(0x7f00000014c0)=""/105, 0x69}, {&(0x7f0000001540)=""/237, 0xed}, {&(0x7f0000001640)=""/67, 0x43}, {&(0x7f00000016c0)=""/148, 0x94}, {&(0x7f0000001780)=""/44, 0x2c}, {&(0x7f00000017c0)=""/166, 0xa6}, {&(0x7f0000001880)=""/57, 0x39}, {&(0x7f00000018c0)=""/252, 0xfc}, {&(0x7f00000019c0)=""/138, 0x8a}], 0xa, &(0x7f0000001b40)=""/177, 0xb1}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002d00)={r3, &(0x7f0000001c40)="5b03fb0330e6c180e25249efa5245ee8d7e52bf345af46a6e89ea9d5c6e876e6d1aa6d88183ae448cbcc441f3e3a5f53bda74bd077ff6fe47660940cbbbb6a4876519ff190046221bd0b70aaefe5e7513c92f7a2f218e8dd47b62a238b3add576361e863f0add73b625c15fd1f041814d5fc8e4415f264318d1df4073a8efafaf86a31244cf4fd17b8075112b740ad26210b3254d0141d638c283d0bee957e2bfa341b3217b0edbabf694516d3566b2bec0b40b0bd", &(0x7f0000001d00)=""/4096, 0x4}, 0x20) perf_event_open(&(0x7f0000002d80)={0x1, 0x80, 0xf9, 0x70, 0x5, 0x61, 0x0, 0x7fff, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000002d40), 0xc}, 0x16, 0xc747, 0x1, 0x4, 0x8001, 0x9, 0xf, 0x0, 0x6, 0x0, 0x6135a0a5}, r0, 0xc, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002f00)={@ifindex=r11, 0x1a, 0x0, 0x9, &(0x7f0000002e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002f40)={r10}, 0x4) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002fc0)={r10}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000003000)={r14, r15}) bpf$ENABLE_STATS(0x20, &(0x7f0000003040), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000030c0)=@generic={&(0x7f0000003080)='./file0\x00', r13}, 0x18) r16 = syz_clone(0x2844000, &(0x7f0000003380)="43d8353ad3acc8d39616b2ff50c869db47dfa3c5d7d787dfdb67423d3053b3e95baa01aa409a81fa42d2f214573af0387d0d12ce48a418e019a819b93eac3d4c87116422f9afa6ca26cd5212ec99409e4757c04c60cadf263065ec1d94d1bbd2bdc10314bbfebc90119fb764957f06bf23b7304380d9149e39438bd43a3b3fef9b763da0205c756e9c987e17ab40a06d283af1b3ebdf07ebdd79216fabe722319b150e7a276f7613f4976e386de5b1662489615de636f259face01b76f15a85f011bc1781cdc3c7698f6487ef6b3e6982de96fce8bdee92e234809292359f478dc2ed5945ed922beeaf028647a2cb3fcbc81fad05348ca0a", 0xf8, &(0x7f0000003480), &(0x7f00000034c0), &(0x7f0000003500)="2dbd0387a4fddf35c202e26cf992b24081d510041a53fa9c03079ce39cbcc19a665545c7c08f7c795c52ddb94146d9ce62edcbd4e3b15c05aa4a009b505af0f8852ffd841d5c540a51847481e79c527c79644da417a7d78a740e511c88c2699d97fd85873504dd97808cd98f1eae021f51c6d89b1f083c971394f94455094e0b48cbaf86210f169f0373e25fc36d16b0b5bfb0d6a773e7d130b05d18") sendmsg$unix(r8, &(0x7f0000003600)={&(0x7f0000003100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000003180)="7e1b52849c9b612cc23c777750a93e3f6c2e2bbec4755e185512f0c96e6aa1dbe7517f82da034a682de5925628408a4a1614ddb3fb09567e9802582bd16110ef", 0x40}, {&(0x7f00000031c0)="4fa34576", 0x4}, {&(0x7f0000003200)="317dae18e16abffaf2fbaa8ea38ffe72aa0048555ab5d9f5b6b33de82ce36b1c8d4371a53943837263d14b94666a698b0362aa2f23d81c9f76c9ab729a9bc43e5028cc8d2e54cedcefebdaba064d4c69d95190e489574cbdfaa8144bf1a209567b4c439fdee95978767134dc9b6c33f836ba72bcf7f44f7c38e79fb4cf0d909a6bd252f98d3fd71facfce162e36f7231d45f1fb5725c5b9b25ca12b0d2c2e12a20", 0xa1}, {&(0x7f00000032c0)="6c4c8e1ea7f1ea4860bbe69dcddb3592383c94f0a8946ed37ff141bb9cfa8d8cb1e1944d146ed759aea829f5e7a6d51ae2c8f2e13fddaedf58b08b3dc83f4eff6d9cdc9d98591b1326a631f522cc2e3414ef953617d1ece2563e97bd6b7508a8af07f5848c87f8c8b6a0b75d43b59ae252bbc56aa005cd9aa6aa913162e8a7", 0x7f}], 0x4, &(0x7f00000035c0)=[@cred={{0x1c, 0x1, 0x2, {r16, 0xffffffffffffffff}}}], 0x20, 0x48005}, 0x0) 9.269277144s ago: executing program 2 (id=6125): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x0, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000002540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x400}, 0x10c002, 0x8001, 0x0, 0x0, 0x0, 0x7d80, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x5, 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000026c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000002700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002800)={{r4, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)=r3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000028c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r5, 0xffffffffffffffff}, &(0x7f0000002940), &(0x7f0000002980)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000029c0)={r7, &(0x7f0000002a00)}, 0x20) sendmsg$kcm(r2, &(0x7f0000002a40)={&(0x7f0000002a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0}, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x5, 0x3, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002c40)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002cc0)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002d00)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002d40)={r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002dc0)={'wlan1\x00', @random="f7ffcc201000"}) recvmsg$kcm(r2, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x100) r12 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r12, &(0x7f0000002e40)={&(0x7f0000002e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000002f00)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae8978"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r1) 7.898612823s ago: executing program 1 (id=6129): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484abad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf6904419707000000dc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e01e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008cc651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d5232e68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772cc004341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07cee2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x109a93, 0xac5d, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000bc0)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000d00)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r3, 0x0, 0xe, 0x0, &(0x7f0000000dc0)="e0a2363b4438a55d1a5e47b8bffc", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="2c000030000040000000000000000080950082cfb2c19fe8"], &(0x7f0000000f00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = socket$kcm(0xa, 0x6, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000f40), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x4, &(0x7f0000001040)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000001e80)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000001ec0)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000002ec0)=r5, 0x120) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7.319260613s ago: executing program 2 (id=6130): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000780)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r3, &(0x7f0000000900)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff0000000094080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0x4, &(0x7f0000000240)='GPL\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r7}, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_TEST_RUN(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 7.172507398s ago: executing program 1 (id=6133): perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000022c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xc, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x14, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001200)={r0}, 0xc) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x441a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x2000, 0x2, 0xfffffffe, 0x9, 0x2, 0x2, 0x40, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = socket$kcm(0x11, 0x8, 0x300) r2 = socket$kcm(0x2, 0x2, 0x0) (async) sendmsg$inet(r1, &(0x7f00000005c0)={&(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000001c0)='E', 0x1}, {&(0x7f0000002380)="efaad6859d58fc5e1efff1f7d1edaa4c1c41c26541bd46191c5328cdd93acb510aafb52a1618fa6f9f3de09dafd41400d3ddd336c2eed54afa6d07850e11d6ba5409e6c7d69ddd9e2969c593be1e5885aa45c70814c57a69695651df9e870a2e377216c711ed53b9b49ddaa551bfcb1f993f6702f0f00b59091304fb202260bb455f2e8cc8c70a96dea2e7dc3a03b659841718277b52883ce3c6fb1d491f67b47f736504fbb88a3bd3aab99a2759df62448ad2d101eda67020721b3ade1b36f61c389771994baeb7e1fcbb9ab49e98f7255fe7f6c9616645ae76bb0990b0fb4e5238c4c75b8167f02965e3784bee1213b3ff3e4288afcd298f52600d4e1874fc8b4bc5970c7d2bb27c6422f499f21c96c81b53d96d641ed3cb34a15c2e2f225ffc2578a9f60850e76704e5f03aa0a056fe0299cd84d9202a54983a5f916a82f1947e4cf9c26fddc85f721e62d13bfed781ba96f9ec55811881231387bfae1500243ef0409a32bf382eba775add054bbb50ff439457168bffe79289e07ae014c4696188de6a9e330d0ad5f9497d0e03a7daed03c3cf5ec892fada6b2f02100d1fa61cb2b285a16ed39f761e2451240edecf409ce9d7c5d54f50a9647188557caea083c2c157d01ec77878897ea47f271bd0a467cc87b2fa929f5ccd7cd437d1f1ff23fa888835d6302d01b1f04e5e7508f7d2b8b2a7ba40a2579837286ff5c88f491043ae2a84d482284bf4c1fbcae8846701d6bb651c90bc2e176aec781e9e079558f8b72e1233e896dd7c0f100ef56edd8822572b4af47c000412e44c341f0cf2a69511e602867ccd2c76b05a335125d76e917c668430c8dc582fe4080793ed8257403351e8b39f17731ae4746afb3241e6a332fde14bdc8c56885194a956556b06295aac52862a3cc73038b48fe1e7a13d984bcc3fe82d7a125a085b53c857b0c1b4da60adfdf1fcbf6d2a4d5b95b8656d25c677000bd729f155bdac5b534550e507add62b7e8aec2b4fb631547416ed0785b2b2632928db7d74aaa1053a6c7bff312f949249d8358739087f8a915609184a76da1172b9f6291efb10b512f57c5dd7b46a32f5134c10335e824e580c191be1449bd0f4f4f54385d3dc32c105bcff73700713d471b8eab21f8b1115c3667d4fc1189557e15e52e70cc00c5d47a6a24f7dd8933b1de2e37c5dd25e48d30c30e81ec1b42b16cf2e3ac4c9ce30dd709c059dfa9136ac2dff4cc8d6249d5b09d530ad9770bc7fd4b8cf491397caf757ba909a3b4ec8b3e17146c3f13500555804d3ae33cd7cdac37727c2a336807566ee365abbaa0848a099742b43592a491246baa12fe1c57f150f462dd8635bb9f656adbff837383992a04c33c2f716a445947a5fc3622a661d760bca964518de7876e6f050e57034fdd5c6f1b8a4ac145a7ec2018e5c2443b3a0b63b188caa3773bbcbd01848e41230154e6f201e93e1351847ae7a408146bdb182bbb4fefdf890dcdd3914ba986d6d7ec22a52044d91a924cbfb2202a674ce866686565d0215e76105d7f7eec584e31043356a3615551a5f54f637183592b6190cec529aee91e34fdf13a295375461c4ef358eb15397df47586aba8b4e65c498ecc5e6752c33b4018c5fbfcb58535d50c8df570805a77f7911bce42fcbc8b7f35593f71041f2fbee15bab0b9494907392781f6f45c57e3f76b9cdeeb72e5a0cf7d7d33d646aca052790c8ae381ddf230f3bb97d4959da09a88aba04414c48f1af2e1dc184d82aa6eee27b1498c672d4dafc059772dba1b10c1b32f3913eb4758dd224480fc5cd50e5822ae8c4e200220ca0396ae450fa4988243d023200e0486d2facb7364e4c73cc61ed9f8ca6e720c67b30f2814eaff158f8f9c3ee273eae128632f8c71c890db54608e6bdadcfb078ee610e8b30c2e31d7dfe869a7bcae010c53ea7d2b91b2f113bf292d2b81a2e9788e3aaaa708acc5947be497892c97e697cb674fb6109652b7607e8ffc065077b777d6fc3992b003c2a5f417adb7a6445d89ebb450ac49cff7e94f204caeac345027f23fe34d22e40cd76fdccf197741fef05026d1ccf4e995662e1598a0e5ed9854a2d0324f82d100117c46625595c179075261cbec583034c3fa68f7f536d6dde316dc6ea6867e1d22f52e2450df541052f7d9ed93a8526a7d5d3881b385bb84207b6fca0ea290b08804740b642f494da367f2683b6652577b7b095cb2af50b995f1e217a978429c8980045ee8e47dd6fdf928078d61e505df750d72e048b1d3e008dba1cb4652dce3bcb2ae8d7cb142a773bb1f26c8f902ef28cd7bd7d2fc712c717d5f61aafaa08dffaa74e93225a52c8d37a337e489fea9357c05f7ab5911e9cfb4e16034624ed9622503cb8cb6fd0ed4d91120f4b5daba93ba9b90c7e979c8c000096b0b9ec62e0284b202c8b920a3c2e0d1c79c01f7af6ca63031dd67768da1a3beb0134d5350f17c7b5d38d1b27ec9ce04e6500f30bfdcd59abfa65ea1d00f58094b666aec19f3c531afe88b6ad5f458ce69959b39cddc3e772b8906d606475331d18b14ee4968d01e22830239b7f7c21b6b601c9d3b6b8651fd942304e477fc9008d5effdf8bf8fcdeccda13296ae3f64c21867694dd30d6c8c35943e2f7526e2229d2399351988f8b93926d31761043777da9f758b6f0bd3b1ae47b5d955b8cbc4be4a3dd21349db805ea4f63c9fd562279e70187a86ca18e6f599d8b555a222a24d73199be718f0efd8d3bd4176417d713c89c2dc453d01ffd21a9d0ef688e53f52cb95c3233a764992d33c6345ec92bc5c1f5def5c2d0655ec40475b4e6ae87d8c307cdb47f6d3c8187432dedc58b35403caadd2dfee82cbd4f048887b0261b4e913b425d78a8c400403e78d856004531a5d543c393f73dde339b35c15d7a5f14da173a8aaac58ef6c87f6262c191f26bb207a1c5e0170030f1b56dc8829119e3c602d1a82cedbe7bf0d2a574643e9e8390ab3f761b78503c3ab8448731ce5ea4035895e7cf85d4be145e7350963ba8b7507a0f66e9a3c7d75bd474f872c12da088a277a007b6f03fafbeb1dcbbdf3311616c6b8db70fb8bd0173ae81eb77fda693afa997fe5b2fd64cc97d1dd5c2f838852538ea859f939a1abb4c61c170cc3c4196c7f8ff4cb7eb114c110c916aeae3954bbbd919f1248460300aee1a54d3db6fdad5c99d116397a926cd593f1a1cd078bd9b2584ced7e22295e0293beb9e8b752a40ff7e3b90f82d1ff1d618c22556ac4ce47df721a532a7dcba78d8fcb10f1e08c56c0ec423b9603dc753de69f42f34551df4fdbdd3557e31598caeaca33730f716c98da5ea9d4c29a20ab8c1062ae6d200aef1c8e814561de3aaf508e50522523a6bd92676e8f2d8178a142857a867903669df323e751b74c2e883b35459f635009c68cbdbf80af743e11a39773f6a6c5930051780326fee063195bc5c920130e8648a95dc92c03aee82782799742d388cea6eb71e891a3fc0df7c07fcca621886c16a113325f75c316ca548fe6623aa4dc8b63a679c567ed17c894da6df97626cf066c1f70ed3c409f8443ccebaecf773327b1b80cd35347c277b594ee412026c1ca493cc652e06ad443102ff5727a2fea4df9e28b2a1fdff5a547cc7421ff88f18256bcad2767e11193204b282f4ecfe983c7412f7cde5e2be026642c736f2198d522a4f5a989c2f2f17e3fcdfd21e1505b1ba5329a1d4a15230c41fa766292f7957b5d92852cee639ab4a3a9ada6615ce6306f4aa7428a96504633d31cf922ad12f5e3906f48de7847a861f0661a80af0a378fccdbd78bfd682341d4d424c04761dc383811515626a60344fed3d30b6f3ecead2075b14b21050d6db9cdcc3204c60437532e78d80570b24bf4d44718f606521f88efa7c44a42dd2e97718ab5a457fb67a074b184b9d4bcc5f084bf2f023f02f7f08828245f57031e3526a868f618d9ae1dd86b24251fa6391c4194aecf1ac482dd7106a687eb50d4f40fdffabedf187794a0ec30a90b53f506c8dcbd1991959f03b12715c3b6e05d0125dcab69ba9a01bcc1e9b3f21c81f36cb74d2179e5c3a0c61f078c56b0ab67f720a231d933142a2804993aaca24562acbe44aa726ab0cf871050d47cf266c4958939fc2249296c064d84b8c77df08927186ed87189ef2b3a7484e1a96311dbd5ffd786198a68e0638e75f8368a7985ef41f52faf64f05e7e99ef8b057735539724f67ac802a53c3c4df629ec648a88f333d032cff8eaeb890b7aa76141a6f7eb582550de82c312a03764e5d5edda50253e361db5f6d0ff8d9f55149e159a85e604934578ac9ccc24f336104ce2d09b6108ae770fe28ac140c0d5781ce59e73e03eca00c5702ef6e253351d70dc7b36372fb3bb862185923dfb8e03f83de6c1ef7cefacc485b1058d3ff1c79a0782cc0bd19d10d21b73a7d40f09ab2ba7b170348cde0eecc22189f2a689dcd066e0a1d9724f8d7ed216a05447e38edff46fba83ac47362dc8275df6eff162689c3d8ef4e3592380ea8a58e9e4acaf98ede11cfd963907ae932de5d5c43776d328a2dfd9f6e128e1352f9b7a81d98b1b43cb73fc52d4edc42bc183e3ab885325ba1ade013e865360f972efe37fd88d7a33985ea5ec557e45c5db7b5ad2eaf3ef09a2965e05d9d55a151290ed77c3624ef82faf2449fe7e7e922f0910dff57cbba1599959ba1002834659bc41d53f58155a4f8a682d3ab23e1319ddefb998dae9ce3193482756c0071890b6e6891780604d0b13a7c1e4581381892507ee7f48d8b503d745aeacf2ebc77da28eb564511e9e25b8f2b4399428abca90803f342ecad2e1cdb2c93bae29b045fffbf94c11c8203bd4b0b86c0d6c9649aa4140778c9a33ea7583606960c7c2672a0e1e05b41849f93fb4d08fc2dd1beb4719d2989fcc1ae14dd44ab8b3ec7233f304dd518d267e8f99007c27ba5cf65f589f14bb862e61a5783241fc465774fa4993337f04458b7eaf683b3ba99c8a66783d68389f0a6abdbf7714c5c70735f116efdfb3935601e47796368cf25fc3f6761f626ff9ecc77e1ff11a78aee26ff0ada3006afbf3f1f5f0bd4f35d8052883960a37ff2cbda0e243bd385f0aab28ffa2e96a60fa1c8fc61cec6d783543cb2a30ee4b6fed6d3a9e3051dede9a4ee48116c55c031d5d723ae9dbd8f4249e8893a295c5c6b034ee3986c0a02b4876b36d0a5055b850146945c10c7cc9011e57a727523016bded435772046373f32ff12986a6cf4470ca81f5d9f2730c2ee678c8f56a00e69fbb9b15051051e061dd50c3c057227dc3467d8a16dab359a5760efb269a8eb921f3071f680c4f09a58d7397b4a082a39a7a9e1b28247977290f7fd1f1388495e7a0831a7393c25ebb9327e24f5dea18d08dec87ba56b11b745a341ac6db265586bbf8e1be6d775e6e278f5e71f7f9ee8b3cb83b7b71c5073cd9a4f2d3582b5390b50dd0f72f44a296d277186616e2c4796055ff883013b6a5d087a35a74d35d4f03be262421c542d34b565c17a8b1adbde69deac37a4f5c5d2c7dee92f6bad8bebfb60b93a4ebdb786bf845d477d51ddc0a8378a2b4fb53695c90915dc3e930a11f46fd8de9633cd119ae0e8db16ab0760af956fe34e8bc8775b817307525171c25cd583a889f65f8f5641a56aace51043de15308b94ae6090da8e043008c514895284b3cdf16618355bc0ef61fe79f81422fdbcf20785d753cd71ed8f5170f3dce64149f888eda3fec77aadf103d39ae319ac3ce4323853cd77f6ffc21f689e4eb6f3a5b05", 0x1000}, {&(0x7f0000003380)="e68e281ea32cb37c", 0x8}], 0x3, &(0x7f0000000740)=ANY=[], 0x368}, 0x24048005) (async) recvmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) (async) socket$kcm(0x18, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002280)) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) r3 = socket$kcm(0x2, 0x0, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x1, 0x4050, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x6aeedf3e}, 0x5025, 0x80, 0x0, 0x6, 0x1000000000000000, 0xa, 0x0, 0x0, 0xffffffff, 0x0, 0x100000008}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000004c0)={0x7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=r4, 0x4) (async) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x444, 0x8, 0x0, 0x0}}, 0x43) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003400)={0x15, 0x2000000000000216, &(0x7f00000034c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x7, 0xc, &(0x7f0000003600)=ANY=[], &(0x7f0000003640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000003680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.56199972s ago: executing program 2 (id=6134): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000003c0), 0x0) close(r0) syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r2, &(0x7f00000006c0)}, 0x31) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 5.87314396s ago: executing program 4 (id=6136): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)={[{0x2b, 'cpu'}]}, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=""/166}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x1500, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000500014002020a600e41b0000900ac00060211000000160012000a00ff110048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 5.715667656s ago: executing program 2 (id=6137): perf_event_open(0x0, 0x0, 0x100000100, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000180)=0x40) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x3, 0x0, &(0x7f0000001480)='GPL\x00', 0x5, 0xc3, &(0x7f00000014c0)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001600)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x58c8, 0x0, 0xfffbfffc, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001680)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0xcabb, 0x40}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={0x1, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x10000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000200000000000000000850000009e000000c30000000000000095"], &(0x7f0000000580)='GPL\x00', 0x5, 0xaf, &(0x7f00000005c0)=""/235}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000001800)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{r6}, &(0x7f00000019c0), &(0x7f0000001a00)=r3}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x30048001) 5.28927436s ago: executing program 4 (id=6139): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000006600816657bb97c9269de9aaec840ef402000000e3bd6efb0105000000000a00"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) close(r1) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000006600816657bb97c9269de9aaec840ef402000000e3bd6efb0105000000000a00"/46, 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x7) (async) close(r1) (async) 4.587596831s ago: executing program 3 (id=6141): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000780), 0x0, 0x0, &(0x7f00000007c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x3, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0], &(0x7f0000001440)='GPL\x00', 0x5, 0xc3, &(0x7f0000001480)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001580)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x541b, &(0x7f00000015c0)={'syzkaller1\x00', @remote}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10310, 0xc8, 0x2, 0x8, 0x0, 0x1, 0xa, 0x0, 0x800, 0x0, 0xfffffffffffffffd}, 0x0, 0x400040000000009, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r8}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x51b200, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r12, 0x0, 0xf9) sendmsg$kcm(r4, &(0x7f0000000b00)={0x0, 0x60, &(0x7f0000000b40)=[{&(0x7f0000002300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 4.20905353s ago: executing program 4 (id=6142): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000de55000000560000000400000002000000f00500000104000001000000000001000d000000040000000800000000000000050000000a0000000c00000004000000010000007109ffff020000000800000001000000ebf9000000005f003c9c71c387eec059388b15dc776427be83f83647b6bf5d9a159a5e317306faabda8ae0494210b539327586834fe0475672a270963c3c4b82265c1dfdf353fcf5b99c"], &(0x7f0000000380)=""/24, 0x74, 0x18, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x5, 0x0, r1, 0x7fff, '\x00', 0x0, r7, 0x4, 0x2, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x17, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9, 0xfff8, 0x2000000}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) syz_open_procfs$namespace(r4, &(0x7f00000000c0)='ns/net\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 4.20797984s ago: executing program 2 (id=6143): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0700000004000000180000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000280), 0x2a979d) write$cgroup_type(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.800221202s ago: executing program 3 (id=6144): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x0, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000002540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x400}, 0x10c002, 0x8001, 0x0, 0x0, 0x0, 0x7d80, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000025c0)={0x5, 0x3, &(0x7f0000002680)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000026c0)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000002700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002780)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002800)={{r4, 0xffffffffffffffff}, &(0x7f0000002840), &(0x7f0000002880)=r3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000028c0)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r5, 0xffffffffffffffff}, &(0x7f0000002940), &(0x7f0000002980)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000029c0)={r7, &(0x7f0000002a00)}, 0x20) sendmsg$kcm(r2, &(0x7f0000002a40)={&(0x7f0000002a80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0}, 0x106) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x5, 0x3, &(0x7f0000002bc0)=ANY=[], &(0x7f0000002c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002c40)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002cc0)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002d00)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002d40)={r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002dc0)={'wlan1\x00', @random="f7ffcc201000"}) recvmsg$kcm(r2, &(0x7f0000002e00)={0x0, 0x0, 0x0}, 0x100) r12 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r12, &(0x7f0000002e40)={&(0x7f0000002e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000002f00)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae8978"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x4) close(r1) 3.614465791s ago: executing program 4 (id=6145): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000ac0)='GPL\x00', 0x8, 0xba, &(0x7f0000000b00)=""/186, 0x0, 0x22}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40), &(0x7f0000000c80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00), &(0x7f0000000d40), 0x1000, r0, 0x0, 0x11000000}, 0x38) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x6, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.323109311s ago: executing program 3 (id=6146): socket$kcm(0x10, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x428200, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000180)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xff, 0x3, 0xf, 0x4, 0x0, 0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe64, 0x4, @perf_config_ext={0xc08b, 0x7f}, 0x110008, 0xffffffffffffffff, 0xff, 0x6, 0xf92, 0xe277, 0x6, 0x0, 0x6b, 0x0, 0xfb9}, r1, 0xf, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000003c0)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000480)="80005b020e", 0x5}, {0x0}, {&(0x7f00000004c0)="880bc39b19d0856ac3608318062fa23e0df4d2489275010586d3ba32d4163571ebdacde90f2a84870e304f84bc9272da3d88833edee58a41554e9331d4882e736320bd897883ddccce43c16260f83b0c439155f85f49ab59391f57b72a246a1cda9aec484b43027e", 0x68}, {&(0x7f0000000540)="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", 0x421}], 0x4, 0x0, 0x0, 0x900}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b009ca5beb1f0c130a500000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00@\x00'/14], 0x50) sendmsg$inet(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001880)) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r8, @ANYBLOB="0500fc00000000000000000000000000001fe6d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000400"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r6, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00), 0x0, 0x6a, &(0x7f0000000f40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000001000)}}, 0x5) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r11, 0x40305839, &(0x7f0000001280)=0x20000) r12 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001340)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r12, 0x84, 0x14, &(0x7f0000001400)=r14, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001480)={0x11, 0x1d, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000009000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018680000040000000000000066a1d37f182a0000", @ANYRES32=r8, @ANYBLOB="000000000700000018000000070000000000000007000008000000000000000000000000010000009b982000010000009952f0ff08000000bf91000000000000b7020000020000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000d40)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x18, '\x00', r10, 0x0, r11, 0x8, &(0x7f00000012c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001300)={0x0, 0x0, 0x351, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r7, 0xffffffffffffffff, r14, r7, r4, r4, r5], 0x0, 0x10, 0xe0}, 0x94) 2.34616948s ago: executing program 1 (id=6147): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8cda, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="c6", 0x1}], 0x1}, 0x40010) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2048045) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x64000800) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000004000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB="004000000000000001004000509c6143f055320d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000640), &(0x7f0000000680)=r2}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 2.233179232s ago: executing program 3 (id=6148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x1, 0x0, &(0x7f0000000540)={0x0, 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'tunl0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000680)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000600)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43) 1.377627809s ago: executing program 4 (id=6149): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0x2, &(0x7f0000000580), 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000007c0)=r1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r7, 0x12) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e120900040000000401a8000900200007400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x10}}], 0x48, 0x24004010}, 0x40800) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x0, 0x0, 0xa1, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000003c0)='\x88\',\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x38, 0x38, r4, @void, @void, @void, @value=r11, r10}, 0x20) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x81, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0xfe, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 1.16830267s ago: executing program 1 (id=6150): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x3}, 0x1a00, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000010c0)={0x0, 0x14, &(0x7f0000001100)=[{&(0x7f0000001140)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffffeffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 820.481906ms ago: executing program 3 (id=6151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x6}, 0x50) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000300)=r1, 0x8) close(r1) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000009c0)=r3, 0x8) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x8c, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401040016000a00104006001000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f4d360000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0xd18c9b25, &(0x7f00000001c0)=[{&(0x7f0000000280)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8902, &(0x7f0000000300)) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000380)="6cccbc1224711ff6d457e0fc", 0xc}, {&(0x7f0000000640)="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", 0xfe}, {&(0x7f0000000740)="48888ceff74ae6cc814cd39cb223e021be6e80b3ea3512d00875bfe4daa7055c1982e74fbdb8c8a2a49d21812482b639c1b22f895f2f4cd07df10de8cac8dc816b8a423e313ba6109eb9e1c583f8eddae3a224b8aff3362a23b30f22eb4d7b7061cbd877c63e851d794fe0e41fe0c14cac8f76e86d70c3b96ee2e1d6a5e4", 0x7e}, {&(0x7f00000007c0)="805e73920dfe24bbefaa7c898fc6c0733915b76fcd17d586524a154af16f1e7ab2c90574d4ff8850", 0x28}], 0x4, &(0x7f0000000840)="01756d42f7c8659681cde42f8492bfe87c682e594ecdb1935825de2a285b4f507b54940737017c51003d6c2ba51720b1d1c3d1a001243a4cab9873045370cba96e1f208c810afa11364a25f979eb38cebdb52e94db08ef02970588a0f1a8c486492757a600fd3905b8e6b627b65a27e61ec5573314", 0x75, 0x2000000}, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xd, 0x6, 0x4, 0x1, 0x4, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000540), &(0x7f0000000600)=r7}, 0x20) 375.365902ms ago: executing program 3 (id=6152): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xb9, &(0x7f0000000440)=[{}, {}], 0x10, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x3f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x68692c71c99740c8, 0x1d, &(0x7f00000005c0)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @call={0x85, 0x0, 0x0, 0x36}, @jmp={0x5, 0x1, 0x1, 0x5, 0x9, 0x20, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}, @ldst={0x3, 0x3, 0x1, 0x6, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}], &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000700)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000740), &(0x7f0000000780)=[{0x4, 0x4, 0x8, 0x3}, {0x4, 0x4, 0x10, 0xa}, {0x4, 0x3, 0x10}, {0x2, 0x1, 0x7, 0xc}], 0x10, 0xf4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x1000000, '\x00', r2, 0x0, 0x0, 0x3}, 0x50) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func={0x5, 0x0, 0x0, 0xc, 0x5}, @var={0xf, 0x0, 0x0, 0xe, 0x1}, @var={0x8, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x5f]}}, &(0x7f00000009c0)=""/215, 0x47, 0xd7, 0x0, 0x559}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000d10bb87409d3c7dc03412cdba5cfc97f7aaedb3b4a65974cac59c09870b54e586f789b704a910ff485925c4bee8f43d1f94af845d79cd6b3160bd2ece54861eb0c5492", @ANYRES32=r0, @ANYBLOB='\a\x00'/20, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="050000000400"/28], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000b8fb2600eaffe3ff0000000000000000000000000002b307528c289f048bd03c02c907db8320f3847e88a97d32b3b5c2f39b11"], 0x48) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000d00)=[{0x3, 0x3, 0x3}, {0x10008002, 0x3, 0x0, 0x9}]}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000ec0)='GPL\x00'}, 0x90) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) close(r7) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRES32=r3], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001640)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001680)) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) (rerun: 32) perf_event_open(&(0x7f0000001700)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2c00c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x1, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) (async, rerun: 64) recvmsg$unix(r6, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001800)=ANY=[@ANYBLOB="001000001a00911c01000000000041"], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x0, 0x20000000}, 0x8}, 0x94) (async) write$cgroup_subtree(r9, &(0x7f0000001940)=ANY=[@ANYRES8=r7, @ANYBLOB="3eca", @ANYRES8=r8], 0x9a) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f00)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="12000000040000000400000001", @ANYBLOB], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1e, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[r10], 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, &(0x7f00000012c0)="000000000000000002", 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001480)=[0x0], 0x0, 0x1d, &(0x7f00000014c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001500), &(0x7f0000001540), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) 284.121781ms ago: executing program 1 (id=6153): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000180100002020702500000000002020207b1af8ff00000000bfa100000400f0ffffffb702000005000000b70300000000000085000000cb0000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) close(r0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000180100002020702500000000002020207b1af8ff00000000bfa100000400f0ffffffb702000005000000b70300000000000085000000cb0000009500"/81], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 238.491265ms ago: executing program 4 (id=6154): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x49, &(0x7f0000000180), 0xcf) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x69, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10002) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=6155): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000001600)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001680)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000009c, 0x10}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000001840)='GPL\x00', 0x4}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001880)='memory.numa_stat\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x11, &(0x7f0000001dc0)=ANY=[@ANYBLOB="180000000000000000000000feffffff8500000075000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a7000000950000000000e522c89f4869c1790ea4ba21b0b562d270cabd2fa35582b3afaef957769bb071c2fe5f08b30cd705ddc923c5a181db031c7352e51fecaa3b2edd020000314bb1f18d9e869b4f09feeed00f3955cc4b53bb98e6bca7ca372200b9def8ad"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000015c0)={r7}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], &(0x7f00000019c0)=""/217, 0x35, 0xd9, 0x1}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r5) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001ac0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r4, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000001c40)=[0x0], &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000001cc0)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, 0x0, 0x0, 0x52, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d40)={@ifindex, 0xd, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$SIOCSIFHWADDR(r5, 0x8b0b, &(0x7f0000001d80)={'wlan1\x00', @random='\x00\x00 \x00'}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000180)=@hci={0x1f, 0xa888, 0x9}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)="27030200f00f00000600002fb9088965c7297a05a2019e6bafed88a839ffffffffe1053742e0e4650058f700000088", 0x2f}, {&(0x7f0000000300)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78becd1455755985051a9b55a7c5e6cb0a37cd9c92a4b8e06a53af164e81ae37d251ce1818e9e6973374feaab4d2422070084af233d99a2dd7106672e6520a5ab", 0x57}, {&(0x7f0000000400)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426", 0x67}, {&(0x7f0000000480)}, {&(0x7f0000000640)="e20650bb69f596a001a9396df3e895da88d97ebd178d47b9119f9232ea20b1637429669dc4d0c0cf864240df51aff34230940425976a91424886f7569ab0a0ed75f495341eee79791236e5437400cf79a8e84ed65e993f6897444bb5d86d94215b781ae9918681a67968825e9f5fed8e3cf996d276f78c75101b6e188cc3b29c44b07b85c76fe40f20727d081a440ce84ced2c1d50c6879b422b03412a20f6d2d4b9226a87c0fe4de731da5c6a6edb4972a2f3e7966db1e8ff048f5b61600611bbbc0905a9a9c23fa6db92243e178f7793e83e82ead265afe54086", 0xdb}, {&(0x7f0000000980)="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", 0xbed}], 0x6}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x4000040) kernel console output (not intermixed with test programs): 131] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1086.682595][T23139] netlink: 'syz.3.4517': attribute type 3 has an invalid length. [ 1086.690418][T23139] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4517'. [ 1086.790105][T23137] rxe_eth0 speed is unknown, defaulting to 1000 [ 1087.016035][T23148] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.4519'. [ 1087.081848][T23148] openvswitch: netlink: Key type 386 is out of range max 32 [ 1087.560956][T23165] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1088.331107][T23173] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4528'. [ 1089.189996][T23199] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4536'. [ 1090.548640][T23215] netlink: 'syz.2.4543': attribute type 1 has an invalid length. [ 1090.561726][T23215] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4543'. [ 1091.153499][T23238] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 1091.177518][T23238] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 1091.194640][T23238] netlink: 'syz.3.4547': attribute type 4 has an invalid length. [ 1091.207642][T23238] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1091.334017][T23238] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 1091.386367][T23243] netlink: 'syz.3.4547': attribute type 1 has an invalid length. [ 1091.401703][T23243] netlink: 'syz.3.4547': attribute type 4 has an invalid length. [ 1091.441675][T23243] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1091.945117][T23267] netlink: 'syz.2.4554': attribute type 2 has an invalid length. [ 1092.069457][T23267] device 0 entered promiscuous mode [ 1092.663888][T23292] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1094.552170][T23325] netlink: 'syz.4.4567': attribute type 1 has an invalid length. [ 1094.580563][T23325] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4567'. [ 1094.641369][T23331] netlink: 'syz.2.4569': attribute type 4 has an invalid length. [ 1094.680513][T23331] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1094.819930][T23331] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1098.398242][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.440478][T23369] device netdevsim0 entered promiscuous mode [ 1098.484250][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.537420][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.600991][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.670002][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.768775][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.822045][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.891918][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.932626][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1098.982527][T23369] netlink: 'syz.4.4576': attribute type 10 has an invalid length. [ 1101.205004][T23399] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1101.396469][T23399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1101.450902][T23399] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1101.482399][T23399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1101.513490][T23417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4591'. [ 1101.539378][T23399] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1101.595111][T23399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1101.654872][T23399] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1101.717553][T23399] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1101.779243][T23418] rxe_eth0 speed is unknown, defaulting to 1000 [ 1102.501651][T23429] device syzkaller0 entered promiscuous mode [ 1106.069197][T23450] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4598'. [ 1107.004204][T23459] delete_channel: no stack [ 1108.090214][T23489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1108.375405][T23489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1108.427938][T23504] validate_nla: 28 callbacks suppressed [ 1108.427983][T23504] netlink: 'syz.0.4612': attribute type 12 has an invalid length. [ 1108.454934][T23504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1108.479344][T23488] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1108.514541][T23504] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1108.638627][T23506] can: request_module (can-proto-0) failed. [ 1108.865802][T23512] netlink: 'syz.4.4613': attribute type 21 has an invalid length. [ 1109.137386][T23524] netlink: 'syz.0.4616': attribute type 21 has an invalid length. [ 1109.153595][T23524] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4616'. [ 1109.171863][T23524] netlink: 'syz.0.4616': attribute type 4 has an invalid length. [ 1109.917545][T23543] netlink: 'syz.0.4625': attribute type 3 has an invalid length. [ 1109.974137][T23551] netlink: 'syz.0.4625': attribute type 10 has an invalid length. [ 1110.005067][T23551] wlan1: mtu less than device minimum [ 1110.010516][T23551] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 1110.064746][T23549] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1111.240701][T23577] netlink: 'syz.0.4631': attribute type 21 has an invalid length. [ 1111.283128][T23577] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1111.299956][T23576] netlink: 131088 bytes leftover after parsing attributes in process `syz.3.4632'. [ 1111.310298][T23577] netlink: 'syz.0.4631': attribute type 4 has an invalid length. [ 1111.400621][T23580] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4634'. [ 1111.463527][T23580] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1111.503528][T23580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1115.170949][T23617] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 1115.191753][T23617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4644'. [ 1115.230359][T23619] netlink: 'syz.0.4644': attribute type 21 has an invalid length. [ 1115.248622][T23619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4644'. [ 1115.480684][T23637] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4645'. [ 1115.497334][T23623] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4646'. [ 1115.520591][T23632] netlink: 'syz.1.4645': attribute type 12 has an invalid length. [ 1115.585369][T23632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4645'. [ 1115.700168][T23614] can: request_module (can-proto-0) failed. [ 1117.010141][T23664] netlink: 'syz.4.4653': attribute type 21 has an invalid length. [ 1118.144207][T23656] netlink: 'syz.3.4651': attribute type 21 has an invalid length. [ 1118.152775][T23665] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4653'. [ 1118.737011][T23686] netlink: 'syz.2.4660': attribute type 12 has an invalid length. [ 1118.746649][T23686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1118.859281][T23683] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.4659'. [ 1118.887893][T23686] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1119.057145][T23691] can: request_module (can-proto-0) failed. [ 1119.724166][T23716] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4665'. [ 1120.296374][T23736] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4670'. [ 1120.329262][T23736] openvswitch: netlink: Flow key attr not present in new flow. [ 1120.539455][T23739] netlink: 'syz.3.4670': attribute type 21 has an invalid length. [ 1120.562291][T23739] netlink: 'syz.3.4670': attribute type 6 has an invalid length. [ 1120.570145][T23739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4670'. [ 1122.134341][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.140831][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.307856][T23755] netlink: 'syz.0.4683': attribute type 4 has an invalid length. [ 1122.411711][T23755] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4683'. [ 1122.544683][T23755] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1122.564481][T23761] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1122.619832][T23758] netlink: 'syz.3.4673': attribute type 12 has an invalid length. [ 1122.661695][T23758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4673'. [ 1122.729613][T23758] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4673'. [ 1122.897347][T23758] can: request_module (can-proto-0) failed. [ 1123.446484][T23792] rxe_eth0 speed is unknown, defaulting to 1000 [ 1123.522876][T23811] netlink: 'syz.3.4684': attribute type 2 has an invalid length. [ 1123.570904][T23811] netlink: 'syz.3.4684': attribute type 3 has an invalid length. [ 1123.609815][T23811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1123.677291][T23808] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1124.132851][T23808] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.189746][T23808] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.246928][T23808] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1124.263162][T23808] bond0 (unregistering): Released all slaves [ 1124.974333][T23852] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1125.604221][T23869] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4700'. [ 1125.625998][T23869] device hsr_slave_0 left promiscuous mode [ 1125.938149][T23881] netlink: 'syz.3.4704': attribute type 10 has an invalid length. [ 1125.947039][T23881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4704'. [ 1126.225564][T23894] netlink: 'syz.1.4706': attribute type 2 has an invalid length. [ 1126.242835][T23894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4706'. [ 1127.384690][T23911] netlink: 'syz.1.4711': attribute type 21 has an invalid length. [ 1127.416287][T23911] netlink: 'syz.1.4711': attribute type 2 has an invalid length. [ 1127.456088][T23911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4711'. [ 1129.676478][T23933] netlink: 'syz.3.4718': attribute type 21 has an invalid length. [ 1129.685095][T23933] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4718'. [ 1129.759056][T23935] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1129.827788][T23935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1129.871589][T23935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1129.902167][T23937] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1130.213656][T23952] netlink: 'syz.0.4723': attribute type 29 has an invalid length. [ 1130.242196][T23954] netlink: 'syz.0.4723': attribute type 29 has an invalid length. [ 1130.270952][T23952] netlink: 'syz.0.4723': attribute type 29 has an invalid length. [ 1130.326494][T23959] netlink: 'syz.0.4723': attribute type 29 has an invalid length. [ 1130.379948][T23962] netlink: 'syz.0.4723': attribute type 29 has an invalid length. [ 1133.366769][T23984] device pim6reg1 entered promiscuous mode [ 1133.685705][T23989] validate_nla: 2 callbacks suppressed [ 1133.685742][T23989] netlink: 'syz.3.4729': attribute type 10 has an invalid length. [ 1133.995815][T23989] device team_slave_0 left promiscuous mode [ 1134.288678][T23989] team0 (unregistering): Port device team_slave_0 removed [ 1134.333512][T23989] device team_slave_1 left promiscuous mode [ 1134.424292][T23989] team0 (unregistering): Port device team_slave_1 removed [ 1135.239774][T24033] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.4738'. [ 1135.303318][T24033] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1135.344559][T24033] CPU: 1 PID: 24033 Comm: syz.1.4738 Not tainted syzkaller #0 [ 1135.352110][T24033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1135.362221][T24033] Call Trace: [ 1135.365552][T24033] [ 1135.368532][T24033] dump_stack_lvl+0x188/0x24e [ 1135.373272][T24033] ? show_regs_print_info+0x12/0x12 [ 1135.378530][T24033] ? load_image+0x410/0x410 [ 1135.383127][T24033] sysfs_warn_dup+0x8a/0xa0 [ 1135.387695][T24033] sysfs_do_create_link_sd+0xc0/0x110 [ 1135.393127][T24033] device_add+0x83b/0x1050 [ 1135.397633][T24033] wiphy_register+0x1d8b/0x2aa0 [ 1135.402618][T24033] ? cfg80211_event_work+0x40/0x40 [ 1135.407800][T24033] ? minstrel_ht_alloc+0x894/0xa20 [ 1135.412989][T24033] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1135.419124][T24033] ieee80211_register_hw+0x2e33/0x3b00 [ 1135.424695][T24033] ? ieee80211_register_hw+0xf01/0x3b00 [ 1135.430317][T24033] ? ieee80211_register_hw+0xf01/0x3b00 [ 1135.435952][T24033] ? ieee80211_tasklet_handler+0x20/0x20 [ 1135.441657][T24033] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1135.447635][T24033] ? __debug_object_init+0xed/0x440 [ 1135.452897][T24033] ? memset+0x1e/0x40 [ 1135.456930][T24033] ? __hrtimer_init+0x189/0x270 [ 1135.461837][T24033] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1135.467685][T24033] ? memcpy+0x3c/0x60 [ 1135.471723][T24033] hwsim_new_radio_nl+0xab7/0xc90 [ 1135.476827][T24033] genl_family_rcv_msg_doit+0x22f/0x350 [ 1135.482431][T24033] ? end_current_label_crit_section+0x170/0x170 [ 1135.488777][T24033] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1135.494734][T24033] ? bpf_lsm_capable+0x5/0x10 [ 1135.499638][T24033] ? security_capable+0x85/0xb0 [ 1135.504564][T24033] genl_rcv_msg+0x601/0x790 [ 1135.509139][T24033] ? genl_bind+0x360/0x360 [ 1135.513608][T24033] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1135.520008][T24033] netlink_rcv_skb+0x1ef/0x440 [ 1135.524835][T24033] ? genl_bind+0x360/0x360 [ 1135.529307][T24033] ? netlink_ack+0x1160/0x1160 [ 1135.534159][T24033] ? down_read+0x1a8/0x2d0 [ 1135.538639][T24033] genl_rcv+0x24/0x40 [ 1135.542667][T24033] netlink_unicast+0x7ad/0x920 [ 1135.547506][T24033] netlink_sendmsg+0x8ad/0xbd0 [ 1135.552357][T24033] ? netlink_getsockopt+0x550/0x550 [ 1135.557626][T24033] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1135.563260][T24033] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1135.568606][T24033] ? security_socket_sendmsg+0x7c/0xa0 [ 1135.574140][T24033] ? netlink_getsockopt+0x550/0x550 [ 1135.579422][T24033] ____sys_sendmsg+0x5ed/0x9a0 [ 1135.584277][T24033] ? __sys_sendmsg_sock+0x30/0x30 [ 1135.589368][T24033] ? __import_iovec+0x306/0x510 [ 1135.594322][T24033] ? import_iovec+0x6f/0xa0 [ 1135.598899][T24033] ___sys_sendmsg+0x2a2/0x360 [ 1135.603644][T24033] ? __sys_sendmsg+0x2a0/0x2a0 [ 1135.608555][T24033] __se_sys_sendmsg+0x1c3/0x2b0 [ 1135.613492][T24033] ? __x64_sys_sendmsg+0x80/0x80 [ 1135.618517][T24033] ? lockdep_hardirqs_on+0x94/0x140 [ 1135.623783][T24033] do_syscall_64+0x4c/0xa0 [ 1135.628250][T24033] ? clear_bhb_loop+0x60/0xb0 [ 1135.632982][T24033] ? clear_bhb_loop+0x60/0xb0 [ 1135.637714][T24033] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1135.643680][T24033] RIP: 0033:0x7fb18c59f559 [ 1135.648143][T24033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.667806][T24033] RSP: 002b:00007fb18a7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1135.676272][T24033] RAX: ffffffffffffffda RBX: 00007fb18c826090 RCX: 00007fb18c59f559 [ 1135.684277][T24033] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1135.692281][T24033] RBP: 00007fb18c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1135.700289][T24033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1135.708296][T24033] R13: 00007fb18c826128 R14: 00007fb18c826090 R15: 00007ffe4ed38328 [ 1135.716320][T24033] [ 1136.544188][T24041] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.4739'. [ 1136.558005][T24041] openvswitch: netlink: Flow actions attr not present in new flow. [ 1138.106863][T24051] netlink: 'syz.0.4742': attribute type 3 has an invalid length. [ 1138.147267][T24048] netlink: 'syz.0.4742': attribute type 3 has an invalid length. [ 1138.165852][T24048] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4742'. [ 1138.190351][T24051] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4742'. [ 1140.969969][T24092] netlink: 'syz.2.4750': attribute type 10 has an invalid length. [ 1141.194633][T24092] device veth0_vlan left promiscuous mode [ 1141.295527][T24092] device veth0_vlan entered promiscuous mode [ 1141.353453][T24092] team0: Device veth0_vlan failed to register rx_handler [ 1142.397679][T24106] netlink: 'syz.4.4756': attribute type 7 has an invalid length. [ 1142.497298][T24106] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4756'. [ 1143.584295][T24118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4758'. [ 1144.062072][T24137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4763'. [ 1146.557418][T24167] netlink: 'syz.1.4770': attribute type 2 has an invalid length. [ 1146.613191][T24167] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.4770'. [ 1147.030208][T24181] delete_channel: no stack [ 1147.942757][T24209] netlink: 'syz.1.4779': attribute type 10 has an invalid length. [ 1148.547891][T24216] delete_channel: no stack [ 1148.827765][T24238] netlink: 'syz.0.4785': attribute type 3 has an invalid length. [ 1148.877600][T24238] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4785'. [ 1150.669473][T24287] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.4796'. [ 1151.590579][T24304] netlink: 'syz.4.4798': attribute type 12 has an invalid length. [ 1151.615915][T24304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1151.822741][T24303] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1152.033265][T24304] can: request_module (can-proto-0) failed. [ 1153.484876][T24356] netlink: 'syz.0.4810': attribute type 10 has an invalid length. [ 1153.502269][T24356] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1153.605978][T24356] bridge0: port 4(veth0_vlan) entered blocking state [ 1153.633080][T24356] bridge0: port 4(veth0_vlan) entered disabled state [ 1153.742930][T24356] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1153.767495][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1153.792730][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1153.830617][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.446641][T24374] netlink: 'syz.2.4818': attribute type 10 has an invalid length. [ 1154.557617][T24374] team0: Device vxcan1 is of different type [ 1154.608043][T24385] netlink: 'syz.0.4819': attribute type 2 has an invalid length. [ 1154.658764][T24385] netlink: 199540 bytes leftover after parsing attributes in process `syz.0.4819'. [ 1155.268082][T24404] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.4829'. [ 1155.389715][T24404] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.4829'. [ 1155.404494][T24404] netlink: 'syz.3.4829': attribute type 7 has an invalid length. [ 1155.416969][T24404] netlink: 'syz.3.4829': attribute type 30 has an invalid length. [ 1157.929792][T24446] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.4837'. [ 1158.731575][T24472] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4842'. [ 1159.058387][T24482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1159.183055][T24482] netlink: 3529 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1159.209665][T24482] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1159.243843][T24482] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1159.528747][T24513] device wlan1 entered promiscuous mode [ 1159.573855][T24504] netlink: 'syz.3.4852': attribute type 3 has an invalid length. [ 1159.663012][T24504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1159.880949][T24504] netlink: 'syz.3.4852': attribute type 3 has an invalid length. [ 1159.894537][T24504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1159.916029][T24504] netlink: 'syz.3.4852': attribute type 3 has an invalid length. [ 1159.939285][T24504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1160.053798][T24504] netlink: 'syz.3.4852': attribute type 3 has an invalid length. [ 1160.090402][T24504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1160.175636][T24504] netlink: 'syz.3.4852': attribute type 3 has an invalid length. [ 1160.201597][T24504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1160.254346][T24504] netlink: 'syz.3.4852': attribute type 3 has an invalid length. [ 1160.297618][T24504] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1160.396779][T24537] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4857'. [ 1160.514985][T24540] netlink: 'syz.0.4860': attribute type 21 has an invalid length. [ 1160.551160][T24541] netlink: 'syz.2.4859': attribute type 3 has an invalid length. [ 1160.551279][T24541] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1160.912484][T24550] netlink: 'syz.3.4861': attribute type 2 has an invalid length. [ 1160.930590][T24550] netlink: 'syz.3.4861': attribute type 8 has an invalid length. [ 1160.956210][T24550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4861'. [ 1161.189279][T24560] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4865'. [ 1161.376153][T24538] delete_channel: no stack [ 1163.856201][T24620] can: request_module (can-proto-0) failed. [ 1164.127623][T24633] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1164.140795][T24633] CPU: 1 PID: 24633 Comm: syz.1.4885 Not tainted syzkaller #0 [ 1164.148374][T24633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1164.158513][T24633] Call Trace: [ 1164.161838][T24633] [ 1164.164809][T24633] dump_stack_lvl+0x188/0x24e [ 1164.169545][T24633] ? show_regs_print_info+0x12/0x12 [ 1164.174793][T24633] ? load_image+0x410/0x410 [ 1164.179371][T24633] sysfs_warn_dup+0x8a/0xa0 [ 1164.183941][T24633] sysfs_do_create_link_sd+0xc0/0x110 [ 1164.189380][T24633] device_add+0x83b/0x1050 [ 1164.193864][T24633] wiphy_register+0x1d8b/0x2aa0 [ 1164.198806][T24633] ? cfg80211_event_work+0x40/0x40 [ 1164.204005][T24633] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1164.210234][T24633] ieee80211_register_hw+0x2e33/0x3b00 [ 1164.215785][T24633] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1164.222015][T24633] ? ieee80211_register_hw+0xf01/0x3b00 [ 1164.227623][T24633] ? ieee80211_register_hw+0xf01/0x3b00 [ 1164.233256][T24633] ? ieee80211_tasklet_handler+0x20/0x20 [ 1164.238951][T24633] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1164.244915][T24633] ? __debug_object_init+0xed/0x440 [ 1164.250178][T24633] ? memset+0x1e/0x40 [ 1164.254223][T24633] ? __hrtimer_init+0x189/0x270 [ 1164.259176][T24633] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1164.264958][T24633] ? memcpy+0x3c/0x60 [ 1164.268987][T24633] hwsim_new_radio_nl+0xab7/0xc90 [ 1164.274084][T24633] genl_family_rcv_msg_doit+0x22f/0x350 [ 1164.279692][T24633] ? end_current_label_crit_section+0x170/0x170 [ 1164.285998][T24633] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1164.291953][T24633] ? bpf_lsm_capable+0x5/0x10 [ 1164.296703][T24633] ? security_capable+0x85/0xb0 [ 1164.301620][T24633] genl_rcv_msg+0x601/0x790 [ 1164.306210][T24633] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1164.312438][T24633] ? genl_bind+0x360/0x360 [ 1164.316905][T24633] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1164.323315][T24633] netlink_rcv_skb+0x1ef/0x440 [ 1164.328149][T24633] ? genl_bind+0x360/0x360 [ 1164.332621][T24633] ? netlink_ack+0x1160/0x1160 [ 1164.337465][T24633] ? down_read+0x1a8/0x2d0 [ 1164.341937][T24633] genl_rcv+0x24/0x40 [ 1164.345965][T24633] netlink_unicast+0x7ad/0x920 [ 1164.350792][T24633] netlink_sendmsg+0x8ad/0xbd0 [ 1164.355629][T24633] ? aa_sock_msg_perm+0x94/0x150 [ 1164.360625][T24633] ? netlink_getsockopt+0x550/0x550 [ 1164.365890][T24633] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1164.371511][T24633] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1164.376852][T24633] ? security_socket_sendmsg+0x7c/0xa0 [ 1164.382383][T24633] ? netlink_getsockopt+0x550/0x550 [ 1164.387643][T24633] ____sys_sendmsg+0x5ed/0x9a0 [ 1164.392472][T24633] ? __import_iovec+0x3f9/0x510 [ 1164.397379][T24633] ? __sys_sendmsg_sock+0x30/0x30 [ 1164.402466][T24633] ? import_iovec+0x6f/0xa0 [ 1164.407088][T24633] ___sys_sendmsg+0x2a2/0x360 [ 1164.411832][T24633] ? __sys_sendmsg+0x2a0/0x2a0 [ 1164.416733][T24633] __se_sys_sendmsg+0x1c3/0x2b0 [ 1164.421637][T24633] ? perf_trace_preemptirq_template+0x268/0x320 [ 1164.427944][T24633] ? __x64_sys_sendmsg+0x80/0x80 [ 1164.432963][T24633] ? lockdep_hardirqs_on+0x94/0x140 [ 1164.438225][T24633] do_syscall_64+0x4c/0xa0 [ 1164.442687][T24633] ? clear_bhb_loop+0x60/0xb0 [ 1164.447410][T24633] ? clear_bhb_loop+0x60/0xb0 [ 1164.452139][T24633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1164.458115][T24633] RIP: 0033:0x7fb18c59f559 [ 1164.462572][T24633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.482227][T24633] RSP: 002b:00007fb18d38b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1164.490897][T24633] RAX: ffffffffffffffda RBX: 00007fb18c825fa0 RCX: 00007fb18c59f559 [ 1164.498923][T24633] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 1164.506944][T24633] RBP: 00007fb18c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 1164.514964][T24633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.522985][T24633] R13: 00007fb18c826038 R14: 00007fb18c825fa0 R15: 00007ffe4ed38328 [ 1164.531028][T24633] [ 1164.773505][T24644] tun1: tun_chr_ioctl cmd 1074025675 [ 1164.831677][T24644] tun1: persist enabled [ 1164.844293][T24644] tun1: tun_chr_ioctl cmd 1074025675 [ 1164.860372][T24644] tun1: persist enabled [ 1165.119884][T24660] validate_nla: 10 callbacks suppressed [ 1165.119904][T24660] netlink: 'syz.2.4893': attribute type 10 has an invalid length. [ 1165.314599][T24660] __nla_validate_parse: 2 callbacks suppressed [ 1165.314619][T24660] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1165.386468][T24660] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1165.427177][T24660] device hsr0 entered promiscuous mode [ 1165.453565][T24660] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1165.489580][T24655] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1165.600784][T24655] team0: Port device team_slave_0 removed [ 1165.612121][T24655] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1165.770476][T24673] netlink: 'syz.1.4896': attribute type 39 has an invalid length. [ 1166.656865][T24682] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4897'. [ 1166.666701][T24685] netlink: 'syz.0.4897': attribute type 21 has an invalid length. [ 1166.676900][T24687] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4897'. [ 1166.702233][T24687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1166.743721][T24687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1166.861638][T24686] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4899'. [ 1167.566245][T24728] netlink: 'syz.3.4909': attribute type 12 has an invalid length. [ 1167.603996][T24728] netlink: 'syz.3.4909': attribute type 15 has an invalid length. [ 1167.977284][T24753] -1Ï2y: renamed from syzkaller0 [ 1169.085575][T24781] netlink: 'syz.2.4920': attribute type 3 has an invalid length. [ 1169.176897][T24781] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4920'. [ 1170.107732][T24822] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1170.151330][T24819] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1170.158218][T24822] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.4930'. [ 1170.695998][T24828] rxe_eth0 speed is unknown, defaulting to 1000 [ 1172.844469][T24870] netlink: 26 bytes leftover after parsing attributes in process `syz.1.4939'. [ 1173.484248][T24893] tap0: tun_chr_ioctl cmd 1074025673 [ 1173.535520][T24894] tap0: tun_chr_ioctl cmd 2147767511 [ 1173.597535][T24891] tap0: tun_chr_ioctl cmd 2147767511 [ 1174.702167][T24911] netlink: 'syz.4.4950': attribute type 15 has an invalid length. [ 1174.710381][T24911] netlink: 'syz.4.4950': attribute type 7 has an invalid length. [ 1174.841472][T24911] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4950'. [ 1178.238064][T24948] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4961'. [ 1178.342355][T24953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.349891][T24953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.463945][T24953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.504826][T24953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.832777][T24948] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1179.220922][T24967] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1180.001757][T24989] netlink: 130181 bytes leftover after parsing attributes in process `syz.1.4971'. [ 1180.266060][T24997] device syzkaller0 entered promiscuous mode [ 1180.374107][T25006] netlink: 'syz.4.4976': attribute type 10 has an invalid length. [ 1180.858669][T25008] netlink: 'syz.4.4976': attribute type 3 has an invalid length. [ 1180.891657][T25008] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4976'. [ 1181.456895][T25006] team0: Device gre0 is of different type [ 1181.579720][T25019] netlink: 'syz.3.4977': attribute type 3 has an invalid length. [ 1181.591645][T25019] netlink: 'syz.3.4977': attribute type 153 has an invalid length. [ 1181.641517][T25019] netlink: 85736 bytes leftover after parsing attributes in process `syz.3.4977'. [ 1181.786720][T25020] netlink: 'syz.3.4977': attribute type 3 has an invalid length. [ 1181.828257][T25020] netlink: 'syz.3.4977': attribute type 153 has an invalid length. [ 1181.881552][T25020] netlink: 85736 bytes leftover after parsing attributes in process `syz.3.4977'. [ 1182.125993][T16142] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10 [ 1182.315559][T25061] netlink: 'syz.0.4989': attribute type 29 has an invalid length. [ 1182.963361][T25082] netlink: 'syz.0.4995': attribute type 10 has an invalid length. [ 1183.155845][T25082] team0: Port device geneve1 added [ 1183.580938][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.587369][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.675823][T25097] netlink: 'syz.1.5001': attribute type 39 has an invalid length. [ 1184.135512][ T4274] Bluetooth: hci5: command 0x0409 tx timeout [ 1184.687913][T25130] netlink: 'syz.4.5010': attribute type 21 has an invalid length. [ 1184.708512][T25130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1186.298840][T25143] rxe_eth0 speed is unknown, defaulting to 1000 [ 1186.565416][T25152] netlink: 'syz.1.5014': attribute type 10 has an invalid length. [ 1186.686010][T25153] netlink: 'syz.1.5014': attribute type 10 has an invalid length. [ 1186.768558][T25160] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5016'. [ 1186.813031][T25153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1186.826663][T25170] netlink: 'syz.2.5017': attribute type 1 has an invalid length. [ 1186.835075][T25153] device bond0 entered promiscuous mode [ 1186.841921][T25170] netlink: 'syz.2.5017': attribute type 3 has an invalid length. [ 1186.849715][T25170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5017'. [ 1186.862679][T25153] device bond_slave_0 entered promiscuous mode [ 1186.869097][T25153] device bond_slave_1 entered promiscuous mode [ 1186.876667][T25153] device bridge_slave_1 entered promiscuous mode [ 1186.896923][T25153] team0: Port device bond0 added [ 1186.960659][T25160] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1187.426722][T25180] netlink: 'syz.2.5018': attribute type 1 has an invalid length. [ 1187.445495][T25180] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.5018'. [ 1188.225963][T25216] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.5030'. [ 1190.930694][T25225] netlink: 'syz.3.5032': attribute type 58 has an invalid length. [ 1190.939723][T25225] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5032'. [ 1190.950941][T25216] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1190.961220][T25216] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1190.971215][T25216] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1190.980324][T25229] netlink: 'syz.3.5032': attribute type 10 has an invalid length. [ 1190.989128][T25229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5032'. [ 1191.002738][T25229] device veth1_to_team entered promiscuous mode [ 1191.020742][T25229] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 1191.061747][T25236] netlink: 'syz.2.5034': attribute type 21 has an invalid length. [ 1191.105530][T25238] rxe_eth0 speed is unknown, defaulting to 1000 [ 1191.336342][T25247] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5035'. [ 1191.450467][T25247] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1192.113320][T25263] netlink: 'syz.0.5041': attribute type 1 has an invalid length. [ 1192.122231][T25263] netlink: 'syz.0.5041': attribute type 3 has an invalid length. [ 1192.130208][T25263] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5041'. [ 1193.166748][T25290] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5046'. [ 1193.397529][T25283] rxe_eth0 speed is unknown, defaulting to 1000 [ 1193.434783][T25297] netlink: 'syz.0.5049': attribute type 21 has an invalid length. [ 1193.970822][T25309] netlink: 'syz.0.5053': attribute type 39 has an invalid length. [ 1194.026629][T25309] device macvlan0 entered promiscuous mode [ 1194.207165][T25323] netlink: 'syz.1.5056': attribute type 29 has an invalid length. [ 1194.220425][T25323] netlink: 'syz.1.5056': attribute type 29 has an invalid length. [ 1194.229353][T25326] netlink: 'syz.1.5056': attribute type 29 has an invalid length. [ 1194.306760][T25325] netlink: 'syz.1.5056': attribute type 29 has an invalid length. [ 1194.323374][T25324] netlink: 'syz.1.5056': attribute type 29 has an invalid length. [ 1194.344287][T25325] netlink: 'syz.1.5056': attribute type 29 has an invalid length. [ 1194.388488][T25340] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5058'. [ 1194.441560][T25340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1196.097693][T25375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5065'. [ 1196.468119][T25377] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5067'. [ 1198.973385][T25387] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5068'. [ 1198.975519][T25391] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1198.991715][T25394] validate_nla: 3 callbacks suppressed [ 1198.991764][T25394] netlink: 'syz.3.5068': attribute type 10 has an invalid length. [ 1199.011730][T25394] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5068'. [ 1199.030499][T25391] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1199.041589][T25391] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1199.486433][T25416] netlink: 'syz.0.5073': attribute type 2 has an invalid length. [ 1199.521869][T25425] netlink: 'syz.3.5076': attribute type 2 has an invalid length. [ 1199.545197][T25416] netlink: 'syz.0.5073': attribute type 1 has an invalid length. [ 1199.553550][T25416] netlink: 159248 bytes leftover after parsing attributes in process `syz.0.5073'. [ 1199.572201][T25425] netlink: 119 bytes leftover after parsing attributes in process `syz.3.5076'. [ 1199.921169][T25436] netlink: 'syz.1.5079': attribute type 10 has an invalid length. [ 1199.958197][T25438] netlink: 'syz.2.5078': attribute type 2 has an invalid length. [ 1199.963453][T25436] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5079'. [ 1200.258657][T25439] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5079'. [ 1200.622138][T25439] device team_slave_0 left promiscuous mode [ 1200.652482][T25439] team0: Port device team_slave_0 removed [ 1201.047786][T25465] netlink: 'syz.0.5084': attribute type 23 has an invalid length. [ 1201.118071][ T4274] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 1201.415652][T25473] netlink: 'syz.4.5085': attribute type 3 has an invalid length. [ 1201.506818][T25473] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5085'. [ 1201.615669][T25476] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.5087'. [ 1201.672927][T25476] netlink: zone id is out of range [ 1201.678172][T25476] netlink: zone id is out of range [ 1201.731533][T25476] netlink: zone id is out of range [ 1201.736843][T25476] netlink: get zone limit has 8 unknown bytes [ 1201.891491][T25488] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5090'. [ 1201.922422][T25488] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1202.076722][T25491] netlink: 'syz.1.5091': attribute type 2 has an invalid length. [ 1202.088453][T25491] netlink: 'syz.1.5091': attribute type 8 has an invalid length. [ 1202.096616][T25491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5091'. [ 1202.112475][T25491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5091'. [ 1202.343628][T25496] TCP: TCP_TX_DELAY enabled [ 1203.093701][T25528] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.5100'. [ 1203.156525][T25528] tun2: tun_chr_ioctl cmd 1074025675 [ 1203.175523][T25528] tun2: persist enabled [ 1203.185954][T25528] tun2: tun_chr_ioctl cmd 1074025675 [ 1203.191308][T25528] tun2: persist enabled [ 1204.145007][T25564] validate_nla: 2 callbacks suppressed [ 1204.145046][T25564] netlink: 'syz.1.5108': attribute type 10 has an invalid length. [ 1204.234944][T25566] netlink: 14207 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1204.818870][T25564] device gre0 entered promiscuous mode [ 1204.854644][T25564] team0: Device gre0 is of different type [ 1205.160493][T25569] netlink: 'syz.4.5109': attribute type 10 has an invalid length. [ 1205.171608][T25566] netlink: 'syz.4.5109': attribute type 10 has an invalid length. [ 1205.358843][T25567] rxe_eth0 speed is unknown, defaulting to 1000 [ 1205.420583][T25589] netlink: 'syz.4.5115': attribute type 1 has an invalid length. [ 1205.461924][T25592] netlink: 'syz.4.5115': attribute type 29 has an invalid length. [ 1205.470140][T25592] netlink: 'syz.4.5115': attribute type 29 has an invalid length. [ 1205.505142][T25589] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5115'. [ 1205.540235][T25594] netlink: 'syz.2.5116': attribute type 19 has an invalid length. [ 1207.329870][T25648] netlink: 'syz.4.5127': attribute type 11 has an invalid length. [ 1207.364871][T25648] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5127'. [ 1207.393938][T25638] netlink: 'syz.2.5128': attribute type 21 has an invalid length. [ 1207.403119][T25638] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1207.421984][T25638] netlink: 'syz.2.5128': attribute type 4 has an invalid length. [ 1207.429980][T25638] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5128'. [ 1209.654586][T25686] validate_nla: 1 callbacks suppressed [ 1209.654606][T25686] netlink: 'syz.4.5138': attribute type 16 has an invalid length. [ 1209.668595][T25686] netlink: 'syz.4.5138': attribute type 3 has an invalid length. [ 1209.680017][T25686] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5138'. [ 1209.886869][T25697] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5140'. [ 1210.857959][T25715] netlink: 'syz.3.5144': attribute type 6 has an invalid length. [ 1210.878469][T25715] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5144'. [ 1211.113448][T25727] netlink: 'syz.0.5146': attribute type 10 has an invalid length. [ 1211.157156][T25727] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5146'. [ 1211.890629][T25723] netlink: 'syz.2.5149': attribute type 3 has an invalid length. [ 1211.900184][T25723] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5149'. [ 1212.069269][T25751] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5152'. [ 1212.775037][T25771] netlink: 'syz.4.5160': attribute type 10 has an invalid length. [ 1213.372984][T25796] netlink: 'syz.1.5167': attribute type 10 has an invalid length. [ 1213.425925][T25796] device wg1 entered promiscuous mode [ 1213.441200][T25796] team0: Device wg1 is of different type [ 1213.772996][T25818] netlink: 'syz.3.5174': attribute type 17 has an invalid length. [ 1213.801999][T25818] netlink: 'syz.3.5174': attribute type 16 has an invalid length. [ 1213.809917][T25818] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5174'. [ 1214.009716][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5173'. [ 1218.374465][T25875] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.5187'. [ 1218.401948][T25878] tun0: tun_chr_ioctl cmd 1074025675 [ 1218.407324][T25878] tun0: persist enabled [ 1218.421266][T25879] tun0: tun_chr_ioctl cmd 1074025675 [ 1218.452698][T25879] tun0: persist enabled [ 1218.614978][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.630272][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.640685][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.671802][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.692774][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.713246][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.737503][T25887] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5191'. [ 1218.949304][T25902] netlink: 'syz.3.5194': attribute type 12 has an invalid length. [ 1218.957905][T25902] __nla_validate_parse: 26 callbacks suppressed [ 1218.957940][T25902] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1218.984983][T25902] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.5194'. [ 1219.057882][T25909] netlink: 'syz.0.5197': attribute type 10 has an invalid length. [ 1219.147325][T25902] can: request_module (can-proto-0) failed. [ 1219.214442][T25909] team0: Device wg1 is of different type [ 1219.293709][T25913] netlink: 'syz.0.5197': attribute type 21 has an invalid length. [ 1219.311477][T25913] netlink: 'syz.0.5197': attribute type 22 has an invalid length. [ 1219.354939][T25913] netlink: 'syz.0.5197': attribute type 13 has an invalid length. [ 1219.373078][T25913] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.5197'. [ 1221.007823][T25959] netlink: 'syz.4.5207': attribute type 10 has an invalid length. [ 1221.042104][T25959] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1221.501233][T25969] netlink: 'syz.4.5207': attribute type 10 has an invalid length. [ 1221.569601][T25969] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1221.650215][T25980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5211'. [ 1221.997929][T25996] netlink: 'syz.3.5215': attribute type 29 has an invalid length. [ 1222.106172][T26009] netlink: 'syz.3.5215': attribute type 29 has an invalid length. [ 1222.120791][T25996] netlink: 'syz.3.5215': attribute type 29 has an invalid length. [ 1226.270229][T26068] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5232'. [ 1226.289558][T26073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5232'. [ 1226.558731][T26086] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5233'. [ 1227.122022][T26094] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5236'. [ 1228.411878][T26129] validate_nla: 3 callbacks suppressed [ 1228.411895][T26129] netlink: 'syz.3.5245': attribute type 21 has an invalid length. [ 1228.583363][T26136] netlink: 'syz.1.5246': attribute type 16 has an invalid length. [ 1228.611899][T26137] netlink: 'syz.1.5246': attribute type 16 has an invalid length. [ 1228.619853][T26137] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5246'. [ 1228.649593][T26136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5246'. [ 1228.700437][T26135] netlink: 'syz.1.5246': attribute type 10 has an invalid length. [ 1228.787441][T26134] delete_channel: no stack [ 1229.666262][T26168] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5251'. [ 1230.618384][T26172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1230.628110][T26172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1230.640535][T26172] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5252'. [ 1231.527124][T26202] netlink: 'syz.1.5260': attribute type 5 has an invalid length. [ 1231.563367][T26202] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5260'. [ 1231.803594][T26197] device syzkaller0 entered promiscuous mode [ 1232.388026][T26217] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5266'. [ 1236.693641][T26212] netlink: 'syz.3.5262': attribute type 10 has an invalid length. [ 1236.701757][T26212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5262'. [ 1236.712909][T26212] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1236.927787][T26268] device wg2 entered promiscuous mode [ 1237.736726][T26273] netlink: 'syz.1.5278': attribute type 10 has an invalid length. [ 1237.753351][T26273] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.5278'. [ 1239.208378][T26320] FAULT_INJECTION: forcing a failure. [ 1239.208378][T26320] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.314959][T26326] netlink: 'syz.1.5293': attribute type 19 has an invalid length. [ 1239.345776][T26320] CPU: 1 PID: 26320 Comm: syz.4.5290 Not tainted syzkaller #0 [ 1239.353320][T26320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1239.363428][T26320] Call Trace: [ 1239.366749][T26320] [ 1239.369722][T26320] dump_stack_lvl+0x188/0x24e [ 1239.374464][T26320] ? show_regs_print_info+0x12/0x12 [ 1239.379735][T26320] ? load_image+0x410/0x410 [ 1239.383951][T26331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5293'. [ 1239.384298][T26320] ? __might_sleep+0xd0/0xd0 [ 1239.398023][T26320] ? __lock_acquire+0x7ea0/0x7ea0 [ 1239.403106][T26320] should_fail_ex+0x390/0x4c0 [ 1239.407864][T26320] should_failslab+0x5/0x20 [ 1239.412441][T26320] slab_pre_alloc_hook+0x59/0x300 [ 1239.417518][T26320] ? __lock_acquire+0x7ea0/0x7ea0 [ 1239.422612][T26320] ? kvmalloc_node+0x6c/0x180 [ 1239.427338][T26320] __kmem_cache_alloc_node+0x4f/0x270 [ 1239.432775][T26320] ? schedule_delayed_monitor_work+0x160/0x160 [ 1239.438999][T26320] ? kvmalloc_node+0x6c/0x180 [ 1239.443729][T26320] __kmalloc_node+0xa2/0x240 [ 1239.448383][T26320] kvmalloc_node+0x6c/0x180 [ 1239.452953][T26320] bpf_test_run_xdp_live+0x1da/0x1a90 [ 1239.458415][T26320] ? 0xffffffffa0005300 [ 1239.462650][T26320] ? text_poke_copy+0x7b/0x90 [ 1239.467383][T26320] ? 0xffffffffa0005300 [ 1239.471590][T26320] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 1239.477558][T26320] ? xdp_convert_md_to_buff+0x330/0x330 [ 1239.483189][T26320] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1239.489508][T26320] ? copy_user_enhanced_fast_string+0xa/0x40 [ 1239.495552][T26320] ? bpf_test_init+0x119/0x140 [ 1239.500362][T26320] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1239.505882][T26320] bpf_prog_test_run_xdp+0x757/0xf80 [ 1239.511216][T26320] ? __lock_acquire+0x7ea0/0x7ea0 [ 1239.516310][T26320] ? dev_put+0x80/0x80 [ 1239.520473][T26320] ? dev_put+0x80/0x80 [ 1239.524620][T26320] bpf_prog_test_run+0x31c/0x390 [ 1239.529613][T26320] __sys_bpf+0x62b/0x780 [ 1239.533940][T26320] ? bpf_link_show_fdinfo+0x380/0x380 [ 1239.539387][T26320] ? lock_chain_count+0x20/0x20 [ 1239.544294][T26320] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1239.550347][T26320] __x64_sys_bpf+0x78/0x90 [ 1239.554825][T26320] do_syscall_64+0x4c/0xa0 [ 1239.559293][T26320] ? clear_bhb_loop+0x60/0xb0 [ 1239.564018][T26320] ? clear_bhb_loop+0x60/0xb0 [ 1239.568750][T26320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1239.574693][T26320] RIP: 0033:0x7fe51399f559 [ 1239.579180][T26320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1239.598841][T26320] RSP: 002b:00007fe514810028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1239.607311][T26320] RAX: ffffffffffffffda RBX: 00007fe513c25fa0 RCX: 00007fe51399f559 [ 1239.615339][T26320] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1239.623366][T26320] RBP: 00007fe514810090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.631395][T26320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.639441][T26320] R13: 00007fe513c26038 R14: 00007fe513c25fa0 R15: 00007ffd7667c858 [ 1239.647480][T26320] [ 1240.248266][T26343] device wg2 entered promiscuous mode [ 1240.310536][T26344] netlink: 'syz.3.5297': attribute type 10 has an invalid length. [ 1240.554252][T26346] netlink: 'syz.0.5298': attribute type 5 has an invalid length. [ 1240.593692][T26346] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5298'. [ 1241.229348][T26369] netlink: 'syz.1.5304': attribute type 1 has an invalid length. [ 1241.258009][T26369] netlink: 'syz.1.5304': attribute type 1 has an invalid length. [ 1241.306346][T26369] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.5304'. [ 1241.485944][T26376] netlink: 6527 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1241.510899][T26378] netlink: 'syz.2.5307': attribute type 29 has an invalid length. [ 1241.546198][T26378] netlink: 'syz.2.5307': attribute type 29 has an invalid length. [ 1241.574690][T26381] netlink: 'syz.2.5307': attribute type 29 has an invalid length. [ 1241.940894][T26380] bridge0: port 3(hsr0) entered disabled state [ 1241.991763][T26380] device hsr0 left promiscuous mode [ 1241.998009][T26380] bridge0: port 3(hsr0) entered disabled state [ 1242.017012][T26380] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1242.040865][T26378] validate_nla: 1 callbacks suppressed [ 1242.040883][T26378] netlink: 'syz.2.5307': attribute type 29 has an invalid length. [ 1242.061856][T26381] netlink: 'syz.2.5307': attribute type 29 has an invalid length. [ 1242.445821][T26390] netlink: 'syz.3.5310': attribute type 10 has an invalid length. [ 1244.187159][T26390] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1244.376856][T26404] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5316'. [ 1244.499260][T26413] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1244.588503][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.626592][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.691752][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.731199][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.790442][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.812240][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.829535][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.836752][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.843188][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.848916][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.856257][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.891884][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.903011][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.922610][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.959797][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.971174][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1244.977003][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.016443][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.016880][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.022882][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.051647][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.057339][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.094335][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.128295][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.153649][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1245.190040][T26411] tap0: tun_chr_ioctl cmd 1074025673 [ 1248.557615][T26474] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5338'. [ 1249.564808][T26497] rxe_eth0 speed is unknown, defaulting to 1000 [ 1249.712212][T26506] netlink: 'syz.3.5343': attribute type 10 has an invalid length. [ 1249.863842][T26505] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5343'. [ 1250.987085][T26523] netlink: 'syz.0.5346': attribute type 41 has an invalid length. [ 1253.333256][T26536] netlink: 'syz.2.5351': attribute type 10 has an invalid length. [ 1253.341168][T26536] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.5351'. [ 1253.414765][T26542] netlink: 'syz.3.5354': attribute type 21 has an invalid length. [ 1253.520121][T26545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1253.652303][T26545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1253.724582][T26553] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1253.751967][T26542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1254.236238][T26549] netlink: 'syz.3.5354': attribute type 21 has an invalid length. [ 1254.244957][T26550] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5354'. [ 1254.654138][T26569] netlink: 'syz.4.5358': attribute type 10 has an invalid length. [ 1254.682481][T26569] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5358'. [ 1254.776111][T26575] netlink: 'syz.2.5360': attribute type 10 has an invalid length. [ 1254.826735][T26575] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5360'. [ 1258.568142][T26646] netlink: 'syz.1.5380': attribute type 10 has an invalid length. [ 1258.639702][T26646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5380'. [ 1258.715551][T26653] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.5384'. [ 1258.735324][T26653] netlink: zone id is out of range [ 1258.746489][T26653] netlink: get zone limit has 8 unknown bytes [ 1258.775929][T26651] rxe_eth0 speed is unknown, defaulting to 1000 [ 1258.885839][T26655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5383'. [ 1260.631971][T26679] netlink: 'syz.4.5388': attribute type 33 has an invalid length. [ 1260.642539][T26679] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5388'. [ 1260.658445][T26679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1260.711806][T26679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1262.697110][T26728] netlink: 'syz.1.5399': attribute type 21 has an invalid length. [ 1262.719563][T26728] IPv6: NLM_F_CREATE should be specified when creating new route [ 1263.262656][T26744] netlink: 'syz.2.5398': attribute type 8 has an invalid length. [ 1263.270481][T26744] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1263.302909][T26749] netlink: 'syz.4.5405': attribute type 10 has an invalid length. [ 1263.352859][T26754] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5406'. [ 1263.376168][T26749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5405'. [ 1263.483917][T26749] openvswitch: netlink: Flow key attr not present in new flow. [ 1264.082206][T26764] netlink: 'syz.0.5410': attribute type 2 has an invalid length. [ 1264.116112][T26766] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.5409'. [ 1264.144049][T26764] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.5410'. [ 1269.432516][T26831] rxe_eth0 speed is unknown, defaulting to 1000 [ 1276.257150][T26859] rxe_eth0 speed is unknown, defaulting to 1000 [ 1277.719256][T26898] netlink: 'syz.0.5444': attribute type 22 has an invalid length. [ 1277.775331][T26898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 1277.900194][T26896] rxe_eth0 speed is unknown, defaulting to 1000 [ 1278.946511][T26917] netlink: 'syz.2.5448': attribute type 3 has an invalid length. [ 1279.000569][T26917] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5448'. [ 1281.130403][T26992] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.5466'. [ 1282.070590][T27004] tun3: tun_chr_ioctl cmd 1074812118 [ 1282.086510][T27010] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5471'. [ 1282.141197][T27009] netlink: 'syz.4.5471': attribute type 10 has an invalid length. [ 1282.158573][T27009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5471'. [ 1282.183323][T27009] device team0 entered promiscuous mode [ 1282.189807][T27009] device team_slave_0 entered promiscuous mode [ 1282.222249][T27009] device team_slave_1 entered promiscuous mode [ 1282.236370][T27009] device macvlan0 entered promiscuous mode [ 1282.302069][T27009] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1282.401115][T27018] netlink: 'syz.0.5475': attribute type 6 has an invalid length. [ 1283.006430][T27044] netlink: 'syz.2.5480': attribute type 5 has an invalid length. [ 1283.020188][T27044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1284.250839][T27061] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5485'. [ 1284.980716][T27079] netlink: 'syz.1.5491': attribute type 39 has an invalid length. [ 1287.953494][T27101] netlink: 'syz.4.5497': attribute type 29 has an invalid length. [ 1288.076759][T27108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1291.210039][T27101] netlink: 'syz.4.5497': attribute type 29 has an invalid length. [ 1291.218292][T27102] tap0: tun_chr_ioctl cmd 2147767520 [ 1291.224032][T27106] tap0: tun_chr_ioctl cmd 1074812118 [ 1291.236110][T27108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5497'. [ 1291.450235][T27126] netlink: 'syz.1.5500': attribute type 21 has an invalid length. [ 1291.636151][T27135] netlink: 'syz.1.5500': attribute type 21 has an invalid length. [ 1291.984096][T27154] netlink: 'syz.0.5506': attribute type 2 has an invalid length. [ 1292.039468][T27154] device .*! entered promiscuous mode [ 1293.435539][T27180] netlink: 'syz.4.5513': attribute type 2 has an invalid length. [ 1294.526145][T27207] netlink: 'syz.2.5522': attribute type 29 has an invalid length. [ 1294.536381][T27207] netlink: 'syz.2.5522': attribute type 29 has an invalid length. [ 1294.545677][T27207] netlink: 'syz.2.5522': attribute type 29 has an invalid length. [ 1294.561901][T27207] netlink: 'syz.2.5522': attribute type 29 has an invalid length. [ 1294.580454][T27207] netlink: 'syz.2.5522': attribute type 29 has an invalid length. [ 1294.672585][T27218] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5523'. [ 1296.065300][T27255] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1296.495891][T27258] validate_nla: 7 callbacks suppressed [ 1296.495910][T27258] netlink: 'syz.1.5532': attribute type 3 has an invalid length. [ 1296.579966][T27258] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5532'. [ 1298.260353][T27290] netlink: 'syz.0.5538': attribute type 25 has an invalid length. [ 1298.280433][T27290] netlink: 'syz.0.5538': attribute type 9 has an invalid length. [ 1298.322478][T27290] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5538'. [ 1298.376929][T27290] netlink: 'syz.0.5538': attribute type 21 has an invalid length. [ 1298.447989][T27290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5538'. [ 1300.108559][T27313] netlink: 'syz.1.5542': attribute type 10 has an invalid length. [ 1300.257500][T27319] netlink: 'syz.0.5544': attribute type 4 has an invalid length. [ 1300.276468][T27319] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1302.341630][T27365] netlink: 'syz.3.5556': attribute type 10 has an invalid length. [ 1303.842877][T27395] netlink: 'syz.1.5564': attribute type 30 has an invalid length. [ 1305.003484][T27430] netlink: 'syz.0.5574': attribute type 10 has an invalid length. [ 1305.076903][T27427] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5573'. [ 1305.694785][T27430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.702608][T27430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.756241][T27431] netlink: 'syz.1.5573': attribute type 21 has an invalid length. [ 1305.776560][T27431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.784479][T27431] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.791877][T27431] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.799667][T27431] IPv6: NLM_F_CREATE should be set when creating new route [ 1306.176862][T27447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5579'. [ 1306.454444][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1306.461011][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.506247][T27453] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5582'. [ 1308.291456][T27482] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5590'. [ 1308.314970][T27482] device hsr_slave_0 left promiscuous mode [ 1308.322499][T27482] device hsr_slave_1 left promiscuous mode [ 1308.564536][T27509] netlink: 'syz.2.5593': attribute type 1 has an invalid length. [ 1308.592753][T27509] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.5593'. [ 1309.436947][T27523] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5596'. [ 1310.087327][T27527] rxe_eth0 speed is unknown, defaulting to 1000 [ 1310.330382][T27542] netlink: 'syz.0.5604': attribute type 39 has an invalid length. [ 1311.863478][T27546] netlink: 'syz.4.5605': attribute type 10 has an invalid length. [ 1311.891460][T27546] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5605'. [ 1312.075676][T27560] netlink: 'syz.0.5611': attribute type 13 has an invalid length. [ 1312.084034][T27560] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1314.002143][T27594] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1314.123566][T27612] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5620'. [ 1314.133338][T27612] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1314.494598][T27623] netlink: 'syz.0.5625': attribute type 2 has an invalid length. [ 1317.122427][T27623] device 0 entered promiscuous mode [ 1317.543440][T27639] netlink: 'syz.2.5630': attribute type 3 has an invalid length. [ 1317.553759][T27639] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5630'. [ 1319.870404][T27665] netlink: 'syz.2.5637': attribute type 10 has an invalid length. [ 1321.073662][T27665] team0: Device gre0 is of different type [ 1321.139399][T27670] rxe_eth0 speed is unknown, defaulting to 1000 [ 1321.304100][T27682] netlink: 'syz.1.5639': attribute type 19 has an invalid length. [ 1321.330879][T27682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5639'. [ 1321.593037][T27681] device syzkaller0 entered promiscuous mode [ 1325.387652][T27727] netlink: 'syz.1.5649': attribute type 3 has an invalid length. [ 1325.396100][T27727] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5649'. [ 1329.706811][T27768] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1330.280717][T27768] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1330.699544][T27786] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5667'. [ 1330.795105][T27786] netlink: 71 bytes leftover after parsing attributes in process `syz.4.5667'. [ 1332.659030][T27786] device macvlan0 left promiscuous mode [ 1332.669216][T27786] team0: Port device macvlan0 removed [ 1332.950541][T27822] netlink: 'syz.4.5677': attribute type 1 has an invalid length. [ 1332.962551][T27822] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1333.052002][T27820] netlink: 'syz.4.5677': attribute type 1 has an invalid length. [ 1333.059820][T27820] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.5677'. [ 1335.257552][T27842] netlink: 'syz.4.5681': attribute type 46 has an invalid length. [ 1335.844228][T27873] netlink: 'syz.1.5691': attribute type 21 has an invalid length. [ 1335.903200][T27873] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5691'. [ 1335.990787][T27873] netlink: 'syz.1.5691': attribute type 4 has an invalid length. [ 1338.477121][T27954] IPv6: NLM_F_CREATE should be specified when creating new route [ 1339.017545][T27973] netlink: 'syz.4.5715': attribute type 3 has an invalid length. [ 1339.091192][T27973] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5715'. [ 1341.753614][T28001] netlink: 'syz.0.5721': attribute type 8 has an invalid length. [ 1341.793047][T28002] netlink: 'syz.4.5725': attribute type 1 has an invalid length. [ 1341.801083][T28001] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1341.864515][T28001] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1341.959148][T28003] netlink: 'syz.0.5721': attribute type 3 has an invalid length. [ 1342.024944][T28003] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1342.077922][T27999] mac80211_hwsim hwsim40 »»»»»»: renamed from wlan0 [ 1345.223499][T28040] netlink: 'syz.4.5734': attribute type 3 has an invalid length. [ 1345.333348][T28040] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5734'. [ 1345.592239][T28051] netlink: 'syz.2.5737': attribute type 10 has an invalid length. [ 1345.688116][T28057] netlink: 'syz.3.5738': attribute type 2 has an invalid length. [ 1346.209705][T28051] team0: Device gre0 is of different type [ 1346.835251][T28059] rxe_eth0 speed is unknown, defaulting to 1000 [ 1347.967404][T28092] netlink: 'syz.0.5747': attribute type 10 has an invalid length. [ 1348.599488][T28079] rxe_eth0 speed is unknown, defaulting to 1000 [ 1348.800482][T28099] netlink: 'syz.1.5749': attribute type 10 has an invalid length. [ 1349.095691][T28099] device team_slave_1 left promiscuous mode [ 1349.148097][T28099] team0 (unregistering): Port device team_slave_1 removed [ 1349.177679][T28099] device geneve1 left promiscuous mode [ 1349.201011][T28099] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.221003][T28099] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.241616][T28099] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.270094][T28099] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.330632][T28099] team0 (unregistering): Port device geneve1 removed [ 1349.358294][T28099] device bond0 left promiscuous mode [ 1349.372283][T28099] device bond_slave_0 left promiscuous mode [ 1349.388961][T28099] device bond_slave_1 left promiscuous mode [ 1349.399132][T28099] device bridge_slave_1 left promiscuous mode [ 1349.484925][T28099] team0 (unregistering): Port device bond0 removed [ 1350.693274][T28149] netlink: 'syz.2.5758': attribute type 10 has an invalid length. [ 1350.755321][T28149] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1350.804918][T28149] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1351.391787][T28167] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1351.416822][T28167] netlink: 'syz.3.5764': attribute type 11 has an invalid length. [ 1351.431123][T28167] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1358.112264][T28209] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5776'. [ 1358.174841][T28209] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1358.188537][T28209] CPU: 0 PID: 28209 Comm: syz.4.5776 Not tainted syzkaller #0 [ 1358.196075][T28209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1358.206185][T28209] Call Trace: [ 1358.209528][T28209] [ 1358.212513][T28209] dump_stack_lvl+0x188/0x24e [ 1358.217256][T28209] ? show_regs_print_info+0x12/0x12 [ 1358.222518][T28209] ? load_image+0x410/0x410 [ 1358.227080][T28209] sysfs_warn_dup+0x8a/0xa0 [ 1358.231628][T28209] sysfs_do_create_link_sd+0xc0/0x110 [ 1358.237047][T28209] device_add+0x83b/0x1050 [ 1358.241528][T28209] wiphy_register+0x1d8b/0x2aa0 [ 1358.246444][T28209] ? cfg80211_event_work+0x40/0x40 [ 1358.251607][T28209] ? minstrel_ht_alloc+0x894/0xa20 [ 1358.256775][T28209] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1358.262887][T28209] ieee80211_register_hw+0x2e33/0x3b00 [ 1358.268406][T28209] ? ieee80211_register_hw+0xf01/0x3b00 [ 1358.273996][T28209] ? ieee80211_register_hw+0xf01/0x3b00 [ 1358.279591][T28209] ? ieee80211_tasklet_handler+0x20/0x20 [ 1358.285280][T28209] ? memset_erms+0xb/0x10 [ 1358.289712][T28209] ? __hrtimer_init+0x189/0x270 [ 1358.294600][T28209] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1358.300409][T28209] ? memcpy+0x3c/0x60 [ 1358.304428][T28209] hwsim_new_radio_nl+0xab7/0xc90 [ 1358.309510][T28209] genl_family_rcv_msg_doit+0x22f/0x350 [ 1358.315183][T28209] ? end_current_label_crit_section+0x170/0x170 [ 1358.321484][T28209] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1358.327521][T28209] ? bpf_lsm_capable+0x5/0x10 [ 1358.332234][T28209] ? security_capable+0x85/0xb0 [ 1358.337130][T28209] genl_rcv_msg+0x601/0x790 [ 1358.341665][T28209] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1358.347876][T28209] ? genl_bind+0x360/0x360 [ 1358.352319][T28209] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1358.358684][T28209] ? lock_acquire+0x226/0x4a0 [ 1358.363408][T28209] netlink_rcv_skb+0x1ef/0x440 [ 1358.368218][T28209] ? genl_bind+0x360/0x360 [ 1358.372692][T28209] ? netlink_ack+0x1160/0x1160 [ 1358.377504][T28209] ? down_read+0x1a8/0x2d0 [ 1358.381967][T28209] genl_rcv+0x24/0x40 [ 1358.385982][T28209] netlink_unicast+0x7ad/0x920 [ 1358.390800][T28209] netlink_sendmsg+0x8ad/0xbd0 [ 1358.395614][T28209] ? netlink_getsockopt+0x550/0x550 [ 1358.400875][T28209] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1358.406468][T28209] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1358.411787][T28209] ? security_socket_sendmsg+0x7c/0xa0 [ 1358.417293][T28209] ? netlink_getsockopt+0x550/0x550 [ 1358.422533][T28209] ____sys_sendmsg+0x5ed/0x9a0 [ 1358.427354][T28209] ? __import_iovec+0x3d6/0x510 [ 1358.432279][T28209] ? __sys_sendmsg_sock+0x30/0x30 [ 1358.437354][T28209] ? import_iovec+0x6f/0xa0 [ 1358.441904][T28209] ___sys_sendmsg+0x2a2/0x360 [ 1358.446629][T28209] ? __sys_sendmsg+0x2a0/0x2a0 [ 1358.451450][T28209] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1358.457513][T28209] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1358.463712][T28209] ? lockdep_hardirqs_on+0x94/0x140 [ 1358.468973][T28209] ? __se_sys_sendmsg+0xee/0x2b0 [ 1358.473970][T28209] ? kasan_check_range+0x92/0x290 [ 1358.479068][T28209] __se_sys_sendmsg+0x1c3/0x2b0 [ 1358.483978][T28209] ? __x64_sys_sendmsg+0x80/0x80 [ 1358.488985][T28209] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1358.494938][T28209] do_syscall_64+0x4c/0xa0 [ 1358.499395][T28209] ? clear_bhb_loop+0x60/0xb0 [ 1358.504125][T28209] ? clear_bhb_loop+0x60/0xb0 [ 1358.508851][T28209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1358.514820][T28209] RIP: 0033:0x7fe51399f559 [ 1358.519285][T28209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.538947][T28209] RSP: 002b:00007fe5147ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1358.547412][T28209] RAX: ffffffffffffffda RBX: 00007fe513c26270 RCX: 00007fe51399f559 [ 1358.555436][T28209] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1358.563448][T28209] RBP: 00007fe513a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1358.571466][T28209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.579473][T28209] R13: 00007fe513c26308 R14: 00007fe513c26270 R15: 00007ffd7667c858 [ 1358.587508][T28209] [ 1359.089076][T28236] netlink: 'syz.2.5783': attribute type 10 has an invalid length. [ 1359.412932][T28236] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1359.679129][T28241] netlink: 'syz.4.5784': attribute type 3 has an invalid length. [ 1359.728922][T28241] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.5784'. [ 1360.573719][T28270] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5792'. [ 1361.802545][T28295] netlink: 'syz.1.5801': attribute type 21 has an invalid length. [ 1361.841481][T28295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5801'. [ 1362.306012][T28316] netlink: 'syz.2.5808': attribute type 2 has an invalid length. [ 1362.331222][T28316] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.5808'. [ 1362.960612][T28338] netlink: 'syz.4.5812': attribute type 10 has an invalid length. [ 1362.969326][T28338] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5812'. [ 1364.217422][T28364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1364.453410][T28363] netlink: 'syz.0.5817': attribute type 10 has an invalid length. [ 1364.558219][T28357] rxe_eth0 speed is unknown, defaulting to 1000 [ 1364.718481][T28371] netlink: 'syz.4.5822': attribute type 10 has an invalid length. [ 1364.934237][T28374] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.5823'. [ 1364.993054][T28374] netlink: zone id is out of range [ 1365.123813][T28387] netlink: 124788 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1366.419494][T28394] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1366.466363][T28394] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1366.479519][T28394] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1366.489300][T28394] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1366.497084][T28394] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1366.507186][T28394] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1366.545159][T28371] device gre0 entered promiscuous mode [ 1366.550762][T28371] team0: Device gre0 is of different type [ 1366.726829][T28393] rxe_eth0 speed is unknown, defaulting to 1000 [ 1367.042413][T28406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5830'. [ 1367.736565][T28406] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5830'. [ 1367.747900][T28408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5830'. [ 1367.893881][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.900323][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.936746][T15239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.134717][T15239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.234507][T15239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.250236][T28393] chnl_net:caif_netlink_parms(): no params data found [ 1368.335757][T15239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.415704][T28430] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1368.442080][T28393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.476429][T28432] netlink: 108384 bytes leftover after parsing attributes in process `syz.0.5836'. [ 1368.487171][T28393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.519931][T28393] device bridge_slave_0 entered promiscuous mode [ 1368.532047][T28394] Bluetooth: hci4: command 0x0409 tx timeout [ 1368.610422][T28393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.641550][T28393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.656702][T28393] device bridge_slave_1 entered promiscuous mode [ 1368.836279][T28393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1368.922979][T28393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.166522][T28393] team0: Port device team_slave_0 added [ 1369.204438][T15239] device 0 left promiscuous mode [ 1369.260507][T28393] team0: Port device team_slave_1 added [ 1369.426977][T15239] tipc: Left network mode [ 1369.500617][T28393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.518630][T28393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.571773][T28393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.765499][T28449] rxe_eth0 speed is unknown, defaulting to 1000 [ 1369.773807][T28393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.801691][T28393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.863725][T28393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.693818][T28394] Bluetooth: hci4: command 0x041b tx timeout [ 1371.705273][T28465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1371.921877][T28393] device hsr_slave_0 entered promiscuous mode [ 1371.939198][T28393] device hsr_slave_1 entered promiscuous mode [ 1371.955363][T28393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1371.967852][T28393] Cannot create hsr debugfs directory [ 1372.747000][T28512] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5852'. [ 1372.771256][T28514] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.5854'. [ 1372.783181][T28394] Bluetooth: hci4: command 0x040f tx timeout [ 1374.739992][T15239] team0: Port device wlan1 removed [ 1374.870402][T28394] Bluetooth: hci4: command 0x0419 tx timeout [ 1375.032989][T28393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1375.053437][T28393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1375.088375][T28393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1375.152455][T28393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1375.487972][T28582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5867'. [ 1375.550446][T15239] device hsr_slave_0 left promiscuous mode [ 1375.558894][T15239] device hsr_slave_1 left promiscuous mode [ 1375.610259][T15239] device veth1_macvtap left promiscuous mode [ 1375.629567][T15239] device veth0_macvtap left promiscuous mode [ 1375.647108][T15239] device veth1_vlan left promiscuous mode [ 1375.824483][T28593] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.5869'. [ 1375.910877][T28590] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 1376.515359][T15239] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1376.572117][T15239] team0 (unregistering): Port device team_slave_1 removed [ 1376.654570][T15239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1376.699811][T15239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1376.984052][T15239] bond0 (unregistering): Released all slaves [ 1377.026004][T28393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.035993][T28593] netlink: 'syz.4.5869': attribute type 21 has an invalid length. [ 1377.044692][T28593] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5869'. [ 1377.054913][T28590] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 1377.090866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1377.119683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1377.225255][T28393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.248670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1377.283687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1377.313546][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.320728][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.368931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1377.398250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1377.424571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1377.448729][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.456024][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1377.496847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1377.553495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1377.589325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1377.650464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1377.712134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1377.747862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1377.778465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1377.814467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1377.833391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1377.859215][T28393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1377.885229][T28393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1377.917106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1377.943703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1378.796915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1378.808163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1378.841016][T28393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.903151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1378.917333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1378.988063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1379.005209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1379.019722][T28393] device veth0_vlan entered promiscuous mode [ 1379.029794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1379.044750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1379.064202][T28393] device veth1_vlan entered promiscuous mode [ 1379.073384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1379.119922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1379.134549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1379.166693][T28393] device veth0_macvtap entered promiscuous mode [ 1379.186754][T28393] device veth1_macvtap entered promiscuous mode [ 1379.238969][T28393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.263925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1379.275159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1379.286253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1379.297856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1379.314570][T28393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1379.336338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1379.347501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1379.381287][T28393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.402083][T28393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.411132][T28393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1379.441128][T28393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1380.477771][T15240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.496050][T15240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.539761][T15234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1380.571816][T15240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1380.579713][T15240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1380.628913][T15240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1380.642198][T28674] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5881'. [ 1380.653512][T28669] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5878'. [ 1380.905020][T28684] device wlan1 entered promiscuous mode [ 1381.106164][T28690] netlink: 'syz.4.5882': attribute type 12 has an invalid length. [ 1381.208063][T28690] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5882'. [ 1381.806471][T28712] netlink: 'syz.3.5890': attribute type 29 has an invalid length. [ 1381.841082][T28712] netlink: 'syz.3.5890': attribute type 29 has an invalid length. [ 1381.852422][T28712] netlink: 'syz.3.5890': attribute type 29 has an invalid length. [ 1382.037013][T28720] netlink: 'syz.2.5892': attribute type 21 has an invalid length. [ 1383.419707][T28731] netlink: 'syz.3.5895': attribute type 10 has an invalid length. [ 1383.441858][T28731] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1383.473308][T28731] netlink: 'syz.3.5895': attribute type 9 has an invalid length. [ 1383.501597][T28731] netlink: 90128 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1384.361636][T28745] mac80211_hwsim hwsim42 ªªªªª@: renamed from wlan0 [ 1386.122020][T28785] device syzkaller0 entered promiscuous mode [ 1388.768058][T28834] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5925'. [ 1388.871241][T28834] netlink: 'syz.4.5925': attribute type 10 has an invalid length. [ 1391.834973][T28834] device geneve0 entered promiscuous mode [ 1392.159804][T28854] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.201772][T28854] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.273883][T28856] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.313700][T28854] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.327825][T28859] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.417024][T28856] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.495226][T28856] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.594574][T28856] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1392.670621][T28854] netlink: 'syz.2.5931': attribute type 29 has an invalid length. [ 1393.473596][T28881] team0: Device gre0 is of different type [ 1396.239418][T28886] rxe_eth0 speed is unknown, defaulting to 1000 [ 1396.934209][T28909] validate_nla: 101 callbacks suppressed [ 1396.934233][T28909] netlink: 'syz.1.5947': attribute type 29 has an invalid length. [ 1397.081595][T28909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1397.189267][T28909] netlink: 'syz.1.5947': attribute type 29 has an invalid length. [ 1397.368017][T28909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1400.995951][T28962] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5961'. [ 1401.616509][T28977] netlink: 111 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1402.798607][T29006] netlink: 'syz.0.5971': attribute type 10 has an invalid length. [ 1403.938892][T29012] netlink: 'syz.1.5973': attribute type 12 has an invalid length. [ 1403.975984][T29012] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5973'. [ 1404.055986][T29012] netlink: 'syz.1.5973': attribute type 6 has an invalid length. [ 1404.065797][T29018] FAULT_INJECTION: forcing a failure. [ 1404.065797][T29018] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.091397][T29012] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5973'. [ 1404.102514][T29018] CPU: 0 PID: 29018 Comm: syz.3.5976 Not tainted syzkaller #0 [ 1404.110037][T29018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1404.120146][T29018] Call Trace: [ 1404.123462][T29018] [ 1404.126435][T29018] dump_stack_lvl+0x188/0x24e [ 1404.131166][T29018] ? show_regs_print_info+0x12/0x12 [ 1404.136450][T29018] ? load_image+0x410/0x410 [ 1404.141009][T29018] ? __might_sleep+0xd0/0xd0 [ 1404.145638][T29018] ? __lock_acquire+0x7ea0/0x7ea0 [ 1404.150708][T29018] should_fail_ex+0x390/0x4c0 [ 1404.155430][T29018] should_failslab+0x5/0x20 [ 1404.159987][T29018] slab_pre_alloc_hook+0x59/0x300 [ 1404.165080][T29018] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1404.170851][T29018] __kmem_cache_alloc_node+0x4f/0x270 [ 1404.176251][T29018] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1404.182003][T29018] __kmalloc+0xa3/0x240 [ 1404.186227][T29018] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1404.191815][T29018] ? tomoyo_domain+0xd2/0x120 [ 1404.196594][T29018] ? tomoyo_path_number_perm+0x205/0x650 [ 1404.202285][T29018] tomoyo_path_number_perm+0x22f/0x650 [ 1404.207811][T29018] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1404.214466][T29018] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1404.220049][T29018] ? __fget_files+0x28/0x460 [ 1404.224722][T29018] security_file_ioctl+0x6c/0xa0 [ 1404.229753][T29018] __se_sys_ioctl+0x48/0x170 [ 1404.234417][T29018] do_syscall_64+0x4c/0xa0 [ 1404.238885][T29018] ? clear_bhb_loop+0x60/0xb0 [ 1404.243620][T29018] ? clear_bhb_loop+0x60/0xb0 [ 1404.248348][T29018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1404.254302][T29018] RIP: 0033:0x7f9380f9f559 [ 1404.258768][T29018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1404.278429][T29018] RSP: 002b:00007f9381ddb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1404.286925][T29018] RAX: ffffffffffffffda RBX: 00007f9381225fa0 RCX: 00007f9380f9f559 [ 1404.294955][T29018] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000015 [ 1404.302977][T29018] RBP: 00007f9381ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 1404.311020][T29018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1404.319061][T29018] R13: 00007f9381226038 R14: 00007f9381225fa0 R15: 00007fff43dd40f8 [ 1404.327108][T29018] [ 1404.339142][T29018] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1405.067771][T29048] netlink: 'syz.2.5982': attribute type 21 has an invalid length. [ 1405.333732][T29049] netlink: 'syz.1.5983': attribute type 10 has an invalid length. [ 1405.345889][T29049] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5983'. [ 1406.713245][T29063] netlink: 'syz.4.5987': attribute type 3 has an invalid length. [ 1406.721256][T29063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5987'. [ 1406.978593][T29076] netlink: 'syz.3.5990': attribute type 10 has an invalid length. [ 1407.104139][T29081] FAULT_INJECTION: forcing a failure. [ 1407.104139][T29081] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.151755][T29081] CPU: 1 PID: 29081 Comm: syz.0.5991 Not tainted syzkaller #0 [ 1407.159298][T29081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1407.169402][T29081] Call Trace: [ 1407.172731][T29081] [ 1407.175707][T29081] dump_stack_lvl+0x188/0x24e [ 1407.180434][T29081] ? show_regs_print_info+0x12/0x12 [ 1407.185681][T29081] ? load_image+0x410/0x410 [ 1407.190262][T29081] ? __might_sleep+0xd0/0xd0 [ 1407.194905][T29081] ? __lock_acquire+0x7ea0/0x7ea0 [ 1407.199994][T29081] should_fail_ex+0x390/0x4c0 [ 1407.204733][T29081] should_failslab+0x5/0x20 [ 1407.209279][T29081] slab_pre_alloc_hook+0x59/0x300 [ 1407.214351][T29081] ? tomoyo_encode+0x28a/0x550 [ 1407.219170][T29081] __kmem_cache_alloc_node+0x4f/0x270 [ 1407.224598][T29081] ? tomoyo_encode+0x28a/0x550 [ 1407.229411][T29081] __kmalloc+0xa3/0x240 [ 1407.233606][T29081] tomoyo_encode+0x28a/0x550 [ 1407.238231][T29081] tomoyo_realpath_from_path+0x578/0x5c0 [ 1407.243894][T29081] ? tomoyo_domain+0xd2/0x120 [ 1407.248616][T29081] ? tomoyo_path_number_perm+0x205/0x650 [ 1407.254275][T29081] tomoyo_path_number_perm+0x22f/0x650 [ 1407.259767][T29081] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1407.265291][T29081] ? __fget_files+0x28/0x460 [ 1407.269933][T29081] security_file_ioctl+0x6c/0xa0 [ 1407.274925][T29081] __se_sys_ioctl+0x48/0x170 [ 1407.279563][T29081] do_syscall_64+0x4c/0xa0 [ 1407.284014][T29081] ? clear_bhb_loop+0x60/0xb0 [ 1407.288722][T29081] ? clear_bhb_loop+0x60/0xb0 [ 1407.293441][T29081] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.299388][T29081] RIP: 0033:0x7ff682d9f559 [ 1407.303841][T29081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.323481][T29081] RSP: 002b:00007ff683c83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.331937][T29081] RAX: ffffffffffffffda RBX: 00007ff683025fa0 RCX: 00007ff682d9f559 [ 1407.339958][T29081] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000015 [ 1407.347959][T29081] RBP: 00007ff683c83090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.355971][T29081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.363962][T29081] R13: 00007ff683026038 R14: 00007ff683025fa0 R15: 00007fff184b4a98 [ 1407.371978][T29081] [ 1407.478787][T29088] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1407.498079][T29081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1408.601020][T28394] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1412.587485][T29109] netlink: 'syz.3.5999': attribute type 21 has an invalid length. [ 1412.595677][T29109] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5999'. [ 1412.614368][T29129] netlink: 'syz.1.6004': attribute type 2 has an invalid length. [ 1412.633177][T29130] netlink: 'syz.1.6004': attribute type 21 has an invalid length. [ 1412.641060][T29130] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1412.663107][T29130] netlink: 'syz.1.6004': attribute type 5 has an invalid length. [ 1412.714497][T29130] netlink: 'syz.1.6004': attribute type 6 has an invalid length. [ 1412.753891][T29130] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1412.975153][T29146] netlink: 'syz.2.6008': attribute type 10 has an invalid length. [ 1413.059535][T29146] device syz_tun entered promiscuous mode [ 1413.143336][T29146] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1413.198745][T29148] netlink: 'syz.2.6008': attribute type 10 has an invalid length. [ 1413.327231][T29148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1413.389589][T29148] team0: Port device bond0 added [ 1413.430897][T29150] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6009'. [ 1413.691919][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1413.707752][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1413.729057][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1413.754108][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1413.769774][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1413.789317][T16142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1414.400607][T29161] rxe_eth0 speed is unknown, defaulting to 1000 [ 1414.487006][T15240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.560466][T29171] netlink: 'syz.1.6012': attribute type 29 has an invalid length. [ 1414.675435][T15240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.719138][T29171] netlink: 'syz.1.6012': attribute type 29 has an invalid length. [ 1414.738313][T29174] netlink: 'syz.4.6013': attribute type 21 has an invalid length. [ 1414.798221][T15240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.814369][T29180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1414.973809][T15240] bond0: (slave netdevsim0): Releasing backup interface [ 1414.987022][T15240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.013492][T29180] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1415.057741][T29184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6014'. [ 1415.382203][T15240] device .*! left promiscuous mode [ 1415.806640][T29161] chnl_net:caif_netlink_parms(): no params data found [ 1415.891772][T28394] Bluetooth: hci2: command 0x0409 tx timeout [ 1416.199052][T29161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.300804][T29161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.405178][T29161] device bridge_slave_0 entered promiscuous mode [ 1416.485555][T29161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.535015][T29161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.549209][T29161] device bridge_slave_1 entered promiscuous mode [ 1416.630124][T29161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.665231][T29161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.812992][T29161] team0: Port device team_slave_0 added [ 1416.857304][T29161] team0: Port device team_slave_1 added [ 1416.991095][T29161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.038417][T29161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.184054][T29161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.246988][T29161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.270653][T29161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.373583][T29161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.981465][T28394] Bluetooth: hci2: command 0x041b tx timeout [ 1418.592417][T15240] tipc: Left network mode [ 1418.644700][T29161] device hsr_slave_0 entered promiscuous mode [ 1418.682078][T29161] device hsr_slave_1 entered promiscuous mode [ 1420.052607][T16142] Bluetooth: hci2: command 0x040f tx timeout [ 1420.127590][T29293] FAULT_INJECTION: forcing a failure. [ 1420.127590][T29293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.204231][T29293] CPU: 0 PID: 29293 Comm: syz.0.6032 Not tainted syzkaller #0 [ 1420.211818][T29293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1420.221935][T29293] Call Trace: [ 1420.225257][T29293] [ 1420.228225][T29293] dump_stack_lvl+0x188/0x24e [ 1420.232957][T29293] ? show_regs_print_info+0x12/0x12 [ 1420.238205][T29293] ? load_image+0x410/0x410 [ 1420.242762][T29293] ? __lock_acquire+0x7ea0/0x7ea0 [ 1420.247859][T29293] should_fail_ex+0x390/0x4c0 [ 1420.252617][T29293] _copy_from_user+0x2c/0x170 [ 1420.257465][T29293] kstrtouint_from_user+0xda/0x170 [ 1420.262663][T29293] ? kstrtol_from_user+0x190/0x190 [ 1420.267861][T29293] proc_fail_nth_write+0x8b/0x200 [ 1420.272947][T29293] ? proc_fail_nth_read+0x220/0x220 [ 1420.278220][T29293] ? common_file_perm+0x171/0x1c0 [ 1420.283357][T29293] ? proc_fail_nth_read+0x220/0x220 [ 1420.288618][T29293] vfs_write+0x2dc/0x9a0 [ 1420.292938][T29293] ? file_end_write+0x250/0x250 [ 1420.297860][T29293] ? __fget_files+0x28/0x460 [ 1420.302541][T29293] ? __fget_files+0x3fc/0x460 [ 1420.307328][T29293] ? __fdget_pos+0x2ae/0x360 [ 1420.312007][T29293] ? ksys_write+0x70/0x260 [ 1420.316493][T29293] ksys_write+0x14d/0x260 [ 1420.320888][T29293] ? __ia32_sys_read+0x80/0x80 [ 1420.325763][T29293] ? lockdep_hardirqs_on+0x94/0x140 [ 1420.331027][T29293] do_syscall_64+0x4c/0xa0 [ 1420.335494][T29293] ? clear_bhb_loop+0x60/0xb0 [ 1420.340232][T29293] ? clear_bhb_loop+0x60/0xb0 [ 1420.344980][T29293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.350940][T29293] RIP: 0033:0x7ff682d5fd8e [ 1420.355406][T29293] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1420.375111][T29293] RSP: 002b:00007ff683c61fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1420.383584][T29293] RAX: ffffffffffffffda RBX: 00007ff683c626c0 RCX: 00007ff682d5fd8e [ 1420.391608][T29293] RDX: 0000000000000001 RSI: 00007ff683c620a0 RDI: 0000000000000015 [ 1420.399658][T29293] RBP: 00007ff683c62090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.407680][T29293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.415709][T29293] R13: 00007ff683026128 R14: 00007ff683026090 R15: 00007fff184b4a98 [ 1420.423762][T29293] [ 1422.131890][T28394] Bluetooth: hci2: command 0x0419 tx timeout [ 1422.515117][T29161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1422.547275][T29161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1422.593515][T29161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1422.654430][T29161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1423.056393][T15240] device veth1_macvtap left promiscuous mode [ 1423.083556][T15240] device veth1_vlan left promiscuous mode [ 1425.470988][T15240] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1426.635746][T15240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.682683][T15240] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1426.941177][T15240] bond0 (unregistering): Released all slaves [ 1426.979969][T29346] rxe_eth0 speed is unknown, defaulting to 1000 [ 1427.292104][T29161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.337744][T29418] netlink: 180 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1427.510697][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1427.523571][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1427.582368][T29161] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.652052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1427.680776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1427.702719][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.709888][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.730883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1427.762188][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1427.779111][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1427.806018][T15250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.813281][T15250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.850103][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1427.885076][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1427.904510][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1427.919851][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1427.946601][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1427.971617][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1427.988603][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1427.998274][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1428.010862][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1428.045546][T29161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1428.062984][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1428.083750][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1428.553151][T29439] rxe_eth0 speed is unknown, defaulting to 1000 [ 1429.338269][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.344853][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.583357][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1429.592744][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1429.603197][T29161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.683767][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1429.701093][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1429.741051][T29467] validate_nla: 1 callbacks suppressed [ 1429.741069][T29467] netlink: 'syz.2.6059': attribute type 3 has an invalid length. [ 1429.765514][T29467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6059'. [ 1429.822800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1429.852792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1429.878732][T29161] device veth0_vlan entered promiscuous mode [ 1429.893271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1429.922646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1429.959445][T29161] device veth1_vlan entered promiscuous mode [ 1430.024480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1430.033806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1430.053426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1430.071173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1430.095558][T29161] device veth0_macvtap entered promiscuous mode [ 1430.124374][T29161] device veth1_macvtap entered promiscuous mode [ 1430.263623][T29161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.301353][T29161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.365675][T29161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.424945][T29480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.553280][T29480] device bridge_slave_0 left promiscuous mode [ 1430.613372][T29480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.041685][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1431.054548][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1431.082953][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1431.103395][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1431.136253][T29161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.152508][T29161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.166592][T29161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.183101][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1431.193064][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1431.223618][T29161] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.238190][T29161] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.248286][T29161] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.260686][T29161] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.528060][T15218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.564159][T15218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.584742][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1431.636991][T15250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.661348][T15250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.668989][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1433.482578][T29526] device bridge_slave_1 left promiscuous mode [ 1433.489161][T29526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.615122][T29526] device bridge_slave_0 left promiscuous mode [ 1433.646478][T29526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.632009][T28394] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1434.644495][T28394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1434.654760][T28394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1434.664038][T28394] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1434.684595][T28394] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1434.692243][T28394] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1434.735501][T29539] rxe_eth0 speed is unknown, defaulting to 1000 [ 1434.925043][T29546] netlink: 'syz.1.6083': attribute type 10 has an invalid length. [ 1434.992073][T29543] netlink: 'syz.2.6082': attribute type 2 has an invalid length. [ 1435.034058][T29543] netlink: 'syz.2.6082': attribute type 8 has an invalid length. [ 1435.126094][T29543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1435.365852][T15225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.406523][T29548] netlink: 'syz.2.6082': attribute type 2 has an invalid length. [ 1435.431511][T29548] netlink: 'syz.2.6082': attribute type 8 has an invalid length. [ 1435.457441][T29548] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1435.467676][T29550] netlink: 'syz.2.6082': attribute type 2 has an invalid length. [ 1435.475941][T29550] netlink: 'syz.2.6082': attribute type 8 has an invalid length. [ 1435.484221][T29550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1435.497981][T29543] netlink: 'syz.2.6082': attribute type 2 has an invalid length. [ 1435.511635][T29543] netlink: 'syz.2.6082': attribute type 8 has an invalid length. [ 1435.520836][T29543] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6082'. [ 1435.600880][T15225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.753324][T15225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.789140][T29546] rxe_eth0 speed is unknown, defaulting to 1000 [ 1435.858041][T29565] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6087'. [ 1435.877768][T15225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.764828][T29539] chnl_net:caif_netlink_parms(): no params data found [ 1436.771921][T16142] Bluetooth: hci5: command 0x0409 tx timeout [ 1436.861828][T29584] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1436.941229][T29590] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6093'. [ 1436.998623][T15225] device .*! left promiscuous mode [ 1437.048073][T29581] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6091'. [ 1437.155648][T15225] device 0 left promiscuous mode [ 1437.195552][T29539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.222867][T29539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.282785][T29539] device bridge_slave_0 entered promiscuous mode [ 1437.318846][T29539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.332146][T29539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.351513][T29539] device bridge_slave_1 entered promiscuous mode [ 1437.358826][T15225] tipc: Left network mode [ 1437.448189][T29539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.627520][T29539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.974672][T29539] team0: Port device team_slave_0 added [ 1438.043235][T29539] team0: Port device team_slave_1 added [ 1438.273670][T29539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.281048][T29539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.398340][T29539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.459879][T29539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.472533][T29631] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6101'. [ 1438.489727][T29539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.572869][T29539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1438.615732][T29629] IPv6: Can't replace route, no match found [ 1438.834864][T29652] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6104'. [ 1438.851834][T28394] Bluetooth: hci5: command 0x041b tx timeout [ 1438.994718][T29539] device hsr_slave_0 entered promiscuous mode [ 1439.024416][T29539] device hsr_slave_1 entered promiscuous mode [ 1439.075811][T29667] netlink: 'syz.2.6108': attribute type 1 has an invalid length. [ 1439.100261][T29539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1439.117202][T29539] Cannot create hsr debugfs directory [ 1440.285297][T29680] validate_nla: 1 callbacks suppressed [ 1440.285317][T29680] netlink: 'syz.2.6111': attribute type 29 has an invalid length. [ 1440.347781][T28394] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 1440.410855][T29680] netlink: 'syz.2.6111': attribute type 29 has an invalid length. [ 1440.451697][T29686] netlink: 'syz.4.6113': attribute type 10 has an invalid length. [ 1440.951623][T28394] Bluetooth: hci5: command 0x040f tx timeout [ 1441.429729][T29684] netlink: 'syz.2.6111': attribute type 29 has an invalid length. [ 1441.730497][T29716] __nla_validate_parse: 1 callbacks suppressed [ 1441.730516][T29716] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1441.809725][T29715] netlink: 'syz.4.6117': attribute type 21 has an invalid length. [ 1442.371440][T28394] Bluetooth: hci2: command 0x2016 tx timeout [ 1442.722081][T15225] device veth0_to_team left promiscuous mode [ 1442.728484][T15225] Ÿë: port 1(veth0_to_team) entered disabled state [ 1442.830447][T15225] device hsr_slave_0 left promiscuous mode [ 1442.914666][T15225] device veth1_vlan left promiscuous mode [ 1443.013600][T28394] Bluetooth: hci5: command 0x0419 tx timeout [ 1443.466745][T15225] team0 (unregistering): Port device geneve1 removed [ 1443.603078][T15225] team0 (unregistering): Port device vlan0 removed [ 1443.882086][T15225] team0 (unregistering): Port device team_slave_1 removed [ 1444.329328][T29758] netlink: 'syz.4.6128': attribute type 10 has an invalid length. [ 1444.348375][T29758] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1444.625875][T29768] netlink: 'syz.2.6130': attribute type 2 has an invalid length. [ 1444.672080][T29768] netlink: 'syz.2.6130': attribute type 8 has an invalid length. [ 1444.680462][T29768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1444.749403][T29784] netlink: 'syz.2.6130': attribute type 2 has an invalid length. [ 1444.789684][T29784] netlink: 'syz.2.6130': attribute type 8 has an invalid length. [ 1444.861622][T29784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6130'. [ 1444.992547][T29539] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1445.085535][T29539] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1445.126351][T29776] rxe_eth0 speed is unknown, defaulting to 1000 [ 1445.159467][T29539] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1445.262402][T29539] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1445.318693][T29781] device syzkaller0 entered promiscuous mode [ 1445.846351][T29539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1445.975981][T29539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.004188][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1446.023093][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1446.050531][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1446.090096][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1446.123667][T15218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.130878][T15218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1446.202056][T29801] netlink: 'syz.4.6136': attribute type 5 has an invalid length. [ 1446.217744][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1446.232366][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1446.282157][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1446.307193][T15218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.314412][T15218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1446.407490][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1446.419446][T29812] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1446.435276][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1446.482147][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1446.498439][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1446.533739][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1446.562771][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1446.590901][T29817] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1447.092088][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1447.110985][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1447.146216][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1447.172210][T29823] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6139'. [ 1447.196870][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1447.215415][T15218] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1447.247144][T29539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1447.300387][T29834] device bridge_slave_1 left promiscuous mode [ 1447.321810][T29834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.345371][T29834] device bridge_slave_0 left promiscuous mode [ 1447.372752][T29834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.902948][T29838] device wlan1 entered promiscuous mode [ 1448.124344][T29849] device wlan1 entered promiscuous mode [ 1448.941183][T15225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1448.953485][T15225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1449.101553][T29539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.149918][T29848] rxe_eth0 speed is unknown, defaulting to 1000 [ 1449.206364][T15225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1449.216233][T15225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1449.294215][T15248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1449.306202][T15248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1449.359355][T29539] device veth0_vlan entered promiscuous mode [ 1449.374074][T15248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1449.406919][T15248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1449.476206][T29539] device veth1_vlan entered promiscuous mode [ 1449.629668][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1449.662189][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1449.827525][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1449.867783][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1449.918015][T29539] device veth0_macvtap entered promiscuous mode [ 1450.109208][T29539] device veth1_macvtap entered promiscuous mode [ 1450.213185][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1450.236017][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1450.310206][T29539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.397945][T29871] can: request_module (can-proto-0) failed. [ 1450.411507][T29539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.502435][T29539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1450.550705][T29539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.593535][T29539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1450.600985][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1450.651155][T11278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1450.701438][T29539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.771621][T29539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.821341][T29539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.887950][T29539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.005266][T29539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.047099][T29883] netlink: 'syz.4.6149': attribute type 21 has an invalid length. [ 1451.087503][T29883] netlink: 'syz.4.6149': attribute type 4 has an invalid length. [ 1451.109932][T29889] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6151'. [ 1451.135444][T29883] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6149'. [ 1451.202286][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1451.241807][T15250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1451.310122][T29539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.351412][T29539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.360201][T29539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.433937][T29539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.830957][T29906] ================================================================== [ 1451.839115][T29906] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1451.846975][T29906] Write of size 80 at addr ffff88802f27ad90 by task syz.4.6154/29906 [ 1451.855085][T29906] [ 1451.857480][T29906] CPU: 0 PID: 29906 Comm: syz.4.6154 Not tainted syzkaller #0 [ 1451.864985][T29906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1451.875082][T29906] Call Trace: [ 1451.878393][T29906] [ 1451.881354][T29906] dump_stack_lvl+0x188/0x24e [ 1451.886079][T29906] ? __lock_acquire+0x7ea0/0x7ea0 [ 1451.891161][T29906] ? show_regs_print_info+0x12/0x12 [ 1451.896410][T29906] ? load_image+0x410/0x410 [ 1451.900971][T29906] ? __virt_addr_valid+0x467/0x540 [ 1451.906135][T29906] ? __bpf_get_stackid+0x6c9/0x920 [ 1451.911304][T29906] print_report+0xa8/0x210 [ 1451.915800][T29906] kasan_report+0x10b/0x140 [ 1451.920366][T29906] ? __bpf_get_stackid+0x6c9/0x920 [ 1451.925543][T29906] kasan_check_range+0x235/0x290 [ 1451.930543][T29906] ? __bpf_get_stackid+0x6c9/0x920 [ 1451.935698][T29906] memcpy+0x3c/0x60 [ 1451.939553][T29906] __bpf_get_stackid+0x6c9/0x920 [ 1451.944545][T29906] bpf_get_stackid_pe+0x33f/0x400 [ 1451.949622][T29906] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1451.955132][T29906] bpf_overflow_handler+0x6d1/0x790 [ 1451.960382][T29906] ? bpf_overflow_handler+0xd9/0x790 [ 1451.965713][T29906] ? perf_swevent_overflow+0x230/0x230 [ 1451.971216][T29906] ? ct_irq_exit_irqson+0x113/0x170 [ 1451.976477][T29906] ? __perf_event_account_interrupt+0x187/0x280 [ 1451.982783][T29906] __perf_event_overflow+0x457/0x630 [ 1451.988128][T29906] perf_swevent_event+0x315/0x570 [ 1451.993215][T29906] ? perf_tp_event+0xc10/0xc10 [ 1451.998045][T29906] ___perf_sw_event+0x498/0x6d0 [ 1452.002949][T29906] ? ___perf_sw_event+0x184/0x6d0 [ 1452.008026][T29906] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1452.014495][T29906] ? mark_lock+0x94/0x320 [ 1452.018917][T29906] ? __lock_acquire+0x142d/0x7ea0 [ 1452.023995][T29906] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1452.030027][T29906] ? lock_chain_count+0x20/0x20 [ 1452.034932][T29906] __perf_sw_event+0x135/0x260 [ 1452.039755][T29906] do_user_addr_fault+0x497/0xb20 [ 1452.044837][T29906] ? trace_hardirqs_off_finish+0x86/0x180 [ 1452.050603][T29906] exc_page_fault+0x60/0x100 [ 1452.055242][T29906] asm_exc_page_fault+0x22/0x30 [ 1452.060140][T29906] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1452.066784][T29906] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1452.086442][T29906] RSP: 0018:ffffc900054df788 EFLAGS: 00050206 [ 1452.092575][T29906] RAX: ffffffff8414b201 RBX: 0000000000033fe0 RCX: 0000000000032060 [ 1452.100587][T29906] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc900054e2f80 [ 1452.108596][T29906] RBP: 0000000000000000 R08: ffffc90005514fdf R09: 1ffff92000aa29fb [ 1452.116630][T29906] R10: dffffc0000000000 R11: fffff52000aa29fc R12: 00007ffffffcb020 [ 1452.124645][T29906] R13: 0000000000000000 R14: 0000200000000080 R15: ffffc900054e1000 [ 1452.132662][T29906] ? copyin+0x61/0x120 [ 1452.136793][T29906] copyin+0xe7/0x120 [ 1452.140747][T29906] _copy_from_iter+0x447/0x1130 [ 1452.145678][T29906] ? copyout_mc+0x110/0x110 [ 1452.150235][T29906] ? do_raw_spin_unlock+0x11d/0x230 [ 1452.155503][T29906] ? _raw_spin_unlock+0x24/0x40 [ 1452.160401][T29906] ? find_vmap_area+0xf8/0x110 [ 1452.165208][T29906] ? __phys_addr_symbol+0x2b/0x70 [ 1452.170292][T29906] ? __check_object_size+0x4f6/0xa70 [ 1452.175623][T29906] netlink_sendmsg+0x755/0xbd0 [ 1452.180445][T29906] ? netlink_getsockopt+0x550/0x550 [ 1452.185692][T29906] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1452.191294][T29906] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1452.196621][T29906] ? security_socket_sendmsg+0x7c/0xa0 [ 1452.202130][T29906] ? netlink_getsockopt+0x550/0x550 [ 1452.207379][T29906] ____sys_sendmsg+0x5ed/0x9a0 [ 1452.212194][T29906] ? __sys_sendmsg_sock+0x30/0x30 [ 1452.217278][T29906] ? __import_iovec+0x306/0x510 [ 1452.222193][T29906] ? import_iovec+0x6f/0xa0 [ 1452.226750][T29906] ___sys_sendmsg+0x2a2/0x360 [ 1452.231482][T29906] ? __sys_sendmsg+0x2a0/0x2a0 [ 1452.236327][T29906] __se_sys_sendmsg+0x1c3/0x2b0 [ 1452.241234][T29906] ? __x64_sys_sendmsg+0x80/0x80 [ 1452.246237][T29906] ? lockdep_hardirqs_on+0x94/0x140 [ 1452.251487][T29906] do_syscall_64+0x4c/0xa0 [ 1452.255950][T29906] ? clear_bhb_loop+0x60/0xb0 [ 1452.260666][T29906] ? clear_bhb_loop+0x60/0xb0 [ 1452.265386][T29906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.271336][T29906] RIP: 0033:0x7fe51399f559 [ 1452.275823][T29906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.295500][T29906] RSP: 002b:00007fe514810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1452.303988][T29906] RAX: ffffffffffffffda RBX: 00007fe513c25fa0 RCX: 00007fe51399f559 [ 1452.312010][T29906] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1452.320028][T29906] RBP: 00007fe513a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1452.328042][T29906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.336062][T29906] R13: 00007fe513c26038 R14: 00007fe513c25fa0 R15: 00007ffd7667c858 [ 1452.344086][T29906] [ 1452.347175][T29906] [ 1452.349526][T29906] Allocated by task 29906: [ 1452.353975][T29906] kasan_set_track+0x4b/0x70 [ 1452.358616][T29906] __kasan_kmalloc+0x8e/0xa0 [ 1452.363259][T29906] __kmalloc_node+0xb2/0x240 [ 1452.367890][T29906] bpf_map_area_alloc+0x47/0xe0 [ 1452.372786][T29906] prealloc_elems_and_freelist+0x86/0x1c0 [ 1452.378557][T29906] stack_map_alloc+0x386/0x510 [ 1452.383371][T29906] map_create+0x524/0xff0 [ 1452.387746][T29906] __sys_bpf+0x38b/0x780 [ 1452.392039][T29906] __x64_sys_bpf+0x78/0x90 [ 1452.396496][T29906] do_syscall_64+0x4c/0xa0 [ 1452.400947][T29906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.406976][T29906] [ 1452.409334][T29906] Last potentially related work creation: [ 1452.415089][T29906] kasan_save_stack+0x3a/0x60 [ 1452.419827][T29906] __kasan_record_aux_stack+0xb2/0xc0 [ 1452.425238][T29906] call_rcu+0x14f/0x950 [ 1452.429447][T29906] nf_unregister_net_hooks+0xc7/0x130 [ 1452.434859][T29906] cleanup_net+0x703/0xba0 [ 1452.439320][T29906] process_one_work+0x8ab/0x1160 [ 1452.444309][T29906] worker_thread+0xaf5/0x12a0 [ 1452.449030][T29906] kthread+0x29d/0x330 [ 1452.453141][T29906] ret_from_fork+0x1f/0x30 [ 1452.457692][T29906] [ 1452.460072][T29906] Second to last potentially related work creation: [ 1452.466685][T29906] kasan_save_stack+0x3a/0x60 [ 1452.471416][T29906] __kasan_record_aux_stack+0xb2/0xc0 [ 1452.476837][T29906] call_rcu+0x14f/0x950 [ 1452.481050][T29906] nf_unregister_net_hooks+0xc7/0x130 [ 1452.486478][T29906] cleanup_net+0x58e/0xba0 [ 1452.490943][T29906] process_one_work+0x8ab/0x1160 [ 1452.495926][T29906] worker_thread+0xaf5/0x12a0 [ 1452.500648][T29906] kthread+0x29d/0x330 [ 1452.504756][T29906] ret_from_fork+0x1f/0x30 [ 1452.509231][T29906] [ 1452.511592][T29906] The buggy address belongs to the object at ffff88802f27ad80 [ 1452.511592][T29906] which belongs to the cache kmalloc-cg-64 of size 64 [ 1452.525775][T29906] The buggy address is located 16 bytes inside of [ 1452.525775][T29906] 64-byte region [ffff88802f27ad80, ffff88802f27adc0) [ 1452.538919][T29906] [ 1452.541278][T29906] The buggy address belongs to the physical page: [ 1452.547719][T29906] page:ffffea0000bc9e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802f27a600 pfn:0x2f27a [ 1452.559230][T29906] memcg:ffff888078eab801 [ 1452.563502][T29906] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1452.571114][T29906] raw: 00fff00000000200 ffffea0001ee7440 dead000000000005 ffff888018442780 [ 1452.579739][T29906] raw: ffff88802f27a600 000000008020001d 00000001ffffffff ffff888078eab801 [ 1452.588354][T29906] page dumped because: kasan: bad access detected [ 1452.594808][T29906] page_owner tracks the page as allocated [ 1452.600558][T29906] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 16865, tgid 16865 (syz-executor), ts 749593944480, free_ts 749593386924 [ 1452.619190][T29906] post_alloc_hook+0x173/0x1a0 [ 1452.624022][T29906] get_page_from_freelist+0x206b/0x2180 [ 1452.629622][T29906] __alloc_pages+0x1ec/0x4f0 [ 1452.634271][T29906] alloc_slab_page+0x5d/0x180 [ 1452.638993][T29906] new_slab+0x87/0x2d0 [ 1452.643109][T29906] ___slab_alloc+0xbc5/0x1240 [ 1452.647825][T29906] __kmem_cache_alloc_node+0x126/0x270 [ 1452.653330][T29906] __kmalloc_node+0xa2/0x240 [ 1452.657959][T29906] kvmalloc_node+0x6c/0x180 [ 1452.662495][T29906] nf_hook_entries_grow+0x31a/0x760 [ 1452.667764][T29906] nf_hook_entries_insert_raw+0x47/0x300 [ 1452.673446][T29906] nf_nat_register_fn+0x1d9/0x540 [ 1452.678521][T29906] ip6table_nat_table_init+0x19c/0x2c0 [ 1452.684034][T29906] xt_find_table_lock+0x220/0x360 [ 1452.689103][T29906] xt_request_find_table_lock+0x22/0x100 [ 1452.694784][T29906] do_ip6t_get_ctl+0x5e8/0x11c0 [ 1452.699692][T29906] page last free stack trace: [ 1452.704394][T29906] free_unref_page_prepare+0x8e5/0x9e0 [ 1452.709904][T29906] free_unref_page+0x2e/0x3f0 [ 1452.714624][T29906] __vunmap+0x874/0xa40 [ 1452.718824][T29906] do_ip6t_get_ctl+0xea2/0x11c0 [ 1452.723723][T29906] nf_getsockopt+0x25e/0x280 [ 1452.728366][T29906] ipv6_getsockopt+0x22f/0x2e0 [ 1452.733207][T29906] __sys_getsockopt+0x1b0/0x230 [ 1452.738107][T29906] __x64_sys_getsockopt+0xb1/0xc0 [ 1452.743176][T29906] do_syscall_64+0x4c/0xa0 [ 1452.747633][T29906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1452.753582][T29906] [ 1452.755942][T29906] Memory state around the buggy address: [ 1452.761602][T29906] ffff88802f27ac80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1452.769698][T29906] ffff88802f27ad00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1452.777799][T29906] >ffff88802f27ad80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1452.785895][T29906] ^ [ 1452.791292][T29906] ffff88802f27ae00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1452.799390][T29906] ffff88802f27ae80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1452.807478][T29906] ================================================================== [ 1452.815592][T29906] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1452.822826][T29906] CPU: 0 PID: 29906 Comm: syz.4.6154 Not tainted syzkaller #0 [ 1452.830321][T29906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1452.840411][T29906] Call Trace: [ 1452.843724][T29906] [ 1452.846685][T29906] dump_stack_lvl+0x188/0x24e [ 1452.851488][T29906] ? memcpy+0x3c/0x60 [ 1452.855511][T29906] ? show_regs_print_info+0x12/0x12 [ 1452.860751][T29906] ? load_image+0x410/0x410 [ 1452.865292][T29906] panic+0x2d3/0x710 [ 1452.869217][T29906] ? bpf_jit_dump+0xd0/0xd0 [ 1452.873752][T29906] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1452.879677][T29906] ? _raw_spin_unlock+0x40/0x40 [ 1452.884551][T29906] ? print_memory_metadata+0x314/0x400 [ 1452.890038][T29906] check_panic_on_warn+0x80/0xa0 [ 1452.895005][T29906] ? __bpf_get_stackid+0x6c9/0x920 [ 1452.900139][T29906] end_report+0x66/0x110 [ 1452.904408][T29906] kasan_report+0x118/0x140 [ 1452.908942][T29906] ? __bpf_get_stackid+0x6c9/0x920 [ 1452.914076][T29906] kasan_check_range+0x235/0x290 [ 1452.919040][T29906] ? __bpf_get_stackid+0x6c9/0x920 [ 1452.924178][T29906] memcpy+0x3c/0x60 [ 1452.928013][T29906] __bpf_get_stackid+0x6c9/0x920 [ 1452.932979][T29906] bpf_get_stackid_pe+0x33f/0x400 [ 1452.938048][T29906] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 1452.943531][T29906] bpf_overflow_handler+0x6d1/0x790 [ 1452.948758][T29906] ? bpf_overflow_handler+0xd9/0x790 [ 1452.954061][T29906] ? perf_swevent_overflow+0x230/0x230 [ 1452.959545][T29906] ? ct_irq_exit_irqson+0x113/0x170 [ 1452.964768][T29906] ? __perf_event_account_interrupt+0x187/0x280 [ 1452.971035][T29906] __perf_event_overflow+0x457/0x630 [ 1452.976355][T29906] perf_swevent_event+0x315/0x570 [ 1452.981411][T29906] ? perf_tp_event+0xc10/0xc10 [ 1452.986208][T29906] ___perf_sw_event+0x498/0x6d0 [ 1452.991095][T29906] ? ___perf_sw_event+0x184/0x6d0 [ 1452.996147][T29906] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1453.002591][T29906] ? mark_lock+0x94/0x320 [ 1453.006961][T29906] ? __lock_acquire+0x142d/0x7ea0 [ 1453.012038][T29906] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1453.018055][T29906] ? lock_chain_count+0x20/0x20 [ 1453.022932][T29906] __perf_sw_event+0x135/0x260 [ 1453.027727][T29906] do_user_addr_fault+0x497/0xb20 [ 1453.032784][T29906] ? trace_hardirqs_off_finish+0x86/0x180 [ 1453.038563][T29906] exc_page_fault+0x60/0x100 [ 1453.043181][T29906] asm_exc_page_fault+0x22/0x30 [ 1453.048050][T29906] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 1453.054673][T29906] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 1453.074299][T29906] RSP: 0018:ffffc900054df788 EFLAGS: 00050206 [ 1453.080397][T29906] RAX: ffffffff8414b201 RBX: 0000000000033fe0 RCX: 0000000000032060 [ 1453.088391][T29906] RDX: 0000000000033fe0 RSI: 0000200000002000 RDI: ffffc900054e2f80 [ 1453.096404][T29906] RBP: 0000000000000000 R08: ffffc90005514fdf R09: 1ffff92000aa29fb [ 1453.104403][T29906] R10: dffffc0000000000 R11: fffff52000aa29fc R12: 00007ffffffcb020 [ 1453.112396][T29906] R13: 0000000000000000 R14: 0000200000000080 R15: ffffc900054e1000 [ 1453.120394][T29906] ? copyin+0x61/0x120 [ 1453.124501][T29906] copyin+0xe7/0x120 [ 1453.128420][T29906] _copy_from_iter+0x447/0x1130 [ 1453.133308][T29906] ? copyout_mc+0x110/0x110 [ 1453.137846][T29906] ? do_raw_spin_unlock+0x11d/0x230 [ 1453.143065][T29906] ? _raw_spin_unlock+0x24/0x40 [ 1453.147971][T29906] ? find_vmap_area+0xf8/0x110 [ 1453.152760][T29906] ? __phys_addr_symbol+0x2b/0x70 [ 1453.157807][T29906] ? __check_object_size+0x4f6/0xa70 [ 1453.163120][T29906] netlink_sendmsg+0x755/0xbd0 [ 1453.167914][T29906] ? netlink_getsockopt+0x550/0x550 [ 1453.173145][T29906] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1453.178728][T29906] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1453.184038][T29906] ? security_socket_sendmsg+0x7c/0xa0 [ 1453.189533][T29906] ? netlink_getsockopt+0x550/0x550 [ 1453.194762][T29906] ____sys_sendmsg+0x5ed/0x9a0 [ 1453.199561][T29906] ? __sys_sendmsg_sock+0x30/0x30 [ 1453.204623][T29906] ? __import_iovec+0x306/0x510 [ 1453.209515][T29906] ? import_iovec+0x6f/0xa0 [ 1453.214046][T29906] ___sys_sendmsg+0x2a2/0x360 [ 1453.218754][T29906] ? __sys_sendmsg+0x2a0/0x2a0 [ 1453.223571][T29906] __se_sys_sendmsg+0x1c3/0x2b0 [ 1453.228450][T29906] ? __x64_sys_sendmsg+0x80/0x80 [ 1453.233419][T29906] ? lockdep_hardirqs_on+0x94/0x140 [ 1453.238660][T29906] do_syscall_64+0x4c/0xa0 [ 1453.243093][T29906] ? clear_bhb_loop+0x60/0xb0 [ 1453.247803][T29906] ? clear_bhb_loop+0x60/0xb0 [ 1453.252523][T29906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.258452][T29906] RIP: 0033:0x7fe51399f559 [ 1453.262889][T29906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.282517][T29906] RSP: 002b:00007fe514810028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.290955][T29906] RAX: ffffffffffffffda RBX: 00007fe513c25fa0 RCX: 00007fe51399f559 [ 1453.298947][T29906] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1453.306948][T29906] RBP: 00007fe513a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1453.314950][T29906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.322950][T29906] R13: 00007fe513c26038 R14: 00007fe513c25fa0 R15: 00007ffd7667c858 [ 1453.330966][T29906] [ 1453.334594][T29906] Kernel Offset: disabled [ 1453.338937][T29906] Rebooting in 86400 seconds..