last executing test programs: 5.082147392s ago: executing program 1 (id=2460): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000700)='z', 0x1}], 0x1}, 0x40011) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9fcb010018000000000000001000000010000000040000000200000000000011040000000000000000006100"], 0x0, 0x2c}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x7d3, 0x8}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000}, 0x0, 0x8, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) write$cgroup_subtree(r3, 0x0, 0xfdef) socket$kcm(0x2b, 0x1, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b400000000000001691000000000000095000000000000000000000000000000b9bdfa5eeba0834e931b37e8b1ffe52a343365"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="17000000000000000400", @ANYRES8=r1, @ANYBLOB="0000000000000000000000de66a8830000002000", @ANYRES32=r1, @ANYBLOB="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", @ANYBLOB="000000008000"/27], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socketpair(0x3, 0x1, 0x4000000, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x29, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(r6, &(0x7f0000001c00)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @rand_addr=0x64010101}, 0x0, 0x2, 0x1, 0x1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="7111f811ee1167cd1d702d3c14f3225d1e13995cee052aa9672817ae4f6ce6b118255493c52d1236549652855c3e9a3317556d66991a8548de90f704b282183388e53e60fb973e82e5d975c00d6577c8d80bab8e5ba0ca39ca1ebdb9400e5c60d4e5617b06b12a3f9e79d4e7edf927b7425ab236185d244cdf127c9af12a0a408e35c46730faf56f090baa3e", 0x8c}, {&(0x7f0000000440)="5397d990155fef98eea10f1a56a04d0d187f850a3a96124c562fc30f80c5c78fa601d5b7ec7e082a6671f821e2e91b754f4aeb32bf29358b952c69d879f18957913403942456412012410fd070e69df0f217d6a7518b5fd70bf06a853c67f5ad8c18517317c24f7a63a677a07330f6d0f08339774abae542a187681ee60b102368edf1fa816ee429b2d17b8cbe", 0x8d}, {&(0x7f0000000500)="562781aa2408e8eb89f1f5769d4edba4eda28299f05753bd8b7f87afb1512062d58e35422b18cdebf80c52a512803e545181e44d5ed950da8923757155ec3c148716089b2da679cc52054ce684a9438bf9912195d59e87760594ec519465b076a5a6671226924b8d542ca676cc", 0x6d}, {&(0x7f0000000580)="0c6613da29df59bbe7", 0x9}, {&(0x7f00000005c0)="18e061338556144b3965d3177507b949c2be", 0x12}, {&(0x7f0000000600)="84d30e63cd088619a0bc69607de751c275d41b1b6aedb9ea4b50e0036c20c3d6471dee6f52ff4c847e25f7bd403446fcb6ccd4785eedca1721a2872614b3f4f2b1ae2d4cf3c7450631c861634c36dfc9a7ea0779d5e3335b8e8d6643baead70ff52cbea92ff873c8ffef39c784556c26f96d929690a057a8892b37d1e220f30eecda336fc4cfdcea055387f7210c516f1e0ee5fa6b010034e6ae3b9b566c4b0fe1f0876bbf24cca223bed538911ecac56279f53c6f401ef8f951b286490e9a339aaf648a", 0xc4}], 0x6, &(0x7f0000000980)=ANY=[@ANYBLOB="10100000000000000f010000fbffffffb55a02b0beca9ce771aed200e38dfb14cdac4117936be523aa294e107d92f1a474d5c01ddba0c10fec1f7d57290b9101a2a6d9300de194c47389d11b9c5aa9e54f1514f748249375a45759a49f931d280a34788f3998fdc7ebd12d7760520b0b841e6a476f559028630fc3ce87ddd646e13368f7db6b273bf9287421cb7377bce8c45e401e75c94149262bdcdce19f5fd686810049a454b070505f2f3922fb28ece7deba8d9f31d7692a50dbe6a12a8d91e9d8b1b399b8599b1e6ed2130ae4942cbfce9cdbcd558b90eeedcf986ac19226a849e564a7ac87216c91275cce49593a415002c6530b41a5e049b486b8b65cfa632099f2ef73860f6644b764c2b445d46d721f5a1428f1ba4812957d9725b8d60dadbf3c3d514c98c3ce35d572c23e3fe5792c10a0be8a362b67a361fe763f034d269ba7ff163365d85b92de40132c2f481fa582132e7b491ccd5c142d7b3fbbed9c8bfcdc11e5090a07cf4a46fa304e9d7f06e4653f7394e31c3783c666e6346377252f0981a2404370f753def2217f47077f6de22571fdb864f9e55047861fb5cde559bf3233a1c60e7d9e52b5ba7a41733bea95f534b3dd702305803fe9983fe72b3f0bc52895aa5e97d89c6dfe06efd6a2c8d43b407fafd163c5c5b812e11f8714a30c95b6efdc24cd993f54c80bfb8c7d40f23512cadb56693752fb07026a3ac3cac54344082a36b5db7f2549f38b0478427b1aab57f28737c5509de8b4993d4f096068afe9dc5563059ca50bb3420eaef423eb8de7ef2f1944b76249a9ff0945cf335f94c3c7493269c3786c7b738d4593a150c9b9aee6f6c579f078b6621943d9fe3128b239acc2ff33143199bd9e5a5599c48393dc0aeb5d465ac8dc8fb51371c989e99ce3f399c9746bdabbf58153c6f0196ec2bd9a9a02e5e094c75977156102a798faced301538f35969b34ac1509ed34d78bfb6bae11bc7bc0eff3d0acd3e85ce006e054d176118cc40802875681d03428375978e675aee34f326ee7b20ef00f3469f4d09dd73c81a1d6405fa58a6d4ededd1bb801ae389f2b4e8dfbd52295a2a5632a0b8f8b337be8efe124c763fb9dad6f59061d56050db632cc3db711fbd5b6c9c6c59b41aae4c9a88336181c5febf89dd6abedcec62ecbb4fd277255a0aa0cf978178ce88d119c8bfa01d099da7404750c7bcfea202073d09c0c803507276030fd664ab87abec5e62981745701efeb71c5cf2a5925eceb3e477ddb98a7e55d466111e05d1f849aad55bcc5b33054bf14048654983fb36e27e2912953dd237e461d5079da16110fdde7fffa288f7ef0b5c82be82fcfcef08338bfa9f21bd23ee193cbb5f40cecc95d6ef9b412125cf0c42218d797dcf7c0288028b65f0273746ca850ccc567d063963aee559534610dedcdedb6ed1ec3a056a325b964bca0efa4ec98575463f3196dc1c8e66a17c95582d44e1010cb1c1427d60c64d328243257cef0debac40414a6096e068b4d3b55669b298a60fabcc5e82f97d925b115dad5c2a4442d228f3ac7407a68648bb375e84fe24fdfe3951306c5bdcc95dc1f7d2eabc2564f106914ffd4154ffc50b27f53b7352b9b5563735e23788bd4c0b1d8c8c628d4c6ff309f2d4df571fe8334cd4d767b5697bf692d99b79b8bf812c417865d37ef1811ac2fe1b52825caa4a6dc2d2d1415f3cb8fc872f72ad8f859b8302a618a2a1b430167ae22931443b69e661aeb7e28fc4fd4c85912816b7e9bfcf9d4b7bce14b03b7b3b6aad3eea678703532074253b1a5fc98bd0e4f50573dcd5cdcc0ce414522b45ed403b92ea699932ceb109aaa13cf24e20d3d6e9ccec7f8d036d7a5c4229c902516ae2c8d3407515b8ccfb5658d9d1337828dbc7df69b82a549373800c7e29b920548d421467390f3f58dc3527ccc4edec7c2159cfd073116a0f3df6e825bcc84f42b8d21c833898ed735c8195c5dc69be03c8c264ad1067c45185277d5801e0bf6953b94eac0b84eaf74b4f69af5cbe49c54bf4b11a9902d46640364e3a85cf4289a8734666d173923022d220f39847ccbee365d2cf204d6da9377cd90b19075f1f36b82dae84529f5fa8ce450082e3fae2bfd2bbb2813e5c82ccbdc4780e9821e15d7349cd25b11fd5a0b5521ff71df9648d326cccaf7b75382801d6ac3b5d97fbc0878dfd52e822407a8fd111313389794adab4a79d774bfb6c68fb60098815007f280ae2ab8bcf34eae3da1195db8a53f648c90a87cbd04dc9b7acc5e01aa7171e351b157a86f7236ed251f8a83f2362b0238dee76235e08ee417b66fe6bc9f8fa980b4c65db3eaee04f0399f6ff35a0190614aec66e15cc71483dd60716ca54f42187486276d186fa3b3729146073a8e6e6046009b8e1053b9e1192a2f922517bc24d6c41e797d28b4e34879bc63bae5661d1185eb45e5e5597d32794d8350e13d32addf71578e10bf1322f325ef98697f40428bc00eef1ece52e381a75b8da49cfbaff0f5605b4382639bb0ae8239b9a1d04760e9e16f354a2466cd2e5394be6d9eca72a724e4679874e8f98b27d0a99401d2980658e4ae32c440127bc25b2aa8f061e8dff2603ddec2de8bc8f294d172701cab238c74b030fa4058cd1462792e0b0401ddaec4462f4d20c8f6beb8c1c13a8f7eb4843040783248d4e958f6ef59a9d171134d457a38f8e6da51f4fa0e2b7748ac97948b90b2268cc9c486a2878fc5699b48f2b0112da121f197f4fa61cc39b3f62b70a450706a950d244c500eb0b5d4d7f3911bd4a635ae6808f6553ab3b92c07dabe6c5c96363e14fdb08f48072f509a13c27baeffb5daf8142ec0dd078804b45cb770e087959341fe1b84d4fe6900fbda6f82a3156948ae6644af4cefaea4401d3cc55ea7660bf8a5d61dc1ee073d5e9a0de49c575a5deb49fa41ca1b9990cf4981b75c342825786e7c1b3c2b6ee918c1fc53709382cc6e522aed5856641975cea71e2b192642c70de7076c060e4377bc21e7800551f9b137635c36a0fad5fcb9303145639910d6a2757bc03aa110bd00d88cd83e89465c0c81eca39aa422a9e6d3040b0aeff87f5ca2fbec8fdaa200698ae339cd5340ea8269c50713206de5584cce4c8cfa00229b0965ddb37e905c669da791758ff518005a7752478e9d370cd31f00eb5ca59525a886febb678089bbc5ac714cd0d6ae0858b21fa9511bb67b708a8f31dc164b65ba7d02f57c0e2b2174261393f926d94938aaf23544699c89ebc33b852f9378418b5b6c71c672c3b99a647942f0dfc75c5fbc84deff8d29a47ff33d1989d3aa6e9adb7efdc8790227d791776f571c4b6707e69a7c6efaaa26b11b21c3760374cadfce8a5405550fd529eba08eb5d7f04a46a0a93c4d6f2c592c5631a46c1e2804cb21c9d46a6c7c209d98c9b94c939bfd731f0fc20d391716e587be9d7e9bc11e68ab9593fc8d029b4611e2cde87ac171f0746d5dab85c68ddd3a13330dac0dffe5e3f31318214a941c93fe99acc3f6e153cb271842fc44e196de1fc4be63de03004ad1fb1900b184514e58f9d137f7891fb6b2760414171e46565f97d99a9a34aae041e413ec63a92c81b73152cead3f601b4a3ba9723a9bc5c4967e29074b2599475aa8091c5d2da5bf697134989b6e96c50e259dcd4d8126f7fab08004dd78eba8c3b32f9aa1eb1f2df2f2f482e8d82f78e306017dd5b998b7190c02991b67ebdce4047d69d419a955318a0b2569b87a2cbe38f945724b9b8893069aae7cc767088fb17aac0a393dc8ad8b0157682345963d63643ab6fed8f9ccf2dfc4021819af4b7eab25fb1469551a406aededeb0bc002f9ac715ba9b9722a0910b087a8795c7a7ca02242e8745d3f642dbfe3705b1b83ede814db7ac661f698a982656b5c1406c82800fd1d6d6f1ca80a1a705f5c99e4751ec2e784895d5847f151939a840c458c18057da2018023b3d8c31c04f9b2f36151f945b077780eb2317569b7a53dcfc8cc05d8d843573a26734108a69deb8ee9454028314da5abc617c9bd43f5948176a62789132e9743cb862e0c352a0b5215cfe6161176ae5fcf093fe7a256316d5f152d9e49e0ab4b1333dce25411de12296e19f3c0dde4da611e8367f413e69d84abbdff0daf15ca83e5620bdc83ece78f3ea350892d7be2375eacc503fec49306dc66628d904f69240f2a2c09feb42cb979554cac308a189143deb8cdba9615074ebb4685945901e0e001face492298c8eccd7b6e3ea602ac8356c4af9224efee5a653578128f1b432b4480d98a6cd613014016e2a52b0c9b44cc38d80bf12de002205d2e956b2b41c1b2c2840ef269f112df925bdc14b4315fe5c201e7ecc50c839c8d62437612ba752756bd83cc5611c511e76fb6621cf88a52b2fef06ee7a8eaf6c57a80a59e7dfd0f53ddf9a70b858abd45d0698e2e1d652162b7166cef6502328f42932edfb19db67f48bda06d17d24fc9640e7629751b7e027b9b6c861b45cb46987f46560ffab9f2fdba220b3b52f83e2505aac54b87c2daf784479f1629df8e70b71f6dd7b94685f47be2cb9583b120fa45aa5c6bbd2a9118e6e3b8a9234e6ff501611524b7ac9732f978ce0f4dc106e20d27609b8f5dc862d6d8d31274f607b937ec320303ec790a45cf88532810640e72df82fa082d5d9a88d6eb8138fc547f38bf6b768932b843990debd9525ec917a0c0753cf1485b3ce0886f0a1455c707b91c78e1f142561e1c6adaae215e1653c43a0ebb3ddb92b3d189957e11c32f54ded30b2713fbb20f98d5e3056ad27b4fd7d9ed90ce91a9d7e93f34248b086046508d4106e182255c6a0acd415e47e307bba1e01027066e24868c683a1dab280cbc489d9db723249f672a56cc5c6efc943d2a0c6dd8b8fce8923b98b263db0c6dbc48754c7994f80502d75c6efd40f0041e17ee7716a1e9db26e941e1c221fb00a591be8f479f7ea3f6f80d26c2160e4cdadcc333a81ea1ab1897fc79cc4dcfb5f7d8aa45fd9a394c4ebd6812b6c58034341a2491b0c9ef77cfd9d564ba8a9df55ddb04922434375c4eb48f64d785a9850a5151af5542ff73daae153a9498e35e71a2a1553dec17a45e79515bd890c306aebbc8fc37b5f2e8430c58341456d729e3df7d3a00bdb51d20a79c97bf28a6d47feb6f4ff44bd4be01c5b6e625c80010bb031aae439115b7ca533147031d633c5b04bfa1eca4830d492f1651ddecaa267ecd5c56387ec3f1f1dc9e2e4c041adf6ed94128ef6922150d4ed240c322e87d3adca7097d2b95f6909dc12370a9ac75fbeb66da6ddc4c0f71f23c5ea18d838433fec98c2d96e9a67c940014318b860977cf06d90d491b1a0f7d1453f209ae8d9330ebbded9b1c5bcd24d34f720b72d460bc233208d891be93eed492f144353854a2f1ddd835be6a5a9a6f5815da85e29fb947c1bcb64c1e40075eb2b2467aaae72075095cec74f8eba8bd63fc9b7af086d13d30b2064fed7c328cc652df49fbf3e0bfcbe8b0bf38b7cb6081447964490966d985685d573df30b29d59414a8de94eb62f981ac8f6dccec9f0844efdfa1d1303f0cf79ecdf540395d459ccb251d59d4e6b0e342c2a07723de38aff43f6e608c899932cb31957a865bb0f17b58f8b37a005423a179bbebf1533d123e71c056276d769a26037e36c5c24d2bd0f0fd033df2475c9238b6193f339aa685943f25130ff0939cbb7033e5ce1dbf59974252146cbdfd32e98245654a71c2ef9eecb89f9ec375ea83ae9766d6372a7e782e1dd5089dc701dd9495ef5dd1d2e249544f4319087fc111e453780000000000000017010000040b00003b5943164d2e20c9c0935487aa541e27fd978d8fe82289b0cc5171c931173bcbec529daae545428bd2147e1517726f94d7288e118d2f1a0ce26ec2250df8feb9a0b9a6f28370015a3d99b32fe59bb73b811f691ce12734a1284d514373857df80e00000000000000e00000000000000001010000b70700001e66d62b05acd058f28e871e234ddec78a56e7e8513d171e1ad8974fd8e422c9f4a0f75f7a81a1d87905134f2cc370d6b007b0decdd1670cc66a8f0d4b02c2dedeebe09f81e62f90118650ab120c8169476e578eac4cd1131a22d938061b933c5c271f48f6d017a60d93aa6cd8c960a91bef0ae1134c598a46e0d7f4741a83b0767913104e86d14eff5e55677c5218cf479e69688d7953b0adbd001a51fb7a3756d97c5568c12aa1202a784e2685726841b9435865b16337959423a0b12eec6320135daae58c7f773787c00a692007f508010000000000000c0100000000000091c50e7c6dcfb5b506befaad50362348d4e880d3a5eff7a3b0790b12da4524cf1c18d32281a4388347fcbf5efb58e7161e5bc5b497eeb9ce250ee3d10d519c6bf3d12889276330e7ae25dc5d67ecb22e8075e3c4461c4ba12f642c6720aa1d68e5b5215c037cce4ed4a51e072faca89190ac661fe873c221ad8117a5c5674006c6bf0c9f961a9c12a0ec0933a78204967bd2eb801ce85ffea0db33e82355b94b056bc30036d64442f38917d90ea6b517d1d4f8b10cca0d08b2ca298eba6cf584f3948d90620962e459d99b7248716f0655436c6667383489c2fe9ace0b9c6310c86406c52436de2b3df2efcb889a62140d51be8637000000"], 0x1270}, 0x20000041) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e12090006000468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) 4.997857507s ago: executing program 0 (id=2461): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@file={0xed9a883254e326f5, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c7c445800445f2a2", 0x8}, {&(0x7f0000000100)="02abaa75063b748b3ac5835b61cb6b797c2f36d44cda306201a218e40b32f1905b739fecdb71efd587e513585f04be98d5a038226b0c17fc1980a9393edfaa8bfc00704e5f82e34f68d0becd283fdd94f25ace3524e3d6d849ebedb0994ebb6b8bf343dab0c9898ce5fc3faf63fd23b8dd91f099b7353d07a1f7568582e989d6f191f43d5598c4350e78ab211a164c251d074768453c811b602f0be703bce77f53752de5b4ede4d75fffee02856e3ae27776a1f3e8b00f90b94b89", 0xbb}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x1}, 0x18) socket$kcm(0x29, 0x2, 0x0) r2 = syz_clone(0x111000, &(0x7f0000000600)="ce3ddebbf1319c55095e89b27b20ff92babdfbe8a40de2f0c13e92e61069bdb08f26", 0x22, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="e82a586bf2653ccf5e84d46935a7ea2d756d44") r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='io.stat\x00', 0x0, 0x0) r4 = getpid() sendmsg$unix(r1, &(0x7f00000007c0)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)="4c98e757ef9411065a1a1e4d8219fb63e467afd28de47a2bfd245078fec3987c701b68ad90814cac80540a65a8b91e8b3236986871752c7ec709e6d51fa4dd28a7b48592ce844775d7f048fb79d7fa3cdba517c58c700d7fa48dee54ce0114a6511f7fa492fb666b5a46ed73ca482212d2f743dda3aa465b020010370cb7ae08b5a79fced1505ecb02f5fda4a0ec6e8be4940c20c7", 0x95}, {&(0x7f0000000400)="defb264a9e6324135225edcd381d3bd1c138aea319a5df15486277f4fdfedb2ec43148cf189df6e2f248d2d1530e7594949f8bff25dbf2015984122186a14ba03ae6f67c8ccc6ead6eea6a1b309f9ab76eff29b58de6d423adaf7638ec7a0e8b1b63bcd81f440fe58709eca6f4a6eb", 0x6f}, {&(0x7f0000000480)="a5540ecf59698d82c8ec908150f8f6e0c6197cef2da4513e73f082e26ea4e1e9", 0x20}, {&(0x7f00000004c0)="5ab7c8b0ee6442f40703688f70957babcd72811b2f3d442b299c3faf6721f35151c4d1d6599f91870c8d0f3a1d704c416b791c2596a7c370017748f330c8b4d72a62df12ca9baedb6747409bbd48908cae5354036352b67c9086b84ad787f54b6416b3c64e7c4007f3bb6be2ff0e7e4eda2b4e366f900c9115568a532d63f6096b8b64f0e618479b6d411ea799819991c93f2ed0b3ed6b37d8aea5b85117440fc701f405aa2564c1ecc5aad29c408356aa5ddb8b3076a415c4f6e4646ff46f27ade685fa9407716398e5d638895f59c075e9900a2d03ec65d12efc6ff3c2bcc722ca7d1f69806247e88f9b7323d9f1de2a", 0xf1}], 0x4, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x78, 0x40000}, 0x20008001) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000840)=@file={0x0, './file0/../file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f00000008c0)="427097513d9a1e34d4df8bba92d24cc138aae7613f8f9e6aa60fe72d79ffa08b32f2822100ea4100f32eb8c3da59be05bcc6f23bd470", 0x36}, {&(0x7f0000000900)="3bfe22ffccd12b5fb754d6b59302652b123e81d7183915c796c3ba69b5fb00fb5f8f8d9f", 0x24}, {&(0x7f0000000940)="be049e9a0e484c6ad654ee75754d6e6f3a840ca58761a85f7bc5b337ff9197fb749332a94011769209c8f072e7e193e1219cf7c4eb18158f0e5e87f39a212f3958c25ebc6c343391a3392a21cebdbc2c56b6c8e0f7edc9e8beb4e324fef75ef9631707de6958525ea3b0cc773bf3cf653c9d9b10a61ef5e7892be1f75a5d5afd23a71f1f66128b427459ac2599fa3508e07578cb0e229b367e892dbdd4891271960517e680ea6f8b9ac7ae4e8fbb9b136cb201a4e253f0a887024281c4fd5eb1b21fc22ffdacd1bc113f9081bf433ece5ce5e0ed59d899e6b94446fcd2a25ab20a67ec56fcc036", 0xe7}, {&(0x7f0000000a40)="7b8278a92aacb78f2df8eb798ae6ca9b07aea985febe105c9d351e029ad23984bfe84e152de0f2eb078bffe07749d9c916aa3c9717ec8ea4056fed70f144d29e9ea4162996ca3e29c124600602a2da0e123c3c503a3f3ac0d50c2634a676f5e76fe46d5f318461bae42dfa4bef24c2408e33805770374d5548839df2d66df5a0a5a56391de6f6321c79604026b3a88fc1bbfdd78c32ee91006d1b8914c6a54cdd5a86fcb042df89e204c4f8e2653d61a7c9c6e4535bb947c413cf7b730e9f8af", 0xc0}, {&(0x7f0000000b00)="fc16d0d9e3e762abce5402e7c5c136a4d7d2a107b9e81e2181e8ebc1c9847579e10f3a3522aa6e72ff856d21a64ddc63731f50f371777203d70c4b8c81ce6bf89072114db0e1e30b1d78fe081f015df23edf6d1d4ee06b", 0x57}, {&(0x7f0000000b80)="5fc555569981f6463769f7bdddc4bc6c40e120b238e8eea05fd3740d087641e16a78918df104fa9cd4b381dfd9e0aaed157fd1c19d71e755f58292ff77b7626b2eb5198fe955766602d6fd7b3fc22235a1d684750f27bd46f0880054f37646b5c678b1b50381eec6aabc59fbd0e546525233a8d8a436fb8c530395ca08a77a957402796e03a07159e5cae1d5f1e9ce205bc8dbc06fc99f045df0575b8c808220ca8c013c4a5a2b718b715c5c38", 0xad}], 0x6, &(0x7f0000000cc0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x98}, 0x40000c0) openat$cgroup_devices(r3, &(0x7f0000000dc0)='devices.allow\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000e40)=@generic={&(0x7f0000000e00)='./file0\x00', r3}, 0x18) recvmsg(r1, &(0x7f0000001040)={&(0x7f0000000e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f0000000f40)=""/245, 0xf5}, 0x0) recvmsg$unix(r3, &(0x7f00000011c0)={&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001180)=[{&(0x7f0000001100)=""/91, 0x5b}], 0x1}, 0x2000) r6 = syz_clone(0x20080, &(0x7f0000001600), 0x0, &(0x7f0000001640), &(0x7f0000001680), &(0x7f00000016c0)="03ac6c597360f06f2726b3acfed3efb2c2e9141c0fd32be033f3701644c5dd7f808e52b43afaf3c0296ecffc872730af75dc320061bedbd15e032379300c626f810f1bd3e893b5369441b3c8e3642e92e9926a51ea98372ee6f32031b44b768d676d716e86f1366d19309337c7b1930348d4bec69b5c8f65dd641b8cae12055ecb54e43dc3e4987c23eaf49e594cbb10cfa9ea5a31815d2d32effafdb0d5f3565441353de3304f9ff2bd1594f37d8a56fb87d396f5") r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000001780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x3, [@struct={0x10, 0x3, 0x0, 0x4, 0x1, 0xe6, [{0xc, 0x5, 0x7}, {0x6, 0x2, 0xaa}, {0xb, 0x0, 0x9}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x8}}, @union={0x5, 0x6, 0x0, 0x5, 0x0, 0x2, [{0x8, 0x5, 0x101}, {0xe, 0x1, 0x200}, {0x10, 0x0, 0xc}, {0x5, 0x3, 0xa}, {0x9, 0x0, 0x4}, {0x0, 0x3, 0x3}]}, @enum64={0x4, 0x5, 0x0, 0x13, 0x0, 0x8, [{0xc, 0x101, 0x2}, {0x4, 0xff}, {0xc, 0x0, 0x8}, {0x8, 0xffffff50, 0x81}, {0x4, 0x8, 0xfad}]}, @func={0x9, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x0]}}, &(0x7f00000018c0)=""/151, 0x10b, 0x97, 0x1, 0x57c96690}, 0x28) sendmsg$unix(r5, &(0x7f0000001a80)={&(0x7f0000001200)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001280)="bf2ecefb236617d58455d870a7e20a1b35bda2ca63bfe0badffa2a002e9490448138c6aa25599bb077c5522638b5f4ce731b76eea2271f45", 0x38}, {&(0x7f00000012c0)="8981bd3fec4a30aad701d7d102a1929fa7511814436a3a2c0c54107b07a833", 0x1f}, {&(0x7f0000001300)="063b0a8d969f0bdcdcecfec84230227d90d987ed1268ec2f5906073c1445a76f73ffe67d51fca71adc1b019a99ba0e049a24cd4f05e49b77b06ebc26663eed5bb41c7d2a87f00571fa581d83e3f913141a5bd85846782709b15b661a1df59ea10e8c2055482fb58b9e6e1c51f755ae9cd68fd8cf55b2c5b371aee9980195b65808211d805fec386d8e", 0x89}, {&(0x7f00000013c0)="a8922eec09f5b26fbed524c3485d7c3c718d7ad8d28812ff0b21bade879120dfb01e5b311b9ab748e7eb15ebac666cc8fb9c8d362094c01fb7ab68751f18dc8bc4407d52613d68e9b73452fd28ef65b91e3fe79b3b2e62d2148ccfd36c08f5375e5140e44999005c14cfae34f12f2c8f2214bf71de1a518ec5659e97c66cd83fd2f3dcb427e2103f584c9685c4bdae4e82405d1a314417841886a6", 0x9b}, {&(0x7f0000001480)="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", 0xfc}], 0x5, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x90, 0x30008000}, 0x40000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x6, 0xf, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x95}, @alu={0x4, 0x1, 0xd, 0x3, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xd1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @exit]}, &(0x7f0000001b80)='syzkaller\x00', 0x4, 0x50, &(0x7f0000001bc0)=""/80, 0x41000, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001c80)={0x1, 0x0, 0xca1e, 0xffffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001cc0)=[r3, r3, r3, r3, r3], &(0x7f0000001d00)=[{0x5, 0x3, 0xd, 0x7}, {0x4, 0x3, 0xa}, {0x1, 0x3, 0xc, 0x6}], 0x10, 0x80000000}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001e00)=@o_path={&(0x7f0000001ac0)='./file0/../file0\x00', 0x0, 0x4008, r8}, 0x18) write$cgroup_subtree(r3, &(0x7f0000001e40)={[{0x2d, 'cpu'}, {0x2d, 'devices'}, {0x2b, 'hugetlb'}]}, 0x17) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e80)='./cgroup/syz0\x00', 0x200002, 0x0) recvmsg$kcm(r3, &(0x7f0000003480)={&(0x7f0000001ec0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001f40)=""/66, 0x42}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/195, 0xc3}, {&(0x7f00000030c0)=""/42, 0x2a}, {&(0x7f0000003100)=""/174, 0xae}, {&(0x7f00000031c0)=""/191, 0xbf}, {&(0x7f0000003280)=""/168, 0xa8}], 0x7, &(0x7f00000033c0)=""/178, 0xb2}, 0x8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000034c0)='./cgroup/syz0\x00', 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000003500)=r2, 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) openat$cgroup_freezer_state(r3, &(0x7f0000003540), 0x2, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000003580), 0x2, 0x0) recvmsg(r3, &(0x7f00000036c0)={&(0x7f00000035c0)=@generic, 0x80, &(0x7f0000003640), 0x0, &(0x7f0000003680)=""/16, 0x10}, 0x2003) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000037c0)={0x8, 0x2, &(0x7f0000003700)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000003740)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003780)={0x2, 0x4, 0x10000, 0x10001}, 0x10, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000039c0)={@ifindex, r9, 0x31, 0x30}, 0x20) 4.888341145s ago: executing program 3 (id=2463): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x0, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 4.407554288s ago: executing program 3 (id=2466): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)="c91c3806990156d875a3afff33e48e4901a76891b2b09d00de6e612a29c568004cc4aab0ddf6df8de210672d9885850e7ea969987c9fe97f6fa915fb502777bb29bc76c86506774c0f7265b7d049ae4ebd130528ef9fed95fb276f426745610afc855d71c2fefe411048d861fe44ba73ed14cf3a01de2245ac8eb22636dede76a295c25a503ca93b6d87ce8a58acad7cae0738d330088a708ebdf8ac0ffab013db4f71983726552fb455697ac7dc543c85c34608ad92899ab7da2e90ab5f05d45332077cea802e2905fdb16f938ee027adbaccf1", 0xd4}, {&(0x7f0000000180)="20b44cdab6a9d754ec2343942a7b263c9a31cabf6d253d8344b45a17", 0x1c}], 0x2, &(0x7f0000000200)=[{0xa8, 0x10b, 0x80000001, "c45603e0bd5cf438fcd7a88c78305715cc4221399b82743710ca006075c017c02d3142592f486ee5311136f15d477bbd998baf885c538ae87596e3f0dd92ca96ebd28fab80daf2e9b90d3b4b8cb64bc1d92969750db3158c3ee9911cee4835e35c126d65bdfd999b1acd131b735df2e0b0021ecb02f3183d8601102bc4cb88b5d209db3fb5cf93afd8fb969dbc462e6799f78ad1dfe4fd"}, {0xc8, 0x1, 0x6, "b0bd9a174fdd036d335b960b39d4b87c100858e60ea740c2dabe1be9fd417f77bf0d8c804d648a0859ee917298aad7676acffa2a33cff8cfefe62d4aad6d6af97ae5c13a2a0aadbab819f4f6b77732aba4517021a2a9d1fc1d03f506706738cbc043d68376e7ea6a313447cc94a309089a06802068afa6b8d40f7824aa21832ff7102044ce83974822d25765a3600d52f08da1bed539467396eedd4c4b2a341f7eaa5cfedea65fb9bf9e54958dad02ec93f89524ccc7c8"}, {0x20, 0x10c, 0x10000, "250ce6f91a88ea398480fae5"}], 0x190}, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000400)=@l2={0x1f, 0x9, @none, 0x3, 0x2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="279e52788554b020bb279425531384ac34dee506fc3796b446e7623cf4f688872fc14cace5095ab62365772fe1f37dfbd2b6bd205031480debfb35c7d3eb23fe1fa1bd6b9c3fa6", 0x47}, {&(0x7f0000000500)="7efb8353cde8e781a3d756c9b48b7ca64b9eee651ede75f46a09a2bae739055ece9368668eee9d87db59a7da9c69862639a3c63c0e1ef9c166771d05132247f03f84674e497e233832a0043190fb3d87df82c945154499a04fab5dfbfb775bec344516ec901e8749", 0x68}], 0x2}, 0x4000800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x19, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7ad}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0x90}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @jmp={0x5, 0x1, 0x9, 0x9, 0x3, 0xfffffffffffffffc, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x86, &(0x7f0000000740)=""/134, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0xc, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x2, 0x5, 0x0, 0x4}, {0x4, 0x2, 0x6, 0x6}, {0x0, 0x4, 0x7, 0x3}, {0x1, 0x3, 0x0, 0xc}, {0x3, 0x4, 0x8, 0xc}, {0x5, 0x1, 0x0, 0xe}, {0x3, 0x4, 0xd, 0x7}, {0x1, 0x3, 0xc, 0x7}], 0x10, 0x1000}, 0x94) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000009c0)=r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000a00)={r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r1, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000bc0)=[0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0], 0x0, 0xae, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000a40)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000a80)="0e7ba9bb4f1e689b581c9d0cfe28cee06488c36dd86227b940b0c39c3052246b329eefab07aa9c6224c5e7e1a289655ef580c27d2f16cb5b73ea562775a81e28cbcdc00b06ffa76f90cabb014aa5854338df639023313794e860d756958a725157d32b88fa68c8bb8321e41dd85fad63a2241adf469d1b79f9543e45fe27bffd552c7f6e1ec25ead5edf23e1f28039fcc5a0f2d445f73a", 0x97}], 0x1, &(0x7f0000000ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x34}}, @ip_retopts={{0x84, 0x0, 0x7, {[@rr={0x7, 0x17, 0xb6, [@broadcast, @private=0xa010102, @loopback, @empty, @private=0xa010100]}, @ssrr={0x89, 0x17, 0x7f, [@broadcast, @remote, @private=0xa010100, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x2e, 0x1, 0x3, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x1}, {@multicast1, 0x1000}, {@multicast2, 0x17}, {@dev={0xac, 0x14, 0x14, 0x37}, 0xfffffffa}, {@empty, 0x9}, {@multicast2, 0x4}]}]}}}], 0xf0}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r1, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001040)=[0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f00000010c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001100), &(0x7f0000001140), 0x8, 0x40, 0x8, 0x8, &(0x7f0000001180)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f00000013c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000001480)}}, 0x10) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001600)=""/192) recvmsg(r2, &(0x7f00000027c0)={&(0x7f00000016c0)=@qipcrtr, 0x80, &(0x7f0000001780)=[{&(0x7f0000001740)=""/6, 0x6}], 0x1, &(0x7f00000017c0)=""/4096, 0x1000}, 0x2100) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002900)={@ifindex=r6, 0x9, 0x0, 0x5, &(0x7f0000002800)=[0x0], 0x1, 0x0, &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0], &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002940)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003bc0)={&(0x7f0000003a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@struct={0x4, 0x6, 0x0, 0x4, 0x0, 0x3, [{0x3, 0x0, 0xa83}, {0xf, 0x0, 0x7}, {0xf, 0x0, 0x7}, {0x10, 0x5, 0x4}, {0x0, 0x4, 0x2}, {0x7, 0x2, 0xd}]}]}, {0x0, [0x0, 0x61, 0x0]}}, &(0x7f0000003b00)=""/130, 0x71, 0x82, 0x5, 0x100}, 0x28) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003c40)=@bpf_tracing={0x1a, 0x10, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x412, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@alu={0x7, 0x1, 0x7, 0xa, 0x7, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002a40)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000002a80)=""/4096, 0x41100, 0x38, '\x00', r3, 0x19, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19763, r1, 0x0, &(0x7f0000003c00)=[0x1], 0x0, 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000003d00)={0xffffffffffffffff, r1}) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003d40)={0xffffffffffffffff, 0xfe}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003e00)={{r12, 0xffffffffffffffff}, &(0x7f0000003d80), &(0x7f0000003dc0)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005080)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000003e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}]}, &(0x7f0000003f40)='GPL\x00', 0x8, 0x1000, &(0x7f0000003f80)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x1c, r10, 0x8, &(0x7f0000004f80)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000004fc0)={0x3, 0x5, 0x0, 0x6}, 0x10, 0x6587, r1, 0x2, &(0x7f0000005000)=[r9], &(0x7f0000005040)=[{0x4, 0x3, 0x6, 0xc}, {0x4, 0x2, 0x8, 0x6}], 0x10, 0x7fffffff}, 0x94) socketpair(0x2c, 0x80000, 0x1, &(0x7f0000005140)={0xffffffffffffffff}) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005200)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005300)={0x6, 0x0, &(0x7f0000005180), &(0x7f00000051c0)='GPL\x00', 0x8417, 0x0, 0x0, 0x40f00, 0x3c, '\x00', r8, 0x25, r15, 0x8, &(0x7f0000005240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000005280)={0x5, 0xd, 0xb2, 0xd}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000052c0)=[{0x2, 0x4, 0xb, 0x8}, {0x2, 0x1, 0x10, 0x2}, {0x4, 0x1, 0x4}, {0x4, 0x5, 0x5, 0x7}]}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000006580)={0x20, 0x1, &(0x7f00000053c0)=@raw=[@exit], &(0x7f0000005400)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000005440)=""/4096, 0x40f00, 0x8, '\x00', r6, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000006440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000006480)={0x2, 0xd, 0x8, 0x554f}, 0x10, r7, r11, 0x6, &(0x7f00000064c0)=[r12, r13], &(0x7f0000006500)=[{0x5, 0x4, 0x4, 0x5}, {0x2, 0x5, 0x4, 0xc}, {0x4, 0x1, 0xd, 0xb}, {0x5, 0x5, 0x6, 0x7}, {0x2, 0x5, 0x7, 0x3}, {0x1, 0x2, 0x3, 0x3}], 0x10, 0x7fffffff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r14, 0x89e0, &(0x7f0000006640)={r0, r16}) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006680)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x400, '\x00', r6, r15, 0x5, 0x2}, 0x50) sendmsg$tipc(r14, &(0x7f0000006a80)={&(0x7f0000006700)=@id={0x1e, 0x3, 0x2, {0x4e24, 0x1}}, 0x10, &(0x7f0000006a40)=[{&(0x7f0000006740)="69bb1b3bcf81e3da160b371428519a219f363b0583da3ab4edfd2133f7494bd2812bc78a371eb428c1745018b29023a41703afa7161f171d8f0e2dd46672798e5d99a7e338be7e12387581c458affba4388382af597a751bd2091e132392bb55ef036120489103978b06604a05eb68f584afee9d96f8b3a23e27d4e86ac0ee1ef7d70166596ab771cad58a8e3a7b750468337c0d2bab94d1fe54cf3efdd72cc7542d4920264bc7816c675cd32d097dd6b10a7aa850e9fd5927dae0", 0xbb}, {&(0x7f0000006800)="0763954aab63b4463aff721fc81a9ff3cc132862dc1fdeb29effda63d630a80f2ab926b65bc8f3418c27f9868e165a86c2b1c9702a17372923413ee59a47fe9e96d55c454701251088f2901bced50c4171a50c71cb9d7e0dc6d96df9fcda6edf395204987a544b4c6e74499b146336df86406122e6d6d8c0f7957bfb52f739ccf3272a0dfd548b7984eed8", 0x8b}, {&(0x7f00000068c0)="beab9536c9143ad8524bd6dea6584bdeab3adebcccf0cc9a977133d5aff9cd4c7a3344391ae30413a4a4a345b2078c5ee176bfde7f09cd5274320a913367440e593dab9cbbafb225da848cd588fbf33ec300cc78a566e0503f17f0b8dd40479ebb4a3bed6bc79fe2b55b1b2c6eeb5b0930bfdf6a8a8b94c1f150be298c45f39f00265410b5b1cdad6dc4b0778862df19fd6ab61bbb6bd1bf3e3378476eceb7205975fc4bf68e6b232a208d0783956d867f713f57242e056e77d2bd6b956b48561ae36b7c0462d8a5ab411be018a55a8bba50415a9b72fe4b", 0xd8}, {&(0x7f00000069c0)="2775b2b31beb754a8fd67b84b811b120b788bbfde77dcd54fa5ae3c648dc287584a7102548c6e4225333a5a09d7be0126f6c0cec8dea7866fef2e54f09593526ece9dd6d7430", 0x46}], 0x4, 0x0, 0x0, 0x10}, 0x4040840) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006b40)={{r12, 0xffffffffffffffff}, &(0x7f0000006ac0), &(0x7f0000006b00)=r11}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000006e00)={{r12, 0xffffffffffffffff}, &(0x7f0000006d80), &(0x7f0000006dc0)=r16}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000006e80)={0x6, 0x1e, &(0x7f0000006b80)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r18}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8001}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x29a}, @generic={0xcb, 0x3, 0x3, 0xed1, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @map_fd={0x18, 0x2, 0x1, 0x0, r17}], &(0x7f0000006c80)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000006cc0)=""/30, 0x41100, 0x0, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000006d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000006d40)={0x4, 0xd, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000006e40)=[r9, r19, r9, r13, r13], 0x0, 0x10, 0xf}, 0x94) 4.373005611s ago: executing program 4 (id=2467): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000840)="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", 0x168}, {&(0x7f0000000180)="4612a016fa988c250312730529b41899e2e0dcea8d746c7e5fbc032ecfc9a9a95820a5c5f145e96d4b736e6dbab21432819e0df02aedb939a2be5ae0f617962e7b11708ee179a085acf374007ad5b446d6ed4110e4ad243aab43fe0cb5d2b8f448f1ee827adf508195a6aa6ea5d1c9d2", 0x70}, {&(0x7f00000002c0)="9b2a15292f94fa7ad97b09c9c509750889f0eaa7de5f377c6a5621631268329dc15c0b9b1f43f28119fdb823ed0af14a0d98bbac76429f886d02dce3ca45de5836870df1e86ed80f8ceac083261d1aa44cc5c4e0de0b19edb33161f0ca995dfea1aaf5bdcc6faf3989139098ab3bc7934399d009efc8dbe496ec47b9690882c535c44bb0d53892e36213a849a65b0121163227fd3713a11bd34698edddcf94d8015e39024cca2f1ba244687df34d5bcabbea4ae6b7a59b6a0c954fbc4d3020c0299f1d3643abe97300b72d798185965255111c05da8e44", 0xd7}, {&(0x7f00000003c0)="b7b225f207283400c4574fb470719c45c4f9663d1befee1674c56ee088a38a3ba4de43da0258c431afbfa942e5ae57667241440a77819e69134c7e5f10827f673a9f6c35957b888273baf1fb0c50c2cef5a6fb67d4905e07921dc27b8c46a557d4ba6865a776f46a25ed73e6b982727676a0b07923c88dc4b9738a69b1cf9488b77e6ca189f5868854ce1dd6c4f3ac114c668d848643daca1363a84b3ee12c61372264582815ab5084b70c8ce278b27f33ec270de7864fbfbc1d53fbfad42529a4c2a582e2895a57fd9dfc24ea0cb2f1ac35978fc318", 0xd6}, {&(0x7f00000004c0)="cf6ecf239e5e788a4f10446868344503a0adb7a21d197b783272fe26c81837455acfda06806ab24df84237586990c5e84af46af53c4a252d28f938921e23cc8dea5a6127759b51", 0x47}, {&(0x7f0000000540)="4619067d6382f2242be3b67353e44d376480c8490a1a1d0b1db052680a7ba4c2e21768ab8c224dee3cbaf07896fd691a7ea6245d0122f867e5700dcb98833c7ce8a9e4740c2bcdc9067999fc770fc803595329f0d3baa7831a902728443f48f25050bff3a2ede90785e48a4b9d527d88e2a912e5702f322e55522e4acd755ecfbf22489fe66533a79acc58dee485252c56a235ad67fdfbfaac15507b8e63fe3105661d0e5cb0a48b2b0a87bee5accae0c0262f4f1f37dba916129d3e14e177cef58d64c33cef133f1d08acb2ee11368ad7d7ac01054ef268899b38", 0xdb}, {&(0x7f0000000000)="e23af5c45c8cffffffff61bd689412fbf35443586e9bb8c3205d9585c983e3120bf78d11947c5dcedab5897dcab903ce51ab3711d5463b61f3edfc147b", 0x3d}, {&(0x7f0000000080)="3998c096f04cc210327e5825a96767405ec8f591b00a9683fd2a58356c79c891fddb32eef1c73049235b21a6da24225972acd7560c528f91e97998d897fae9d19aad52aa04d4a15653a3", 0x4a}, {&(0x7f0000000100)="5aa0936403000000000000005269d1672907ef6c48180764ef573d594271da57cb07392164c9bc00ce2f28ccdeeabf7aa347defcbd33b65092059f4871ad817cf0596f", 0x43}, {&(0x7f0000000740)="beb31e5e3194582b202e3aa615fd407470c6a34f814f320428ae33e172afb29fed8ad3cc96a0d35571e1b32e87c7f12f147855cef3e2c8cf3b0e3cfb9e", 0x3d}], 0xa, 0x0, 0x0, 0x4c850}, 0x40400c5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0xc0189436, &(0x7f0000000040)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 4.217388101s ago: executing program 1 (id=2469): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYRES16], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x2b, 0x80000, 0x8, &(0x7f0000000300)) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9f1}, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x4000, &(0x7f0000000100)=[{&(0x7f0000000c00)="5c0000001a006bab9a3fe3d8457f0bd2bf6e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00193107e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb45601d8ad2330e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b0d, &(0x7f0000000040)={'netdevsim0\x00', @random="8dffffff0600"}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r6) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180)=r0, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e3900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 4.202025642s ago: executing program 4 (id=2470): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5ae) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7, r1, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_int(r5, &(0x7f0000000040)=0x2d00, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.915124152s ago: executing program 0 (id=2471): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.669293628s ago: executing program 4 (id=2472): r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x12458, 0x2000000, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xb) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2a, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)="230000002e008104040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e0012", 0x23}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x34000}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) (async) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x8, 0x10, &(0x7f0000000040)={0x40000, 0x5}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x424e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x5, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x8000}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) socket$kcm(0xa, 0x2, 0x73) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000001ac0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.275838766s ago: executing program 0 (id=2474): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000076000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000140000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x17008, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex=r5, 0x13, 0x1, 0x2, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', r5}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x22, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5975, 0x0, 0x0, 0x0, 0xa39e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x52cc}}, @jmp={0x5, 0x0, 0x7, 0x9, 0x9, 0x6, 0x9}, @ldst={0x0, 0x3, 0x6, 0x5, 0x9, 0x0, 0x8}, @generic={0x7e, 0xe, 0x4, 0x9a, 0x1}, @call={0x85, 0x0, 0x0, 0x46}, @call={0x85, 0x0, 0x0, 0x40}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x10, 0xb5, &(0x7f0000000940)=""/181, 0x40f00, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000b00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xd, 0x3, 0x8}, 0x10, 0x29536, r2, 0x4, &(0x7f0000000b80)=[r0], &(0x7f0000000bc0)=[{0x3, 0x1, 0x1, 0xb}, {0x5, 0x1, 0x3, 0xd}, {0x2, 0x1, 0xa}, {0x5, 0x3, 0x8, 0x2}], 0x10, 0x2}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.22174207s ago: executing program 3 (id=2475): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb230402000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r4 = syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000380)=r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000ffe0f5057110bf00000000006600000000800080950000000000000072c2f98cb7333011f1cf97f165ac0dc8c84c1ed04a84f6243cec3706bd2d671c2c28c7a0bd13871d815bbc06c2fa221f1a91d63e4bdbf3cbdd4ff4738d969857122ea180b8b25ad6c006c3e4e86dd319c92d683f6d593cb860187c7640045af58adcfc943a215f12b50493e62b5a127771fc659f39d1470e7d85"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0xe, '\x00', r6, r2, 0x1, 0x0, 0x3}, 0x50) 2.072650258s ago: executing program 1 (id=2477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=r3, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xa1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cd0800000000000073112e00000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x12, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xc1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffffb, 0xb0, &(0x7f0000000200)=""/176, 0x40f00, 0x0, '\x00', r5, @fallback=0x28, r6, 0x8, &(0x7f00000008c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x5, 0x10, 0xa, 0x4}, 0x10, r3, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)=[r4, r7, r4, r4, r4, r4, r4], &(0x7f0000000a00)=[{0x0, 0x5, 0xf, 0x3}, {0x2, 0x2, 0x10, 0x3}, {0x1, 0x2, 0x1, 0xa}, {0x1, 0x4, 0xf, 0x4}, {0x2, 0x1, 0x0, 0x6}, {0x2, 0x3, 0xd, 0xc}, {0x0, 0x4, 0x4, 0x2}, {0x3, 0x4, 0xb, 0x2}], 0x10, 0x2}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r4, &(0x7f0000000400)="14", &(0x7f0000000440)=""/236}, 0x20) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000b40)={'lo\x00', 0x1000}) socketpair(0x9, 0x4, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000b80)="f4f80473835ef7ede463d81ba6c80e19e062fdac3abd2539f08c7bccb3990c78bf47b5db", 0x24}, {&(0x7f0000000bc0)="95b6def7da8271325e12e013763c319c6559e7e5b39a6d6c112c73f323827737e00b37559aa173696a8f9b8f0de84e3864ec368782a853ee6758800dba8d2e4ee0633399dbeb20b686f4bb54bf04af255a05627dc0ec14e9c039e1adedfb91aba0ff47fca579d935e346e76e7f4747b3858d80236ac57a5f9c6427e097629bff7ab1a0b2f4d2b2b94ba394a3e686c60158ee1c23d88212a080ab02d4f4e0ce7230f210453a9517bb4272c80ab45dc787b870f09694e3a5c19eda46025beb8786b90d1485a5d803df5eea7eea6766cd273ee32f77416d5f55", 0xd8}, {&(0x7f0000000cc0)="c333eadac103480f510fb1e78f746d6fa96a8fb3c2eb8f867a2d8cad127720eb32c26acce7537f6a216fe6213fdf5365af8d9c866226e4c77239ca690e02b5db1e197cd0e74a078a934dbdd22eca0e16f93d11439d51f014245d5df2da4557683e248a70e6cc5039f0c88c5ff343b3635cea1af8ccf07282d2", 0x79}, {&(0x7f0000000d40)="b749ec6d295cb6e739fe6af3178b5faab82d3d062df4354007f622872c9534499e1a405d0cb71416cc9a8a0341a9d4fe0a66f99dc251003464fc256ed1d6c48e5e8a8bc24baef2", 0x47}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="a00000000000000000000000070000000717bc0a010101ac1414aae0000001ffffffffe00000014414e6637f000001000000060a01010100000007831b43e0000001e0000002ffffffffe0000001ac141426e000000194040100008808a9f49824365c443cefb164010100ffffffff211b70ac000031056401010100000009ac14142d00000009ac1414aa0000010164010101fffffee00a0101000000000500140000af36ac000000000000000000020000000c00000000"], 0xb8}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009504a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) ioctl$TUNGETVNETLE(r0, 0x4004743b, &(0x7f0000000180)) 1.637648098s ago: executing program 2 (id=2478): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.591814871s ago: executing program 1 (id=2479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (fail_nth: 1) 1.580781152s ago: executing program 2 (id=2480): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e0000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748", 0x44}], 0x1}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x0, 0x0, 0x3, 0xa, 0xf, 0x40, 0xfffffffffffffffc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x100000000000003}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) (async) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x9, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @union={0xb, 0x5, 0x0, 0x5, 0x0, 0x9, [{0xf, 0x4, 0xd1a5}, {0xd, 0x4, 0x8ea2}, {0xf, 0x2, 0x67}, {0xf, 0x3, 0x100}, {0x1, 0x1, 0x401}]}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}, {0x0, [0x2e, 0x2e, 0x0, 0x0, 0x2e, 0x5f, 0x0]}}, &(0x7f00000005c0)=""/240, 0x81, 0xf0, 0x1}, 0x28) (async) recvmsg$kcm(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x10020) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.537661785s ago: executing program 0 (id=2481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x11, 0x22, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x1205000, 0x0, 0x0, &(0x7f00000017c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.479078889s ago: executing program 3 (id=2482): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.417808904s ago: executing program 2 (id=2483): r0 = socket$kcm(0x15, 0x5, 0x0) (async) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0xff, 0x0, 0x0, 0x0, 0x10088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xc, 0xbb}, 0x0, 0xbeda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x1, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff}) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000004000000000000000600000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200ef13000000b7030000000001008500000083000000bf090000000000fb540900feffffffffffff000000000100c707e0ff00000000bf9100000000faffffff000002000000850000008500000000c9fcc54922ef6fe022f36f7784e91e48c6df4a43"], &(0x7f0000000100)='GPL\x00', 0x7bf, 0x99, &(0x7f0000000140)=""/153, 0x40f00, 0x1c, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x19279, 0xffffffffffffffff, 0x5, &(0x7f0000000200)=[0x1, 0x1], &(0x7f0000000240)=[{0x9, 0x2, 0xa, 0xc}, {0x3, 0x4, 0x9}, {0xf172, 0x3, 0xb, 0x3}, {0x3, 0x4, 0xb, 0x5}, {0x4, 0x5, 0x5, 0xa}], 0x10, 0xffff892b}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r3, r4}) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xa, 0xffffffffffffffff, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) socket$kcm(0xa, 0x2, 0x0) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90524fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f00000004c0)=ANY=[], 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b405000032c05d4452000000007110a400000000001f010000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000640), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r9) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 941.587116ms ago: executing program 1 (id=2484): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 941.232806ms ago: executing program 2 (id=2485): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r11}, 0x18) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r13, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r16, r15}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r14}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xc, [@var={0x9, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x28, 0x0, 0x62}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x30, 0x0, 0xc0361333deb3fac0, 0x61, 0x30, 0x2e, 0x5f, 0x61, 0x61, 0x30]}}, &(0x7f0000000680)=""/208, 0x50, 0xd0, 0x1, 0x10, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) 940.164156ms ago: executing program 3 (id=2486): r0 = socket$kcm(0x29, 0x5, 0x0) (async) socketpair(0x1e, 0x80000, 0xc3b, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000080)={r1}) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={&(0x7f00000000c0)="bd3a5d41671f9c1df5c9a28b30fc9fe7ae8c3f5fc626b8d3a0336630def1b6cae01fe796f6b0a75edc78e06104df07e1db4625ff6a7d013466b68c480dd7c70fbffa3ed4d15db619de36a363b795e845467efff7fb6af30c598c2284bd697e8b937e092fa9ebefb014c06293a6d8854565ad76155c0c2e8a38b7e2f6e6e79bd12b1dcc9f1b9afbbc2a0f98b7f36b36c6f7e29e45d324853f44b61703ae12e9d62aad0f2a840f06", &(0x7f0000000180)=""/137, &(0x7f0000000240)="6356e4e4590890c9f1d8f7907f2c5f2cb2363be40ed821a21e87d0035024e94b5920104c34b5f4892d9e20f1e11c7555b629a196a845325c4fb71a4a0d0378c9432932479c44a89985d81e49c59ee3eeb112609e3a639c9c3a901de875bc94621791adeeccaca204865f34604d7661e2dd", &(0x7f00000002c0)="46fcaa3acba5b3394988c311529c93058ced4ef5f43bbff2b61b3d7fc0a464f42b8b9a8db8c02b5399bc5f0d8fc99bf9de06d3d0de1f011ee5192cabb35e60b8cea4464de8883e2655967b64cd976605e0a7978eab4b0fda38909099fd6bc79092b479f7ecee67f06dba2911554315f62c6652b177a851b2ad1f928c1392c84b6af59465a7", 0x2, 0x1, 0x4}, 0x38) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETLINK(r4, 0x400454cd, 0x321) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000440), 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000004c0)={'wg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000500)) (async) gettid() r7 = openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000540), 0x2, 0x0) (async) r8 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000005c0)={r2}) (async, rerun: 32) r11 = getpid() (rerun: 32) r12 = syz_open_procfs$namespace(r11, &(0x7f0000000600)='ns/time_for_children\x00') ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000640)={'xfrm0\x00', @multicast}) (async) r13 = syz_clone(0x80000400, &(0x7f0000000b80)="e267bdc6b80adfe9c2cade35fd0145e1069c0b8b1db83b7be7e0f17564f9a94e1da537ad7764b3a6ccad26784ee06e4777923213ba3144e8aaaa3b8d0f6f8c2202b71558c274d4ee176dedfe58c164f383", 0x51, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="f588813dc3d0718e579ad3912a323888a161c3145af7bd99f1247a02b60870f874b1ea4688ab26cbdc56d8a4a2b66bd54921112cde99f1cb22e24ec2b435193d547cda77a167d1f5f931fca5c006e97c6e74917c4580a1ebf45029faf495e9d1afd7fd255ed80efc103dbd119e68f1727b4dfd0e6274e86d6c443ca6a566f27a2260a3f357d5f21ca50fa4631d7afeefdcfaa8cea56985bbdac4236fa37d3e02d6d5d716e2d6a9a96e7c9c93a16532d0f1d5") sendmsg$unix(r10, &(0x7f0000000e00)={&(0x7f0000000680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000700)}, {&(0x7f0000000740)="987885ed769e48350a2788bb999570a1df460db5921ef6f92155", 0x1a}, {&(0x7f0000000780)="c800d8640310350137b0689187885611d6287459d8474a62f1fe58b4a285d047d1dab73e2926f407b1a24786c67971408b9f60da49ad75be0ff7d3f0a2c76c64fd32bb87993d51f64a198ce47df57014c778af004f1a3b826dbd1ca01ec56402f813fd86550b9c56023cf99475590c769d98566fd93b69486da3ab5d340782e5c0787f27f7baf42e56f9a59ebf38485ca0fe746753f3dff6c0c4bc6b358e8e4766b5f66b3c12ec9dc65bfd7ada2616f48a07c9d22f", 0xb5}, {&(0x7f0000000840)="b9a4cd5a7e11d7410e4c1bffc150a2d48d0b527c5d06da6255f59627255482f924f352a15c62412254270e292054e8a1673611b9f571f95096c709ad9d04733b6c9284f5fcdea3f819551505d37299501fd7b62475efdadbc357ca745de11609d116d06aaf6ca182bc89", 0x6a}, {&(0x7f00000008c0)="a6eb90afda8797daf81b4cac9f711e430a", 0x11}, {&(0x7f0000000900)="5ded5761ff0a02da890a286adc62eeb5fbe63be00f8295755375d07ec6a3a3a7c1c2de972a1402a0db0a784bb910cfe81506154fe1d9d43baaaaa5712d1352aed9eeb2a4223ed351327c576e82ee54edd40dbbe6a21dcc0576e59fac4de874be7e4c8b761d0b55d5d956ac04918d788c219ecab834d88f5b16e055f9689019906d0ccd11b2524bf515fcab34e6635e3d1f4755af04a5", 0x96}, {&(0x7f00000009c0)="5fc71cce047ef25bc739a0d05b80b6abfd5551278b19166f37ff132d7440ee1ecd78cf8abef4e7c8c62acc7233beef37af2a155f249130a7c7d02f5bfd3e01b8792b450b636a127d4c474243e1b8e13c8d5249b40184fb3f12e53570deebab072494c108d356fdb696b008677e90b9c637eaa331816cd4cc6715df1d999f737b695036206e80e4ae1c3b585dc54a964eb778e1b4c7db5410524966ed3beb2b1534e2bf951b02ce41c9a99a1f29aaaff3e8d3cb6535c5f4f660b42b1663ca72b20cc505e340fd4bc1c4b08353061bfec0fe7fdcfd44328e4b62c980e631d3cd85daa5c73f14fb36a8c2bd8f1c37d0a3589d356095be93558a0282", 0xfa}, {&(0x7f0000000ac0)="efe44c85d5e79d2ed102e87c7b5c31e965140922578111fc5b7897f98671e82cfc7f2a125148311d4c", 0x29}], 0x8, &(0x7f0000000d40)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee01, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, r6, r2, r6]}}, @rights={{0x30, 0x1, 0x1, [r5, r5, r1, r7, r12, r7, r8, r12]}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r4, r4, r6, r5, r9]}}], 0xa0, 0x80}, 0x48015) getpid() (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000e40)={r4}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r14, 0x0, 0x5e, 0xe9, &(0x7f0000000e80)="5f05c5978af72edf4dd58cb9bdcd119810e8b6a4156d540285507fcb26ec72300d5cf5fc479990e7308014e7e4babdbb79dadd3edae75831c813a0666321c8739839dc64cdf968bd0831642d2f26a8d697d33ddd6abf28b62495fdafda7a", &(0x7f0000000f00)=""/233, 0x45f768da, 0x0, 0x87, 0x72, &(0x7f0000001000)="b07a9e55f6d1e05230392cb0d836d5288e0b9b1931ae2b43f4ded9737c9411a958984adcf41d23f07af9aee233ecb82f284165e505dcde6a45c30f83a6a61d87f5fb15e6f77fc396711cdb961196ad67daebbdbcf72cee7646f58c1e6613885f56e7d64dfef1de9b960b0af75cfd4d3424a92fae2918afe7054d31347a43989129e25ad87782f4", &(0x7f00000010c0)="512706c607d631dd2e55f9978f34f1fe29e4c2369fe71155f9cccb4d041e59eeeab2f400cb153afa91e1099e405077a797873b0ef2e08e3b476aeda64d1976494f985728f5c6d22a4268e245b633167f8a0f9c9e5cc17790ff6264635cbeb38fad9ed64686e108a6c810a88dcc6fda0f7f2e", 0x0, 0x0, 0x7}, 0x50) (async) perf_event_open(&(0x7f00000011c0)={0x5, 0x80, 0x3, 0xff, 0x9, 0x78, 0x0, 0x0, 0x2040, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x4, 0x3}, 0x8000, 0x8000000000000001, 0xbbf, 0xa5fef48ee42e119b, 0x86e1, 0x2, 0x6, 0x0, 0xd, 0x0, 0xfffffffffffffff7}, 0x0, 0xb, r14, 0x0) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000001240)={r8}) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001380)={@cgroup=r4, 0x1, 0x1, 0xf20c, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000012c0)=[0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000013c0)={@cgroup=r14, 0xffffffffffffffff, 0x20, 0x4, 0x0, @void, @value=r4, @void, @void, r15}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r14, 0x58, &(0x7f0000001400)}, 0x10) 873.134091ms ago: executing program 4 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x9d67, 0x9, 0x6e8d39bf, 0x0, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000000709007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 743.30869ms ago: executing program 2 (id=2488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000000000000600000085000000970000009510000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() (async) r2 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000001580)={&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000001500)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/96, 0x60}, {&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000240)=""/79, 0x4f}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x6}, 0x40003000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r0, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001700)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000001740)=[0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f00000017c0)=[{}, {}], 0x10, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a00)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}}, &(0x7f00000015c0)='GPL\x00', 0x3, 0xf4, &(0x7f0000001600)=""/244, 0x40f00, 0x2, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x3, 0x10, 0x87, 0xb77}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001ac0)=[{0x2, 0x1, 0x9, 0x5}, {0x3, 0x5, 0x1, 0x9}], 0x10, 0x7}, 0x94) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080211000000040000a118000300e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) write$cgroup_pid(r6, &(0x7f00000003c0)=r1, 0x12) 689.653713ms ago: executing program 0 (id=2489): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb904021d080006010000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6279d54ca397c388b0dd6e4edef3d7b00"/216, 0xd8}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) 634.926077ms ago: executing program 4 (id=2490): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x11102) close(r1) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x2, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910c0000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003f9010001"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xd0}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x4, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000100000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) 575.649571ms ago: executing program 1 (id=2491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 509.630545ms ago: executing program 2 (id=2492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000200)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200440fd) socket$kcm(0x21, 0x2, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000040)="319af0e95ce200002f0000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x5, &(0x7f0000000100)=[{0x45, 0x0, 0x3, 0xfffffffe}, {0x1}, {0x0, 0x0, 0x20}, {0x20, 0x0, 0xc2, 0x2}, {0x6, 0x8, 0x0, 0x10001}]}) 509.016346ms ago: executing program 3 (id=2493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x4, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x110000, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)=r4}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff4) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2ce4}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002440)={0x18, 0x2b, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfea8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000380)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000001340)=""/4096, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000002380)={0x0, 0x10, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000023c0)=[0xffffffffffffffff, r1, r8], &(0x7f0000002400)=[{0x5, 0x5, 0xd, 0xb}], 0x10, 0x5d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xf, 0x21, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000006000000000000000900000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r11, @ANYBLOB="00000000000000303f381a52ad091d68c3582d073b00b703000000000000850000000c00", @ANYRES32=r8, @ANYBLOB="00000000faffffff3d96080001000000ac98ffffffffffff18110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x8, 0x26, &(0x7f0000000780)=""/38, 0x41000, 0x40, '\x00', 0x0, @fallback, r11, 0x8, &(0x7f00000007c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x7fff, 0x9}, 0x10, 0xffffffffffffffff, r11, 0x1, &(0x7f0000000840)=[r11, r8, r11, r8], &(0x7f0000000880)=[{0x3, 0x3, 0x3, 0xb}], 0x10, 0xd}, 0x94) 508.783965ms ago: executing program 0 (id=2494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) (fail_nth: 2) 0s ago: executing program 4 (id=2495): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) openat$cgroup_int(r0, &(0x7f0000000880)='cpu.max\x00', 0x2, 0x0) (async) close(r0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000200), 0x21) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34068082) (async) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000ff03000002000000fbffffff00680000", @ANYRES32, @ANYBLOB="090000000000000000000000000000000000000031a56cb4ed68cfd7e142968b538c64fa37a0d97a4f662d62c425ffc9bccffb42f606a92a9573fa97d17e9e20fa296ca9806854e2cc3e53d32811a211106e756b68270c9591757f28de59cec046e698ef24431b19060c98d0b74547b00ac142cebf3c23399ef823cf9ea0db693c16", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYRESOCT], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x1}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x20000041) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x200000000000003, 0x300) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 205.982421][ T6418] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.547'. [ 206.179524][ T6428] netlink: 'syz.0.544': attribute type 3 has an invalid length. [ 206.226023][ T6428] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.544'. [ 207.025368][ T6443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.552'. [ 207.087884][ T6447] netlink: 'syz.4.553': attribute type 5 has an invalid length. [ 207.098346][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 207.147579][ T6446] netlink: 'syz.1.554': attribute type 21 has an invalid length. [ 207.266461][ T6446] netlink: 128 bytes leftover after parsing attributes in process `syz.1.554'. [ 207.416939][ T4280] Bluetooth: hci0: command 0x0406 tx timeout [ 207.423168][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 207.430247][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 207.430286][ T4272] Bluetooth: hci4: command 0x0406 tx timeout [ 207.461251][ T6443] netlink: 'syz.0.552': attribute type 3 has an invalid length. [ 207.493893][ T6443] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.552'. [ 207.513771][ T6446] netlink: 'syz.1.554': attribute type 4 has an invalid length. [ 207.560539][ T6446] netlink: 'syz.1.554': attribute type 5 has an invalid length. [ 207.611206][ T6446] netlink: 3 bytes leftover after parsing attributes in process `syz.1.554'. [ 208.071607][ T6467] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.558'. [ 208.585760][ T6486] netlink: 'syz.2.564': attribute type 21 has an invalid length. [ 208.615347][ T6486] netlink: 'syz.2.564': attribute type 6 has an invalid length. [ 208.627811][ T6486] netlink: 132 bytes leftover after parsing attributes in process `syz.2.564'. [ 209.868172][ T6523] device syzkaller0 entered promiscuous mode [ 210.237931][ T6541] netlink: 'syz.0.577': attribute type 21 has an invalid length. [ 210.969004][ T6551] __nla_validate_parse: 1 callbacks suppressed [ 210.969024][ T6551] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.579'. [ 211.989846][ T6553] delete_channel: no stack [ 213.453202][ T6555] netlink: 'syz.4.580': attribute type 10 has an invalid length. [ 213.464384][ T6555] team0: Device bond0 is already an upper device of the team interface [ 213.476424][ T6560] netlink: 'syz.0.581': attribute type 21 has an invalid length. [ 213.505350][ T6560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.581'. [ 215.035791][ T6572] bridge0: port 3(ip6gretap0) entered disabled state [ 215.043256][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.051007][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.104784][ T6574] device ip6gretap0 left promiscuous mode [ 215.111609][ T6574] bridge0: port 3(ip6gretap0) entered disabled state [ 215.123385][ T6574] device bridge_slave_1 left promiscuous mode [ 215.129763][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.164159][ T6574] device bridge_slave_0 left promiscuous mode [ 215.172221][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.606034][ T6592] device syzkaller0 entered promiscuous mode [ 220.578611][ T6639] netlink: 'syz.4.595': attribute type 9 has an invalid length. [ 220.655314][ T6639] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.595'. [ 220.680678][ T6648] netlink: 'syz.1.598': attribute type 3 has an invalid length. [ 220.695719][ T6648] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.598'. [ 224.118665][ T6669] netlink: 'syz.4.604': attribute type 14 has an invalid length. [ 224.130636][ T6676] tap0: tun_chr_ioctl cmd 2147767517 [ 224.137568][ T6685] device bridge_slave_1 left promiscuous mode [ 224.143869][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.170025][ T6685] device bridge_slave_0 left promiscuous mode [ 224.187134][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.356172][ T6694] ªªªªªª: renamed from vlan0 [ 224.442424][ T6703] netlink: 'syz.0.613': attribute type 10 has an invalid length. [ 226.031816][ T6754] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 226.058415][ T6754] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 226.463508][ T6768] device wlan1 entered promiscuous mode [ 227.009856][ T6765] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 227.049157][ T6765] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.627'. [ 228.575674][ T6805] netlink: 'syz.4.638': attribute type 29 has an invalid length. [ 228.720663][ T6813] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.641'. [ 228.751457][ T6805] netlink: 'syz.4.638': attribute type 29 has an invalid length. [ 228.811892][ T6807] netlink: 'syz.4.638': attribute type 29 has an invalid length. [ 230.397725][ T6858] netlink: 'syz.1.653': attribute type 2 has an invalid length. [ 230.413846][ T6858] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.653'. [ 230.495321][ T6860] netlink: 'syz.3.655': attribute type 10 has an invalid length. [ 230.513042][ T6860] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.655'. [ 231.212554][ T6879] netlink: 'syz.3.662': attribute type 21 has an invalid length. [ 231.247000][ T6879] netlink: 128 bytes leftover after parsing attributes in process `syz.3.662'. [ 231.303187][ T6879] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 231.341894][ T6879] netlink: 'syz.3.662': attribute type 5 has an invalid length. [ 231.371738][ T6879] netlink: 3 bytes leftover after parsing attributes in process `syz.3.662'. [ 231.603680][ T6886] netlink: 'syz.2.664': attribute type 3 has an invalid length. [ 231.641997][ T6886] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.664'. [ 231.963011][ T6895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.667'. [ 232.157814][ T6895] netlink: 'syz.2.667': attribute type 41 has an invalid length. [ 233.523262][ T6940] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 233.530501][ T6940] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 234.521044][ T6966] netlink: 'syz.2.685': attribute type 2 has an invalid length. [ 234.558182][ T6967] netlink: 'syz.4.683': attribute type 39 has an invalid length. [ 234.588672][ T6966] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 234.633665][ T6966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.685'. [ 234.976458][ T6977] device veth1_macvtap left promiscuous mode [ 235.007459][ T6977] device macsec0 entered promiscuous mode [ 235.392383][ T6990] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.691'. [ 236.672713][ T7004] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 236.866004][ T7004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.239913][ T7016] netlink: 'syz.0.699': attribute type 28 has an invalid length. [ 237.397441][ T7017] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.698'. [ 237.742062][ T7017] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 237.776791][ T7017] CPU: 1 PID: 7017 Comm: syz.3.698 Not tainted syzkaller #0 [ 237.784260][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.794708][ T7017] Call Trace: [ 237.798129][ T7017] [ 237.801195][ T7017] dump_stack_lvl+0x188/0x24e [ 237.805929][ T7017] ? show_regs_print_info+0x12/0x12 [ 237.811240][ T7017] ? load_image+0x400/0x400 [ 237.815869][ T7017] sysfs_warn_dup+0x8a/0xa0 [ 237.820628][ T7017] sysfs_do_create_link_sd+0xc0/0x110 [ 237.826382][ T7017] device_add+0x7ed/0xfb0 [ 237.830788][ T7017] wiphy_register+0x1d9f/0x2ac0 [ 237.835803][ T7017] ? cfg80211_event_work+0x40/0x40 [ 237.841269][ T7017] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 237.847576][ T7017] ieee80211_register_hw+0x2d00/0x39f0 [ 237.853169][ T7017] ? lockdep_hardirqs_on+0x94/0x140 [ 237.858504][ T7017] ? ieee80211_register_hw+0xf11/0x39f0 [ 237.864264][ T7017] ? ieee80211_register_hw+0xf11/0x39f0 [ 237.870015][ T7017] ? ieee80211_tasklet_handler+0x20/0x20 [ 237.875850][ T7017] ? memset+0x1e/0x40 [ 237.879932][ T7017] ? __hrtimer_init+0x186/0x270 [ 237.884809][ T7017] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 237.890585][ T7017] hwsim_new_radio_nl+0xafa/0xce0 [ 237.895648][ T7017] genl_family_rcv_msg_doit+0x22a/0x330 [ 237.901423][ T7017] ? end_current_label_crit_section+0x170/0x170 [ 237.907686][ T7017] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 237.913777][ T7017] ? bpf_lsm_capable+0x5/0x10 [ 237.918743][ T7017] ? security_capable+0x85/0xb0 [ 237.923733][ T7017] genl_rcv_msg+0x604/0x790 [ 237.928256][ T7017] ? genl_bind+0x360/0x360 [ 237.932781][ T7017] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 237.939237][ T7017] netlink_rcv_skb+0x1fb/0x450 [ 237.944106][ T7017] ? genl_bind+0x360/0x360 [ 237.948536][ T7017] ? netlink_ack+0x1170/0x1170 [ 237.953434][ T7017] ? lockdep_hardirqs_on+0x94/0x140 [ 237.958655][ T7017] ? down_read+0x1a8/0x2d0 [ 237.963267][ T7017] genl_rcv+0x24/0x40 [ 237.967279][ T7017] netlink_unicast+0x74d/0x8d0 [ 237.972192][ T7017] netlink_sendmsg+0x8ad/0xbd0 [ 237.977174][ T7017] ? lockdep_hardirqs_on+0x94/0x140 [ 237.982513][ T7017] ? netlink_getsockopt+0x550/0x550 [ 237.987756][ T7017] ? bpf_lsm_socket_accept+0x10/0x10 [ 237.993070][ T7017] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 237.998458][ T7017] ? security_socket_sendmsg+0x7c/0xa0 [ 238.004046][ T7017] ? netlink_getsockopt+0x550/0x550 [ 238.009267][ T7017] ____sys_sendmsg+0x5be/0x970 [ 238.014152][ T7017] ? __sys_sendmsg_sock+0x30/0x30 [ 238.019197][ T7017] ? __import_iovec+0x315/0x500 [ 238.024160][ T7017] ? import_iovec+0x6f/0xa0 [ 238.028852][ T7017] ___sys_sendmsg+0x2a2/0x360 [ 238.033563][ T7017] ? __sys_sendmsg+0x290/0x290 [ 238.038800][ T7017] ? ktime_get_real_ts64+0x440/0x440 [ 238.044125][ T7017] __se_sys_sendmsg+0x1bb/0x2a0 [ 238.049000][ T7017] ? __x64_sys_sendmsg+0x80/0x80 [ 238.054003][ T7017] ? lockdep_hardirqs_on+0x94/0x140 [ 238.059441][ T7017] do_syscall_64+0x4c/0xa0 [ 238.064162][ T7017] ? clear_bhb_loop+0x60/0xb0 [ 238.069661][ T7017] ? clear_bhb_loop+0x60/0xb0 [ 238.074371][ T7017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.080284][ T7017] RIP: 0033:0x7f2b1239c819 [ 238.084756][ T7017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.104392][ T7017] RSP: 002b:00007f2b13258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.113100][ T7017] RAX: ffffffffffffffda RBX: 00007f2b12616090 RCX: 00007f2b1239c819 [ 238.121778][ T7017] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 238.129765][ T7017] RBP: 00007f2b12432c91 R08: 0000000000000000 R09: 0000000000000000 [ 238.137843][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.145945][ T7017] R13: 00007f2b12616128 R14: 00007f2b12616090 R15: 00007ffeacc26c08 [ 238.154028][ T7017] [ 239.010219][ T7048] netlink: 'syz.3.705': attribute type 13 has an invalid length. [ 239.067216][ T7048] netlink: 164 bytes leftover after parsing attributes in process `syz.3.705'. [ 239.101974][ T7047] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.705'. [ 239.189571][ T7048] erspan0: refused to change device tx_queue_len [ 239.292776][ T7050] netlink: 'syz.3.705': attribute type 13 has an invalid length. [ 239.302909][ T7050] netlink: 164 bytes leftover after parsing attributes in process `syz.3.705'. [ 239.345615][ T7050] erspan0: refused to change device tx_queue_len [ 239.361090][ T7047] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.705'. [ 240.244665][ T7068] tun0: tun_chr_ioctl cmd 1074025675 [ 240.266483][ T7068] tun0: persist enabled [ 240.370559][ T7069] netlink: 22 bytes leftover after parsing attributes in process `syz.1.710'. [ 240.402428][ T7073] tun0: tun_chr_ioctl cmd 1074812117 [ 240.439271][ T7076] tun0: tun_chr_ioctl cmd 2147767506 [ 240.473527][ T7056] Ÿë: port 1(veth0_to_team) entered blocking state [ 240.480828][ T7056] Ÿë: port 1(veth0_to_team) entered disabled state [ 240.495396][ T7056] device veth0_to_team entered promiscuous mode [ 240.701134][ T7090] netlink: 830 bytes leftover after parsing attributes in process `syz.2.716'. [ 241.850611][ T7105] netlink: 'syz.0.715': attribute type 4 has an invalid length. [ 241.925248][ T7108] netlink: 14 bytes leftover after parsing attributes in process `syz.0.715'. [ 242.128521][ T7108] team0: Port device team_slave_0 removed [ 242.469222][ T7112] device syzkaller0 entered promiscuous mode [ 243.011310][ T7127] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 243.050799][ T7127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.722'. [ 244.967025][ T7126] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 245.201315][ T7144] netlink: 'syz.4.725': attribute type 2 has an invalid length. [ 245.221910][ T7146] netlink: 'syz.4.725': attribute type 2 has an invalid length. [ 245.232272][ T7144] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.725'. [ 245.291994][ T7151] netlink: 10 bytes leftover after parsing attributes in process `syz.3.727'. [ 245.308241][ T7146] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.725'. [ 245.798164][ T7163] netlink: 'syz.0.729': attribute type 29 has an invalid length. [ 247.212777][ T7176] netlink: 'syz.1.731': attribute type 11 has an invalid length. [ 247.281583][ T7176] netlink: 168 bytes leftover after parsing attributes in process `syz.1.731'. [ 247.388718][ T7176] netlink: 48 bytes leftover after parsing attributes in process `syz.1.731'. [ 247.857119][ T7185] netlink: 'syz.3.735': attribute type 3 has an invalid length. [ 247.906251][ T7185] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.735'. [ 248.000078][ T7188] tun0: tun_chr_ioctl cmd 1074025675 [ 248.027995][ T7188] tun0: persist enabled [ 248.077683][ T7193] tun0: tun_chr_ioctl cmd 1074812117 [ 248.168147][ T7185] tun0: tun_chr_ioctl cmd 2147767506 [ 248.593630][ T7204] netlink: 'syz.1.739': attribute type 1 has an invalid length. [ 248.725708][ T7204] netlink: 132 bytes leftover after parsing attributes in process `syz.1.739'. [ 249.424918][ T7201] team0: Port device team_slave_0 removed [ 249.444470][ T7201] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 249.725287][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'. [ 249.725712][ T7226] netlink: 76 bytes leftover after parsing attributes in process `syz.1.748'. [ 249.738642][ T7229] netlink: 'syz.2.747': attribute type 29 has an invalid length. [ 254.109353][ T7247] netlink: 'syz.4.750': attribute type 11 has an invalid length. [ 254.131243][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz.4.750'. [ 254.186515][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.4.750'. [ 254.207244][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.753'. [ 255.236964][ T7292] netlink: 'syz.0.759': attribute type 10 has an invalid length. [ 255.380478][ T7292] team0: Device wg1 is of different type [ 255.591984][ T7288] netlink: 'syz.3.758': attribute type 10 has an invalid length. [ 255.794043][ T7288] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 256.220559][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.227165][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.696062][ T7321] netlink: 'syz.1.769': attribute type 2 has an invalid length. [ 257.718031][ T7327] netlink: 'syz.2.768': attribute type 11 has an invalid length. [ 257.734818][ T7321] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 257.756713][ T7327] netlink: 168 bytes leftover after parsing attributes in process `syz.2.768'. [ 257.779470][ T7321] netlink: 152 bytes leftover after parsing attributes in process `syz.1.769'. [ 257.860556][ T7327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.768'. [ 257.937382][ T7326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.770'. [ 258.958461][ T7350] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.775'. [ 259.017084][ T7352] netlink: 'syz.2.776': attribute type 10 has an invalid length. [ 259.127791][ T7356] netlink: 'syz.3.774': attribute type 2 has an invalid length. [ 259.167157][ T7352] team0: Device wg1 is of different type [ 259.395384][ T7360] netlink: 'syz.1.779': attribute type 10 has an invalid length. [ 259.600080][ T7360] team0: Port device geneve1 added [ 259.663610][ T7370] netlink: 'syz.4.781': attribute type 39 has an invalid length. [ 260.816261][ T7393] netlink: 'syz.2.788': attribute type 11 has an invalid length. [ 260.836659][ T7393] netlink: 168 bytes leftover after parsing attributes in process `syz.2.788'. [ 260.964262][ T7395] device pim6reg1 entered promiscuous mode [ 261.713020][ T7408] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 262.120037][ T7408] team0: Device wg1 is of different type [ 263.069582][ T7425] device veth1_macvtap left promiscuous mode [ 263.075672][ T7425] device macsec0 left promiscuous mode [ 264.839161][ T7466] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.806'. [ 265.295855][ T7459] delete_channel: no stack [ 265.334199][ T7473] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.363020][ T7473] netlink: 1 bytes leftover after parsing attributes in process `syz.2.810'. [ 265.464573][ T7472] netlink: 'syz.2.810': attribute type 3 has an invalid length. [ 265.509104][ T7472] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.810'. [ 265.889662][ T7489] netlink: 'syz.2.815': attribute type 3 has an invalid length. [ 265.897575][ T7491] netlink: 'syz.1.816': attribute type 49 has an invalid length. [ 265.935188][ T7491] netlink: 'syz.1.816': attribute type 49 has an invalid length. [ 265.948358][ T7489] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.815'. [ 265.965354][ T7486] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.814'. [ 266.108175][ T7486] openvswitch: netlink: Key type 386 is out of range max 32 [ 269.639137][ T7550] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 269.675370][ T7550] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.832'. [ 270.515729][ T7560] netlink: 'syz.4.835': attribute type 10 has an invalid length. [ 270.955600][ T7560] team0: Device vxcan1 is of different type [ 275.282447][ T7606] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 275.386955][ T7606] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.846'. [ 275.921995][ T7627] netlink: 'syz.4.853': attribute type 10 has an invalid length. [ 276.111519][ T7627] bond0: (slave team0): Releasing backup interface [ 276.195450][ T7627] team0 (unregistering): Port device team_slave_1 removed [ 276.291840][ T7627] team0 (unregistering): Port device wlan1 removed [ 276.411605][ T7634] netlink: 'syz.1.854': attribute type 2 has an invalid length. [ 276.448719][ T7634] netlink: 'syz.1.854': attribute type 8 has an invalid length. [ 276.480581][ T7634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.854'. [ 276.723073][ T7648] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 277.198206][ T7668] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 277.554048][ T7681] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.868'. [ 277.825277][ T7689] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.871'. [ 277.845009][ T7689] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.871'. [ 278.225971][ T7699] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 278.243903][ T7699] netlink: 'syz.3.873': attribute type 8 has an invalid length. [ 278.267783][ T7699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.873'. [ 278.854877][ T7719] bridge0: port 3(dummy0) entered disabled state [ 278.861496][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.869097][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.305716][ T7721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.880'. [ 279.349061][ T7718] netlink: 'syz.0.879': attribute type 41 has an invalid length. [ 279.582052][ T7729] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.881'. [ 279.688592][ T7729] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 279.897508][ T7735] netlink: 'syz.4.882': attribute type 11 has an invalid length. [ 279.958323][ T7735] netlink: 168 bytes leftover after parsing attributes in process `syz.4.882'. [ 280.987638][ T7755] netlink: 826 bytes leftover after parsing attributes in process `syz.4.887'. [ 281.739357][ T7769] netlink: 'syz.2.888': attribute type 2 has an invalid length. [ 281.849179][ T7769] netlink: 'syz.2.888': attribute type 8 has an invalid length. [ 281.997890][ T7769] netlink: 132 bytes leftover after parsing attributes in process `syz.2.888'. [ 283.292932][ T7789] netlink: 1 bytes leftover after parsing attributes in process `syz.1.894'. [ 283.529232][ T7802] netlink: 'syz.0.897': attribute type 11 has an invalid length. [ 283.577451][ T7802] netlink: 168 bytes leftover after parsing attributes in process `syz.0.897'. [ 284.853628][ T7827] netlink: 'syz.1.904': attribute type 10 has an invalid length. [ 284.967265][ T7827] netlink: 55 bytes leftover after parsing attributes in process `syz.1.904'. [ 285.164327][ T7812] IPv6: Can't replace route, no match found [ 285.181626][ T7812] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 285.870961][ T7852] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 285.943525][ T7852] netlink: 'syz.0.908': attribute type 29 has an invalid length. [ 286.237566][ T7850] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.910'. [ 286.566943][ T7860] netlink: 'syz.2.911': attribute type 11 has an invalid length. [ 286.574935][ T7860] netlink: 168 bytes leftover after parsing attributes in process `syz.2.911'. [ 286.606469][ T7864] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.914'. [ 286.855784][ T7867] netlink: 176 bytes leftover after parsing attributes in process `syz.4.913'. [ 287.273184][ T7884] tipc: Started in network mode [ 287.288343][ T7884] tipc: Node identity 9215a268, cluster identity 4711 [ 287.305265][ T7884] tipc: Node number set to 2450891368 [ 287.349248][ T7884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.918'. [ 287.404112][ T7883] sctp: [Deprecated]: syz.0.919 (pid 7883) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.404112][ T7883] Use struct sctp_sack_info instead [ 287.418168][ T7885] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 287.434988][ T4449] wlan1: Trigger new scan to find an IBSS to join [ 287.607952][ T7885] team0: Device hsr_slave_0 failed to register rx_handler [ 287.815981][ T7887] netlink: 'syz.0.919': attribute type 10 has an invalid length. [ 287.856710][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.919'. [ 287.888032][ T7887] device team0 entered promiscuous mode [ 287.903996][ T7887] device team_slave_1 entered promiscuous mode [ 287.922152][ T7887] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 288.234311][ T7902] netlink: 'syz.1.923': attribute type 3 has an invalid length. [ 288.299853][ T7906] netlink: 'syz.0.924': attribute type 2 has an invalid length. [ 288.303351][ T7902] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.923'. [ 288.518369][ T7906] device 0 entered promiscuous mode [ 288.880459][ T7924] netlink: 'syz.0.927': attribute type 11 has an invalid length. [ 288.957905][ T7924] netlink: 168 bytes leftover after parsing attributes in process `syz.0.927'. [ 290.035085][ T7930] delete_channel: no stack [ 290.041238][ T7931] delete_channel: no stack [ 290.387853][ T4332] wlan1: Trigger new scan to find an IBSS to join [ 291.124739][ T7950] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 292.376883][ T5150] wlan1: Creating new IBSS network, BSSID b6:ae:7c:47:12:23 [ 292.485600][ T7950] device vxcan1 entered promiscuous mode [ 292.506807][ T7950] team0: Device vxcan1 is of different type [ 292.653346][ T7957] netlink: 'syz.1.931': attribute type 5 has an invalid length. [ 293.048019][ T7962] netlink: 'syz.2.936': attribute type 10 has an invalid length. [ 293.144739][ T7970] netlink: 68 bytes leftover after parsing attributes in process `syz.0.939'. [ 293.230689][ T7972] netlink: 'syz.3.940': attribute type 11 has an invalid length. [ 293.308992][ T7972] netlink: 168 bytes leftover after parsing attributes in process `syz.3.940'. [ 293.732251][ T7978] netlink: 'syz.1.941': attribute type 10 has an invalid length. [ 294.471269][ T7992] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.944'. [ 295.549555][ T7995] mac80211_hwsim hwsim6 wlan1: refused to change device tx_queue_len [ 295.571005][ T8009] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.948'. [ 296.265051][ T8025] netlink: 'syz.0.953': attribute type 11 has an invalid length. [ 296.297022][ T8025] netlink: 168 bytes leftover after parsing attributes in process `syz.0.953'. [ 296.350723][ T8025] netlink: 48 bytes leftover after parsing attributes in process `syz.0.953'. [ 296.389350][ T8028] netlink: 'syz.1.955': attribute type 10 has an invalid length. [ 297.022600][ T8028] team0: Port device netdevsim0 removed [ 297.159401][ T8028] batman_adv: batadv0: Adding interface: netdevsim0 [ 297.166633][ T8028] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.369405][ T8028] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 297.463168][ T8042] netlink: 'syz.2.959': attribute type 10 has an invalid length. [ 297.708862][ T8042] team0: Port device macvlan0 added [ 297.897060][ T8060] netlink: 'syz.1.964': attribute type 2 has an invalid length. [ 297.963712][ T8060] device 0 entered promiscuous mode [ 298.754595][ T8070] netlink: 'syz.1.968': attribute type 11 has an invalid length. [ 298.889038][ T8070] netlink: 168 bytes leftover after parsing attributes in process `syz.1.968'. [ 298.975778][ T8072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.968'. [ 302.083601][ T8092] netlink: 'syz.2.973': attribute type 2 has an invalid length. [ 302.107232][ T8092] netlink: 'syz.2.973': attribute type 8 has an invalid length. [ 302.120573][ T8092] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 302.169496][ T8095] netlink: 'syz.2.973': attribute type 2 has an invalid length. [ 302.243923][ T8095] netlink: 'syz.2.973': attribute type 8 has an invalid length. [ 302.295008][ T8095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 302.512535][ T8114] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 302.587040][ T8114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.753978][ T8119] netlink: 'syz.2.980': attribute type 11 has an invalid length. [ 302.771398][ T8119] netlink: 168 bytes leftover after parsing attributes in process `syz.2.980'. [ 302.820955][ T8120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.980'. [ 302.891331][ T8115] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.977'. [ 303.085888][ T8115] netlink: zone id is out of range [ 303.149596][ T8115] netlink: zone id is out of range [ 303.209622][ T8115] netlink: zone id is out of range [ 303.249739][ T8115] netlink: zone id is out of range [ 303.275625][ T8115] netlink: zone id is out of range [ 303.296755][ T8115] netlink: zone id is out of range [ 303.302310][ T8115] netlink: zone id is out of range [ 303.354239][ T8115] netlink: zone id is out of range [ 303.367085][ T8115] netlink: zone id is out of range [ 303.997949][ T8132] netlink: 'syz.3.984': attribute type 10 has an invalid length. [ 304.160782][ T8132] team0: Port device macvlan0 added [ 305.494660][ T8162] netlink: 'syz.0.990': attribute type 3 has an invalid length. [ 305.516802][ T8162] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.990'. [ 305.601847][ T8167] netlink: 'syz.2.993': attribute type 11 has an invalid length. [ 305.672432][ T8167] netlink: 168 bytes leftover after parsing attributes in process `syz.2.993'. [ 305.815457][ T8167] netlink: 48 bytes leftover after parsing attributes in process `syz.2.993'. [ 306.386380][ T8175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.393801][ T8175] IPv6: NLM_F_CREATE should be set when creating new route [ 306.401298][ T8175] IPv6: NLM_F_CREATE should be set when creating new route [ 306.408724][ T8175] IPv6: NLM_F_CREATE should be set when creating new route [ 308.456183][ T8218] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1005'. [ 308.526364][ T8225] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1007'. [ 308.823416][ T8222] netlink: 'syz.2.1006': attribute type 3 has an invalid length. [ 308.859846][ T8222] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1006'. [ 308.899781][ T8236] netlink: 'syz.0.1011': attribute type 10 has an invalid length. [ 308.902481][ T4272] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 308.936670][ T8239] netlink: 'syz.1.1012': attribute type 29 has an invalid length. [ 308.963092][ T8236] team0: Device ipvlan1 failed to register rx_handler [ 308.999696][ T8239] netlink: 'syz.1.1012': attribute type 29 has an invalid length. [ 309.321037][ T8251] hsr0: VLAN not yet supported [ 309.694618][ T8266] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1022'. [ 310.420407][ T8278] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1023'. [ 310.598680][ T8278] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 310.870240][ T8285] netlink: 'syz.1.1026': attribute type 1 has an invalid length. [ 311.135918][ T8283] netlink: 'syz.3.1025': attribute type 3 has an invalid length. [ 311.157391][ T8283] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1025'. [ 311.449749][ T8307] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1033'. [ 311.492410][ T8307] net_ratelimit: 384 callbacks suppressed [ 311.492431][ T8307] openvswitch: netlink: Message has 6 unknown bytes. [ 311.542577][ T8313] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1034'. [ 311.583107][ T8309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1033'. [ 311.663313][ T8306] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1033'. [ 311.919498][ T8323] netlink: 'syz.1.1038': attribute type 11 has an invalid length. [ 311.956624][ T8323] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1038'. [ 312.048534][ T8323] netlink: 'syz.1.1038': attribute type 10 has an invalid length. [ 312.116098][ T8323] team0: Port device wlan1 added [ 312.155505][ T8322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.576073][ T8344] tap0: tun_chr_ioctl cmd 99999999 [ 313.902443][ T8367] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1050'. [ 313.923781][ T8368] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1050'. [ 314.338654][ T8369] netlink: 'syz.1.1047': attribute type 3 has an invalid length. [ 314.346733][ T8369] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1047'. [ 314.414012][ T8377] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 314.466028][ T8377] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1052'. [ 315.882357][ T8404] netlink: 'syz.4.1060': attribute type 10 has an invalid length. [ 317.018254][ T8435] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 317.077507][ T8435] team0: Device hsr_slave_0 failed to register rx_handler [ 317.261261][ T8443] __nla_validate_parse: 1 callbacks suppressed [ 317.261283][ T8443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1070'. [ 317.525190][ T8454] netlink: 'syz.0.1072': attribute type 10 has an invalid length. [ 317.661772][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.669109][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.694159][ T8461] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 318.074960][ T8461] device hsr0 entered promiscuous mode [ 318.897292][ T8461] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 318.937899][ T8461] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 319.028183][ T8461] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 319.056643][ T8461] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 319.155974][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1078'. [ 320.719996][ T8515] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1089'. [ 321.131907][ T8521] netlink: 'syz.1.1092': attribute type 3 has an invalid length. [ 321.241512][ T8521] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1092'. [ 321.391637][ T8515] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 321.428566][ T8515] CPU: 1 PID: 8515 Comm: syz.3.1089 Not tainted syzkaller #0 [ 321.436063][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.446522][ T8515] Call Trace: [ 321.449948][ T8515] [ 321.452951][ T8515] dump_stack_lvl+0x188/0x24e [ 321.457729][ T8515] ? show_regs_print_info+0x12/0x12 [ 321.463239][ T8515] ? load_image+0x400/0x400 [ 321.467882][ T8515] sysfs_warn_dup+0x8a/0xa0 [ 321.472509][ T8515] sysfs_do_create_link_sd+0xc0/0x110 [ 321.477920][ T8515] device_add+0x7ed/0xfb0 [ 321.482307][ T8515] wiphy_register+0x1d9f/0x2ac0 [ 321.487232][ T8515] ? cfg80211_event_work+0x40/0x40 [ 321.492388][ T8515] ? minstrel_ht_alloc+0x894/0xa20 [ 321.497559][ T8515] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 321.503666][ T8515] ieee80211_register_hw+0x2d00/0x39f0 [ 321.509178][ T8515] ? ieee80211_register_hw+0xf11/0x39f0 [ 321.514763][ T8515] ? ieee80211_register_hw+0xf11/0x39f0 [ 321.520363][ T8515] ? ieee80211_tasklet_handler+0x20/0x20 [ 321.526088][ T8515] ? memset+0x1e/0x40 [ 321.530287][ T8515] ? __hrtimer_init+0x186/0x270 [ 321.535173][ T8515] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 321.540955][ T8515] hwsim_new_radio_nl+0xafa/0xce0 [ 321.546031][ T8515] genl_family_rcv_msg_doit+0x22a/0x330 [ 321.551607][ T8515] ? end_current_label_crit_section+0x170/0x170 [ 321.557886][ T8515] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 321.563827][ T8515] ? bpf_lsm_capable+0x5/0x10 [ 321.568717][ T8515] ? security_capable+0x85/0xb0 [ 321.573701][ T8515] genl_rcv_msg+0x604/0x790 [ 321.578342][ T8515] ? genl_bind+0x360/0x360 [ 321.582794][ T8515] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 321.589288][ T8515] netlink_rcv_skb+0x1fb/0x450 [ 321.594090][ T8515] ? genl_bind+0x360/0x360 [ 321.598634][ T8515] ? netlink_ack+0x1170/0x1170 [ 321.603446][ T8515] ? down_read+0x1a8/0x2d0 [ 321.607905][ T8515] genl_rcv+0x24/0x40 [ 321.611918][ T8515] netlink_unicast+0x74d/0x8d0 [ 321.617174][ T8515] netlink_sendmsg+0x8ad/0xbd0 [ 321.621991][ T8515] ? netlink_getsockopt+0x550/0x550 [ 321.627492][ T8515] ? aa_sock_msg_perm+0x94/0x150 [ 321.632565][ T8515] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 321.637887][ T8515] ? security_socket_sendmsg+0x7c/0xa0 [ 321.643421][ T8515] ? netlink_getsockopt+0x550/0x550 [ 321.648656][ T8515] ____sys_sendmsg+0x5be/0x970 [ 321.653474][ T8515] ? __sys_sendmsg_sock+0x30/0x30 [ 321.658621][ T8515] ? __import_iovec+0x315/0x500 [ 321.663689][ T8515] ? import_iovec+0x6f/0xa0 [ 321.668236][ T8515] ___sys_sendmsg+0x2a2/0x360 [ 321.672968][ T8515] ? __sys_sendmsg+0x290/0x290 [ 321.677891][ T8515] ? trace_call_bpf+0xbf/0x6b0 [ 321.682724][ T8515] __se_sys_sendmsg+0x1bb/0x2a0 [ 321.687609][ T8515] ? ct_nmi_exit+0x145/0x1c0 [ 321.692242][ T8515] ? __x64_sys_sendmsg+0x80/0x80 [ 321.697229][ T8515] ? lockdep_hardirqs_on+0x94/0x140 [ 321.702477][ T8515] do_syscall_64+0x4c/0xa0 [ 321.706928][ T8515] ? clear_bhb_loop+0x60/0xb0 [ 321.711634][ T8515] ? clear_bhb_loop+0x60/0xb0 [ 321.716359][ T8515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.722298][ T8515] RIP: 0033:0x7f2b1239c819 [ 321.726759][ T8515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.746409][ T8515] RSP: 002b:00007f2b13258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.754860][ T8515] RAX: ffffffffffffffda RBX: 00007f2b12616090 RCX: 00007f2b1239c819 [ 321.762885][ T8515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 321.770985][ T8515] RBP: 00007f2b12432c91 R08: 0000000000000000 R09: 0000000000000000 [ 321.779171][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.787183][ T8515] R13: 00007f2b12616128 R14: 00007f2b12616090 R15: 00007ffeacc26c08 [ 321.795206][ T8515] [ 323.098165][ T8560] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1101'. [ 323.740640][ T8568] netlink: 'syz.0.1096': attribute type 10 has an invalid length. [ 323.861225][ T8568] device hsr0 entered promiscuous mode [ 325.984347][ T8650] netlink: 'syz.4.1125': attribute type 10 has an invalid length. [ 326.750471][ T8668] netlink: 'syz.2.1129': attribute type 29 has an invalid length. [ 326.876695][ T8668] netlink: 'syz.2.1129': attribute type 29 has an invalid length. [ 328.435296][ T8758] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1137'. [ 328.535016][ T8758] netlink: 'syz.2.1137': attribute type 3 has an invalid length. [ 328.576761][ T8758] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1137'. [ 328.756769][ T8770] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1140'. [ 328.819453][ T8771] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 328.861097][ T8771] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1140'. [ 329.294503][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1146'. [ 329.790367][ T8795] tap0: tun_chr_ioctl cmd 1074025677 [ 329.810267][ T8795] tap0: linktype set to 1 [ 330.578049][ T8816] netlink: 'syz.4.1153': attribute type 21 has an invalid length. [ 331.630571][ T8837] device syzkaller0 entered promiscuous mode [ 336.107434][ T8846] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 336.147169][ T8846] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 336.164065][ T8846] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 336.440232][ T8859] netlink: 'syz.3.1166': attribute type 2 has an invalid length. [ 336.487216][ T8864] netlink: 'syz.3.1166': attribute type 2 has an invalid length. [ 336.515034][ T8856] netlink: 'syz.0.1165': attribute type 39 has an invalid length. [ 336.798935][ T8859] device 0 entered promiscuous mode [ 336.822970][ T8864] device 1 entered promiscuous mode [ 337.119949][ T8880] netlink: 'syz.3.1172': attribute type 21 has an invalid length. [ 337.138428][ T8880] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1172'. [ 337.284777][ T8880] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 337.309257][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.588016][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.894544][ T8891] sock: sock_set_timeout: `syz.4.1176' (pid 8891) tries to set negative timeout [ 337.944879][ T8880] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 337.957281][ T8894] netlink: 'syz.0.1175': attribute type 41 has an invalid length. [ 337.998333][ T8894] netlink: 'syz.0.1175': attribute type 4 has an invalid length. [ 338.017519][ T8894] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1175'. [ 338.162874][ T8894] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 338.213104][ T8895] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1175'. [ 338.463013][ T8912] netlink: 'syz.0.1181': attribute type 1 has an invalid length. [ 338.475221][ T8912] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.1181'. [ 339.422938][ T8939] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 339.460158][ T8938] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1188'. [ 339.523990][ T8938] bond0: (slave bond_slave_0): Releasing backup interface [ 339.701178][ T8938] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 339.786516][ T8936] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 340.954849][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 341.024852][ T8979] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1199'. [ 341.065270][ T8979] syz_tun: refused to change device tx_queue_len [ 341.088559][ T8979] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 341.142474][ T8986] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1199'. [ 341.164029][ T8986] syz_tun: refused to change device tx_queue_len [ 341.181237][ T8986] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 341.208462][ T8993] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1203'. [ 341.257218][ T8993] openvswitch: netlink: Flow key attr not present in new flow. [ 341.377915][ T8979] team0: Port device netdevsim0 added [ 342.504851][ T9027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 342.528904][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 342.546689][ T9028] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1212'. [ 342.868876][ T9041] validate_nla: 5 callbacks suppressed [ 342.868893][ T9041] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 343.368366][ T9040] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 343.391352][ T9041] device 1 entered promiscuous mode [ 344.434258][ T9080] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1227'. [ 344.476387][ T9080] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1227'. [ 345.394105][ T9117] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1237'. [ 345.497247][ T9117] bridge_slave_1: default FDB implementation only supports local addresses [ 346.018645][ T9137] netlink: 'syz.1.1241': attribute type 2 has an invalid length. [ 346.104027][ T9137] device 2 entered promiscuous mode [ 346.123703][ T9146] netlink: 'syz.0.1243': attribute type 21 has an invalid length. [ 346.146634][ T9146] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1243'. [ 346.274315][ T9147] netlink: 'syz.3.1245': attribute type 1 has an invalid length. [ 346.374340][ T9147] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1245'. [ 346.587428][ T9163] netlink: 'syz.1.1250': attribute type 29 has an invalid length. [ 346.595948][ T9163] netlink: 'syz.1.1250': attribute type 29 has an invalid length. [ 346.678656][ T9164] netlink: 'syz.1.1250': attribute type 29 has an invalid length. [ 346.971571][ T9167] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1252'. [ 347.648306][ T9170] device syzkaller0 entered promiscuous mode [ 350.518471][ T9178] netlink: 'syz.3.1254': attribute type 21 has an invalid length. [ 350.526643][ T9178] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.547011][ T9183] tap0: tun_chr_ioctl cmd 99999999 [ 350.552261][ T9188] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1256'. [ 350.822804][ T9195] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1258'. [ 351.850333][ T9223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'. [ 352.068338][ T9225] netlink: 'syz.0.1269': attribute type 2 has an invalid length. [ 352.096029][ T9225] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1269'. [ 352.829097][ T9245] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 352.894741][ T9245] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 353.004865][ T9243] netlink: 'syz.4.1272': attribute type 29 has an invalid length. [ 354.422052][ T9278] netlink: 'syz.4.1278': attribute type 21 has an invalid length. [ 354.515587][ T9278] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.177895][ T9286] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1284'. [ 356.351745][ T9294] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 356.385831][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1284'. [ 356.427905][ T9294] device veth0_vlan left promiscuous mode [ 356.433801][ T9294] device veth0_vlan entered promiscuous mode [ 356.492796][ T9294] bridge0: port 4(veth0_vlan) entered blocking state [ 356.530932][ T9294] bridge0: port 4(veth0_vlan) entered disabled state [ 356.552389][ T9294] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 356.595786][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.621020][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªªª: link becomes ready [ 356.640155][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.701825][ T9307] device syzkaller0 entered promiscuous mode [ 357.011709][ T9320] netlink: 'syz.4.1291': attribute type 39 has an invalid length. [ 361.949906][ T9375] netlink: 'syz.1.1306': attribute type 9 has an invalid length. [ 361.965416][ T9375] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1306'. [ 362.015967][ T9371] netlink: 'syz.4.1305': attribute type 39 has an invalid length. [ 363.646937][ T9431] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1319'. [ 366.009604][ T9465] device syzkaller0 entered promiscuous mode [ 366.796425][ T9475] netlink: 'syz.3.1332': attribute type 1 has an invalid length. [ 366.879612][ T9475] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1332'. [ 368.925185][ T9469] device syzkaller0 entered promiscuous mode [ 374.240667][ T9499] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 374.301202][ T9499] team0: Device vxcan1 is of different type [ 374.337880][ T9501] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.1336'. [ 376.711506][ T9567] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 379.112597][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.119010][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.150063][ T9628] netlink: 'syz.2.1370': attribute type 3 has an invalid length. [ 379.175367][ T9628] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1370'. [ 379.459004][ T9638] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 379.636967][ T9644] netlink: 'syz.2.1375': attribute type 10 has an invalid length. [ 379.648119][ T9644] device veth1_macvtap left promiscuous mode [ 379.746891][ T9645] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1375'. [ 380.026153][ T9650] netlink: 'syz.0.1377': attribute type 21 has an invalid length. [ 380.064861][ T9650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.072214][ T9650] IPv6: NLM_F_CREATE should be set when creating new route [ 380.079554][ T9650] IPv6: NLM_F_CREATE should be set when creating new route [ 380.086866][ T9650] IPv6: NLM_F_CREATE should be set when creating new route [ 382.240286][ T9681] device syzkaller0 entered promiscuous mode [ 382.309714][ T9686] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1389'. [ 382.429117][ T9686] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1389'. [ 382.757873][ T9693] netlink: 'syz.3.1389': attribute type 21 has an invalid length. [ 383.203059][ T9709] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1403'. [ 385.381379][ T9701] netlink: 'syz.2.1390': attribute type 1 has an invalid length. [ 387.045764][ T9775] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1411'. [ 387.414461][ T9784] device syzkaller0 entered promiscuous mode [ 387.471047][ T9785] netlink: 'syz.3.1412': attribute type 1 has an invalid length. [ 391.006410][ T9794] netlink: 'syz.2.1415': attribute type 13 has an invalid length. [ 391.014439][ T9794] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1415'. [ 391.027804][ T9794] syz_tun: refused to change device tx_queue_len [ 391.034188][ T9794] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 391.054127][ T9791] netlink: 'syz.2.1415': attribute type 13 has an invalid length. [ 391.068960][ T9791] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1415'. [ 391.087688][ T9791] syz_tun: refused to change device tx_queue_len [ 391.094186][ T9791] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 391.130888][ T9795] netlink: 'syz.2.1415': attribute type 10 has an invalid length. [ 391.158504][ T9795] team0: Port device netdevsim0 added [ 391.969649][ T9833] netlink: 'syz.1.1426': attribute type 10 has an invalid length. [ 392.097337][ T9840] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1428'. [ 393.057897][ T9860] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.1432'. [ 393.316724][ T9860] openvswitch: netlink: Flow actions attr not present in new flow. [ 393.912923][ T9870] netlink: 'syz.2.1437': attribute type 2 has an invalid length. [ 393.932373][ T9870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1437'. [ 395.460987][ T9899] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 395.627976][ T9899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1443'. [ 396.060674][ T9901] netlink: 'syz.2.1443': attribute type 2 has an invalid length. [ 396.086953][ T9901] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1443'. [ 396.769239][ T9908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1446'. [ 397.556397][ T9927] netlink: 'syz.2.1451': attribute type 9 has an invalid length. [ 397.669320][ T9927] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1451'. [ 397.802651][ T9932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1453'. [ 397.845999][ T9932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1453'. [ 397.941523][ T9936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1453'. [ 397.957945][ T9932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1453'. [ 398.138284][ T9933] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1452'. [ 398.949977][ T9947] netlink: 'syz.4.1455': attribute type 2 has an invalid length. [ 398.966763][ T9947] netlink: 157932 bytes leftover after parsing attributes in process `syz.4.1455'. [ 399.080907][ T9960] netlink: 'syz.0.1457': attribute type 17 has an invalid length. [ 399.098742][ T9960] netlink: 'syz.0.1457': attribute type 16 has an invalid length. [ 399.146740][ T9960] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1457'. [ 399.368082][ T9965] sctp: [Deprecated]: syz.3.1461 (pid 9965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.368082][ T9965] Use struct sctp_sack_info instead [ 399.533667][ T9965] netlink: 'syz.3.1461': attribute type 10 has an invalid length. [ 399.556773][ T9965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1461'. [ 399.600648][ T9965] device ipvlan1 entered promiscuous mode [ 399.877285][ T9965] bridge0: port 4(ipvlan1) entered blocking state [ 399.886289][ T9976] netlink: 'syz.2.1464': attribute type 3 has an invalid length. [ 399.886314][ T9976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1464'. [ 399.921603][ T9965] bridge0: port 4(ipvlan1) entered disabled state [ 400.095750][ T9965] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 400.185366][ T9972] netlink: 'syz.4.1462': attribute type 39 has an invalid length. [ 401.481440][T10006] netlink: 'syz.3.1474': attribute type 21 has an invalid length. [ 401.517303][T10006] netlink: 'syz.3.1474': attribute type 20 has an invalid length. [ 401.553732][T10009] device wlan1 entered promiscuous mode [ 402.781864][T10023] __nla_validate_parse: 1 callbacks suppressed [ 402.781881][T10023] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1479'. [ 403.472765][T10047] netlink: 'syz.1.1485': attribute type 2 has an invalid length. [ 403.617183][T10047] netlink: 'syz.1.1485': attribute type 8 has an invalid length. [ 403.625198][T10047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1485'. [ 403.790854][T10050] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1486'. [ 403.877919][T10050] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 404.053277][T10048] delete_channel: no stack [ 404.300558][T10058] netlink: 'syz.0.1489': attribute type 21 has an invalid length. [ 404.328482][T10058] netlink: 'syz.0.1489': attribute type 22 has an invalid length. [ 404.366776][T10058] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.1489'. [ 404.485085][T10060] netlink: 'syz.3.1488': attribute type 20 has an invalid length. [ 406.628338][T10083] device syzkaller0 entered promiscuous mode [ 406.700627][T10102] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1501'. [ 408.518924][T10088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1499'. [ 408.542947][T10102] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1501'. [ 408.736665][T10109] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 408.747536][T10109] device veth1_vlan left promiscuous mode [ 408.825291][T10109] device veth1_vlan entered promiscuous mode [ 408.874860][T10109] team0: Port device macvlan1 added [ 409.705480][T10144] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1512'. [ 411.007217][T10172] netlink: 'syz.2.1519': attribute type 12 has an invalid length. [ 411.068883][T10172] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1519'. [ 411.545011][T10187] netlink: 'syz.2.1524': attribute type 4 has an invalid length. [ 411.613308][T10187] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1524'. [ 412.826069][T10241] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 413.265369][T10262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.288237][T10262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.147955][T10275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1545'. [ 414.236826][T10281] netlink: 'syz.1.1545': attribute type 27 has an invalid length. [ 414.310448][T10281] netlink: 'syz.1.1545': attribute type 3 has an invalid length. [ 414.376938][T10281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1545'. [ 414.497252][T10275] netlink: 'syz.1.1545': attribute type 39 has an invalid length. [ 414.800191][T10275] device hsr_slave_1 left promiscuous mode [ 414.882627][T10285] netlink: 'syz.3.1547': attribute type 21 has an invalid length. [ 414.891144][T10285] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1547'. [ 414.906046][T10281] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1545'. [ 415.074431][T10294] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1550'. [ 415.651552][T10305] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1554'. [ 417.780619][T10297] netlink: 'syz.1.1551': attribute type 39 has an invalid length. [ 417.855780][T10308] netlink: 'syz.3.1554': attribute type 21 has an invalid length. [ 417.869798][T10308] netlink: 'syz.3.1554': attribute type 2 has an invalid length. [ 417.985808][T10311] netlink: 'syz.4.1555': attribute type 21 has an invalid length. [ 418.447450][T10329] netlink: 'syz.4.1561': attribute type 7 has an invalid length. [ 418.461803][T10329] netlink: 'syz.4.1561': attribute type 6 has an invalid length. [ 419.330709][T10360] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1570'. [ 419.934847][T10377] netlink: 'syz.2.1577': attribute type 2 has an invalid length. [ 419.961175][T10377] netlink: 'syz.2.1577': attribute type 3 has an invalid length. [ 419.970348][T10377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1577'. [ 420.379690][T10391] netlink: 'syz.2.1580': attribute type 6 has an invalid length. [ 420.427586][T10391] netlink: 'syz.2.1580': attribute type 30 has an invalid length. [ 420.591832][T10391] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1580'. [ 420.716950][T10391] bridge_slave_1: default FDB implementation only supports local addresses [ 421.058979][T10402] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 421.387670][T10407] netlink: 'syz.0.1584': attribute type 3 has an invalid length. [ 421.400464][T10407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1584'. [ 422.582710][T10456] netlink: 'syz.4.1600': attribute type 3 has an invalid length. [ 422.704083][T10456] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1600'. [ 422.964154][T10466] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 423.030888][T10466] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1602'. [ 423.213946][T10475] netlink: 'syz.2.1603': attribute type 13 has an invalid length. [ 423.257305][T10475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1603'. [ 423.360307][T10475] syz_tun: refused to change device tx_queue_len [ 423.397170][T10475] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 423.471531][T10476] netlink: 'syz.2.1603': attribute type 13 has an invalid length. [ 423.493855][T10476] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1603'. [ 423.519030][T10487] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.1607'. [ 423.626366][T10476] syz_tun: refused to change device tx_queue_len [ 423.635301][T10476] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 424.084068][T10495] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.1609'. [ 428.235720][T10543] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1619'. [ 428.773850][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'. [ 428.816780][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'. [ 428.882093][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'. [ 428.917981][T10560] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1629'. [ 431.625663][T10595] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1639'. [ 433.069310][T10641] netlink: 92148 bytes leftover after parsing attributes in process `syz.2.1651'. [ 433.648979][T10655] validate_nla: 4 callbacks suppressed [ 433.648999][T10655] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 433.679891][T10655] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1652'. [ 434.064461][T10663] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1656'. [ 435.400631][T10691] sctp: [Deprecated]: syz.3.1663 (pid 10691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.400631][T10691] Use struct sctp_sack_info instead [ 435.820621][T10703] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1667'. [ 435.909342][T10702] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 436.018759][T10712] netlink: 'syz.2.1671': attribute type 29 has an invalid length. [ 436.057047][T10712] netlink: 'syz.2.1671': attribute type 29 has an invalid length. [ 436.169719][T10713] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1671'. [ 436.303727][T10712] netlink: 'syz.2.1671': attribute type 29 has an invalid length. [ 436.409889][T10725] netlink: 'syz.1.1673': attribute type 2 has an invalid length. [ 436.479503][T10725] netlink: 'syz.1.1673': attribute type 3 has an invalid length. [ 436.593477][T10720] netlink: 'syz.0.1672': attribute type 1 has an invalid length. [ 436.603656][T10725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1673'. [ 436.662331][T10720] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1672'. [ 436.698168][T10732] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1674'. [ 437.183100][T10737] netlink: 'syz.4.1676': attribute type 10 has an invalid length. [ 437.199135][T10737] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.211764][T10737] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.225612][T10737] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.238194][T10737] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.300173][T10737] device geneve0 entered promiscuous mode [ 437.785395][T10737] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.807256][T10737] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.857033][T10737] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.870322][T10737] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.898531][T10737] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 438.097231][T10754] netlink: 'syz.3.1681': attribute type 28 has an invalid length. [ 438.105116][T10754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1681'. [ 440.542057][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.553381][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.620404][T10744] validate_nla: 1 callbacks suppressed [ 440.620422][T10744] netlink: 'syz.2.1678': attribute type 46 has an invalid length. [ 440.634014][T10744] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1678'. [ 440.647372][T10753] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1681'. [ 440.686604][T10769] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1684'. [ 440.984107][T10781] device wlan1 left promiscuous mode [ 441.065501][T10781] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1686'. [ 441.124883][T10780] netlink: 'syz.4.1688': attribute type 2 has an invalid length. [ 441.136655][T10784] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1686'. [ 441.145146][T10780] netlink: 'syz.4.1688': attribute type 3 has an invalid length. [ 441.192838][T10787] netlink: 'syz.3.1690': attribute type 3 has an invalid length. [ 441.212229][T10780] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1688'. [ 441.223948][T10787] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.1690'. [ 441.332330][T10793] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1692'. [ 441.891357][T10815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1697'. [ 441.926874][T10816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1697'. [ 445.337342][T10859] netlink: 'syz.1.1706': attribute type 21 has an invalid length. [ 445.454788][T10870] netlink: 'syz.0.1711': attribute type 12 has an invalid length. [ 446.624406][T10909] netlink: 'syz.0.1721': attribute type 10 has an invalid length. [ 446.646420][T10909] __nla_validate_parse: 8 callbacks suppressed [ 446.646440][T10909] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1721'. [ 446.663156][T10909] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 446.713031][T10909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1721'. [ 447.220808][T10809] delete_channel: no stack [ 448.351058][T10947] netlink: 'syz.2.1733': attribute type 12 has an invalid length. [ 448.383965][T10947] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1733'. [ 448.428071][T10946] netlink: 'syz.4.1732': attribute type 15 has an invalid length. [ 448.453213][T10946] netlink: 'syz.4.1732': attribute type 5 has an invalid length. [ 448.475575][T10946] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1732'. [ 448.622073][T10955] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1735'. [ 448.701570][T10955] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 448.726655][T10955] CPU: 1 PID: 10955 Comm: syz.0.1735 Not tainted syzkaller #0 [ 448.734199][T10955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.744381][T10955] Call Trace: [ 448.747692][T10955] [ 448.750661][T10955] dump_stack_lvl+0x188/0x24e [ 448.755390][T10955] ? show_regs_print_info+0x12/0x12 [ 448.760634][T10955] ? load_image+0x400/0x400 [ 448.765204][T10955] sysfs_warn_dup+0x8a/0xa0 [ 448.769826][T10955] sysfs_do_create_link_sd+0xc0/0x110 [ 448.775420][T10955] device_add+0x7ed/0xfb0 [ 448.779799][T10955] wiphy_register+0x1d9f/0x2ac0 [ 448.784717][T10955] ? cfg80211_event_work+0x40/0x40 [ 448.789884][T10955] ? minstrel_ht_alloc+0x894/0xa20 [ 448.795038][T10955] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 448.801148][T10955] ieee80211_register_hw+0x2d00/0x39f0 [ 448.806722][T10955] ? ieee80211_register_hw+0xf11/0x39f0 [ 448.812279][T10955] ? ieee80211_register_hw+0xf11/0x39f0 [ 448.817854][T10955] ? ieee80211_tasklet_handler+0x20/0x20 [ 448.823596][T10955] ? memset+0x1e/0x40 [ 448.827594][T10955] ? __hrtimer_init+0x186/0x270 [ 448.832461][T10955] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 448.838220][T10955] hwsim_new_radio_nl+0xafa/0xce0 [ 448.843357][T10955] genl_family_rcv_msg_doit+0x22a/0x330 [ 448.848919][T10955] ? end_current_label_crit_section+0x170/0x170 [ 448.855195][T10955] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 448.861105][T10955] ? bpf_lsm_capable+0x5/0x10 [ 448.865805][T10955] ? security_capable+0x85/0xb0 [ 448.870673][T10955] genl_rcv_msg+0x604/0x790 [ 448.875193][T10955] ? genl_bind+0x360/0x360 [ 448.879637][T10955] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 448.885996][T10955] netlink_rcv_skb+0x1fb/0x450 [ 448.890775][T10955] ? genl_bind+0x360/0x360 [ 448.895208][T10955] ? netlink_ack+0x1170/0x1170 [ 448.900117][T10955] ? down_read+0x1a8/0x2d0 [ 448.904687][T10955] genl_rcv+0x24/0x40 [ 448.908796][T10955] netlink_unicast+0x74d/0x8d0 [ 448.913606][T10955] netlink_sendmsg+0x8ad/0xbd0 [ 448.918409][T10955] ? netlink_getsockopt+0x550/0x550 [ 448.923734][T10955] ? aa_sock_msg_perm+0x94/0x150 [ 448.928716][T10955] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 448.934040][T10955] ? security_socket_sendmsg+0x7c/0xa0 [ 448.939542][T10955] ? netlink_getsockopt+0x550/0x550 [ 448.944771][T10955] ____sys_sendmsg+0x5be/0x970 [ 448.949571][T10955] ? __sys_sendmsg_sock+0x30/0x30 [ 448.954613][T10955] ? __import_iovec+0x315/0x500 [ 448.959579][T10955] ? import_iovec+0x6f/0xa0 [ 448.964127][T10955] ___sys_sendmsg+0x2a2/0x360 [ 448.968840][T10955] ? try_to_wake_up+0x6ae/0x1080 [ 448.973813][T10955] ? __sys_sendmsg+0x290/0x290 [ 448.978827][T10955] __se_sys_sendmsg+0x1bb/0x2a0 [ 448.983708][T10955] ? __x64_sys_sendmsg+0x80/0x80 [ 448.988687][T10955] ? lockdep_hardirqs_on+0x94/0x140 [ 448.993900][T10955] do_syscall_64+0x4c/0xa0 [ 448.998340][T10955] ? clear_bhb_loop+0x60/0xb0 [ 449.003024][T10955] ? clear_bhb_loop+0x60/0xb0 [ 449.007714][T10955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.013617][T10955] RIP: 0033:0x7f6ff4b9c819 [ 449.018216][T10955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.038107][T10955] RSP: 002b:00007f6ff5abc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.046625][T10955] RAX: ffffffffffffffda RBX: 00007f6ff4e16180 RCX: 00007f6ff4b9c819 [ 449.054699][T10955] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 449.062690][T10955] RBP: 00007f6ff4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 449.070674][T10955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.078829][T10955] R13: 00007f6ff4e16218 R14: 00007f6ff4e16180 R15: 00007ffdfe953938 [ 449.086916][T10955] [ 449.557338][T10965] FAULT_INJECTION: forcing a failure. [ 449.557338][T10965] name failslab, interval 1, probability 0, space 0, times 1 [ 449.596673][T10965] CPU: 1 PID: 10965 Comm: syz.2.1739 Not tainted syzkaller #0 [ 449.604489][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.614762][T10965] Call Trace: [ 449.618065][T10965] [ 449.621024][T10965] dump_stack_lvl+0x188/0x24e [ 449.625932][T10965] ? show_regs_print_info+0x12/0x12 [ 449.631183][T10965] ? load_image+0x400/0x400 [ 449.635914][T10965] ? __might_sleep+0xd0/0xd0 [ 449.640544][T10965] ? __lock_acquire+0x7d10/0x7d10 [ 449.645797][T10965] should_fail_ex+0x399/0x4d0 [ 449.650604][T10965] should_failslab+0x5/0x20 [ 449.655147][T10965] slab_pre_alloc_hook+0x59/0x310 [ 449.660384][T10965] ? __schedule+0x119d/0x40e0 [ 449.665100][T10965] ? rtnl_newlink+0x109/0x2080 [ 449.669909][T10965] __kmem_cache_alloc_node+0x4f/0x260 [ 449.675334][T10965] ? rtnl_newlink+0x109/0x2080 [ 449.680281][T10965] kmalloc_trace+0x26/0xe0 [ 449.684912][T10965] rtnl_newlink+0x109/0x2080 [ 449.689532][T10965] ? __schedule+0x11d9/0x40e0 [ 449.694362][T10965] ? __mutex_lock+0x806/0xaf0 [ 449.699094][T10965] ? __lock_acquire+0x7d10/0x7d10 [ 449.704165][T10965] ? do_raw_spin_lock+0x128/0x2f0 [ 449.709394][T10965] ? rtnl_setlink+0x510/0x510 [ 449.714102][T10965] ? __rwlock_init+0x140/0x140 [ 449.718875][T10965] ? do_raw_spin_unlock+0x11d/0x230 [ 449.724087][T10965] ? __mutex_lock+0x810/0xaf0 [ 449.728782][T10965] ? __mutex_lock+0x3b2/0xaf0 [ 449.733482][T10965] ? rtnetlink_rcv_msg+0x824/0xfc0 [ 449.738705][T10965] ? mutex_lock_nested+0x10/0x10 [ 449.743751][T10965] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 449.749059][T10965] ? rtnetlink_rcv_msg+0x226/0xfc0 [ 449.754365][T10965] ? rtnl_setlink+0x510/0x510 [ 449.759061][T10965] rtnetlink_rcv_msg+0x87c/0xfc0 [ 449.764032][T10965] ? rtnetlink_bind+0x80/0x80 [ 449.768730][T10965] ? __local_bh_enable_ip+0x136/0x1c0 [ 449.774247][T10965] ? lockdep_hardirqs_on+0x94/0x140 [ 449.779634][T10965] ? __local_bh_enable_ip+0x136/0x1c0 [ 449.785043][T10965] ? _local_bh_enable+0xa0/0xa0 [ 449.789909][T10965] ? __dev_queue_xmit+0x26b/0x37c0 [ 449.795027][T10965] ? __dev_queue_xmit+0x26b/0x37c0 [ 449.800278][T10965] ? __dev_queue_xmit+0x1cd2/0x37c0 [ 449.805563][T10965] ? __dev_queue_xmit+0x26b/0x37c0 [ 449.810704][T10965] ? ref_tracker_free+0x68c/0x840 [ 449.815832][T10965] ? __copy_skb_header+0x3ba/0x4f0 [ 449.820967][T10965] ? refcount_inc+0x70/0x70 [ 449.825579][T10965] ? memcpy+0x3c/0x60 [ 449.829659][T10965] ? __copy_skb_header+0x3ba/0x4f0 [ 449.834792][T10965] ? __skb_clone+0x480/0x790 [ 449.839496][T10965] netlink_rcv_skb+0x1fb/0x450 [ 449.844278][T10965] ? rtnetlink_bind+0x80/0x80 [ 449.848979][T10965] ? netlink_ack+0x1170/0x1170 [ 449.853765][T10965] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.859111][T10965] netlink_unicast+0x74d/0x8d0 [ 449.863995][T10965] netlink_sendmsg+0x8ad/0xbd0 [ 449.868891][T10965] ? netlink_getsockopt+0x550/0x550 [ 449.874107][T10965] ? aa_sock_msg_perm+0x94/0x150 [ 449.879064][T10965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 449.884474][T10965] ? security_socket_sendmsg+0x7c/0xa0 [ 449.890036][T10965] ? netlink_getsockopt+0x550/0x550 [ 449.895248][T10965] ____sys_sendmsg+0x5be/0x970 [ 449.900041][T10965] ? __sys_sendmsg_sock+0x30/0x30 [ 449.905078][T10965] ? __import_iovec+0x315/0x500 [ 449.910031][T10965] ? import_iovec+0x6f/0xa0 [ 449.914548][T10965] ___sys_sendmsg+0x2a2/0x360 [ 449.919255][T10965] ? __sys_sendmsg+0x290/0x290 [ 449.924243][T10965] ? __lock_acquire+0x7d10/0x7d10 [ 449.929498][T10965] __se_sys_sendmsg+0x1bb/0x2a0 [ 449.934395][T10965] ? __x64_sys_sendmsg+0x80/0x80 [ 449.939459][T10965] ? lockdep_hardirqs_on+0x94/0x140 [ 449.944775][T10965] do_syscall_64+0x4c/0xa0 [ 449.949268][T10965] ? clear_bhb_loop+0x60/0xb0 [ 449.953971][T10965] ? clear_bhb_loop+0x60/0xb0 [ 449.958667][T10965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.964668][T10965] RIP: 0033:0x7f08f799c819 [ 449.969096][T10965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.989013][T10965] RSP: 002b:00007f08f8780028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.997455][T10965] RAX: ffffffffffffffda RBX: 00007f08f7c15fa0 RCX: 00007f08f799c819 [ 450.005568][T10965] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 450.013640][T10965] RBP: 00007f08f8780090 R08: 0000000000000000 R09: 0000000000000000 [ 450.021710][T10965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.029688][T10965] R13: 00007f08f7c16038 R14: 00007f08f7c15fa0 R15: 00007ffd84f7a338 [ 450.037690][T10965] [ 450.221916][T10967] netlink: 'syz.4.1740': attribute type 1 has an invalid length. [ 450.256796][T10976] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1743'. [ 450.834936][T11001] netlink: 'syz.1.1749': attribute type 3 has an invalid length. [ 450.904924][T11001] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1749'. [ 451.487472][T10991] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.1748'. [ 451.556698][T10991] netlink: zone id is out of range [ 451.597203][T10991] netlink: zone id is out of range [ 451.602415][T10991] netlink: zone id is out of range [ 451.662921][T10991] netlink: zone id is out of range [ 451.716838][T10991] netlink: zone id is out of range [ 451.733546][T10991] netlink: zone id is out of range [ 451.747488][T10991] netlink: get zone limit has 8 unknown bytes [ 452.160662][T11025] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1756'. [ 452.176620][T11025] FAULT_INJECTION: forcing a failure. [ 452.176620][T11025] name failslab, interval 1, probability 0, space 0, times 0 [ 452.205906][T11025] CPU: 0 PID: 11025 Comm: syz.4.1756 Not tainted syzkaller #0 [ 452.213441][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.223521][T11025] Call Trace: [ 452.226829][T11025] [ 452.229792][T11025] dump_stack_lvl+0x188/0x24e [ 452.234517][T11025] ? show_regs_print_info+0x12/0x12 [ 452.239771][T11025] ? load_image+0x400/0x400 [ 452.244513][T11025] ? __might_sleep+0xd0/0xd0 [ 452.249134][T11025] ? __lock_acquire+0x7d10/0x7d10 [ 452.254225][T11025] should_fail_ex+0x399/0x4d0 [ 452.258935][T11025] should_failslab+0x5/0x20 [ 452.263545][T11025] slab_pre_alloc_hook+0x59/0x310 [ 452.268781][T11025] kmem_cache_alloc_node+0x5a/0x320 [ 452.274129][T11025] ? __dev_queue_xmit+0x26b/0x37c0 [ 452.279254][T11025] ? __alloc_skb+0xfc/0x7e0 [ 452.283954][T11025] __alloc_skb+0xfc/0x7e0 [ 452.288321][T11025] netlink_ack+0x372/0x1170 [ 452.292859][T11025] ? ref_tracker_free+0x68c/0x840 [ 452.297997][T11025] ? __copy_skb_header+0x3ba/0x4f0 [ 452.303131][T11025] ? refcount_inc+0x70/0x70 [ 452.307655][T11025] ? memcpy+0x3c/0x60 [ 452.311750][T11025] ? netlink_dump+0xd00/0xd00 [ 452.316539][T11025] ? __copy_skb_header+0x3ba/0x4f0 [ 452.321852][T11025] ? __skb_clone+0x480/0x790 [ 452.326473][T11025] netlink_rcv_skb+0x280/0x450 [ 452.331273][T11025] ? rtnetlink_bind+0x80/0x80 [ 452.335974][T11025] ? netlink_ack+0x1170/0x1170 [ 452.340783][T11025] ? netlink_deliver_tap+0x2e/0x1b0 [ 452.346302][T11025] netlink_unicast+0x74d/0x8d0 [ 452.351133][T11025] netlink_sendmsg+0x8ad/0xbd0 [ 452.355928][T11025] ? netlink_getsockopt+0x550/0x550 [ 452.361245][T11025] ? aa_sock_msg_perm+0x94/0x150 [ 452.366198][T11025] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 452.371582][T11025] ? security_socket_sendmsg+0x7c/0xa0 [ 452.377238][T11025] ? netlink_getsockopt+0x550/0x550 [ 452.382454][T11025] ____sys_sendmsg+0x5be/0x970 [ 452.387248][T11025] ? __sys_sendmsg_sock+0x30/0x30 [ 452.392287][T11025] ? __import_iovec+0x315/0x500 [ 452.397264][T11025] ? import_iovec+0x6f/0xa0 [ 452.401875][T11025] ___sys_sendmsg+0x2a2/0x360 [ 452.406581][T11025] ? __sys_sendmsg+0x290/0x290 [ 452.411406][T11025] ? __lock_acquire+0x7d10/0x7d10 [ 452.416494][T11025] __se_sys_sendmsg+0x1bb/0x2a0 [ 452.421450][T11025] ? ct_nmi_exit+0x145/0x1c0 [ 452.426074][T11025] ? __x64_sys_sendmsg+0x80/0x80 [ 452.431070][T11025] ? lockdep_hardirqs_on+0x94/0x140 [ 452.436351][T11025] do_syscall_64+0x4c/0xa0 [ 452.440878][T11025] ? clear_bhb_loop+0x60/0xb0 [ 452.445657][T11025] ? clear_bhb_loop+0x60/0xb0 [ 452.450453][T11025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.456450][T11025] RIP: 0033:0x7fd29519c819 [ 452.460979][T11025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.480603][T11025] RSP: 002b:00007fd2960a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.489125][T11025] RAX: ffffffffffffffda RBX: 00007fd295415fa0 RCX: 00007fd29519c819 [ 452.497255][T11025] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 452.505325][T11025] RBP: 00007fd2960a7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.513583][T11025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.521567][T11025] R13: 00007fd295416038 R14: 00007fd295415fa0 R15: 00007ffe43626808 [ 452.529746][T11025] [ 453.773581][T11049] device team0 left promiscuous mode [ 453.796707][T11049] device team_slave_1 left promiscuous mode [ 455.376249][T11098] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 455.419504][T11098] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 455.550366][T11098] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 455.697706][T11104] netlink: 92148 bytes leftover after parsing attributes in process `syz.1.1778'. [ 455.746169][T11112] netlink: 'syz.4.1781': attribute type 16 has an invalid length. [ 455.975286][T11118] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1784'. [ 456.047233][T11118] FAULT_INJECTION: forcing a failure. [ 456.047233][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 456.140360][T11118] CPU: 0 PID: 11118 Comm: syz.0.1784 Not tainted syzkaller #0 [ 456.147930][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.158140][T11118] Call Trace: [ 456.161469][T11118] [ 456.164453][T11118] dump_stack_lvl+0x188/0x24e [ 456.169447][T11118] ? show_regs_print_info+0x12/0x12 [ 456.174721][T11118] ? load_image+0x400/0x400 [ 456.179395][T11118] ? verify_lock_unused+0x140/0x140 [ 456.184745][T11118] ? perf_trace_lock+0xf8/0x390 [ 456.189704][T11118] should_fail_ex+0x399/0x4d0 [ 456.194486][T11118] should_failslab+0x5/0x20 [ 456.199115][T11118] slab_pre_alloc_hook+0x59/0x310 [ 456.204219][T11118] kmem_cache_alloc+0x56/0x2f0 [ 456.209306][T11118] ? skb_clone+0x1e7/0x370 [ 456.213781][T11118] skb_clone+0x1e7/0x370 [ 456.218191][T11118] __netlink_deliver_tap+0x3ed/0x800 [ 456.223639][T11118] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.228876][T11118] netlink_deliver_tap+0x19c/0x1b0 [ 456.234050][T11118] netlink_sendskb+0x64/0x130 [ 456.238775][T11118] netlink_ack+0xcdd/0x1170 [ 456.243353][T11118] ? refcount_inc+0x70/0x70 [ 456.247896][T11118] ? netlink_dump+0xd00/0xd00 [ 456.252786][T11118] ? __copy_skb_header+0x3ba/0x4f0 [ 456.258036][T11118] ? __skb_clone+0x480/0x790 [ 456.262763][T11118] netlink_rcv_skb+0x280/0x450 [ 456.267653][T11118] ? rtnetlink_bind+0x80/0x80 [ 456.272376][T11118] ? netlink_ack+0x1170/0x1170 [ 456.277298][T11118] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.282545][T11118] netlink_unicast+0x74d/0x8d0 [ 456.287476][T11118] netlink_sendmsg+0x8ad/0xbd0 [ 456.292393][T11118] ? netlink_getsockopt+0x550/0x550 [ 456.297633][T11118] ? aa_sock_msg_perm+0x94/0x150 [ 456.302603][T11118] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 456.307999][T11118] ? security_socket_sendmsg+0x7c/0xa0 [ 456.313502][T11118] ? netlink_getsockopt+0x550/0x550 [ 456.318749][T11118] ____sys_sendmsg+0x5be/0x970 [ 456.323569][T11118] ? __sys_sendmsg_sock+0x30/0x30 [ 456.328727][T11118] ? __import_iovec+0x315/0x500 [ 456.333734][T11118] ? import_iovec+0x6f/0xa0 [ 456.338382][T11118] ___sys_sendmsg+0x2a2/0x360 [ 456.343218][T11118] ? __sys_sendmsg+0x290/0x290 [ 456.348108][T11118] ? trace_call_bpf+0xbf/0x6b0 [ 456.353233][T11118] __se_sys_sendmsg+0x1bb/0x2a0 [ 456.358152][T11118] ? __x64_sys_sendmsg+0x80/0x80 [ 456.363166][T11118] ? lockdep_hardirqs_on+0x94/0x140 [ 456.368402][T11118] do_syscall_64+0x4c/0xa0 [ 456.372854][T11118] ? clear_bhb_loop+0x60/0xb0 [ 456.377569][T11118] ? clear_bhb_loop+0x60/0xb0 [ 456.382280][T11118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.388207][T11118] RIP: 0033:0x7f6ff4b9c819 [ 456.392739][T11118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.412895][T11118] RSP: 002b:00007f6ff5afe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.421517][T11118] RAX: ffffffffffffffda RBX: 00007f6ff4e15fa0 RCX: 00007f6ff4b9c819 [ 456.429528][T11118] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 456.437523][T11118] RBP: 00007f6ff5afe090 R08: 0000000000000000 R09: 0000000000000000 [ 456.445731][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.453736][T11118] R13: 00007f6ff4e16038 R14: 00007f6ff4e15fa0 R15: 00007ffdfe953938 [ 456.461787][T11118] [ 457.030827][T11139] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1790'. [ 457.420978][T11134] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1788'. [ 457.847799][T11158] tap0: tun_chr_ioctl cmd 1074025677 [ 457.853585][T11158] tap0: linktype set to 1 [ 458.153127][T11162] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1797'. [ 458.176835][T11162] FAULT_INJECTION: forcing a failure. [ 458.176835][T11162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.196963][T11162] CPU: 1 PID: 11162 Comm: syz.2.1797 Not tainted syzkaller #0 [ 458.204581][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.214935][T11162] Call Trace: [ 458.218250][T11162] [ 458.221205][T11162] dump_stack_lvl+0x188/0x24e [ 458.225935][T11162] ? show_regs_print_info+0x12/0x12 [ 458.231300][T11162] ? load_image+0x400/0x400 [ 458.235890][T11162] ? __lock_acquire+0x7d10/0x7d10 [ 458.240965][T11162] ? snprintf+0xe5/0x140 [ 458.245420][T11162] should_fail_ex+0x399/0x4d0 [ 458.250144][T11162] _copy_to_user+0x2c/0x130 [ 458.254671][T11162] simple_read_from_buffer+0xe3/0x150 [ 458.260142][T11162] proc_fail_nth_read+0x1a6/0x220 [ 458.265396][T11162] ? proc_fault_inject_write+0x310/0x310 [ 458.271143][T11162] ? fsnotify_perm+0x248/0x550 [ 458.275926][T11162] ? proc_fault_inject_write+0x310/0x310 [ 458.281573][T11162] vfs_read+0x2de/0xa00 [ 458.285781][T11162] ? kernel_read+0x1e0/0x1e0 [ 458.290404][T11162] ? __fget_files+0x28/0x4b0 [ 458.295024][T11162] ? __fget_files+0x28/0x4b0 [ 458.299639][T11162] ? __fget_files+0x43d/0x4b0 [ 458.304522][T11162] ? __fdget_pos+0x2ae/0x360 [ 458.309139][T11162] ? ksys_read+0x71/0x250 [ 458.313575][T11162] ksys_read+0x14c/0x250 [ 458.317837][T11162] ? vfs_write+0xa30/0xa30 [ 458.322357][T11162] ? lockdep_hardirqs_on+0x94/0x140 [ 458.327656][T11162] do_syscall_64+0x4c/0xa0 [ 458.332085][T11162] ? clear_bhb_loop+0x60/0xb0 [ 458.336779][T11162] ? clear_bhb_loop+0x60/0xb0 [ 458.341470][T11162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.347376][T11162] RIP: 0033:0x7f08f795d04e [ 458.351974][T11162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.371951][T11162] RSP: 002b:00007f08f877ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.380472][T11162] RAX: ffffffffffffffda RBX: 00007f08f87806c0 RCX: 00007f08f795d04e [ 458.388538][T11162] RDX: 000000000000000f RSI: 00007f08f87800a0 RDI: 0000000000000004 [ 458.396522][T11162] RBP: 00007f08f8780090 R08: 0000000000000000 R09: 0000000000000000 [ 458.404521][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.412513][T11162] R13: 00007f08f7c16038 R14: 00007f08f7c15fa0 R15: 00007ffd84f7a338 [ 458.420506][T11162] [ 458.646943][T11172] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1800'. [ 459.030943][T11171] device syzkaller0 entered promiscuous mode [ 463.274897][T11211] netlink: 'syz.2.1810': attribute type 10 has an invalid length. [ 463.283148][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1810'. [ 463.293412][T11211] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 463.554233][T11235] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1818'. [ 465.369015][T11277] netlink: 'syz.3.1830': attribute type 13 has an invalid length. [ 465.448317][T11277] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1830'. [ 465.557799][T11277] syz_tun: refused to change device tx_queue_len [ 465.567146][T11277] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 466.284209][T11282] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1832'. [ 468.855339][T11326] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1845'. [ 469.428047][T11337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.435753][T11337] IPv6: NLM_F_CREATE should be set when creating new route [ 469.443673][T11337] IPv6: NLM_F_CREATE should be set when creating new route [ 469.451719][T11337] IPv6: NLM_F_CREATE should be set when creating new route [ 471.679257][ T4272] Bluetooth: hci3: Malformed LE Event: 0x0d [ 472.084186][T11358] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1854'. [ 472.205602][T11355] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1854'. [ 473.478463][T11392] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1863'. [ 473.898217][T11403] netlink: 'syz.2.1866': attribute type 21 has an invalid length. [ 474.116181][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.129378][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.148161][T11403] can: request_module (can-proto-0) failed. [ 474.154965][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.179595][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.188526][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.202049][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.227224][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.245891][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.287601][T11409] netlink: 'syz.1.1868': attribute type 29 has an invalid length. [ 474.480456][T11416] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 474.531847][T11416] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1871'. [ 474.960728][T11424] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1873'. [ 476.081630][T11468] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1885'. [ 476.150827][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1885'. [ 476.174342][T11468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.973459][T11503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1897'. [ 478.222631][T11548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1910'. [ 478.252149][T11542] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1909'. [ 479.466995][T11568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.568658][T11568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.648116][T11568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.656142][T11568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.979145][T11574] validate_nla: 18 callbacks suppressed [ 479.979166][T11574] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 479.994700][T11574] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.016918][T11574] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 480.066977][T11574] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 480.138995][T11574] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 480.333286][T11581] netlink: 'syz.1.1921': attribute type 10 has an invalid length. [ 480.347498][T11581] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 480.404050][T11581] device team0 entered promiscuous mode [ 480.450599][T11581] device team_slave_1 entered promiscuous mode [ 480.493009][T11581] device macvlan0 entered promiscuous mode [ 480.536848][T11581] device geneve1 entered promiscuous mode [ 480.543026][T11581] device wlan1 entered promiscuous mode [ 480.586403][T11581] device macvlan1 entered promiscuous mode [ 480.615990][T11581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 481.997572][T11610] bridge0: port 1(team0) entered blocking state [ 482.004059][T11610] bridge0: port 1(team0) entered disabled state [ 482.028536][T11610] device team0 entered promiscuous mode [ 482.034183][T11610] device team_slave_0 entered promiscuous mode [ 482.076869][T11610] device team_slave_1 entered promiscuous mode [ 482.086714][T11610] device macvlan0 entered promiscuous mode [ 482.093244][T11610] device netdevsim0 entered promiscuous mode [ 483.291181][T11655] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 483.328463][T11655] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1939'. [ 483.407403][T11657] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1940'. [ 483.853107][T11676] netlink: 'syz.4.1945': attribute type 21 has an invalid length. [ 483.872746][T11676] netlink: 'syz.4.1945': attribute type 2 has an invalid length. [ 483.912268][T11676] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1945'. [ 484.022874][T11680] sock: sock_timestamping_bind_phc: sock not bind to device [ 484.037093][T11681] netlink: 'syz.0.1947': attribute type 21 has an invalid length. [ 489.390429][T11771] netlink: 'syz.0.1974': attribute type 3 has an invalid length. [ 489.421579][T11771] netlink: 'syz.0.1974': attribute type 4 has an invalid length. [ 489.461197][T11761] delete_channel: no stack [ 489.478459][T11771] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.1974'. [ 489.530809][T11761] delete_channel: no stack [ 489.576647][T11783] netlink: 'syz.0.1974': attribute type 3 has an invalid length. [ 489.631450][T11783] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1974'. [ 491.575658][T11831] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1988'. [ 492.201053][T11864] netlink: 'syz.0.1997': attribute type 6 has an invalid length. [ 492.248323][T11865] netlink: 'syz.0.1997': attribute type 21 has an invalid length. [ 492.307119][T11865] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1997'. [ 494.504235][T11940] tap0: tun_chr_ioctl cmd 2147767517 [ 494.876238][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'. [ 495.038347][T11955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'. [ 495.456735][T11971] netlink: 'syz.2.2027': attribute type 21 has an invalid length. [ 495.530546][T11971] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2027'. [ 496.127522][T11985] netlink: 'syz.2.2031': attribute type 21 has an invalid length. [ 498.480479][T12002] netlink: 'syz.4.2035': attribute type 39 has an invalid length. [ 498.758331][T12008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.765736][T12008] IPv6: NLM_F_CREATE should be set when creating new route [ 498.864263][T12007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.188577][T12029] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 499.241131][T12029] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2043'. [ 499.299528][T12031] netlink: 'syz.0.2043': attribute type 21 has an invalid length. [ 499.332304][T12031] netlink: 'syz.0.2043': attribute type 5 has an invalid length. [ 499.524333][T12027] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2042'. [ 499.568061][T12027] bridge_slave_1: default FDB implementation only supports local addresses [ 501.983947][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.992528][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.354700][T12063] device syzkaller0 entered promiscuous mode [ 504.212092][ T8719] tipc: Subscription rejected, illegal request [ 505.731442][T12083] netlink: 'syz.4.2055': attribute type 10 has an invalid length. [ 505.759712][T12092] tap0: tun_chr_ioctl cmd 1074025677 [ 505.767186][T12092] tap0: linktype set to 780 [ 505.807400][T12096] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2059'. [ 507.292021][T12155] netlink: 'syz.0.2075': attribute type 4 has an invalid length. [ 507.332151][T12155] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2075'. [ 507.418335][T12156] netlink: 'syz.0.2075': attribute type 2 has an invalid length. [ 507.507905][T12156] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 507.515735][T12156] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2075'. [ 508.148140][T12172] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2078'. [ 508.176063][T12172] tc_dump_action: action bad kind [ 508.184770][T12174] netlink: 'syz.0.2079': attribute type 9 has an invalid length. [ 508.217249][T12174] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2079'. [ 508.350404][T12174] netlink: 88333 bytes leftover after parsing attributes in process `syz.0.2079'. [ 508.852279][T12185] netlink: 'syz.2.2081': attribute type 21 has an invalid length. [ 508.878605][T12185] netlink: 'syz.2.2081': attribute type 1 has an invalid length. [ 509.118778][T12194] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2082'. [ 509.181597][T12194] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 509.524314][T12212] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 509.533272][T12212] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2089'. [ 509.539244][T12208] device sit0 entered promiscuous mode [ 509.585378][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2089'. [ 509.885969][T12221] netlink: 'syz.1.2091': attribute type 3 has an invalid length. [ 509.897589][T12221] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2091'. [ 511.717301][T12215] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2089'. [ 512.274392][T12238] device syzkaller0 entered promiscuous mode [ 512.297458][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 512.310951][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 512.402732][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 512.427104][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 512.693618][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 512.706949][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 513.443571][T12258] netlink: 'syz.2.2102': attribute type 11 has an invalid length. [ 513.454559][T12258] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2102'. [ 513.996484][T12264] sock: sock_set_timeout: `syz.4.2103' (pid 12264) tries to set negative timeout [ 516.475097][T12257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.796205][T12273] sock: sock_set_timeout: `syz.3.2104' (pid 12273) tries to set negative timeout [ 518.476264][T12313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2114'. [ 519.834464][T12241] netlink: 'syz.1.2097': attribute type 10 has an invalid length. [ 519.844390][T12286] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 519.864038][T12286] bond0: (slave wlan1): Releasing backup interface [ 519.898566][T12286] team0: Port device wlan1 added [ 521.162609][T12363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2130'. [ 521.193468][T12363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2130'. [ 521.207461][T12363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2130'. [ 521.348926][T12368] netlink: 'syz.1.2130': attribute type 10 has an invalid length. [ 521.380455][T12368] device veth1_vlan left promiscuous mode [ 521.609069][T12380] netlink: 'syz.0.2135': attribute type 2 has an invalid length. [ 521.624158][T12380] netlink: 'syz.0.2135': attribute type 8 has an invalid length. [ 521.633991][T12380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2135'. [ 521.667217][T12386] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2138'. [ 521.729483][T12380] device sit0 entered promiscuous mode [ 522.377386][ T8729] wlan1: Trigger new scan to find an IBSS to join [ 523.117527][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 523.371121][T12443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 523.433697][T12443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 523.499253][T12445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2154'. [ 523.543205][T12441] delete_channel: no stack [ 523.579521][T12451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2155'. [ 523.614261][T12451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2155'. [ 523.633609][T12452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2155'. [ 525.275379][T12438] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 525.308293][T12438] device wlan1 left promiscuous mode [ 525.348221][T12438] team0: Port device wlan1 removed [ 525.363058][T12438] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 525.593632][T12489] netlink: 'syz.1.2166': attribute type 13 has an invalid length. [ 525.777985][T12497] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2169'. [ 525.780637][T12495] netlink: 'syz.3.2167': attribute type 2 has an invalid length. [ 526.254212][T12495] device 2 entered promiscuous mode [ 526.432720][T12510] netlink: 'syz.4.2172': attribute type 10 has an invalid length. [ 527.290939][T12547] netlink: 'syz.2.2182': attribute type 3 has an invalid length. [ 527.363097][T12547] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2182'. [ 528.636073][T12576] netlink: 'syz.0.2189': attribute type 10 has an invalid length. [ 528.670970][T12584] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2191'. [ 528.692179][T12580] netlink: 'syz.2.2191': attribute type 29 has an invalid length. [ 528.839796][T12576] team0 (unregistering): Port device team_slave_1 removed [ 528.871990][T12584] netlink: 'syz.2.2191': attribute type 10 has an invalid length. [ 528.883988][T12584] device hsr0 entered promiscuous mode [ 528.950444][T12580] netlink: 'syz.2.2191': attribute type 29 has an invalid length. [ 528.986294][T12588] netlink: 'syz.1.2193': attribute type 21 has an invalid length. [ 529.029973][T12588] IPv6: NLM_F_CREATE should be specified when creating new route [ 529.054011][T12588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.061627][T12588] IPv6: NLM_F_CREATE should be set when creating new route [ 529.069011][T12588] IPv6: NLM_F_CREATE should be set when creating new route [ 529.076267][T12588] IPv6: NLM_F_CREATE should be set when creating new route [ 529.394549][T12597] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2196'. [ 530.117605][T12619] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 530.138512][T12619] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 530.180059][T12619] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 530.225927][T12619] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 530.813935][T12636] validate_nla: 2 callbacks suppressed [ 530.813957][T12636] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 531.252156][T12636] device team0 left promiscuous mode [ 531.273009][T12636] device team_slave_0 left promiscuous mode [ 531.300598][T12636] device team_slave_1 left promiscuous mode [ 531.316812][T12636] device macvlan0 left promiscuous mode [ 531.322760][T12636] device netdevsim0 left promiscuous mode [ 531.422596][T12636] bridge0: port 1(team0) entered disabled state [ 531.529041][T12636] team0 (unregistering): Port device team_slave_0 removed [ 531.614455][T12636] team0 (unregistering): Port device team_slave_1 removed [ 531.665613][T12636] team0 (unregistering): Port device macvlan0 removed [ 531.723605][T12636] team0 (unregistering): Port device netdevsim0 removed [ 531.831780][T12662] delete_channel: no stack [ 531.961659][T12665] IPv6: Can't replace route, no match found [ 536.814352][T12730] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.2232'. [ 537.907186][T12752] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 538.034236][T12758] netlink: 'syz.4.2240': attribute type 10 has an invalid length. [ 541.104609][T12764] netlink: 'syz.3.2239': attribute type 25 has an invalid length. [ 541.134404][T12764] netlink: 'syz.3.2239': attribute type 28 has an invalid length. [ 541.192438][T12778] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2245'. [ 541.706175][T12795] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 [ 541.928180][T12803] netlink: 'syz.3.2252': attribute type 7 has an invalid length. [ 541.978027][T12803] netlink: 208404 bytes leftover after parsing attributes in process `syz.3.2252'. [ 542.019766][T12804] netlink: 'syz.1.2253': attribute type 3 has an invalid length. [ 542.055160][T12804] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2253'. [ 542.196248][T12813] netlink: 'syz.0.2256': attribute type 29 has an invalid length. [ 542.272825][T12813] netlink: 'syz.0.2256': attribute type 29 has an invalid length. [ 542.766380][T12824] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2258'. [ 543.445145][T12835] netlink: 'syz.2.2262': attribute type 10 has an invalid length. [ 545.821872][T12878] netlink: 'syz.2.2270': attribute type 16 has an invalid length. [ 545.947359][T12881] netlink: 'syz.2.2270': attribute type 10 has an invalid length. [ 545.991476][T12878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2270'. [ 546.890565][T12890] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2275'. [ 547.341386][T12900] device syzkaller0 entered promiscuous mode [ 548.511819][T12925] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2288'. [ 548.593428][T12925] netlink: 'syz.2.2288': attribute type 1 has an invalid length. [ 548.891235][T12933] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2289'. [ 552.560502][T12922] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 552.585891][T12922] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2286'. [ 556.037039][T13016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2309'. [ 556.135393][T13021] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 556.174463][T13016] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2309'. [ 556.230778][T13021] netlink: 148288 bytes leftover after parsing attributes in process `syz.4.2311'. [ 556.253303][T13016] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 557.230801][T13049] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2319'. [ 557.405985][T13045] netlink: 'syz.4.2317': attribute type 10 has an invalid length. [ 558.141039][T13064] netlink: 'syz.4.2323': attribute type 11 has an invalid length. [ 558.228210][T13064] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2323'. [ 558.985346][T13063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.763485][T13124] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2341'. [ 562.822469][T13126] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2342'. [ 563.419307][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.425779][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.681327][T13135] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2344'. [ 564.145084][T13156] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2352'. [ 564.420733][T13159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.444705][T13159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.513871][T13159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.547424][T13159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.769631][T13159] batman_adv: batadv0: Removing interface: netdevsim0 [ 564.834464][T13179] netlink: 'syz.4.2356': attribute type 3 has an invalid length. [ 564.981254][T13179] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2356'. [ 565.051409][T13172] bridge0: port 3(dummy0) entered disabled state [ 565.065486][T13172] device bridge_slave_1 left promiscuous mode [ 565.071982][T13172] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.083279][T13172] device bridge_slave_0 left promiscuous mode [ 565.090324][T13172] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.323381][T13171] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2356'. [ 565.342621][T13175] netlink: 'syz.2.2357': attribute type 2 has an invalid length. [ 569.160432][T13235] netlink: 'syz.4.2374': attribute type 11 has an invalid length. [ 569.230285][T13235] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2374'. [ 569.311667][T13235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.703029][T13254] IPv6: Can't replace route, no match found [ 569.865889][T13255] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2377'. [ 570.628385][T13280] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 570.634381][T13280] syzkaller0: linktype set to 820 [ 573.970634][T13328] tun0: tun_chr_ioctl cmd 1074025675 [ 574.004541][T13328] tun0: persist enabled [ 574.331560][T13345] netlink: 'syz.1.2400': attribute type 10 has an invalid length. [ 574.466787][T13345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2400'. [ 574.516931][T13345] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 574.698668][T13334] can: request_module (can-proto-0) failed. [ 574.791511][T13354] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2403'. [ 575.148314][T13362] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 575.162373][T13364] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 575.332678][T13362] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2406'. [ 575.456727][T13369] netlink: 'syz.4.2410': attribute type 10 has an invalid length. [ 575.540846][T13373] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2410'. [ 576.439877][T13376] netlink: 'syz.0.2409': attribute type 2 has an invalid length. [ 576.453029][T13376] netlink: 'syz.0.2409': attribute type 8 has an invalid length. [ 576.466303][T13376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2409'. [ 576.478517][T13373] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 576.506608][T13373] CPU: 0 PID: 13373 Comm: syz.4.2410 Not tainted syzkaller #0 [ 576.514459][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.524559][T13373] Call Trace: [ 576.527871][T13373] [ 576.530836][T13373] dump_stack_lvl+0x188/0x24e [ 576.535650][T13373] ? show_regs_print_info+0x12/0x12 [ 576.540900][T13373] ? load_image+0x400/0x400 [ 576.545512][T13373] sysfs_warn_dup+0x8a/0xa0 [ 576.550768][T13373] sysfs_do_create_link_sd+0xc0/0x110 [ 576.556189][T13373] device_add+0x7ed/0xfb0 [ 576.560663][T13373] wiphy_register+0x1d9f/0x2ac0 [ 576.565760][T13373] ? cfg80211_event_work+0x40/0x40 [ 576.570921][T13373] ? minstrel_ht_alloc+0x894/0xa20 [ 576.576091][T13373] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 576.582215][T13373] ieee80211_register_hw+0x2d00/0x39f0 [ 576.587851][T13373] ? ieee80211_register_hw+0xf11/0x39f0 [ 576.593535][T13373] ? ieee80211_register_hw+0xf11/0x39f0 [ 576.599226][T13373] ? ieee80211_tasklet_handler+0x20/0x20 [ 576.604928][T13373] ? memset+0x1e/0x40 [ 576.608951][T13373] ? __hrtimer_init+0x186/0x270 [ 576.613845][T13373] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 576.619647][T13373] hwsim_new_radio_nl+0xafa/0xce0 [ 576.624747][T13373] genl_family_rcv_msg_doit+0x22a/0x330 [ 576.630591][T13373] ? end_current_label_crit_section+0x170/0x170 [ 576.636876][T13373] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 576.642833][T13373] ? bpf_lsm_capable+0x5/0x10 [ 576.647561][T13373] ? security_capable+0x85/0xb0 [ 576.652512][T13373] genl_rcv_msg+0x604/0x790 [ 576.657083][T13373] ? genl_bind+0x360/0x360 [ 576.660875][T13398] netlink: 'syz.1.2417': attribute type 9 has an invalid length. [ 576.661523][T13373] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 576.675671][T13373] netlink_rcv_skb+0x1fb/0x450 [ 576.680500][T13373] ? genl_bind+0x360/0x360 [ 576.685044][T13373] ? netlink_ack+0x1170/0x1170 [ 576.686534][T13398] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2417'. [ 576.689843][T13373] ? down_read+0x1a8/0x2d0 [ 576.703699][T13373] genl_rcv+0x24/0x40 [ 576.707818][T13373] netlink_unicast+0x74d/0x8d0 [ 576.712735][T13373] netlink_sendmsg+0x8ad/0xbd0 [ 576.717660][T13373] ? netlink_getsockopt+0x550/0x550 [ 576.723011][T13373] ? aa_sock_msg_perm+0x94/0x150 [ 576.728026][T13373] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 576.733356][T13373] ? security_socket_sendmsg+0x7c/0xa0 [ 576.738959][T13373] ? netlink_getsockopt+0x550/0x550 [ 576.744209][T13373] ____sys_sendmsg+0x5be/0x970 [ 576.749096][T13373] ? __sys_sendmsg_sock+0x30/0x30 [ 576.754160][T13373] ? __import_iovec+0x315/0x500 [ 576.759042][T13373] ? import_iovec+0x6f/0xa0 [ 576.763574][T13373] ___sys_sendmsg+0x2a2/0x360 [ 576.768364][T13373] ? try_to_wake_up+0x67c/0x1080 [ 576.773417][T13373] ? __sys_sendmsg+0x290/0x290 [ 576.778249][T13373] __se_sys_sendmsg+0x1bb/0x2a0 [ 576.783242][T13373] ? __x64_sys_sendmsg+0x80/0x80 [ 576.788326][T13373] ? lockdep_hardirqs_on+0x94/0x140 [ 576.793546][T13373] do_syscall_64+0x4c/0xa0 [ 576.797982][T13373] ? clear_bhb_loop+0x60/0xb0 [ 576.802931][T13373] ? clear_bhb_loop+0x60/0xb0 [ 576.807627][T13373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.813705][T13373] RIP: 0033:0x7fd29519c819 [ 576.818137][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.838110][T13373] RSP: 002b:00007fd296086028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 576.846539][T13373] RAX: ffffffffffffffda RBX: 00007fd295416090 RCX: 00007fd29519c819 [ 576.854631][T13373] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 576.862784][T13373] RBP: 00007fd295232c91 R08: 0000000000000000 R09: 0000000000000000 [ 576.870945][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.878931][T13373] R13: 00007fd295416128 R14: 00007fd295416090 R15: 00007ffe43626808 [ 576.887104][T13373] [ 578.144920][T13428] netlink: 'syz.1.2423': attribute type 21 has an invalid length. [ 578.448659][T13435] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2425'. [ 578.468647][T13435] bridge_slave_1: default FDB implementation only supports local addresses [ 578.534133][T13435] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2425'. [ 578.626237][T13445] netlink: 'syz.3.2425': attribute type 25 has an invalid length. [ 578.659399][T13445] netlink: 'syz.3.2425': attribute type 27 has an invalid length. [ 578.667945][T13445] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2425'. [ 578.728928][T13449] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2427'. [ 579.172521][T13460] tun1: tun_chr_ioctl cmd 2147767507 [ 579.772444][T13482] validate_nla: 3 callbacks suppressed [ 579.772463][T13482] netlink: 'syz.0.2436': attribute type 21 has an invalid length. [ 579.836792][T13482] netlink: 'syz.0.2436': attribute type 1 has an invalid length. [ 579.844684][T13482] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2436'. [ 579.986550][T13497] netlink: 'syz.4.2441': attribute type 2 has an invalid length. [ 580.046719][T13497] netlink: 'syz.4.2441': attribute type 1 has an invalid length. [ 580.135424][T13500] netlink: 'syz.3.2442': attribute type 10 has an invalid length. [ 580.523771][T13514] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2445'. [ 580.585851][T13514] netlink: 'syz.0.2445': attribute type 2 has an invalid length. [ 580.614297][T13514] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2445'. [ 580.977318][T13530] device ipvlan1 entered promiscuous mode [ 581.955783][T13558] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2457'. [ 582.018568][T13558] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 582.132778][T13565] netlink: 'syz.4.2459': attribute type 2 has an invalid length. [ 582.155018][T13565] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2459'. [ 582.620050][T13580] netlink: 'syz.1.2460': attribute type 6 has an invalid length. [ 582.679156][T13580] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2460'. [ 583.399865][T13596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2469'. [ 584.226170][T13625] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2474'. [ 584.273990][T13596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.452874][T13596] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 584.477216][T13596] bond0 (unregistering): Released all slaves [ 584.544504][T13625] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 584.556749][T13625] CPU: 0 PID: 13625 Comm: syz.0.2474 Not tainted syzkaller #0 [ 584.564283][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 584.574546][T13625] Call Trace: [ 584.577958][T13625] [ 584.580925][T13625] dump_stack_lvl+0x188/0x24e [ 584.585843][T13625] ? show_regs_print_info+0x12/0x12 [ 584.591087][T13625] ? load_image+0x400/0x400 [ 584.595652][T13625] sysfs_warn_dup+0x8a/0xa0 [ 584.600200][T13625] sysfs_do_create_link_sd+0xc0/0x110 [ 584.605718][T13625] device_add+0x7ed/0xfb0 [ 584.610109][T13625] wiphy_register+0x1d9f/0x2ac0 [ 584.615044][T13625] ? cfg80211_event_work+0x40/0x40 [ 584.620202][T13625] ? minstrel_ht_alloc+0x894/0xa20 [ 584.625377][T13625] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 584.628035][T13622] netlink: 'syz.3.2475': attribute type 3 has an invalid length. [ 584.631470][T13625] ieee80211_register_hw+0x2d00/0x39f0 [ 584.631532][T13625] ? ieee80211_register_hw+0xf11/0x39f0 [ 584.650426][T13625] ? ieee80211_register_hw+0xf11/0x39f0 [ 584.656094][T13625] ? ieee80211_tasklet_handler+0x20/0x20 [ 584.661970][T13625] ? memset+0x1e/0x40 [ 584.665967][T13625] ? __hrtimer_init+0x186/0x270 [ 584.670839][T13625] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 584.676656][T13625] hwsim_new_radio_nl+0xafa/0xce0 [ 584.681721][T13625] genl_family_rcv_msg_doit+0x22a/0x330 [ 584.687282][T13625] ? end_current_label_crit_section+0x170/0x170 [ 584.693540][T13625] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 584.699545][T13625] ? bpf_lsm_capable+0x5/0x10 [ 584.704325][T13625] ? security_capable+0x85/0xb0 [ 584.709285][T13625] genl_rcv_msg+0x604/0x790 [ 584.713816][T13625] ? genl_bind+0x360/0x360 [ 584.718246][T13625] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 584.724618][T13625] netlink_rcv_skb+0x1fb/0x450 [ 584.729585][T13625] ? genl_bind+0x360/0x360 [ 584.734015][T13625] ? netlink_ack+0x1170/0x1170 [ 584.738809][T13625] ? down_read+0x1a8/0x2d0 [ 584.743514][T13625] genl_rcv+0x24/0x40 [ 584.747679][T13625] netlink_unicast+0x74d/0x8d0 [ 584.752559][T13625] netlink_sendmsg+0x8ad/0xbd0 [ 584.757347][T13625] ? netlink_getsockopt+0x550/0x550 [ 584.762566][T13625] ? aa_sock_msg_perm+0x94/0x150 [ 584.767518][T13625] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 584.772832][T13625] ? security_socket_sendmsg+0x7c/0xa0 [ 584.778314][T13625] ? netlink_getsockopt+0x550/0x550 [ 584.783666][T13625] ____sys_sendmsg+0x5be/0x970 [ 584.788463][T13625] ? __sys_sendmsg_sock+0x30/0x30 [ 584.793517][T13625] ? __import_iovec+0x315/0x500 [ 584.798388][T13625] ? import_iovec+0x6f/0xa0 [ 584.803352][T13625] ___sys_sendmsg+0x2a2/0x360 [ 584.808046][T13625] ? try_to_wake_up+0x6ae/0x1080 [ 584.813025][T13625] ? __sys_sendmsg+0x290/0x290 [ 584.817882][T13625] __se_sys_sendmsg+0x1bb/0x2a0 [ 584.822774][T13625] ? __x64_sys_sendmsg+0x80/0x80 [ 584.827761][T13625] ? lockdep_hardirqs_on+0x94/0x140 [ 584.833066][T13625] do_syscall_64+0x4c/0xa0 [ 584.837508][T13625] ? clear_bhb_loop+0x60/0xb0 [ 584.842204][T13625] ? clear_bhb_loop+0x60/0xb0 [ 584.846901][T13625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.852894][T13625] RIP: 0033:0x7f6ff4b9c819 [ 584.857324][T13625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.877039][T13625] RSP: 002b:00007f6ff5abc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.885495][T13625] RAX: ffffffffffffffda RBX: 00007f6ff4e16180 RCX: 00007f6ff4b9c819 [ 584.893768][T13625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 584.901854][T13625] RBP: 00007f6ff4c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 584.909927][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.917909][T13625] R13: 00007f6ff4e16218 R14: 00007f6ff4e16180 R15: 00007ffdfe953938 [ 584.925920][T13625] [ 584.973243][T13622] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2475'. [ 585.108849][T13628] netlink: 'syz.2.2476': attribute type 39 has an invalid length. [ 585.708839][T13646] FAULT_INJECTION: forcing a failure. [ 585.708839][T13646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.763339][T13646] CPU: 0 PID: 13646 Comm: syz.1.2479 Not tainted syzkaller #0 [ 585.770988][T13646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 585.781121][T13646] Call Trace: [ 585.784434][T13646] [ 585.787584][T13646] dump_stack_lvl+0x188/0x24e [ 585.792518][T13646] ? show_regs_print_info+0x12/0x12 [ 585.797767][T13646] ? load_image+0x400/0x400 [ 585.802413][T13646] ? __lock_acquire+0x7d10/0x7d10 [ 585.807496][T13646] should_fail_ex+0x399/0x4d0 [ 585.812336][T13646] _copy_from_user+0x2c/0x170 [ 585.817064][T13646] __sys_bpf+0x2ea/0x780 [ 585.821386][T13646] ? bpf_link_show_fdinfo+0x380/0x380 [ 585.826995][T13646] ? lock_chain_count+0x20/0x20 [ 585.831873][T13646] __x64_sys_bpf+0x78/0x90 [ 585.836300][T13646] do_syscall_64+0x4c/0xa0 [ 585.840730][T13646] ? clear_bhb_loop+0x60/0xb0 [ 585.845518][T13646] ? clear_bhb_loop+0x60/0xb0 [ 585.850219][T13646] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.856128][T13646] RIP: 0033:0x7f71fad9c819 [ 585.860557][T13646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.880173][T13646] RSP: 002b:00007f71fbd4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.888689][T13646] RAX: ffffffffffffffda RBX: 00007f71fb015fa0 RCX: 00007f71fad9c819 [ 585.896673][T13646] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 585.904654][T13646] RBP: 00007f71fbd4a090 R08: 0000000000000000 R09: 0000000000000000 [ 585.912642][T13646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.920725][T13646] R13: 00007f71fb016038 R14: 00007f71fb015fa0 R15: 00007ffc93d0c7e8 [ 585.928831][T13646] [ 586.765763][T13683] FAULT_INJECTION: forcing a failure. [ 586.765763][T13683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.829181][T13683] CPU: 1 PID: 13683 Comm: syz.0.2494 Not tainted syzkaller #0 [ 586.836820][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.846920][T13683] Call Trace: [ 586.850595][T13683] [ 586.853645][T13683] dump_stack_lvl+0x188/0x24e [ 586.858371][T13683] ? show_regs_print_info+0x12/0x12 [ 586.864395][T13683] ? load_image+0x400/0x400 [ 586.869160][T13683] ? __lock_acquire+0x7d10/0x7d10 [ 586.874259][T13683] ? read_lock_is_recursive+0x10/0x10 [ 586.880128][T13683] should_fail_ex+0x399/0x4d0 [ 586.884850][T13683] _copy_to_user+0x2c/0x130 [ 586.889571][T13683] bpf_prog_test_run_syscall+0x332/0x4a0 [ 586.895240][T13683] ? sock_gen_cookie+0x60/0x60 [ 586.900133][T13683] ? sock_gen_cookie+0x60/0x60 [ 586.904927][T13683] bpf_prog_test_run+0x31e/0x390 [ 586.910165][T13683] __sys_bpf+0x62b/0x780 [ 586.914619][T13683] ? bpf_link_show_fdinfo+0x380/0x380 [ 586.920226][T13683] ? lock_chain_count+0x20/0x20 [ 586.925123][T13683] __x64_sys_bpf+0x78/0x90 [ 586.929604][T13683] do_syscall_64+0x4c/0xa0 [ 586.934500][T13683] ? clear_bhb_loop+0x60/0xb0 [ 586.939301][T13683] ? clear_bhb_loop+0x60/0xb0 [ 586.944016][T13683] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.950036][T13683] RIP: 0033:0x7f6ff4b9c819 [ 586.954489][T13683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.974146][T13683] RSP: 002b:00007f6ff5afe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.982603][T13683] RAX: ffffffffffffffda RBX: 00007f6ff4e15fa0 RCX: 00007f6ff4b9c819 [ 586.990607][T13683] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 586.998606][T13683] RBP: 00007f6ff5afe090 R08: 0000000000000000 R09: 0000000000000000 [ 587.006609][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.014653][T13683] R13: 00007f6ff4e16038 R14: 00007f6ff4e15fa0 R15: 00007ffdfe953938 [ 587.022757][T13683] [ 587.234417][T13678] ================================================================== [ 587.242562][T13678] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 587.250413][T13678] Write of size 48 at addr ffff88803456ff10 by task syz.3.2493/13678 [ 587.258515][T13678] [ 587.260868][T13678] CPU: 0 PID: 13678 Comm: syz.3.2493 Not tainted syzkaller #0 [ 587.268358][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 587.278534][T13678] Call Trace: [ 587.281860][T13678] [ 587.284906][T13678] dump_stack_lvl+0x188/0x24e [ 587.289631][T13678] ? __lock_acquire+0x7d10/0x7d10 [ 587.294701][T13678] ? show_regs_print_info+0x12/0x12 [ 587.299943][T13678] ? load_image+0x400/0x400 [ 587.304495][T13678] ? __virt_addr_valid+0x465/0x540 [ 587.309743][T13678] ? __bpf_get_stackid+0x6c9/0x920 [ 587.314906][T13678] print_report+0xa8/0x210 [ 587.319363][T13678] kasan_report+0x10b/0x140 [ 587.324008][T13678] ? __bpf_get_stackid+0x6c9/0x920 [ 587.329171][T13678] kasan_check_range+0x235/0x290 [ 587.334329][T13678] ? __bpf_get_stackid+0x6c9/0x920 [ 587.339481][T13678] memcpy+0x3c/0x60 [ 587.343335][T13678] __bpf_get_stackid+0x6c9/0x920 [ 587.348326][T13678] bpf_get_stackid_pe+0x33f/0x400 [ 587.353476][T13678] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 587.359158][T13678] bpf_overflow_handler+0x522/0x7c0 [ 587.364500][T13678] ? bpf_overflow_handler+0xd9/0x7c0 [ 587.369832][T13678] ? perf_swevent_overflow+0x230/0x230 [ 587.375339][T13678] ? ct_irq_exit_irqson+0x113/0x170 [ 587.380585][T13678] ? __perf_event_account_interrupt+0x187/0x280 [ 587.387139][T13678] __perf_event_overflow+0x448/0x610 [ 587.392567][T13678] perf_swevent_event+0x315/0x570 [ 587.397642][T13678] ? perf_tp_event+0xc30/0xc30 [ 587.402454][T13678] ___perf_sw_event+0x49e/0x6e0 [ 587.407463][T13678] ? ___perf_sw_event+0x180/0x6e0 [ 587.412724][T13678] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 587.419196][T13678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 587.425453][T13678] ? lockdep_hardirqs_on+0x94/0x140 [ 587.430775][T13678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 587.436979][T13678] __perf_sw_event+0x135/0x260 [ 587.441800][T13678] do_user_addr_fault+0xaea/0xb10 [ 587.446867][T13678] ? trace_hardirqs_off_finish+0x86/0x180 [ 587.452799][T13678] exc_page_fault+0x60/0x100 [ 587.457423][T13678] asm_exc_page_fault+0x22/0x30 [ 587.462342][T13678] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 587.468107][T13678] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 587.488024][T13678] RSP: 0018:ffffc9000bf6fe80 EFLAGS: 00050297 [ 587.494352][T13678] RAX: 000000000000000c RBX: 00007fffffffeffd RCX: 0000000000000000 [ 587.502539][T13678] RDX: 0000000000000000 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 587.510642][T13678] RBP: 000000000000000c R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 587.518656][T13678] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 587.526669][T13678] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 587.534795][T13678] __sys_socketpair+0xb4/0x540 [ 587.539690][T13678] __x64_sys_socketpair+0x97/0xb0 [ 587.544854][T13678] do_syscall_64+0x4c/0xa0 [ 587.549340][T13678] ? clear_bhb_loop+0x60/0xb0 [ 587.554069][T13678] ? clear_bhb_loop+0x60/0xb0 [ 587.558808][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.564918][T13678] RIP: 0033:0x7f2b1239c819 [ 587.569370][T13678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.589194][T13678] RSP: 002b:00007f2b13279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 587.597656][T13678] RAX: ffffffffffffffda RBX: 00007f2b12615fa0 RCX: 00007f2b1239c819 [ 587.605669][T13678] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 587.613933][T13678] RBP: 00007f2b12432c91 R08: 0000000000000000 R09: 0000000000000000 [ 587.621941][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.629945][T13678] R13: 00007f2b12616038 R14: 00007f2b12615fa0 R15: 00007ffeacc26c08 [ 587.637959][T13678] [ 587.641004][T13678] [ 587.643351][T13678] Allocated by task 13678: [ 587.647795][T13678] kasan_set_track+0x4b/0x70 [ 587.652430][T13678] __kasan_kmalloc+0x8e/0xa0 [ 587.657067][T13678] __kmalloc_node+0xb0/0x240 [ 587.661698][T13678] bpf_map_area_alloc+0x47/0xe0 [ 587.666584][T13678] prealloc_elems_and_freelist+0x86/0x1c0 [ 587.672351][T13678] stack_map_alloc+0x390/0x520 [ 587.677147][T13678] map_create+0x534/0x1000 [ 587.681602][T13678] __sys_bpf+0x38b/0x780 [ 587.685884][T13678] __x64_sys_bpf+0x78/0x90 [ 587.690335][T13678] do_syscall_64+0x4c/0xa0 [ 587.694956][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.700892][T13678] [ 587.703256][T13678] The buggy address belongs to the object at ffff88803456ff00 [ 587.703256][T13678] which belongs to the cache kmalloc-cg-64 of size 64 [ 587.717429][T13678] The buggy address is located 16 bytes inside of [ 587.717429][T13678] 64-byte region [ffff88803456ff00, ffff88803456ff40) [ 587.730575][T13678] [ 587.732920][T13678] The buggy address belongs to the physical page: [ 587.739358][T13678] page:ffffea0000d15bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88803456f400 pfn:0x3456f [ 587.750853][T13678] memcg:ffff8880765ad201 [ 587.755204][T13678] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 587.762969][T13678] raw: 00fff00000000200 ffffea00006fdc40 dead000000000005 ffff888017442780 [ 587.771675][T13678] raw: ffff88803456f400 000000008020001c 00000001ffffffff ffff8880765ad201 [ 587.780286][T13678] page dumped because: kasan: bad access detected [ 587.786735][T13678] page_owner tracks the page as allocated [ 587.792489][T13678] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4274, tgid 4274 (syz-executor), ts 441444879408, free_ts 441444502106 [ 587.811032][T13678] post_alloc_hook+0x173/0x1a0 [ 587.815845][T13678] get_page_from_freelist+0x1a1e/0x1ab0 [ 587.821518][T13678] __alloc_pages+0x1ec/0x4f0 [ 587.826234][T13678] alloc_slab_page+0x5d/0x160 [ 587.831054][T13678] new_slab+0x87/0x2c0 [ 587.835171][T13678] ___slab_alloc+0xbc6/0x1240 [ 587.840143][T13678] __kmem_cache_alloc_node+0x1a0/0x260 [ 587.845642][T13678] kmalloc_trace+0x26/0xe0 [ 587.850097][T13678] alloc_fdtable+0xca/0x2c0 [ 587.854718][T13678] dup_fd+0x782/0xa50 [ 587.858743][T13678] copy_files+0x72/0xe0 [ 587.862936][T13678] copy_process+0x1835/0x4030 [ 587.867824][T13678] kernel_clone+0x24b/0x900 [ 587.872367][T13678] __x64_sys_clone+0x1a7/0x220 [ 587.877160][T13678] do_syscall_64+0x4c/0xa0 [ 587.881619][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.887550][T13678] page last free stack trace: [ 587.892245][T13678] free_unref_page_prepare+0x8b4/0x9a0 [ 587.897745][T13678] free_unref_page+0x2e/0x3f0 [ 587.902466][T13678] __vunmap+0x856/0xa00 [ 587.906654][T13678] __do_replace+0x86d/0x980 [ 587.911190][T13678] do_ip6t_set_ctl+0xb44/0xe10 [ 587.915985][T13678] nf_setsockopt+0x25f/0x280 [ 587.920611][T13678] __sys_setsockopt+0x2bf/0x3d0 [ 587.925526][T13678] __x64_sys_setsockopt+0xb1/0xc0 [ 587.930602][T13678] do_syscall_64+0x4c/0xa0 [ 587.935056][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.940979][T13678] [ 587.943341][T13678] Memory state around the buggy address: [ 587.949077][T13678] ffff88803456fe00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 587.957171][T13678] ffff88803456fe80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 587.965281][T13678] >ffff88803456ff00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 587.973371][T13678] ^ [ 587.978860][T13678] ffff88803456ff80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 587.986961][T13678] ffff888034570000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 587.995225][T13678] ================================================================== [ 588.003785][T13678] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 588.011092][T13678] CPU: 0 PID: 13678 Comm: syz.3.2493 Not tainted syzkaller #0 [ 588.018594][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.028776][T13678] Call Trace: [ 588.032084][T13678] [ 588.035040][T13678] dump_stack_lvl+0x188/0x24e [ 588.039941][T13678] ? memcpy+0x3c/0x60 [ 588.043967][T13678] ? show_regs_print_info+0x12/0x12 [ 588.049217][T13678] ? load_image+0x400/0x400 [ 588.053768][T13678] panic+0x2e5/0x730 [ 588.057817][T13678] ? bpf_jit_dump+0xd0/0xd0 [ 588.062541][T13678] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 588.068473][T13678] ? _raw_spin_unlock+0x40/0x40 [ 588.073535][T13678] ? print_memory_metadata+0x314/0x400 [ 588.079037][T13678] check_panic_on_warn+0x80/0xa0 [ 588.084016][T13678] ? __bpf_get_stackid+0x6c9/0x920 [ 588.089339][T13678] end_report+0x66/0x110 [ 588.093624][T13678] kasan_report+0x118/0x140 [ 588.098261][T13678] ? __bpf_get_stackid+0x6c9/0x920 [ 588.103412][T13678] kasan_check_range+0x235/0x290 [ 588.108484][T13678] ? __bpf_get_stackid+0x6c9/0x920 [ 588.113632][T13678] memcpy+0x3c/0x60 [ 588.117484][T13678] __bpf_get_stackid+0x6c9/0x920 [ 588.122590][T13678] bpf_get_stackid_pe+0x33f/0x400 [ 588.127744][T13678] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 588.133246][T13678] bpf_overflow_handler+0x522/0x7c0 [ 588.138538][T13678] ? bpf_overflow_handler+0xd9/0x7c0 [ 588.143864][T13678] ? perf_swevent_overflow+0x230/0x230 [ 588.149545][T13678] ? ct_irq_exit_irqson+0x113/0x170 [ 588.154982][T13678] ? __perf_event_account_interrupt+0x187/0x280 [ 588.161362][T13678] __perf_event_overflow+0x448/0x610 [ 588.166703][T13678] perf_swevent_event+0x315/0x570 [ 588.171872][T13678] ? perf_tp_event+0xc30/0xc30 [ 588.176771][T13678] ___perf_sw_event+0x49e/0x6e0 [ 588.181671][T13678] ? ___perf_sw_event+0x180/0x6e0 [ 588.186823][T13678] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 588.193300][T13678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 588.199504][T13678] ? lockdep_hardirqs_on+0x94/0x140 [ 588.204748][T13678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 588.210947][T13678] __perf_sw_event+0x135/0x260 [ 588.215760][T13678] do_user_addr_fault+0xaea/0xb10 [ 588.220825][T13678] ? trace_hardirqs_off_finish+0x86/0x180 [ 588.226594][T13678] exc_page_fault+0x60/0x100 [ 588.231237][T13678] asm_exc_page_fault+0x22/0x30 [ 588.236126][T13678] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 588.241883][T13678] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 588.261706][T13678] RSP: 0018:ffffc9000bf6fe80 EFLAGS: 00050297 [ 588.267812][T13678] RAX: 000000000000000c RBX: 00007fffffffeffd RCX: 0000000000000000 [ 588.275912][T13678] RDX: 0000000000000000 RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 588.283923][T13678] RBP: 000000000000000c R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 588.291935][T13678] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 588.299945][T13678] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 588.307966][T13678] __sys_socketpair+0xb4/0x540 [ 588.312786][T13678] __x64_sys_socketpair+0x97/0xb0 [ 588.317944][T13678] do_syscall_64+0x4c/0xa0 [ 588.322661][T13678] ? clear_bhb_loop+0x60/0xb0 [ 588.327372][T13678] ? clear_bhb_loop+0x60/0xb0 [ 588.332084][T13678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.338019][T13678] RIP: 0033:0x7f2b1239c819 [ 588.342461][T13678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.362192][T13678] RSP: 002b:00007f2b13279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 588.370686][T13678] RAX: ffffffffffffffda RBX: 00007f2b12615fa0 RCX: 00007f2b1239c819 [ 588.378705][T13678] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 588.386977][T13678] RBP: 00007f2b12432c91 R08: 0000000000000000 R09: 0000000000000000 [ 588.394980][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.402987][T13678] R13: 00007f2b12616038 R14: 00007f2b12615fa0 R15: 00007ffeacc26c08 [ 588.411181][T13678] [ 588.414579][T13678] Kernel Offset: disabled [ 588.418912][T13678] Rebooting in 86400 seconds..