last executing test programs: 5.441989845s ago: executing program 0 (id=19598): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0xffd8, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000880), 0x4) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001c40)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x11, 0xa, 0x300, &(0x7f0000000000)) 5.269856949s ago: executing program 1 (id=19601): r0 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)="02f5060102000000e4a17c4505", 0xd}, {&(0x7f0000000540)="96ccb7", 0x3}], 0x2}, 0x54) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) close(r0) r2 = socket$kcm(0x10, 0x3, 0x10) close(r2) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a2eaa2bfe", 0x14}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000690000001820fb4d", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00\x00\x00'], &(0x7f0000000080)='GPL\x00', 0x7, 0x55, &(0x7f00000000c0)=""/85, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x1, 0x20, 0x35d683ac}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000240)=[{0x2, 0x3, 0xe, 0x2}, {0x0, 0x1, 0xe, 0xb}]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x57, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) 5.24181857s ago: executing program 0 (id=19604): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xca00, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x21, 0x2, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab070004000523"], 0xfe33) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0, 0x0, 0x0, 0x1802}, 0x20000001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0xec) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x8, &(0x7f0000000000)=r6, 0x4) r7 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r7, r2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x5865}, 0x0) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.107593953s ago: executing program 1 (id=19605): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1000000, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getpid() r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b7000000016d0300bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff000000002704000000ffffffdd0a05000000000014000000016d030063030400000000001d44010000000000620a00fe00ffffffdb03000000000000b5000000000000009500000000000000023bc065b70300c6dfa041b63af4a3912435b1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e5f58b7382a8b7e8177168001815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc20eec363e4a8f6456e5ccae25ea21714ee18cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a277c7a775d55dfc28abbe9b5ea62d84f3a10746443d64364f56e24e6d2105bd901128c7e0ec82770c8206b1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009df5daf87068a608628efc56c752af4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9610f0000d36f38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eeeb883418f562ae00003ea96d10f172c0374d6eed82640700dfffffffffff499c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c64a403ade624d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca5f1380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f254a9bf93f04bf072f0bc2d38092909ef3613861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf82807773e534015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d2a9441eb315209d199e029e9135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d8516800ef3f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe3907000000466f4ca2195234648e0a1ca50db6f3d9436a7d55a9ad382400000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b45eb6dc5f6a9257d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba51dd5ab2b7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f80724a5bfc1e8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f068840a754c02181561542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ec3d59901da21afd6400000000832503969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98c2c73e1661261173f359e93d2c80000000998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebccbaf1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91cda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fc7741c7e3f426b9ed20debd883593ff5d691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579c23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d0f086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc0095f5a3bfdcffffffffffffffff61ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d480e7f13a65dbaa1af102d97681656bf56ff0cf36518f674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ffbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656659db4cb06aaaf9f02cfab5b9e61cc00e8e194299219a3f4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd06961912052f441e96884fcdc91f4a974242aabfc8adbadc9ca27955b5c90f1ed9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b723621f3b706bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37a7e20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a149414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e13e3a7a1511573cb1a8cdce3a8fea40792297d023ef52de2e75b9dbbfb8713178e2409b8d3b981bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd610000000000000000000000000000000000000000000000b41248c570c4223a471b755ce6956908e2b0e5dbc5e71ff2373d3ed89c2e2eafac81c21ac2436d2ffacffe2fc0d601a50221c88a47b264c5129004f350963b52702c5a360000000000000000000000000000000b4077dc8a1801a8bf833350d302c5439ea3dd0f3b8eb1dc93af1fbf863d33a38a53a02ec1e5b90cb673d6b0cfe7f35b20e438653e0f73ddfc78e3e1d1cc9798af0eb9b61bb4fc72454a57237b68ea614ad898374e952784a18ffb9dc4447acd7ad28a63f88007ad8cba31a6fdd9982c97a913dffe69654d3a00b98c45ead9b9619f946c82f5789379d0d942020652ccfac45e1ef5e93e72b7d5381a3c61fbabc1286285110540075bc7aee3e595f9850b9e96887d53404add0021b198be851d9f797d964fe7501997524d28ce7b1d5f8203d9f756efd5676c5d85052030c27e2a99ee39007d9b3c305b1c7d14899b42149d6c437d863651d30426e36ff66bafa93ce3f76c18b8c91ac65b7ab49f03b7c0d0687e1ee0369e88d674f51fe69423000000000000596444d8a7bf983d6f0342b2987e520100000000000000f37cda7868234eeefbd472c7b396c182f2b9a8bf2f85ad1a7b18681784c8fcf0cf5e34baebc594de0d6c9244a834b82a162739619b5f2e3c24378417f71f855b7958fbae631a8aa30b2120a9e23d8711f529b0cd7ce6ee2b0841a4d9e82e6ef54089b64175338ed7effe440c97c663a1000000000033f9ee8bc74fb676198caf54f9a07461c30b4b65890f2b64e68eb2a265f641e68af046fb8751055c6dba7e49068656dbf01c26b3812cec4204084e4c3f5abb86121a3eddd10720d3b66a3a8033aab499cf56b7e5b01d37c1d7b4f5968040cd727efc9a1d69fa550313969508472efa833327d1bcae9167e3316f272ba2efdebf91f15b4a2bc27ea303834692d92961d3dcff0e4f55d9e3e7c66e8d3324216c4c77b95c000c5f30d56da969b1ce3a3e1a8ce5a632b3c404e7b455cac15273ce31a57dc7bed120f5396671eb7f8670ddc26ecc7461b1badfc98076c95aa811954827767c023c51e183cf1de0230912617f72169a3f9bda12d14667855757ca543b524491e213929a9d095abb9e57f33ad7e5301e5995e65246bc06f931d983596a4979d403f1b3984123633e9af67a0972612b5874f2000000009a8c3199c30dd0c416da1c22e346958bda493b297fcb98181ac449ca17a08e27ae81320e316e018fc9c77e7434079bc06ca1d315a94d177a888cc189fa5649bf5b9ab787118c29d735cc6dfaa965ea9ebbbaff83a06292aff2e3ed23750786136f113cdb04b881f721d02bd3c99b9dd3fa2713cda74eb3dd3422c736dc5c7bd3d1d008b5af391dac38341744dc38e8620fd4b35974ef1d93a907f37a84e1d630dd93fcde4aaf59e0e1f64ba3eec9da0b3d3b241fa52d9db1b137140b27434e74b783f9b62cc516f99e425ed603c5e65c0c3b08815a4aac7c1db4e47261148fa3a54359a2157b9a0fcecd54abbfaaee20f9a6dcc5380f01f22b8fd02b340118a65cef1597f5ce8d8a602120a3b2bb8ccc199dc36b2110a2200a2d3eaff9bc85ff68cd233fb2c8198682bd1c99fd7d66f3554439db4145028bc69579e516fd32253f641b0bffebc32cd3e90d67c77017ae323d8d31bd9f061d270d89737acea845067d8fd36fcce1ae9cd64beeae55d4c8159262240837b2854e5e08c58551453f1b9e46c6a7aaa972255fe7ad8f653168ce260000000000000000008b816f1b5e51781fa92c8b2c886bd992507715f8554276f56e3498156ca6d639de489096f49f2e1850d7399b1fe3801d3b2c0f65abcb67ac3ded74b099f76fee439abfb20c23864280855f395e3449859040832ea50df150deb14fc420a8e91ec84ccd338ada3c5778cbd52bcc2ac93b00e64959286b99231afa239dbefc90a21180f12a03c370980c8101d8a014f6139e998c938bccc92bfc987af6f02ec667c9597c19cc4193c09d152093013629b93e5104447e54ba7bc95ed2b3532421d6a0424c1e000000000000c1af53b85ab7060d6797a18cac2bf246a16f503e09832de7f7aa523d2325b4e3b651b1883ab9a3012f2b5b91e2782250a650d2dddca42a671f083b4a3739a651feb7c1c6903f50ce2cb6501fa22cf55230792a1e2fc902c9115a3b912dcef392b050c9a2870e7da0ca2ce908ff7bc5c72b591004ec3034b189a580e7f6ef153c04bb5599ab22686c5520a02e14a53f105d7b6a097e86"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.83997402s ago: executing program 0 (id=19610): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040), 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300006002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getpid() r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) syz_clone(0x20243400, 0x0, 0x1b, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4814) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 4.402272401s ago: executing program 1 (id=19614): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000a1ffff", 0x20}], 0x1}, 0x40000) 4.183612516s ago: executing program 4 (id=19618): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb701, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0xed}}}, 0x80, 0x0}, 0x24008010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="005411000000000000000000000008234d9bf9670000000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000680)="017dd8c64894", 0x6}], 0x2}, 0x41) 4.072457009s ago: executing program 0 (id=19620): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fffffff}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x889e, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000200, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x2000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xb, 0x840, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0xfffffffffffffeeb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair(0x2, 0x3, 0x1, &(0x7f0000000180)) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000021c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462", 0x26}, {&(0x7f0000000240)="de5d6708f46c89a4cdfb", 0xa}], 0x2}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x2, 0x0, 0x0, 0x0, 0xffffefffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x200000, 0x400007fffffff}, 0x752, 0x0, 0xc2ba, 0x9, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x21, 0x2, 0xa) 4.072245799s ago: executing program 1 (id=19621): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xf, 0x0, &(0x7f0000000240)="1ff517f6fc2504005eafd709c01bb8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.072124099s ago: executing program 3 (id=19622): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x4000, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.906125843s ago: executing program 3 (id=19623): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) r1 = syz_clone(0x0, &(0x7f0000000200)="2dca34279893ba57b592ce926deb07fbe54b593eb8aae89195dab0b96c3fc86531aa3b032e40148ce26a6532a471396f960753b3c328a7f142f2ba475316d2f4475682ffb6bfb7717e4922db28b691e13c001c8f02b25fcb887105a71f45d206a56e2d32621969127703b37dda3a7528d74fed91a58333459531a0", 0x7b, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000500)="90f2c3c9777dff3f88e20b012862ccb307da278de959efe57b99721249139c9fecb579c3b1ea2c8f16e83b0b2de8c9d184fd73a7ebb2601fef6eaf85bf1cce9891ed3e86eb80c33046a9a200c607d5e6678cf568b76b98aa4b52f8693eb22e37ad131a5af9ff64370af3029a291207b4424ec8bc860217862cef9739715e229d03ad1efe352318084a5b40f6c22f9037c8669b33cf7c8987d59fb90e0dccbe2444f31227181ac0370012ec5e9f50fdb972ffa641b3cda4a2dfb4c44b11525e719375") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x3ea, 0x6}, 0x1000a0, 0x3, 0x0, 0x7, 0x1, 0x200, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x3ea, 0x6}, 0x1000a0, 0x3, 0x0, 0x7, 0x1, 0x200, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) (async) r3 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair(0x1, 0x2, 0xb7b43113, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000940)={r4}) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000940)={r4}) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) sendmsg(r5, &(0x7f0000000900)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711, @host}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)="b19d6299a6d4b72c2d16b14e0bd7864e4717afdef3a15a5dc8e90fe887752d34128382948f5583943fb20bc28a9bc6ef2445e2d52435d01d8529527c2f2790cc90bc7ff8", 0x44}, {&(0x7f0000000680)="986c4279891a3dc31eb603341dca6b8d9ae9547169d26edcd3526b367270b771a6f886a977fb0c3a3d38049639aa49be7316011e4bc87dc67a13934c36d2", 0x3e}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="aa5d859f1ffa3fd447c1a1ca00b0976d72c18be4b1d7d51ad4729e9c8f355175c6", 0x21}, {&(0x7f0000000740)="62d7d38363d2e824a0f9c96ef5ae9714d25acc90de341e574e79b071461baffbcb05d219a5f7e70d88dafe3ff3311e3540acbef45160b7361bbb32e3c2427eb090f57ed8d6bcb1029068dbce51524d964365bc064e836cc673ad22af25cf277c40847a039343e2d8e66c41a294b9710a2bc0818645e647541e866fdb51db41bd804be478c9ea12553a54f723890cad76efa6b5261ed540c5d3cfe5f5dbee34ce", 0xa0}, {&(0x7f0000000800)="c224677a60a1b1d655f08ccebb9d592b2b0b6db8fc331d1c99069b73a79f64452f00eaedb6b12eda91aa9f5dd9ed44132c23230439a4efb0733195db1a6666c90c10e8bc1ffc0cb3b92cd7454e70a4f7b37b327302e9f01f47f231dd597c43c413a0", 0x62}], 0x6}, 0x40000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000980)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000980)={r0}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000000) 3.905654133s ago: executing program 4 (id=19624): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x108000, 0x0, 0xf, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0xc82e, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45", 0x8}], 0x1}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3.855227524s ago: executing program 2 (id=19625): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0xa6, 0x0, 0x0}, 0x50) 2.535294017s ago: executing program 0 (id=19626): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1f, &(0x7f0000000100), 0x129) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r0, 0x22, 0x0, 0x5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@cgroup=r7, r1, 0x29, 0x4, r4, @void, @value=r4, @void, @void, r6}, 0x20) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x2d, 0x0, 0x88) 2.533361207s ago: executing program 4 (id=19627): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x2}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8000000}]}]}}, 0x0, 0x42}, 0x28) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x4788, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='%@*\x00') r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x10, 0x3, 0x9, &(0x7f0000000800)) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000f01000000000000000000000d0200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3bc6, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@generic={0x0, 0x1, 0x5, 0x9, 0x9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./cgroup\x00', 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) unlink(&(0x7f0000000200)='./cgroup\x00') recvmsg$kcm(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 2.532739067s ago: executing program 1 (id=19628): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x22, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg(r3, &(0x7f00000017c0)={&(0x7f0000000200)=@can, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000280)="13ea9839dee9479b645d84672059e48be27c330e0eda57658179347ca8cadc69722b9963db", 0x25}, {0x0}, {&(0x7f0000000500)="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", 0xff9}, {&(0x7f0000001500)="beda4c50cb1453c0bc80441e1de59ed3cd57589412551babb1b7c860f5c7f2764f5f7f54f5f7c97fb47d8f8cebc447ccbbb40b2e9423184f7662c72a935c4390b6ebf3916b60c9a465f34225fda7582c098ae53990f0b6fd67cd0842eda2e17b901384edbc25642a1c2e37c6672a1f7debc1f459a01d3e2b76f5ae9a482c90a724bcda242481eeb40d02359b3b6fbb24f3a39ec42a3d2f448da81485", 0x9c}], 0x4}, 0x800) sendmsg$kcm(r4, 0x0, 0x40000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x5, 0xfe, 0x0, 0x0, 0x0, 0x2, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe8, 0x401}, 0x0, 0x40000006, 0xffffffff, 0x4, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf}, 0x140, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x30}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8924, &(0x7f0000000080)) 2.477960958s ago: executing program 3 (id=19629): socket$kcm(0x2, 0x2, 0x73) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs$namespace(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000740)=@framed={{}, [@jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @generic={0x5, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x8}, @jmp={0x5, 0x0, 0x449a349b67b8a9da, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000100)='GPL\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, &(0x7f0000000100), 0x0}, 0x20) socketpair(0x1f, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0xb701, 0x0) sendmsg$kcm(r6, &(0x7f0000000f40)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x3, 0x4, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0xed}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000880)="3686dfa077e2c38d7dff3edbf1ba5f5b76c0716dc61efb5cdae33932b95407e307427f5576e88d35a9193bca75c921c6b16258a7b48501e0a2ae77beb9c45521e9a6899d2fcd4a9f2736aec80562aad96275ef7be832af446b97f4ebdd4d1a216a48fc707ddaf9af49f858df35fb06a684149867a48e8b82d8a35762471d87e4dd5d8d31ae12425cee7ee9eb1344d4435481ab131b4f0e46469217765759bfc549166063736f6f", 0xa7}, {&(0x7f0000000940)="2cb6453e8aa23a415d4c8c7eb17d0b04faf88d9331f41d7c060957629279eda603691c167b4495b1e3579f9bdf0cb83953ab95ab7f0eef16e7df2b81de1a54e1cb7e0e99c9eec0a24334fdde98b91e2db6eb8197d13267c890f2b0400eae8dd12e407bf250b0e329fb8dcb35031b0ab2ec49c33639b2ee74f17015d7fdd2152ee498b53ca58fc872c6e2b2a00841ec", 0x8f}, {&(0x7f0000000a40)="885f0d76e9d29ea5f598852a703cfbef97bb3bbd33400277e174c965564816ea3a9062babc109a9f7e3bd35082f33f035cb74604a3dbc05222f863e3830c27b9bf512882bdd61e699c0ea612607ed4420e98f928ac93b1e9b28947c77b4b48562cc3d886fb1b6c2da22cd93c4e7636c3f172c6b5aaf693373831e42d7743d060e4a8ddddf5762a86529bc4a65de2ae7840b1ba8b7a242eb165e48e214ed45b78faad323ce64b31d601566dfd64e330f1343bd28e133920649675517691d52c5018bb6603d86075b35f5fec76f6a8e7b93179d2c0e57339e3b7b544bdb5", 0xdd}, {&(0x7f0000000b40)="287f7b31e0eb2ea88feea377ad01da5d659bddbbdd3b72a59f1c2eb3fd01fb0be8f14fe6403cf64351dd345bc27973e56b065f4b52da8dfd006b59f797375af64c729e74f0ed940a5be9b649bbcd30a320e4aa9e8432d9bc652f9e2cf7367841e4ff66bdc25ca016730b9eec81b2d97158", 0x71}, {&(0x7f0000000bc0)}, {&(0x7f0000000c40)="c842fe83968d48b183877a30ed1489e1cc0a1dd14337f825420575bb3065301672d4264172a3f304c146c9161d18f1141b1c158f715f2656", 0x38}, {&(0x7f0000000c80)="26c7c809bafecaa71d70ba7832bcbf8644d101d17eee77aefaef84c143ca71513c5ff22b8abb793c97cb49f161e26f3f3fcc87a1cd5259b3f2587fe938bfca0561696cf476f1f8f411cfce9544c7c6e9b3256c7a1fb8f2a7cc2c9ce1cd8d8c7c6046b0ef85f8974f90e7acaadf731783c994a75ed244d806e4bea6ad410aba76c27d27bb2f46f435072fe98eae770075b94c951611c6afefdf4a67ac0e58c962a1830da62a3999235b7c2b6d6d38e50d8e44b5b62b4fbc80c610341338fb2d39935ad86a0647c4ef2da07da38f62d165", 0xd0}], 0x7, &(0x7f0000000e00)=[{0xd8, 0x10a, 0x1, "38642d1701c240d483288c4ee360d2672f784000cf95aea876c365e3f661798ccdb9f9d84336137ff9127d86df1564e655e49de772570d70b97dee8ebb4055b8aff065b3ba3178be75763acd17708e49d7377a5f592ce85278e6417fb4535535f5eac31ad905833de16a9b4f491c67a7e357df967bc98dbd9b6eb17c0e847880752d4a9b2c849d81c91a01f859c83bbeb94792e1c5864e054df5cadd9c14aee912dccec7c369b92a7d7593d3fd59c620799ade9c6f8ea6e0acfdd8d148e0f1d3369e"}, {0x28, 0x88, 0x3, "1e37d74493826f3c4eb9283d9b087d06cbd2d4c2c86b7f"}, {0x30, 0x108, 0x8, "21ec7d20d497ceae5824f84bf01af088fa6831b1af4b37e56998bac0c02b2d"}], 0x130}, 0x24008010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.477649638s ago: executing program 2 (id=19630): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffff, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.271037534s ago: executing program 2 (id=19631): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000010010010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 2.228277175s ago: executing program 4 (id=19632): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_config_ext={0x7ff, 0x3}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e00000000000000"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.958063032s ago: executing program 2 (id=19633): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1000, 0x8}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x19, 0xa, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x11ac4b, 0x0, 0x7fffffff, 0x7, 0x9, 0x41, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.145382602s ago: executing program 3 (id=19634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000080)=0x80000001) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)={'b', ' *:* ', 'rwm\x00'}, 0xa) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x74, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x60, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x3, 0x2, 0x1, 0x10, r2, 0xec9, '\x00', r3, r5, 0x3, 0x2, 0x1, 0x8}, 0x50) r7 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x6, 0x80, 0x7e, 0x80, 0x0, 0x874e, 0x4010, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, @perf_config_ext={0x9, 0x697}, 0x21c, 0x1, 0x5, 0x5, 0x101, 0x39d, 0x7b, 0x0, 0x5, 0x0, 0x550}, 0xffffffffffffffff, 0x10, r6, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000680)=' *:* ') socketpair(0x9, 0x4, 0x54, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000740)={r9}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000780)='*-!{\x00') r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x4986, 0x0, r6, 0x10001, '\x00', 0x0, r5, 0x4, 0x1}, 0x50) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00)=r4, 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x1c, &(0x7f0000000840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@alu={0x7, 0x1, 0x5, 0x2, 0xa, 0x4, 0x4}, @jmp={0x5, 0x0, 0x1, 0x5, 0x4, 0x20, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x38185609, 0x0, 0x0, 0x0, 0x2b9c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x6e, &(0x7f0000000980)=""/110, 0x41100, 0x10, '\x00', r3, 0x25, r11, 0x8, &(0x7f0000000a40)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0x0, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000ac0)=[r2, r2], &(0x7f0000000b00)=[{0x3, 0x3, 0x3, 0x6}, {0x3, 0x2, 0x8, 0x5}, {0x1, 0x1, 0x3, 0xa}, {0x5, 0x3, 0x10, 0x8}, {0x5, 0x4, 0xa, 0x3}, {0x1, 0x4, 0x9, 0x5}, {0x1, 0x1, 0x5, 0xb}, {0x5, 0x5, 0xe, 0x7}], 0x10, 0x1}, 0x94) r13 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xe0, 0x7f, 0x81, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000d00), 0x1d}, 0x4, 0x1ff, 0xccc, 0x3, 0x8, 0x4, 0x4, 0x0, 0x110, 0x0, 0x3}, 0xffffffffffffffff, 0x4, r7, 0x8) r14 = perf_event_open(&(0x7f0000000c80)={0x0, 0x80, 0x9, 0x8, 0xa, 0x0, 0x0, 0x101, 0x410, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000c40), 0xd}, 0x0, 0x3, 0x7, 0x2, 0x0, 0x3d, 0x1000, 0x0, 0x5, 0x0, 0xffffffffffffff4c}, 0xffffffffffffffff, 0x10, r13, 0x1) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000dc0)=0x1) perf_event_open(&(0x7f0000000e00)={0x0, 0x80, 0x81, 0x7f, 0x76, 0x4, 0x0, 0x511, 0x24000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf30, 0x1, @perf_config_ext={0x7f, 0xfffffffffffffff9}, 0x10, 0x1, 0x1, 0x7, 0x5, 0x2, 0x3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xe, r14, 0xa) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', r3, r5, 0x3, 0x4, 0x1}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x200001, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xb, 0x2, &(0x7f0000000f40)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000f80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x5e, '\x00', r3, @fallback=0x1e, r11, 0x8, &(0x7f0000000fc0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001000)={0x0, 0x6, 0x7, 0x1}, 0x10, r4, r12, 0x4, &(0x7f0000001040)=[r2, r6, r2, r6], &(0x7f0000001080)=[{0x5, 0x4, 0x4, 0x7}, {0x1, 0x3, 0x5, 0xb}, {0x1, 0x5, 0x9, 0x2}, {0x3, 0x4, 0x10, 0xa}], 0x10, 0x3937cf27}, 0x94) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x3, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x1}, {0xd}]}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x1b, 0x5}, @restrict={0xa, 0x0, 0x0, 0xb, 0x3}, @restrict={0xc, 0x0, 0x0, 0xb, 0x5}, @float={0xb, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x61]}}, &(0x7f0000001440)=""/204, 0x8f, 0xcc, 0x0, 0xffff, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x16, 0x1d, &(0x7f0000001180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x9fc}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @jmp={0x5, 0x0, 0xa, 0x3, 0x4, 0x40, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x490}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001280)='syzkaller\x00', 0x0, 0x8c, &(0x7f00000012c0)=""/140, 0x40f00, 0x20, '\x00', r3, @fallback=0x30, r16, 0x8, &(0x7f0000001580)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xf, 0x100, 0xffffff81}, 0x10, 0xffffffffffffffff, r12, 0x4, &(0x7f0000001680)=[0xffffffffffffffff, r2, r6, r15], &(0x7f00000016c0)=[{0x4, 0x3, 0x4, 0xc}, {0x2, 0x4, 0x10, 0xa}, {0x2, 0x4, 0xe, 0x2}, {0x1, 0x5, 0xc, 0x6}], 0x10, 0x894}, 0x94) 1.101262332s ago: executing program 2 (id=19635): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0035b69fdb90d984"], 0x0, 0x26}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8000000000000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.002036545s ago: executing program 1 (id=19636): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000aa60000030000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f5fff1bc49c2000000000000"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="65bd4b83516515fc1bd08e90aafea0174d183c8b7f16293028422ac119256a25ac2dbd53feb421de597c9f02b83e1d9746eb43f27fae9cc7c41ef58118da1b3aa076bd156bf79d03ba0e2408d6d4d36050d5afb9d5eef741f8485b377b7124490fe7df51"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) r5 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x6, 0x69, 0x5, 0x0, 0x1f5, 0x4920, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd73, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x105420, 0xa2, 0x9, 0x2, 0x101, 0x7fffffff, 0x9, 0x0, 0x7, 0x0, 0xfffffffffffffffe}, r5, 0xe, r1, 0x8) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a01000006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fe80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace24b3c7843b30a73c2a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8}, 0xc) sendmsg$inet(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)) 968.675756ms ago: executing program 4 (id=19637): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/time\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000100), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb701, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4, 0x0, {0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0xed}}}, 0x80, 0x0}, 0x24008010) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="005411000000000000000000000008234d9bf9670000000000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$inet(r0, &(0x7f00000010c0)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000680)="017dd8c64894", 0x6}], 0x2}, 0x41) 938.190016ms ago: executing program 0 (id=19638): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xf, 0x0, &(0x7f0000000240)="1ff517f6fc2504005eafd709c01bb8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 661.933754ms ago: executing program 2 (id=19639): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x108000, 0x0, 0xf, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0xc82e, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r1, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45", 0x8}], 0x1}, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 566.166256ms ago: executing program 3 (id=19640): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000006c0)=[{0x0, 0x11}, {0x0, 0xf5ff}], 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000f5ffffff000000000007000000010086060000000314000000000000000000000007000000940401000000000014000000000000000000000001000000080000000002000000000000002e14b5d44d20f0dcc5d49301485f2cac82adeb8fc74dfdfefc52192cfc283aedaba772d44e2c8f"], 0x48}, 0x840) 361.120341ms ago: executing program 4 (id=19641): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r1, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x8}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) gettid() (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r1, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x8}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) 0s ago: executing program 3 (id=19642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc, 0x8000000}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1, 0x8000000}, @exit, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 19.088908][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3219.104593][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3219.115651][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3219.129937][T28833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3219.153435][T28833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3219.165679][T28833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3219.178557][T28833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3219.194316][T28833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3219.205818][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3219.219088][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3219.233066][T28833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3219.247626][T28833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3219.257152][T28833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3219.271638][T28833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3219.536296][ T5788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3219.560689][ T5788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3219.584296][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3219.687333][T16475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3219.713938][T16475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3219.766847][T26331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3219.978135][T29110] netlink: 'syz.2.17849': attribute type 3 has an invalid length. [ 3220.015318][T29110] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.17849'. [ 3220.095640][T29118] netlink: 'syz.1.17851': attribute type 3 has an invalid length. [ 3220.136855][T29118] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.17851'. [ 3220.398554][T29125] netlink: 'syz.3.17853': attribute type 11 has an invalid length. [ 3221.289006][T29136] netlink: 'syz.3.17855': attribute type 11 has an invalid length. [ 3221.529779][T29151] netlink: 'syz.2.17859': attribute type 3 has an invalid length. [ 3221.594290][T29151] netlink: 'syz.2.17859': attribute type 1 has an invalid length. [ 3221.621240][T29151] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.17859'. [ 3222.499249][T29172] netlink: 'syz.0.17866': attribute type 11 has an invalid length. [ 3223.128619][T29178] netlink: 'syz.1.17868': attribute type 3 has an invalid length. [ 3223.145963][T29178] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17868'. [ 3223.337852][T29186] netlink: 'syz.4.17870': attribute type 2 has an invalid length. [ 3223.453222][T29186] netlink: 119 bytes leftover after parsing attributes in process `syz.4.17870'. [ 3223.599075][T29184] netlink: 'syz.2.17871': attribute type 11 has an invalid length. [ 3223.629129][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17873'. [ 3225.342759][T29224] validate_nla: 2 callbacks suppressed [ 3225.342777][T29224] netlink: 'syz.1.17884': attribute type 21 has an invalid length. [ 3225.444804][T29235] netlink: 'syz.3.17888': attribute type 3 has an invalid length. [ 3225.460998][T29235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17888'. [ 3226.818573][T29275] netlink: 'syz.3.17896': attribute type 11 has an invalid length. [ 3227.847640][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17905'. [ 3227.890804][T29299] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17905'. [ 3227.978992][T29303] FAULT_INJECTION: forcing a failure. [ 3227.978992][T29303] name failslab, interval 1, probability 0, space 0, times 0 [ 3228.037596][T29303] CPU: 0 PID: 29303 Comm: syz.0.17907 Not tainted syzkaller #0 [ 3228.045195][T29303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3228.055263][T29303] Call Trace: [ 3228.058549][T29303] [ 3228.061490][T29303] dump_stack_lvl+0x188/0x24e [ 3228.066193][T29303] ? show_regs_print_info+0x12/0x12 [ 3228.071415][T29303] ? load_image+0x410/0x410 [ 3228.075939][T29303] ? __might_sleep+0xd0/0xd0 [ 3228.080547][T29303] ? __lock_acquire+0x7c40/0x7c40 [ 3228.085603][T29303] should_fail_ex+0x390/0x4c0 [ 3228.090306][T29303] should_failslab+0x5/0x20 [ 3228.094821][T29303] slab_pre_alloc_hook+0x59/0x300 [ 3228.099861][T29303] ? __lock_acquire+0x7c40/0x7c40 [ 3228.104908][T29303] ? security_prepare_creds+0x47/0x130 [ 3228.110386][T29303] __kmem_cache_alloc_node+0x4f/0x270 [ 3228.115776][T29303] ? security_prepare_creds+0x47/0x130 [ 3228.121259][T29303] __kmalloc+0xa3/0x240 [ 3228.125442][T29303] security_prepare_creds+0x47/0x130 [ 3228.130748][T29303] prepare_creds+0x450/0x610 [ 3228.135358][T29303] copy_creds+0x146/0xd40 [ 3228.139713][T29303] copy_process+0x959/0x4070 [ 3228.144317][T29303] ? __rwlock_init+0x140/0x140 [ 3228.149083][T29303] ? debug_object_activate+0x4f0/0x4f0 [ 3228.154536][T29303] ? do_raw_spin_unlock+0x11d/0x230 [ 3228.159732][T29303] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3228.165624][T29303] ? idle_dummy+0x10/0x10 [ 3228.169948][T29303] ? ktime_get+0x7b/0x270 [ 3228.174277][T29303] kernel_clone+0x24b/0x900 [ 3228.178770][T29303] ? hrtimer_interrupt+0x557/0x980 [ 3228.183879][T29303] ? create_io_thread+0x170/0x170 [ 3228.188906][T29303] __x64_sys_clone+0x1a7/0x220 [ 3228.193660][T29303] ? lapic_next_event+0x5b/0x70 [ 3228.198507][T29303] ? __ia32_sys_vfork+0x140/0x140 [ 3228.203531][T29303] ? lock_chain_count+0x20/0x20 [ 3228.208376][T29303] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3228.214353][T29303] ? lockdep_hardirqs_on+0x94/0x140 [ 3228.219544][T29303] do_syscall_64+0x4c/0xa0 [ 3228.223964][T29303] ? clear_bhb_loop+0x60/0xb0 [ 3228.228637][T29303] ? clear_bhb_loop+0x60/0xb0 [ 3228.233310][T29303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3228.239200][T29303] RIP: 0033:0x7ff0f179e159 [ 3228.243610][T29303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3228.263206][T29303] RSP: 002b:00007ff0f25fefd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3228.271615][T29303] RAX: ffffffffffffffda RBX: 00007ff0f1a25fa0 RCX: 00007ff0f179e159 [ 3228.279576][T29303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200c8000 [ 3228.287536][T29303] RBP: 00007ff0f25ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3228.295498][T29303] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 3228.303461][T29303] R13: 00007ff0f1a26038 R14: 00007ff0f1a25fa0 R15: 00007fff738e3b48 [ 3228.311434][T29303] [ 3228.432349][T29316] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.17912'. [ 3229.019929][T29330] netlink: 'syz.0.17916': attribute type 11 has an invalid length. [ 3229.208112][T29343] netlink: 'syz.4.17921': attribute type 10 has an invalid length. [ 3229.386555][T29355] netlink: 'syz.0.17922': attribute type 27 has an invalid length. [ 3229.581583][T29357] netlink: 'syz.1.17925': attribute type 10 has an invalid length. [ 3229.609675][T29357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17925'. [ 3229.652878][T29357] device dummy0 entered promiscuous mode [ 3229.702801][T29357] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 3229.751768][T29364] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.17928'. [ 3229.773872][T29363] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17927'. [ 3229.787074][T29368] netlink: 'syz.3.17927': attribute type 2 has an invalid length. [ 3229.827607][T29367] netlink: 'syz.4.17928': attribute type 3 has an invalid length. [ 3229.830043][T29368] device 1 entered promiscuous mode [ 3229.871186][T29367] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.17928'. [ 3229.891264][T29370] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17930'. [ 3230.016264][T29377] delete_channel: no stack [ 3230.086711][T29379] netlink: 'syz.2.17932': attribute type 11 has an invalid length. [ 3231.698199][T29433] netlink: 'syz.3.17948': attribute type 11 has an invalid length. [ 3232.677346][T29459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17957'. [ 3232.783973][T29459] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17957'. [ 3232.890704][T29462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17957'. [ 3232.917046][T29470] netlink: 'syz.2.17960': attribute type 10 has an invalid length. [ 3232.936977][T29474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17957'. [ 3232.973773][T29470] team0: Device wg1 is of different type [ 3233.750082][T29488] netlink: 'syz.0.17965': attribute type 11 has an invalid length. [ 3234.186226][T29494] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.17967'. [ 3234.217913][T29498] netlink: 'syz.1.17968': attribute type 3 has an invalid length. [ 3234.229127][T29569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3234.288160][T29503] delete_channel: no stack [ 3234.293141][T29569] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3234.301430][T29569] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3234.314681][T29569] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3234.323434][T29569] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3234.333061][T29569] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3234.380932][T29498] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.17968'. [ 3234.425178][T29505] netlink: 'syz.2.17970': attribute type 11 has an invalid length. [ 3234.528480][T29508] netlink: 'syz.3.17971': attribute type 2 has an invalid length. [ 3234.546832][T29508] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.17971'. [ 3234.734074][T29500] chnl_net:caif_netlink_parms(): no params data found [ 3235.009813][T29500] bridge0: port 1(bridge_slave_0) entered blocking state [ 3235.069759][T29500] bridge0: port 1(bridge_slave_0) entered disabled state [ 3235.088876][T29500] device bridge_slave_0 entered promiscuous mode [ 3235.116141][T29500] bridge0: port 2(bridge_slave_1) entered blocking state [ 3235.140767][T29500] bridge0: port 2(bridge_slave_1) entered disabled state [ 3235.181721][T29500] device bridge_slave_1 entered promiscuous mode [ 3235.229238][T29500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3235.253930][T29500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3235.368443][T29500] team0: Port device team_slave_0 added [ 3235.419495][T29500] team0: Port device team_slave_1 added [ 3235.504580][ T5788] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3235.627092][T29500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3235.676683][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3235.740583][T29500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3235.884360][ T5788] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3235.995214][T29500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3236.010607][T29500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3236.130687][T29500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3236.201500][T29535] netlink: 'syz.0.17977': attribute type 11 has an invalid length. [ 3236.327772][ T5788] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3236.431120][ T7095] Bluetooth: hci0: command 0x0409 tx timeout [ 3236.479522][T29541] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.17979'. [ 3236.758041][T29549] netlink: 'syz.2.17982': attribute type 2 has an invalid length. [ 3236.806259][T29500] device hsr_slave_0 entered promiscuous mode [ 3236.824309][T29500] device hsr_slave_1 entered promiscuous mode [ 3236.845918][T29500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3236.880659][T29500] Cannot create hsr debugfs directory [ 3236.886324][T29546] netlink: 'syz.1.17981': attribute type 11 has an invalid length. [ 3236.973632][ T5788] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3237.078039][T29549] device 2 entered promiscuous mode [ 3237.429275][ T5788] device 0 left promiscuous mode [ 3237.460726][ T7095] Bluetooth: hci2: command 0x0406 tx timeout [ 3237.621588][ T5788] device 0 left promiscuous mode [ 3238.504137][ T7095] Bluetooth: hci0: command 0x041b tx timeout [ 3239.388805][T29589] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.17991'. [ 3239.539462][T29595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3239.562741][T29595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3239.619879][T29595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3239.661929][T29595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3240.013125][T29596] netlink: 'syz.3.17992': attribute type 17 has an invalid length. [ 3240.064607][T29596] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17992'. [ 3240.145183][T29596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3240.580798][ T7095] Bluetooth: hci0: command 0x040f tx timeout [ 3240.959689][T29500] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3241.105492][T29500] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3241.295965][T29500] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3241.327424][T29630] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18001'. [ 3241.549004][T29500] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3242.054829][T29645] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.18005'. [ 3242.235934][T29648] netlink: 'syz.2.18007': attribute type 10 has an invalid length. [ 3242.284322][T29648] team0: Device gre0 is up. Set it down before adding it as a team port [ 3242.310103][T29653] FAULT_INJECTION: forcing a failure. [ 3242.310103][T29653] name failslab, interval 1, probability 0, space 0, times 0 [ 3242.399546][T29500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3242.410306][T29653] CPU: 0 PID: 29653 Comm: syz.3.18008 Not tainted syzkaller #0 [ 3242.417893][T29653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3242.427960][T29653] Call Trace: [ 3242.431253][T29653] [ 3242.434203][T29653] dump_stack_lvl+0x188/0x24e [ 3242.438908][T29653] ? show_regs_print_info+0x12/0x12 [ 3242.444134][T29653] ? load_image+0x410/0x410 [ 3242.448665][T29653] ? __might_sleep+0xd0/0xd0 [ 3242.453268][T29653] ? __lock_acquire+0x7c40/0x7c40 [ 3242.458305][T29653] should_fail_ex+0x390/0x4c0 [ 3242.462992][T29653] should_failslab+0x5/0x20 [ 3242.467491][T29653] slab_pre_alloc_hook+0x59/0x300 [ 3242.472519][T29653] kmem_cache_alloc_node+0x5a/0x310 [ 3242.477712][T29653] ? __alloc_skb+0xf9/0x7d0 [ 3242.482218][T29653] __alloc_skb+0xf9/0x7d0 [ 3242.486551][T29653] netlink_sendmsg+0x654/0xbd0 [ 3242.491317][T29653] ? netlink_getsockopt+0x550/0x550 [ 3242.496517][T29653] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3242.502077][T29653] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3242.507677][T29653] ? security_socket_sendmsg+0x7c/0xa0 [ 3242.513163][T29653] ? netlink_getsockopt+0x550/0x550 [ 3242.518375][T29653] ____sys_sendmsg+0x5ed/0x9a0 [ 3242.523162][T29653] ? __sys_sendmsg_sock+0x30/0x30 [ 3242.528201][T29653] ? __import_iovec+0x306/0x510 [ 3242.533143][T29653] ? import_iovec+0x6f/0xa0 [ 3242.537667][T29653] ___sys_sendmsg+0x2a2/0x360 [ 3242.542367][T29653] ? __sys_sendmsg+0x2a0/0x2a0 [ 3242.547149][T29653] ? __lock_acquire+0x7c40/0x7c40 [ 3242.552197][T29653] __se_sys_sendmsg+0x1c3/0x2b0 [ 3242.557053][T29653] ? perf_trace_preemptirq_template+0x268/0x320 [ 3242.563303][T29653] ? __x64_sys_sendmsg+0x80/0x80 [ 3242.568266][T29653] ? lockdep_hardirqs_on+0x94/0x140 [ 3242.573477][T29653] do_syscall_64+0x4c/0xa0 [ 3242.577908][T29653] ? clear_bhb_loop+0x60/0xb0 [ 3242.582587][T29653] ? clear_bhb_loop+0x60/0xb0 [ 3242.587266][T29653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3242.593162][T29653] RIP: 0033:0x7f913299e159 [ 3242.597751][T29653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3242.617360][T29653] RSP: 002b:00007f913382e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3242.625778][T29653] RAX: ffffffffffffffda RBX: 00007f9132c25fa0 RCX: 00007f913299e159 [ 3242.633750][T29653] RDX: 0000000000008810 RSI: 0000200000000000 RDI: 0000000000000006 [ 3242.641717][T29653] RBP: 00007f913382e090 R08: 0000000000000000 R09: 0000000000000000 [ 3242.649686][T29653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3242.657654][T29653] R13: 00007f9132c26038 R14: 00007f9132c25fa0 R15: 00007ffe37342548 [ 3242.665645][T29653] [ 3242.670756][ T7095] Bluetooth: hci0: command 0x0419 tx timeout [ 3242.858932][T29500] 8021q: adding VLAN 0 to HW filter on device team0 [ 3242.976953][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3242.987140][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3243.022567][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3243.045721][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3243.074214][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 3243.081388][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3243.127407][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3243.159919][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3243.183387][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 3243.190565][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3243.234991][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3243.243869][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3243.253061][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3243.278573][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3243.317387][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3243.346254][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3243.361441][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3243.373998][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3243.409539][T29500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3243.433520][T29500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3243.693514][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3243.703329][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3243.744265][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3243.775927][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3243.839843][T29680] netlink: 'syz.0.18016': attribute type 10 has an invalid length. [ 3243.931341][T29680] netlink: 55 bytes leftover after parsing attributes in process `syz.0.18016'. [ 3243.952273][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3244.502858][T29690] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18020'. [ 3244.633935][ T5788] device hsr_slave_0 left promiscuous mode [ 3244.779127][ T5788] device hsr_slave_1 left promiscuous mode [ 3244.837522][ T5788] bridge0: port 3(hsr0) entered disabled state [ 3244.881483][ T5788] device bridge_slave_1 left promiscuous mode [ 3244.887731][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 3244.935978][ T5788] device bridge_slave_0 left promiscuous mode [ 3244.947294][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 3245.022045][ T5788] device veth0_macvtap left promiscuous mode [ 3245.418166][ T5788] team0 (unregistering): Port device geneve1 removed [ 3246.366404][ T5788] team0 (unregistering): Port device team_slave_1 removed [ 3246.442311][ T5788] team0 (unregistering): Port device team_slave_0 removed [ 3246.927225][T29707] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.18027'. [ 3246.937567][T29713] netlink: 'syz.2.18027': attribute type 40 has an invalid length. [ 3246.968109][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3246.975793][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3246.995569][T29727] IPv6: NLM_F_CREATE should be specified when creating new route [ 3247.010850][T29727] IPv6: Can't replace route, no match found [ 3247.058392][T29500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3247.937023][T29751] netlink: 'syz.0.18041': attribute type 22 has an invalid length. [ 3247.961709][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18041'. [ 3248.618374][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3248.631999][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3248.746060][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3248.779279][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3248.813086][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3248.841505][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3248.863835][T29500] device veth0_vlan entered promiscuous mode [ 3248.885020][T29500] device veth1_vlan entered promiscuous mode [ 3248.957276][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3248.972393][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3248.993055][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3249.014324][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3249.039334][T29500] device veth0_macvtap entered promiscuous mode [ 3249.060434][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3249.085155][T29500] device veth1_macvtap entered promiscuous mode [ 3249.167408][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3249.208486][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3249.229851][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3249.251529][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3249.278766][T29500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3249.304889][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3249.333598][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3249.374148][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3249.405339][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3249.437911][T29500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3249.466769][T29500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3249.488548][T29500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3249.501995][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3249.522139][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3249.556693][T29500] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.592271][T29500] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.612410][T29500] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.635093][T29500] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3249.824124][T29895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3249.837082][T29895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3249.888349][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3249.901245][T29895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3249.920075][T29895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3249.954088][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3250.124587][T29792] netlink: 'syz.4.17961': attribute type 2 has an invalid length. [ 3250.163453][T29792] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17961'. [ 3250.793924][T29796] netlink: 'syz.4.17961': attribute type 21 has an invalid length. [ 3250.861527][T29796] netlink: 132 bytes leftover after parsing attributes in process `syz.4.17961'. [ 3251.668077][T29832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18068'. [ 3251.700854][T29832] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18068'. [ 3257.461594][T29893] Ÿë: port 2(gretap0) entered blocking state [ 3257.485483][T29893] Ÿë: port 2(gretap0) entered disabled state [ 3257.528758][T29893] device gretap0 entered promiscuous mode [ 3257.564245][T29894] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18086'. [ 3258.535415][T29934] netlink: 'syz.1.18099': attribute type 10 has an invalid length. [ 3258.572843][T29934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18099'. [ 3258.601403][T29934] device team0 entered promiscuous mode [ 3258.643983][T29934] device team_slave_0 entered promiscuous mode [ 3258.664957][T29934] device team_slave_1 entered promiscuous mode [ 3258.671395][T29934] device geneve1 entered promiscuous mode [ 3258.678484][T29934] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3259.615964][T29950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3259.644705][T29950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3259.698823][T29956] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.18104'. [ 3259.835518][T29950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3259.918639][T29950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3260.438097][T29969] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.18111'. [ 3260.494607][T29969] netlink: 'syz.4.18111': attribute type 3 has an invalid length. [ 3260.521946][T29969] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18111'. [ 3260.848804][T29979] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.18114'. [ 3260.961702][T29979] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3262.694160][T30026] netlink: 'syz.2.18133': attribute type 2 has an invalid length. [ 3262.895407][T30026] device 3 entered promiscuous mode [ 3264.870995][T30085] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18149'. [ 3264.894832][T30085] tc_dump_action: action bad kind [ 3265.319511][T30089] netlink: 'syz.3.18151': attribute type 1 has an invalid length. [ 3265.354737][T30089] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.18151'. [ 3265.743049][T30101] IPv6: pim6reg1: Disabled Multicast RS [ 3266.103590][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.109987][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.324608][T30116] netlink: 'syz.0.18162': attribute type 25 has an invalid length. [ 3266.350721][T30116] netlink: 'syz.0.18162': attribute type 10 has an invalid length. [ 3266.464147][T30114] netlink: 'syz.3.18161': attribute type 21 has an invalid length. [ 3267.373408][T30141] netlink: 'syz.1.18172': attribute type 10 has an invalid length. [ 3267.401965][T30141] team0: Device gre0 is up. Set it down before adding it as a team port [ 3267.534517][T30140] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 3267.540347][T30140] pim6reg0: linktype set to 780 [ 3269.156025][T30178] mac80211_hwsim hwsim155 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3269.585149][T30193] netlink: 'syz.0.18188': attribute type 10 has an invalid length. [ 3269.650705][T30193] netlink: 55 bytes leftover after parsing attributes in process `syz.0.18188'. [ 3269.673581][T30201] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.18190'. [ 3269.706057][T30195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3269.731386][T30195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3269.774893][T30195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3269.822167][T30195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3270.600492][T30208] device bridge_slave_1 left promiscuous mode [ 3270.607998][T30208] bridge0: port 2(bridge_slave_1) entered disabled state [ 3270.629255][T30208] device bridge_slave_0 left promiscuous mode [ 3270.636844][T30208] bridge0: port 1(bridge_slave_0) entered disabled state [ 3271.714401][T26330] wlan1: Trigger new scan to find an IBSS to join [ 3272.148722][T30240] netlink: 'syz.2.18203': attribute type 10 has an invalid length. [ 3272.171211][T30240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18203'. [ 3272.180690][T30240] device team0 entered promiscuous mode [ 3272.186337][T30240] device team_slave_0 entered promiscuous mode [ 3272.193345][T30240] device team_slave_1 entered promiscuous mode [ 3272.203046][T30240] device geneve1 entered promiscuous mode [ 3272.213593][T30240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3272.229427][T30242] IPv6: NLM_F_CREATE should be specified when creating new route [ 3272.247578][T30242] IPv6: Can't replace route, no match found [ 3272.264069][T30244] netlink: 'syz.1.18205': attribute type 10 has an invalid length. [ 3272.293021][T30247] netlink: 'syz.4.18206': attribute type 3 has an invalid length. [ 3272.310906][T30247] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18206'. [ 3272.662993][T30254] netlink: 'syz.2.18208': attribute type 10 has an invalid length. [ 3272.956882][T30254] device wg1 entered promiscuous mode [ 3272.989473][T30254] team0: Device wg1 is of different type [ 3273.145327][T30266] netlink: 'syz.3.18213': attribute type 39 has an invalid length. [ 3273.336520][T30268] netlink: 'syz.0.18215': attribute type 22 has an invalid length. [ 3273.358567][T30268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18215'. [ 3273.491526][T30272] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18216'. [ 3274.644618][T30306] netlink: 763 bytes leftover after parsing attributes in process `syz.3.18229'. [ 3275.712260][ T5784] wlan1: Trigger new scan to find an IBSS to join [ 3276.827519][T26331] wlan1: Creating new IBSS network, BSSID d2:d0:86:93:69:f0 [ 3277.230807][T30352] netlink: 'syz.0.18247': attribute type 10 has an invalid length. [ 3278.075308][T30377] netlink: 'syz.0.18255': attribute type 3 has an invalid length. [ 3278.122102][T30377] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18255'. [ 3278.330980][T30380] netlink: 'syz.4.18256': attribute type 11 has an invalid length. [ 3278.527920][T30385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18258'. [ 3279.024417][T30394] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18262'. [ 3279.062022][T30394] netlink: 'syz.3.18262': attribute type 2 has an invalid length. [ 3279.114480][T30394] device 2 entered promiscuous mode [ 3279.457674][T30401] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.18265'. [ 3279.758680][T30412] netlink: 'syz.1.18270': attribute type 11 has an invalid length. [ 3280.259185][T30426] netlink: 'syz.4.18272': attribute type 4 has an invalid length. [ 3280.286489][T30425] netlink: 'syz.1.18275': attribute type 3 has an invalid length. [ 3280.344719][T30425] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18275'. [ 3280.372673][T30426] netlink: 'syz.4.18272': attribute type 26 has an invalid length. [ 3280.419601][T30426] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.18272'. [ 3280.520372][T30433] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.18278'. [ 3281.319427][T30460] netlink: 'syz.4.18286': attribute type 11 has an invalid length. [ 3281.374547][T30457] netlink: 'syz.0.18285': attribute type 13 has an invalid length. [ 3281.440613][T30457] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.18285'. [ 3281.840838][T30474] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18291'. [ 3282.135327][T30480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18293'. [ 3282.221984][T30480] : renamed from caif0 [ 3282.464501][T30480] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 3284.056079][T30506] __nla_validate_parse: 2 callbacks suppressed [ 3284.056097][T30506] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.18299'. [ 3284.082368][T30509] validate_nla: 1 callbacks suppressed [ 3284.082401][T30509] netlink: 'syz.4.18300': attribute type 11 has an invalid length. [ 3284.120994][T30506] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3284.153016][T30512] netlink: 'syz.1.18301': attribute type 19 has an invalid length. [ 3284.190780][T30512] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18301'. [ 3284.458201][T30520] netlink: 'syz.1.18304': attribute type 3 has an invalid length. [ 3284.497934][T30520] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18304'. [ 3284.980456][T30545] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.18311'. [ 3285.048134][T30545] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 3285.256193][T30559] netlink: 'syz.0.18317': attribute type 3 has an invalid length. [ 3285.301209][T30559] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18317'. [ 3287.455215][T30629] netlink: 'syz.0.18336': attribute type 12 has an invalid length. [ 3287.491730][T30629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18336'. [ 3287.650129][T30629] device sit0 entered promiscuous mode [ 3288.642489][T30666] netlink: 'syz.1.18349': attribute type 3 has an invalid length. [ 3288.674881][T30666] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18349'. [ 3288.947942][T30673] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.18351'. [ 3288.994638][T30673] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.18351'. [ 3289.065986][T30676] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.18351'. [ 3289.270010][T30686] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.18356'. [ 3289.850305][T30704] netlink: 'syz.0.18363': attribute type 3 has an invalid length. [ 3289.893660][T30704] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18363'. [ 3290.110023][T30708] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3290.415681][T30715] netlink: 'syz.2.18369': attribute type 4 has an invalid length. [ 3291.246487][T30738] netlink: 'syz.3.18375': attribute type 3 has an invalid length. [ 3291.289281][T30738] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.18375'. [ 3291.560146][T30749] netlink: 'syz.0.18379': attribute type 10 has an invalid length. [ 3291.598991][T30749] netlink: 55 bytes leftover after parsing attributes in process `syz.0.18379'. [ 3292.062829][T30771] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.18388'. [ 3292.251709][T30778] netlink: 'syz.4.18391': attribute type 3 has an invalid length. [ 3292.263693][T30778] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18391'. [ 3293.866569][T30810] netlink: 'syz.3.18401': attribute type 4 has an invalid length. [ 3293.899955][T30810] netlink: 'syz.3.18401': attribute type 26 has an invalid length. [ 3293.931154][T30810] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.18401'. [ 3293.967501][T30815] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18403'. [ 3294.875022][T30815] device hsr_slave_0 left promiscuous mode [ 3294.925041][T30815] device hsr_slave_1 left promiscuous mode [ 3295.097135][T30825] netlink: 'syz.4.18406': attribute type 3 has an invalid length. [ 3295.107536][T30825] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18406'. [ 3295.363219][T30835] netlink: 'syz.2.18410': attribute type 39 has an invalid length. [ 3296.478266][T30863] netlink: 71 bytes leftover after parsing attributes in process `syz.2.18422'. [ 3296.555543][T30864] netlink: 'syz.1.18421': attribute type 3 has an invalid length. [ 3296.597580][T30864] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18421'. [ 3297.521968][T30877] netlink: 180 bytes leftover after parsing attributes in process `syz.2.18426'. [ 3299.252350][T30925] delete_channel: no stack [ 3299.324017][T30925] delete_channel: no stack [ 3301.363051][T30964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18449'. [ 3304.154031][T31003] netlink: 'syz.1.18466': attribute type 3 has an invalid length. [ 3304.173979][T31003] netlink: 'syz.1.18466': attribute type 1 has an invalid length. [ 3304.204008][T31003] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.18466'. [ 3306.868081][T16475] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3308.218205][T31034] FAULT_INJECTION: forcing a failure. [ 3308.218205][T31034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3308.257846][T31034] CPU: 1 PID: 31034 Comm: syz.0.18475 Not tainted syzkaller #0 [ 3308.265444][T31034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3308.275524][T31034] Call Trace: [ 3308.278817][T31034] [ 3308.281757][T31034] dump_stack_lvl+0x188/0x24e [ 3308.286467][T31034] ? show_regs_print_info+0x12/0x12 [ 3308.291688][T31034] ? load_image+0x410/0x410 [ 3308.296201][T31034] ? __lock_acquire+0x7c40/0x7c40 [ 3308.301238][T31034] should_fail_ex+0x390/0x4c0 [ 3308.305925][T31034] _copy_from_user+0x2c/0x170 [ 3308.310605][T31034] ___sys_recvmsg+0x170/0x590 [ 3308.315278][T31034] ? __sys_recvmsg+0x2a0/0x2a0 [ 3308.320038][T31034] ? common_file_perm+0x171/0x1c0 [ 3308.325070][T31034] ? __fget_files+0x3fc/0x460 [ 3308.329759][T31034] __x64_sys_recvmsg+0x20d/0x2e0 [ 3308.334691][T31034] ? ___sys_recvmsg+0x590/0x590 [ 3308.339548][T31034] ? lockdep_hardirqs_on+0x94/0x140 [ 3308.344746][T31034] do_syscall_64+0x4c/0xa0 [ 3308.349158][T31034] ? clear_bhb_loop+0x60/0xb0 [ 3308.353836][T31034] ? clear_bhb_loop+0x60/0xb0 [ 3308.358514][T31034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3308.364411][T31034] RIP: 0033:0x7ff0f179e159 [ 3308.368822][T31034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3308.388419][T31034] RSP: 002b:00007ff0f25ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3308.396833][T31034] RAX: ffffffffffffffda RBX: 00007ff0f1a25fa0 RCX: 00007ff0f179e159 [ 3308.404802][T31034] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 3308.412767][T31034] RBP: 00007ff0f25ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3308.420731][T31034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3308.428695][T31034] R13: 00007ff0f1a26038 R14: 00007ff0f1a25fa0 R15: 00007fff738e3b48 [ 3308.436671][T31034] [ 3311.662247][T31064] delete_channel: no stack [ 3314.352618][T31156] netlink: 'syz.3.18520': attribute type 10 has an invalid length. [ 3314.383200][T31156] team0: Device gre0 is up. Set it down before adding it as a team port [ 3314.664112][T31160] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.18523'. [ 3314.839949][T31169] netlink: 'syz.4.18527': attribute type 25 has an invalid length. [ 3314.872049][T31169] netlink: 'syz.4.18527': attribute type 10 has an invalid length. [ 3314.988764][T31175] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18529'. [ 3315.560681][T31182] netlink: 'syz.2.18532': attribute type 4 has an invalid length. [ 3315.976444][T31196] netlink: 'syz.3.18537': attribute type 10 has an invalid length. [ 3315.990652][T31196] netlink: 55 bytes leftover after parsing attributes in process `syz.3.18537'. [ 3318.625198][T31280] netlink: 'syz.3.18562': attribute type 39 has an invalid length. [ 3318.664787][T31275] device sit0 entered promiscuous mode [ 3319.176202][T31289] netlink: 'syz.3.18565': attribute type 10 has an invalid length. [ 3319.206559][T31289] team0: Port device geneve1 added [ 3319.689527][T31312] netlink: 'syz.3.18572': attribute type 10 has an invalid length. [ 3319.857884][T31312] team0: Device wg1 is of different type [ 3320.121673][T31326] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.171477][T31326] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.187748][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.201023][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.211650][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.221451][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.230316][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.243817][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.257579][T31328] netlink: 'syz.3.18579': attribute type 29 has an invalid length. [ 3320.522245][T31346] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.18583'. [ 3321.093175][T31369] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.18592'. [ 3322.933743][T31415] netlink: 160 bytes leftover after parsing attributes in process `syz.3.18606'. [ 3322.985820][T31414] netlink: 15998 bytes leftover after parsing attributes in process `syz.4.18605'. [ 3323.955049][T31441] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18615'. [ 3324.586257][T31465] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18627'. [ 3324.635399][T31472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18628'. [ 3324.655929][T31465] device 3 entered promiscuous mode [ 3325.235531][T31487] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.18634'. [ 3326.050612][T31495] device sit0 left promiscuous mode [ 3326.190292][T31501] device sit0 entered promiscuous mode [ 3326.365139][T31513] FAULT_INJECTION: forcing a failure. [ 3326.365139][T31513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3326.434359][T31513] CPU: 0 PID: 31513 Comm: syz.3.18641 Not tainted syzkaller #0 [ 3326.441968][T31513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3326.452041][T31513] Call Trace: [ 3326.455350][T31513] [ 3326.458323][T31513] dump_stack_lvl+0x188/0x24e [ 3326.463060][T31513] ? show_regs_print_info+0x12/0x12 [ 3326.468313][T31513] ? load_image+0x410/0x410 [ 3326.472869][T31513] ? __lock_acquire+0x7c40/0x7c40 [ 3326.477941][T31513] ? snprintf+0xe5/0x140 [ 3326.482234][T31513] should_fail_ex+0x390/0x4c0 [ 3326.486970][T31513] _copy_to_user+0x2c/0x130 [ 3326.491510][T31513] simple_read_from_buffer+0xe3/0x150 [ 3326.496909][T31513] proc_fail_nth_read+0x1a6/0x220 [ 3326.501955][T31513] ? proc_fault_inject_write+0x310/0x310 [ 3326.507624][T31513] ? fsnotify_perm+0x248/0x550 [ 3326.512407][T31513] ? proc_fault_inject_write+0x310/0x310 [ 3326.518049][T31513] vfs_read+0x2db/0x960 [ 3326.522233][T31513] ? kernel_read+0x1e0/0x1e0 [ 3326.526846][T31513] ? __fget_files+0x28/0x460 [ 3326.531454][T31513] ? __fget_files+0x3fc/0x460 [ 3326.536172][T31513] ? __fdget_pos+0x2ae/0x360 [ 3326.540774][T31513] ? ksys_read+0x70/0x260 [ 3326.545124][T31513] ksys_read+0x14d/0x260 [ 3326.549394][T31513] ? vfs_write+0x9a0/0x9a0 [ 3326.553834][T31513] ? lockdep_hardirqs_on+0x94/0x140 [ 3326.559050][T31513] do_syscall_64+0x4c/0xa0 [ 3326.563483][T31513] ? clear_bhb_loop+0x60/0xb0 [ 3326.568177][T31513] ? clear_bhb_loop+0x60/0xb0 [ 3326.572871][T31513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3326.578774][T31513] RIP: 0033:0x7f913295e98e [ 3326.583202][T31513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3326.602813][T31513] RSP: 002b:00007f913382dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3326.611235][T31513] RAX: ffffffffffffffda RBX: 00007f913382e6c0 RCX: 00007f913295e98e [ 3326.619297][T31513] RDX: 000000000000000f RSI: 00007f913382e0a0 RDI: 0000000000000003 [ 3326.627273][T31513] RBP: 00007f913382e090 R08: 0000000000000000 R09: 0000000000000000 [ 3326.635249][T31513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3326.643225][T31513] R13: 00007f9132c26038 R14: 00007f9132c25fa0 R15: 00007ffe37342548 [ 3326.651238][T31513] [ 3327.176750][T31525] validate_nla: 13 callbacks suppressed [ 3327.176769][T31525] netlink: 'syz.1.18647': attribute type 10 has an invalid length. [ 3327.238399][T31525] device wg1 entered promiscuous mode [ 3327.280703][T31525] team0: Device wg1 is of different type [ 3327.383016][T31534] netlink: 'syz.3.18646': attribute type 2 has an invalid length. [ 3327.383807][T31537] FAULT_INJECTION: forcing a failure. [ 3327.383807][T31537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3327.416885][T31536] netlink: 'syz.0.18650': attribute type 3 has an invalid length. [ 3327.429019][T31537] CPU: 0 PID: 31537 Comm: syz.2.18649 Not tainted syzkaller #0 [ 3327.436601][T31537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3327.437589][T31536] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18650'. [ 3327.446649][T31537] Call Trace: [ 3327.446660][T31537] [ 3327.446668][T31537] dump_stack_lvl+0x188/0x24e [ 3327.446702][T31537] ? show_regs_print_info+0x12/0x12 [ 3327.446728][T31537] ? load_image+0x410/0x410 [ 3327.446752][T31537] ? __lock_acquire+0x7c40/0x7c40 [ 3327.446782][T31537] should_fail_ex+0x390/0x4c0 [ 3327.446811][T31537] _copy_from_user+0x2c/0x170 [ 3327.446834][T31537] iovec_from_user+0x143/0x360 [ 3327.495862][T31537] __import_iovec+0x6c/0x510 [ 3327.500480][T31537] ? __might_fault+0xa6/0x120 [ 3327.505185][T31537] import_iovec+0x6f/0xa0 [ 3327.509629][T31537] ___sys_recvmsg+0x4b2/0x590 [ 3327.514337][T31537] ? __sys_recvmsg+0x2a0/0x2a0 [ 3327.519122][T31537] ? common_file_perm+0x171/0x1c0 [ 3327.524184][T31537] ? __fget_files+0x3fc/0x460 [ 3327.528899][T31537] __x64_sys_recvmsg+0x20d/0x2e0 [ 3327.533854][T31537] ? ct_nmi_exit+0x145/0x1c0 [ 3327.538469][T31537] ? ___sys_recvmsg+0x590/0x590 [ 3327.543346][T31537] ? lockdep_hardirqs_on+0x94/0x140 [ 3327.548555][T31537] do_syscall_64+0x4c/0xa0 [ 3327.552978][T31537] ? clear_bhb_loop+0x60/0xb0 [ 3327.557665][T31537] ? clear_bhb_loop+0x60/0xb0 [ 3327.562347][T31537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3327.568241][T31537] RIP: 0033:0x7f33fe39e159 [ 3327.572657][T31537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3327.592265][T31537] RSP: 002b:00007f33fc5d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3327.600678][T31537] RAX: ffffffffffffffda RBX: 00007f33fe626090 RCX: 00007f33fe39e159 [ 3327.608645][T31537] RDX: 0000000000010000 RSI: 0000200000005140 RDI: 0000000000000003 [ 3327.616608][T31537] RBP: 00007f33fc5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 3327.624575][T31537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3327.632539][T31537] R13: 00007f33fe626128 R14: 00007f33fe626090 R15: 00007ffdf95b4ad8 [ 3327.640520][T31537] [ 3327.662248][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.668650][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.753924][T31530] netlink: 'syz.3.18646': attribute type 10 has an invalid length. [ 3327.773703][T31530] netlink: 168 bytes leftover after parsing attributes in process `syz.3.18646'. [ 3327.807507][T31528] netlink: 'syz.3.18646': attribute type 10 has an invalid length. [ 3327.821902][T31528] netlink: 168 bytes leftover after parsing attributes in process `syz.3.18646'. [ 3327.863443][T31533] netlink: 'syz.3.18646': attribute type 10 has an invalid length. [ 3327.948574][T31543] netlink: 'syz.1.18651': attribute type 3 has an invalid length. [ 3327.968158][T31543] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18651'. [ 3327.969302][T31533] team0: Port device wlan1 added [ 3328.298964][T31549] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.18653'. [ 3328.348000][T31549] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3328.453213][T31555] netlink: 'syz.0.18666': attribute type 3 has an invalid length. [ 3328.490783][T31555] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18666'. [ 3328.848328][T31565] device sit0 entered promiscuous mode [ 3329.114955][T31573] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.18660'. [ 3329.237927][T31573] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 3329.343095][T31573] CPU: 0 PID: 31573 Comm: syz.3.18660 Not tainted syzkaller #0 [ 3329.350695][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3329.360761][T31573] Call Trace: [ 3329.364046][T31573] [ 3329.366995][T31573] dump_stack_lvl+0x188/0x24e [ 3329.371700][T31573] ? show_regs_print_info+0x12/0x12 [ 3329.376922][T31573] ? load_image+0x410/0x410 [ 3329.381455][T31573] sysfs_warn_dup+0x8a/0xa0 [ 3329.385977][T31573] sysfs_do_create_link_sd+0xc0/0x110 [ 3329.391366][T31573] device_add+0x83b/0x1050 [ 3329.395809][T31573] wiphy_register+0x1d8b/0x2aa0 [ 3329.400712][T31573] ? cfg80211_event_work+0x40/0x40 [ 3329.405847][T31573] ? minstrel_ht_alloc+0x894/0xa20 [ 3329.410986][T31573] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3329.417074][T31573] ieee80211_register_hw+0x2d48/0x39f0 [ 3329.422564][T31573] ? ieee80211_register_hw+0xee1/0x39f0 [ 3329.428135][T31573] ? ieee80211_register_hw+0xee1/0x39f0 [ 3329.433706][T31573] ? ieee80211_tasklet_handler+0x20/0x20 [ 3329.439354][T31573] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3329.445265][T31573] ? __debug_object_init+0xed/0x440 [ 3329.450478][T31573] ? memset+0x1e/0x40 [ 3329.454474][T31573] ? __hrtimer_init+0x189/0x270 [ 3329.459341][T31573] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3329.465091][T31573] ? memcpy+0x3c/0x60 [ 3329.469093][T31573] hwsim_new_radio_nl+0xab7/0xc90 [ 3329.474148][T31573] genl_family_rcv_msg_doit+0x22f/0x350 [ 3329.479710][T31573] ? end_current_label_crit_section+0x170/0x170 [ 3329.485986][T31573] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3329.491914][T31573] ? bpf_lsm_capable+0x5/0x10 [ 3329.496602][T31573] ? security_capable+0x85/0xb0 [ 3329.501488][T31573] genl_rcv_msg+0x601/0x790 [ 3329.506016][T31573] ? genl_bind+0x360/0x360 [ 3329.510442][T31573] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3329.516802][T31573] netlink_rcv_skb+0x1ef/0x440 [ 3329.521596][T31573] ? genl_bind+0x360/0x360 [ 3329.526297][T31573] ? netlink_ack+0x1160/0x1160 [ 3329.531113][T31573] ? down_read+0x1a8/0x2d0 [ 3329.535552][T31573] genl_rcv+0x24/0x40 [ 3329.539547][T31573] netlink_unicast+0x7ad/0x920 [ 3329.544352][T31573] netlink_sendmsg+0x8ad/0xbd0 [ 3329.549139][T31573] ? netlink_getsockopt+0x550/0x550 [ 3329.554362][T31573] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3329.559931][T31573] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3329.565225][T31573] ? security_socket_sendmsg+0x7c/0xa0 [ 3329.570692][T31573] ? netlink_getsockopt+0x550/0x550 [ 3329.575900][T31573] ____sys_sendmsg+0x5ed/0x9a0 [ 3329.580694][T31573] ? __sys_sendmsg_sock+0x30/0x30 [ 3329.585734][T31573] ? __import_iovec+0x306/0x510 [ 3329.590609][T31573] ? import_iovec+0x6f/0xa0 [ 3329.595144][T31573] ___sys_sendmsg+0x2a2/0x360 [ 3329.599852][T31573] ? __sys_sendmsg+0x2a0/0x2a0 [ 3329.604691][T31573] __se_sys_sendmsg+0x1c3/0x2b0 [ 3329.609558][T31573] ? ct_nmi_exit+0x145/0x1c0 [ 3329.614163][T31573] ? __x64_sys_sendmsg+0x80/0x80 [ 3329.619136][T31573] ? lockdep_hardirqs_on+0x94/0x140 [ 3329.624353][T31573] do_syscall_64+0x4c/0xa0 [ 3329.628787][T31573] ? clear_bhb_loop+0x60/0xb0 [ 3329.633481][T31573] ? clear_bhb_loop+0x60/0xb0 [ 3329.638178][T31573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3329.644087][T31573] RIP: 0033:0x7f913299e159 [ 3329.648516][T31573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3329.668137][T31573] RSP: 002b:00007f913382e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3329.676568][T31573] RAX: ffffffffffffffda RBX: 00007f9132c25fa0 RCX: 00007f913299e159 [ 3329.684551][T31573] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3329.692534][T31573] RBP: 00007f9132a35024 R08: 0000000000000000 R09: 0000000000000000 [ 3329.700513][T31573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3329.708496][T31573] R13: 00007f9132c26038 R14: 00007f9132c25fa0 R15: 00007ffe37342548 [ 3329.716504][T31573] [ 3329.724836][T29569] Bluetooth: hci3: command 0x0406 tx timeout [ 3329.885660][T31576] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.18660'. [ 3329.929149][T31576] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 3329.937125][T31576] CPU: 1 PID: 31576 Comm: syz.3.18660 Not tainted syzkaller #0 [ 3329.944693][T31576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3329.954780][T31576] Call Trace: [ 3329.958071][T31576] [ 3329.961020][T31576] dump_stack_lvl+0x188/0x24e [ 3329.965724][T31576] ? show_regs_print_info+0x12/0x12 [ 3329.970948][T31576] ? load_image+0x410/0x410 [ 3329.975477][T31576] sysfs_warn_dup+0x8a/0xa0 [ 3329.980000][T31576] sysfs_do_create_link_sd+0xc0/0x110 [ 3329.985389][T31576] device_add+0x83b/0x1050 [ 3329.989832][T31576] wiphy_register+0x1d8b/0x2aa0 [ 3329.994722][T31576] ? cfg80211_event_work+0x40/0x40 [ 3329.999856][T31576] ? minstrel_ht_alloc+0x894/0xa20 [ 3330.004995][T31576] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3330.011087][T31576] ieee80211_register_hw+0x2d48/0x39f0 [ 3330.016579][T31576] ? ieee80211_register_hw+0xee1/0x39f0 [ 3330.022138][T31576] ? ieee80211_register_hw+0xee1/0x39f0 [ 3330.027711][T31576] ? ieee80211_tasklet_handler+0x20/0x20 [ 3330.033364][T31576] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3330.039275][T31576] ? __debug_object_init+0xed/0x440 [ 3330.044491][T31576] ? memset+0x1e/0x40 [ 3330.048494][T31576] ? __hrtimer_init+0x189/0x270 [ 3330.053373][T31576] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3330.059128][T31576] ? memcpy+0x3c/0x60 [ 3330.063132][T31576] hwsim_new_radio_nl+0xab7/0xc90 [ 3330.068192][T31576] genl_family_rcv_msg_doit+0x22f/0x350 [ 3330.073759][T31576] ? end_current_label_crit_section+0x170/0x170 [ 3330.080026][T31576] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3330.085946][T31576] ? bpf_lsm_capable+0x5/0x10 [ 3330.090638][T31576] ? security_capable+0x85/0xb0 [ 3330.095516][T31576] genl_rcv_msg+0x601/0x790 [ 3330.100042][T31576] ? genl_bind+0x360/0x360 [ 3330.104468][T31576] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3330.110830][T31576] netlink_rcv_skb+0x1ef/0x440 [ 3330.115611][T31576] ? genl_bind+0x360/0x360 [ 3330.120042][T31576] ? netlink_ack+0x1160/0x1160 [ 3330.124839][T31576] ? down_read+0x1a8/0x2d0 [ 3330.129271][T31576] genl_rcv+0x24/0x40 [ 3330.133260][T31576] netlink_unicast+0x7ad/0x920 [ 3330.138053][T31576] netlink_sendmsg+0x8ad/0xbd0 [ 3330.142834][T31576] ? netlink_getsockopt+0x550/0x550 [ 3330.148048][T31576] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3330.153614][T31576] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3330.158910][T31576] ? security_socket_sendmsg+0x7c/0xa0 [ 3330.164388][T31576] ? netlink_getsockopt+0x550/0x550 [ 3330.169602][T31576] ____sys_sendmsg+0x5ed/0x9a0 [ 3330.174401][T31576] ? __sys_sendmsg_sock+0x30/0x30 [ 3330.179444][T31576] ? __import_iovec+0x306/0x510 [ 3330.184328][T31576] ? import_iovec+0x6f/0xa0 [ 3330.188868][T31576] ___sys_sendmsg+0x2a2/0x360 [ 3330.193575][T31576] ? __sys_sendmsg+0x2a0/0x2a0 [ 3330.198384][T31576] ? trace_call_bpf+0xbf/0x6b0 [ 3330.203203][T31576] __se_sys_sendmsg+0x1c3/0x2b0 [ 3330.208078][T31576] ? ct_nmi_exit+0x145/0x1c0 [ 3330.212689][T31576] ? __x64_sys_sendmsg+0x80/0x80 [ 3330.217676][T31576] ? lockdep_hardirqs_on+0x94/0x140 [ 3330.222907][T31576] do_syscall_64+0x4c/0xa0 [ 3330.227348][T31576] ? clear_bhb_loop+0x60/0xb0 [ 3330.232045][T31576] ? clear_bhb_loop+0x60/0xb0 [ 3330.236746][T31576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3330.242655][T31576] RIP: 0033:0x7f913299e159 [ 3330.247082][T31576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3330.266701][T31576] RSP: 002b:00007f913380d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3330.275138][T31576] RAX: ffffffffffffffda RBX: 00007f9132c26090 RCX: 00007f913299e159 [ 3330.283124][T31576] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3330.291109][T31576] RBP: 00007f9132a35024 R08: 0000000000000000 R09: 0000000000000000 [ 3330.299089][T31576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3330.307066][T31576] R13: 00007f9132c26128 R14: 00007f9132c26090 R15: 00007ffe37342548 [ 3330.315066][T31576] [ 3330.615670][T31604] netlink: 'syz.0.18670': attribute type 3 has an invalid length. [ 3330.625070][T31604] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18670'. [ 3331.148364][T31618] netlink: 'syz.2.18674': attribute type 3 has an invalid length. [ 3331.167237][T31618] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18674'. [ 3333.753509][T31665] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.18686'. [ 3333.951409][T31669] netlink: 'syz.4.18687': attribute type 3 has an invalid length. [ 3333.979169][T31669] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18687'. [ 3335.968318][T31676] netlink: 'syz.0.18690': attribute type 3 has an invalid length. [ 3335.990847][T31676] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18690'. [ 3336.493549][T31689] netlink: 'syz.3.18692': attribute type 10 has an invalid length. [ 3337.290065][T31689] team0 (unregistering): Port device team_slave_0 removed [ 3337.343876][T31689] team0 (unregistering): Port device team_slave_1 removed [ 3337.409466][T31689] team0 (unregistering): Port device geneve1 removed [ 3337.468819][T31689] team0 (unregistering): Port device wlan1 removed [ 3338.101934][T26331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3338.221717][T31716] netlink: 'syz.0.18704': attribute type 3 has an invalid length. [ 3338.229759][T31716] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18704'. [ 3338.452811][T31723] netlink: 'syz.3.18705': attribute type 1 has an invalid length. [ 3339.601858][T31736] netlink: 'syz.0.18710': attribute type 39 has an invalid length. [ 3340.403325][T31730] device syzkaller0 entered promiscuous mode [ 3340.434347][T31757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18716'. [ 3340.450773][T31757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18716'. [ 3340.936149][T31772] netlink: 'syz.0.18721': attribute type 3 has an invalid length. [ 3340.960638][T31772] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18721'. [ 3343.226258][T31794] netlink: 'syz.2.18730': attribute type 1 has an invalid length. [ 3343.321291][T31794] netlink: 'syz.2.18730': attribute type 21 has an invalid length. [ 3343.516200][T31807] netlink: 'syz.0.18735': attribute type 21 has an invalid length. [ 3343.768067][T31813] netlink: 'syz.3.18738': attribute type 3 has an invalid length. [ 3343.861449][T31813] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.18738'. [ 3344.423715][T31824] device syzkaller0 entered promiscuous mode [ 3345.823421][T31861] netlink: 'syz.0.18756': attribute type 3 has an invalid length. [ 3345.834387][T31861] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18756'. [ 3347.690185][T31833] netlink: 196 bytes leftover after parsing attributes in process `syz.1.18745'. [ 3347.699663][T31851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18752'. [ 3348.161180][T31881] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18757'. [ 3348.529891][T31881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3348.865639][T31881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3348.902482][T31881] bond0 (unregistering): Released all slaves [ 3348.915895][T31883] netlink: 'syz.1.18763': attribute type 10 has an invalid length. [ 3349.025474][T31900] netlink: 'syz.4.18768': attribute type 3 has an invalid length. [ 3349.052130][T31902] netlink: 'syz.1.18770': attribute type 21 has an invalid length. [ 3349.055841][T31900] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.18768'. [ 3349.080691][T31902] netlink: 'syz.1.18770': attribute type 1 has an invalid length. [ 3349.100977][T31902] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.18770'. [ 3349.940215][T31911] device syzkaller0 entered promiscuous mode [ 3352.190984][T31926] netlink: 'syz.3.18777': attribute type 10 has an invalid length. [ 3352.198918][T31926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18777'. [ 3352.220831][T31943] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18782'. [ 3352.314646][T31943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3352.374701][T31943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3352.453110][T31943] bond0 (unregistering): Released all slaves [ 3352.649624][T31954] netlink: 'syz.2.18786': attribute type 3 has an invalid length. [ 3352.693409][T31954] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18786'. [ 3352.909499][T31969] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.18791'. [ 3353.518960][T31974] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.18793'. [ 3353.569976][T31974] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18793'. [ 3353.607018][T31974] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18793'. [ 3353.625516][T31982] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18793'. [ 3353.953977][T31994] netlink: 'syz.4.18800': attribute type 2 has an invalid length. [ 3354.168773][T31994] device 0 entered promiscuous mode [ 3354.229717][T31980] device syzkaller0 entered promiscuous mode [ 3354.261086][T31984] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18798'. [ 3354.592656][T32009] netlink: 'syz.3.18807': attribute type 3 has an invalid length. [ 3354.609893][T32009] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.18807'. [ 3355.138180][T32019] netlink: 'syz.0.18810': attribute type 4 has an invalid length. [ 3355.147431][T32020] netlink: 'syz.0.18810': attribute type 4 has an invalid length. [ 3355.968304][T32035] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3357.273559][T32018] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3357.283116][T32022] __nla_validate_parse: 4 callbacks suppressed [ 3357.283132][T32022] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.18811'. [ 3357.300029][T32018] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3357.311125][T32025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.18811'. [ 3357.322012][T32018] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3357.753461][T32059] netlink: 'syz.3.18823': attribute type 2 has an invalid length. [ 3357.822791][T32059] device 0 entered promiscuous mode [ 3357.893499][T32065] netlink: 'syz.1.18827': attribute type 4 has an invalid length. [ 3357.943459][T32069] netlink: 'syz.2.18829': attribute type 3 has an invalid length. [ 3357.962045][T32069] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18829'. [ 3357.967478][T32070] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.18828'. [ 3358.078093][T32076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18832'. [ 3358.105854][T32075] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.18831'. [ 3358.133825][T32075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18831'. [ 3358.144814][T32075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18831'. [ 3358.163900][T32075] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18831'. [ 3358.898576][T32111] netlink: 'syz.1.18842': attribute type 2 has an invalid length. [ 3358.906663][T32107] netlink: 'syz.2.18852': attribute type 2 has an invalid length. [ 3358.931340][T32112] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18852'. [ 3359.025216][T32111] device 0 entered promiscuous mode [ 3359.045413][T32115] netlink: 'syz.4.18844': attribute type 3 has an invalid length. [ 3359.399087][T32129] netlink: 'syz.4.18849': attribute type 11 has an invalid length. [ 3359.419716][T32129] netlink: 'syz.4.18849': attribute type 2 has an invalid length. [ 3359.909031][T32134] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3360.304067][T32137] netlink: 'syz.2.18853': attribute type 11 has an invalid length. [ 3360.340638][ T7095] Bluetooth: hci0: command 0x0406 tx timeout [ 3360.645837][T32150] netlink: 'syz.2.18859': attribute type 5 has an invalid length. [ 3361.040745][T32162] team0: Port device geneve1 added [ 3361.080356][T32161] tap0: tun_chr_ioctl cmd 1074025677 [ 3361.138185][T32161] tap0: linktype set to 6 [ 3361.725493][T32190] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3361.732795][T32190] IPv6: NLM_F_CREATE should be set when creating new route [ 3361.740045][T32190] IPv6: NLM_F_CREATE should be set when creating new route [ 3361.747321][T32190] IPv6: NLM_F_CREATE should be set when creating new route [ 3362.307791][T32219] __nla_validate_parse: 5 callbacks suppressed [ 3362.307811][T32219] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.18881'. [ 3362.372047][T32224] IPv6: NLM_F_CREATE should be specified when creating new route [ 3362.413961][T32224] IPv6: Can't replace route, no match found [ 3362.614464][T32219] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.18881'. [ 3363.475436][T32244] validate_nla: 5 callbacks suppressed [ 3363.475455][T32244] netlink: 'syz.3.18893': attribute type 10 has an invalid length. [ 3363.533773][T32244] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18893'. [ 3363.799745][T32243] netlink: 'syz.1.18892': attribute type 3 has an invalid length. [ 3363.821401][T32243] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18892'. [ 3363.825228][T32250] netlink: 'syz.0.18896': attribute type 3 has an invalid length. [ 3363.840612][T32250] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18896'. [ 3363.897445][T32252] netlink: 71 bytes leftover after parsing attributes in process `syz.3.18897'. [ 3364.199713][T32270] netlink: 'syz.1.18901': attribute type 21 has an invalid length. [ 3364.210637][T32270] netlink: 100 bytes leftover after parsing attributes in process `syz.1.18901'. [ 3364.303840][T32270] netlink: 'syz.1.18901': attribute type 10 has an invalid length. [ 3364.333721][T32273] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.18904'. [ 3364.350597][T32270] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18901'. [ 3364.513014][T32282] netlink: 'syz.2.18907': attribute type 22 has an invalid length. [ 3364.531473][T32282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18907'. [ 3364.875694][T32295] netlink: 'syz.3.18912': attribute type 3 has an invalid length. [ 3365.107149][T32300] netlink: 'syz.0.18924': attribute type 3 has an invalid length. [ 3367.382883][T32352] __nla_validate_parse: 4 callbacks suppressed [ 3367.382929][T32352] netlink: 196 bytes leftover after parsing attributes in process `syz.4.18931'. [ 3367.467628][T32357] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.18932'. [ 3368.079165][T32374] device pim6reg1 entered promiscuous mode [ 3369.332576][T21551] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3370.058258][T32401] netlink: 'syz.1.18945': attribute type 13 has an invalid length. [ 3370.088639][T32401] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18945'. [ 3370.539749][T32415] cgroup: fork rejected by pids controller in /syz4 [ 3370.601789][T32419] netlink: 'syz.2.18950': attribute type 10 has an invalid length. [ 3370.922547][T32422] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.18947'. [ 3371.239805][T32422] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.18947'. [ 3371.943909][ T5784] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3372.076304][T32444] netlink: 'syz.2.18960': attribute type 19 has an invalid length. [ 3372.101850][T32444] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18960'. [ 3372.542784][T29569] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3372.556384][T13018] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3372.574599][T13018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3372.584258][T13018] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3372.592157][T13018] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3372.599436][T13018] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3373.443012][ T5784] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3373.632037][ T5784] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3373.705142][T32467] netlink: 'syz.3.18965': attribute type 11 has an invalid length. [ 3373.726121][T32467] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18965'. [ 3373.820870][ T5784] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3374.061663][T32466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3374.236233][T32451] chnl_net:caif_netlink_parms(): no params data found [ 3374.335149][ T5784] device 0 left promiscuous mode [ 3374.439797][T32451] bridge0: port 1(bridge_slave_0) entered blocking state [ 3374.515564][T32451] bridge0: port 1(bridge_slave_0) entered disabled state [ 3374.551921][T32451] device bridge_slave_0 entered promiscuous mode [ 3374.654047][T32492] netlink: 'syz.2.18981': attribute type 11 has an invalid length. [ 3374.671648][T13018] Bluetooth: hci0: command 0x0409 tx timeout [ 3374.678344][T32500] netlink: 'syz.1.18968': attribute type 1 has an invalid length. [ 3374.868978][T32500] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.18968'. [ 3374.975257][T32494] netlink: 'syz.1.18968': attribute type 21 has an invalid length. [ 3375.158483][T32516] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.18972'. [ 3375.183078][T32494] IPv6: Can't replace route, no match found [ 3375.223980][T32451] bridge0: port 2(bridge_slave_1) entered blocking state [ 3375.237072][T32451] bridge0: port 2(bridge_slave_1) entered disabled state [ 3375.278192][T32451] device bridge_slave_1 entered promiscuous mode [ 3375.345591][T32508] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18968'. [ 3375.440107][T32516] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.18972'. [ 3375.614806][T32451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3375.670259][T32451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3375.918140][T32451] team0: Port device team_slave_0 added [ 3375.938105][T32451] team0: Port device team_slave_1 added [ 3376.282633][T32451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3376.300510][T32451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3376.373141][T32451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3376.623734][T32451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3376.638189][T32451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3376.700618][T32451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3376.740603][ T7095] Bluetooth: hci0: command 0x041b tx timeout [ 3376.957873][T32451] device hsr_slave_0 entered promiscuous mode [ 3376.988327][T32451] device hsr_slave_1 entered promiscuous mode [ 3377.737061][ T5784] device hsr_slave_0 left promiscuous mode [ 3377.754328][ T5784] device hsr_slave_1 left promiscuous mode [ 3378.247156][T32592] netlink: 'syz.0.18989': attribute type 2 has an invalid length. [ 3378.410958][ T5784] device bridge_slave_1 left promiscuous mode [ 3378.417392][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 3378.433295][ T5784] device bridge_slave_0 left promiscuous mode [ 3378.439491][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 3378.477571][ T5784] device veth1_macvtap left promiscuous mode [ 3378.484157][ T5784] device veth0_macvtap left promiscuous mode [ 3378.490705][ T5784] device veth1_vlan left promiscuous mode [ 3378.496524][ T5784] device veth0_vlan left promiscuous mode [ 3378.830532][ T7095] Bluetooth: hci0: command 0x040f tx timeout [ 3379.180435][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 3379.227940][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 3380.298274][T32592] device 0 entered promiscuous mode [ 3380.303950][T32600] netlink: 'syz.3.18992': attribute type 1 has an invalid length. [ 3380.762051][T32629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19001'. [ 3380.839157][T32451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3380.885860][T32451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3380.909226][ T7095] Bluetooth: hci0: command 0x0419 tx timeout [ 3380.941432][T32451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3381.050167][T32630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18999'. [ 3381.101773][T32451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3381.368191][T32643] netlink: 'syz.0.19004': attribute type 4 has an invalid length. [ 3381.617570][T32451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3381.650040][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3381.673367][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3381.686644][T32451] 8021q: adding VLAN 0 to HW filter on device team0 [ 3381.717437][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3381.738369][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3381.762292][T21551] bridge0: port 1(bridge_slave_0) entered blocking state [ 3381.769438][T21551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3381.827597][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3381.851184][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3381.873457][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3381.901362][T21551] bridge0: port 2(bridge_slave_1) entered blocking state [ 3381.908549][T21551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3381.937451][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3381.999541][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3382.030148][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3382.060023][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3382.082563][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3382.111753][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3382.147110][T32451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3382.194547][T32451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3382.229000][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3382.261001][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3382.276771][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3382.323276][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3382.341769][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3382.373255][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3382.415551][T32671] netlink: 'syz.2.19020': attribute type 2 has an invalid length. [ 3382.469899][T32674] netlink: 14 bytes leftover after parsing attributes in process `syz.2.19020'. [ 3382.988199][T32692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19012'. [ 3383.115800][T32701] netlink: 'syz.1.19014': attribute type 11 has an invalid length. [ 3383.723100][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3383.731333][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3383.777006][T32451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3383.995074][T32726] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.19018'. [ 3384.253967][T32741] netlink: 'syz.2.19025': attribute type 3 has an invalid length. [ 3384.285937][T32741] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19025'. [ 3384.398012][T32747] netlink: 'syz.1.19026': attribute type 3 has an invalid length. [ 3384.426685][T32747] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19026'. [ 3384.910186][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3384.929761][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3385.016352][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3385.051332][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3385.080265][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3385.106014][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3385.133048][T32451] device veth0_vlan entered promiscuous mode [ 3385.215028][T32451] device veth1_vlan entered promiscuous mode [ 3385.313312][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3385.334578][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3385.366181][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3385.394683][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3385.436046][T32451] device veth0_macvtap entered promiscuous mode [ 3385.472619][T32451] device veth1_macvtap entered promiscuous mode [ 3385.532108][T32451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3385.561069][T32451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3385.587219][T32451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3385.605381][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3385.625148][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3385.662586][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3385.687822][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3385.733296][ T319] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19035'. [ 3385.818597][ T329] netlink: 'syz.3.19037': attribute type 3 has an invalid length. [ 3385.845585][ T329] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19037'. [ 3385.898921][ T319] team0: Port device team_slave_0 removed [ 3385.951288][T32451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3385.972064][T32451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3386.012015][T32451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3386.035479][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3386.054862][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3386.087025][T32451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3386.118468][T32451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3386.146524][T32451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3386.190606][T32451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3386.321226][ T342] netlink: 71 bytes leftover after parsing attributes in process `syz.2.19043'. [ 3386.384766][ T5784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3386.414847][ T5784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3386.468937][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3386.539867][T29895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3386.554678][T29895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3386.585524][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3386.732707][ T354] netlink: 188 bytes leftover after parsing attributes in process `syz.2.19046'. [ 3387.638871][ T370] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.19049'. [ 3388.791983][ T7095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3388.800860][ T7095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3388.809310][ T7095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3388.817214][ T7095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3388.851770][ T7095] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3388.859084][ T7095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3388.982545][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 3388.988885][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.143727][ T394] chnl_net:caif_netlink_parms(): no params data found [ 3389.301471][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 3389.332163][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 3389.340301][ T394] device bridge_slave_0 entered promiscuous mode [ 3389.401430][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 3389.408709][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 3389.444405][ T394] device bridge_slave_1 entered promiscuous mode [ 3389.508996][ T415] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.19063'. [ 3389.578352][ T394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3389.601516][ T394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3389.725169][ T394] team0: Port device team_slave_0 added [ 3389.754000][ T394] team0: Port device team_slave_1 added [ 3389.812319][ T394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3389.819310][ T394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3389.898571][ T422] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.19066'. [ 3389.908241][ T394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3389.957894][ T394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3389.970607][ T394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3390.050928][ T394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3390.160411][ T394] device hsr_slave_0 entered promiscuous mode [ 3390.170915][ T394] device hsr_slave_1 entered promiscuous mode [ 3390.181006][ T394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3390.188854][ T394] Cannot create hsr debugfs directory [ 3390.471331][ T442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19071'. [ 3390.681810][ T394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.732220][T21551] device 0 left promiscuous mode [ 3390.878065][ T394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.907453][T13018] Bluetooth: hci4: command 0x0409 tx timeout [ 3390.937837][T21551] device 0 left promiscuous mode [ 3390.987601][ T449] netlink: 'syz.1.19074': attribute type 10 has an invalid length. [ 3391.101667][ T394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.153654][T21551] device 1 left promiscuous mode [ 3391.278285][ T394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3391.354347][T21551] device 2 left promiscuous mode [ 3391.374490][ T454] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19076'. [ 3391.440891][ T456] netlink: 'syz.1.19076': attribute type 2 has an invalid length. [ 3391.543654][ T454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3391.574511][ T454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3391.602792][ T454] bond0 (unregistering): Released all slaves [ 3391.632918][T21551] device 3 left promiscuous mode [ 3391.729156][ T456] device 0 entered promiscuous mode [ 3391.757817][T21551] tipc: Left network mode [ 3391.993920][ T394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3392.295026][ T394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3392.406283][ T394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3392.471372][ T394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3392.656803][ T479] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.19087'. [ 3393.167771][T13018] Bluetooth: hci4: command 0x041b tx timeout [ 3394.551895][ T512] netlink: 'syz.0.19096': attribute type 10 has an invalid length. [ 3394.560256][ T512] team0: Device wg1 is up. Set it down before adding it as a team port [ 3394.706650][ T394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3394.779909][ T394] 8021q: adding VLAN 0 to HW filter on device team0 [ 3394.832974][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3394.848962][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3394.866903][ T517] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.19108'. [ 3394.904218][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3394.922306][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3394.940823][ T517] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3394.952315][T29895] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.959424][T29895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3395.047722][ T524] netlink: 'syz.1.19100': attribute type 3 has an invalid length. [ 3395.064076][ T523] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.19099'. [ 3395.073692][ T524] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19100'. [ 3395.084658][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3395.099537][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3395.116425][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3395.143418][T29895] bridge0: port 2(bridge_slave_1) entered blocking state [ 3395.150608][T29895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3395.161936][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3395.220602][T13018] Bluetooth: hci4: command 0x040f tx timeout [ 3395.257835][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3395.406529][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3395.428672][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3395.439403][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3395.462045][ T535] netlink: 'syz.1.19103': attribute type 3 has an invalid length. [ 3395.481258][ T535] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19103'. [ 3395.499536][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3395.519557][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3395.537446][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3395.558917][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3395.571072][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3395.579801][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3395.616020][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3395.716192][ T543] netlink: 'syz.4.19105': attribute type 39 has an invalid length. [ 3395.834568][ T544] netlink: 830 bytes leftover after parsing attributes in process `syz.4.19105'. [ 3395.847108][ T556] netlink: 'syz.1.19106': attribute type 1 has an invalid length. [ 3395.886699][ T556] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.19106'. [ 3396.274923][ T552] netlink: 'syz.1.19106': attribute type 21 has an invalid length. [ 3396.287422][ T552] IPv6: Can't replace route, no match found [ 3396.303841][ T557] netlink: 14 bytes leftover after parsing attributes in process `syz.1.19106'. [ 3396.380756][T21551] device veth1_macvtap left promiscuous mode [ 3396.390029][T21551] device veth0_macvtap left promiscuous mode [ 3396.812079][T21551] device geneve1 left promiscuous mode [ 3396.839203][T21551] team0 (unregistering): Port device geneve1 removed [ 3397.106724][T21551] device team_slave_1 left promiscuous mode [ 3397.113562][T21551] team0 (unregistering): Port device team_slave_1 removed [ 3397.154052][T21551] device team_slave_0 left promiscuous mode [ 3397.160978][T21551] team0 (unregistering): Port device team_slave_0 removed [ 3397.202342][T21551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3397.248760][T21551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3397.310954][T13018] Bluetooth: hci4: command 0x0419 tx timeout [ 3397.494773][T21551] bond0 (unregistering): Released all slaves [ 3397.550941][ T570] netlink: 'syz.4.19112': attribute type 21 has an invalid length. [ 3397.559505][ T573] netlink: 'syz.4.19112': attribute type 21 has an invalid length. [ 3397.573340][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3397.582887][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3397.605380][ T394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3397.697051][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3397.711323][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3397.789235][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3397.812864][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3397.845023][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3397.868284][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3397.878412][ T394] device veth0_vlan entered promiscuous mode [ 3397.896598][ T579] netlink: 'syz.0.19122': attribute type 10 has an invalid length. [ 3398.299652][ T592] netlink: 'syz.3.19116': attribute type 3 has an invalid length. [ 3398.320646][ T592] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19116'. [ 3398.459618][ T394] device veth1_vlan entered promiscuous mode [ 3398.469330][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3398.484346][ T585] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.19113'. [ 3398.573802][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3398.621554][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3398.631391][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3398.654036][ T394] device veth0_macvtap entered promiscuous mode [ 3398.678608][ T394] device veth1_macvtap entered promiscuous mode [ 3398.730391][ T394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3398.764096][ T394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3398.790621][ T394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3398.811459][ T394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3398.845409][ T394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3398.867433][ T601] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.19120'. [ 3398.892425][ T601] device bridge_slave_1 entered promiscuous mode [ 3398.909545][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3398.941578][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3398.969923][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3398.993847][ T394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.030589][ T394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.051054][ T394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3399.075315][ T394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3399.105457][ T394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3399.144788][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3399.171502][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3399.183700][ T394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.202205][ T394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.258786][ T394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.299384][ T394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3399.630670][T26331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3399.649871][T26331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3399.659624][ T632] netlink: 'syz.0.19130': attribute type 3 has an invalid length. [ 3399.675511][T21551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3399.689199][ T632] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19130'. [ 3399.708955][T16475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3399.726157][T16475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3399.740322][ T633] netlink: 'syz.3.19131': attribute type 10 has an invalid length. [ 3399.788857][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3399.970123][ T641] netlink: 'syz.2.19052': attribute type 3 has an invalid length. [ 3399.986513][ T641] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19052'. [ 3400.423238][ T667] netlink: 'syz.2.19143': attribute type 10 has an invalid length. [ 3400.435225][ T667] team0: Device gre0 is up. Set it down before adding it as a team port [ 3400.729834][ T676] netlink: 'syz.2.19145': attribute type 3 has an invalid length. [ 3400.738064][ T676] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19145'. [ 3401.036980][ T688] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19150'. [ 3401.665830][ T697] validate_nla: 2 callbacks suppressed [ 3401.665866][ T697] netlink: 'syz.3.19153': attribute type 11 has an invalid length. [ 3402.466180][ T719] netlink: 'syz.1.19160': attribute type 3 has an invalid length. [ 3402.490929][ T719] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19160'. [ 3402.742570][T13018] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3402.752495][T13018] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3402.760616][T13018] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3402.768992][T13018] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3402.783651][ T727] netlink: 'syz.1.19163': attribute type 4 has an invalid length. [ 3402.804815][T13018] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3402.815891][T13018] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3402.864686][ T5788] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.088530][ T5788] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.302105][ T5788] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.832342][ T5788] device 0 left promiscuous mode [ 3403.935484][ T724] chnl_net:caif_netlink_parms(): no params data found [ 3403.977342][ T5788] device 1 left promiscuous mode [ 3404.136114][ T5788] device 2 left promiscuous mode [ 3404.205454][ T5788] device 3 left promiscuous mode [ 3404.387112][ T754] netlink: 'syz.0.19168': attribute type 11 has an invalid length. [ 3404.401901][ T738] can: request_module (can-proto-0) failed. [ 3404.480078][ T5788] device 0 left promiscuous mode [ 3404.527883][ T760] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3404.540625][ T760] device syzkaller0 entered promiscuous mode [ 3404.574215][ T724] bridge0: port 1(bridge_slave_0) entered blocking state [ 3404.590630][ T724] bridge0: port 1(bridge_slave_0) entered disabled state [ 3404.642642][ T724] device bridge_slave_0 entered promiscuous mode [ 3404.674542][ T724] bridge0: port 2(bridge_slave_1) entered blocking state [ 3404.702240][ T724] bridge0: port 2(bridge_slave_1) entered disabled state [ 3404.731436][ T724] device bridge_slave_1 entered promiscuous mode [ 3404.900777][T13018] Bluetooth: hci1: command 0x0409 tx timeout [ 3405.111861][ T5788] tipc: Left network mode [ 3405.593350][ T724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3405.623791][ T724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3405.804537][ T724] team0: Port device team_slave_0 added [ 3405.832187][ T724] team0: Port device team_slave_1 added [ 3405.930079][ T724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3405.974968][ T724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3406.050519][ T724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3406.078652][ T724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3406.100475][ T724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3406.160544][ T724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3406.239313][ T803] netlink: 'syz.1.19177': attribute type 21 has an invalid length. [ 3406.270872][ T803] netlink: 156 bytes leftover after parsing attributes in process `syz.1.19177'. [ 3406.797689][ T819] netlink: 'syz.2.19182': attribute type 3 has an invalid length. [ 3406.827364][ T819] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19182'. [ 3406.980575][T13018] Bluetooth: hci1: command 0x041b tx timeout [ 3407.006402][ T724] device hsr_slave_0 entered promiscuous mode [ 3407.049125][ T724] device hsr_slave_1 entered promiscuous mode [ 3407.070278][ T724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3407.083691][ T724] Cannot create hsr debugfs directory [ 3407.952414][ T852] netlink: 'syz.4.19188': attribute type 10 has an invalid length. [ 3408.382665][ T852] team0: Port device geneve1 added [ 3408.415647][ T851] netlink: 'syz.0.19191': attribute type 21 has an invalid length. [ 3408.432179][ T851] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19191'. [ 3409.062447][T13018] Bluetooth: hci1: command 0x040f tx timeout [ 3409.310174][ T905] netlink: 'syz.1.19203': attribute type 11 has an invalid length. [ 3409.413408][ T912] netlink: 'syz.0.19204': attribute type 3 has an invalid length. [ 3409.426359][ T912] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19204'. [ 3409.971585][ T5788] device hsr_slave_1 left promiscuous mode [ 3411.109567][ T724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3411.150759][T13018] Bluetooth: hci1: command 0x0419 tx timeout [ 3411.187572][ T724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3411.241681][ T946] netlink: 71 bytes leftover after parsing attributes in process `syz.4.19212'. [ 3412.059064][ T724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3412.079219][ T724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3412.133220][ T967] netlink: 'syz.1.19215': attribute type 11 has an invalid length. [ 3412.417866][ T724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3412.457489][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3412.479048][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3412.511434][ T724] 8021q: adding VLAN 0 to HW filter on device team0 [ 3412.535321][ T982] netlink: 'syz.1.19228': attribute type 11 has an invalid length. [ 3412.557811][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3412.591298][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3412.610556][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 3412.617670][T16473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3412.660602][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3412.705403][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3412.731391][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3412.778894][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 3412.786059][T16473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3412.820418][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3413.020527][ T1002] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.19222'. [ 3413.071198][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3413.091719][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3413.111690][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3413.156743][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3413.181577][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3413.229128][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3413.254212][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3413.281443][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3413.302174][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3413.335728][T29895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3413.375355][ T724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3413.715457][ T1025] netlink: 'syz.1.19226': attribute type 10 has an invalid length. [ 3413.853917][ T1025] team0: Device hsr_slave_0 failed to register rx_handler [ 3414.158604][ T1041] netlink: 'syz.2.19227': attribute type 10 has an invalid length. [ 3414.396012][ T1041] team0: Port device geneve1 added [ 3414.512293][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3414.520330][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3414.550248][ T724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3414.638041][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3414.657908][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3414.730569][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3414.755819][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3414.791326][ T724] device veth0_vlan entered promiscuous mode [ 3414.803232][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3414.831749][T16475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3414.851299][ T724] device veth1_vlan entered promiscuous mode [ 3414.935203][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3414.948307][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3414.981461][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3415.006642][T26330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3415.027934][ T724] device veth0_macvtap entered promiscuous mode [ 3415.052997][ T1077] netlink: 196 bytes leftover after parsing attributes in process `syz.2.19233'. [ 3415.115155][ T724] device veth1_macvtap entered promiscuous mode [ 3415.191403][ T724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3415.247252][ T724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.285037][ T724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3415.342804][ T724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.373984][ T724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3415.414833][ T724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.435538][ T724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3415.459201][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3415.487278][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3415.504915][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3415.542964][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3415.571296][ T724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.604838][ T724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.614989][ T724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.638311][ T724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.659700][ T724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3415.689621][ T724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3415.707778][ T724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3415.725761][ T724] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.735902][ T724] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.759754][ T724] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.786113][ T724] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3415.823697][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3415.843105][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3416.067518][T29895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3416.096658][T29895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.151138][T16473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3416.196665][ T5788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3416.235091][ T5788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3416.260866][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3417.606439][ T1132] netlink: 'syz.0.19251': attribute type 39 has an invalid length. [ 3418.144756][ T1148] netlink: 'syz.4.19258': attribute type 3 has an invalid length. [ 3418.173591][ T1152] netlink: 'syz.2.19259': attribute type 10 has an invalid length. [ 3418.192537][ T1148] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19258'. [ 3418.223490][ T1152] team0: Device wg1 is up. Set it down before adding it as a team port [ 3418.273475][ T1156] netlink: 'syz.0.19260': attribute type 10 has an invalid length. [ 3419.821397][ T1172] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.19266'. [ 3419.861501][ T1172] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3419.866322][ T1174] netlink: 'syz.0.19267': attribute type 21 has an invalid length. [ 3419.905402][ T1174] IPv6: NLM_F_CREATE should be specified when creating new route [ 3419.932638][ T1174] IPv6: Can't replace route, no match found [ 3419.957404][ T1178] netlink: 'syz.0.19267': attribute type 1 has an invalid length. [ 3420.019258][ T1179] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.19268'. [ 3420.037058][ T1178] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.19267'. [ 3420.103051][ T1174] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19267'. [ 3420.527877][ T1197] netlink: 'syz.0.19274': attribute type 3 has an invalid length. [ 3420.578308][ T1197] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19274'. [ 3421.797865][ T1241] netlink: 'syz.0.19288': attribute type 2 has an invalid length. [ 3421.808941][ T1242] netlink: 'syz.3.19289': attribute type 10 has an invalid length. [ 3421.830563][ T1242] team0: Device gre0 is up. Set it down before adding it as a team port [ 3421.844749][ T1241] device 1 entered promiscuous mode [ 3421.883696][ T1241] netlink: 'syz.0.19288': attribute type 2 has an invalid length. [ 3421.955722][ T1249] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19290'. [ 3421.976759][ T1241] device 2 entered promiscuous mode [ 3422.000924][ T1251] netlink: 188 bytes leftover after parsing attributes in process `syz.3.19292'. [ 3422.398333][ T1262] device 0 entered promiscuous mode [ 3422.646321][ T1268] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.19299'. [ 3423.020721][ T7095] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3423.028284][ T7095] Bluetooth: hci0: Invalid handle: 0x5393 > 0x0eff [ 3424.887284][ T1300] validate_nla: 4 callbacks suppressed [ 3424.887322][ T1300] netlink: 'syz.1.19305': attribute type 3 has an invalid length. [ 3424.961736][ T1300] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19305'. [ 3425.375960][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3425.397172][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3425.429338][ T1318] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.19310'. [ 3425.652685][ T1316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3425.660315][ T1316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3426.028768][ T1325] netlink: 'syz.1.19312': attribute type 1 has an invalid length. [ 3426.090523][ T1325] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.19312'. [ 3426.493856][ T1343] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3427.509238][ T1357] netlink: 'syz.2.19323': attribute type 3 has an invalid length. [ 3427.581036][ T1357] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19323'. [ 3427.611871][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3427.651630][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3427.728533][ T1368] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.19327'. [ 3428.549537][ T1362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3428.567670][ T1362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3428.812071][ T1370] netlink: 'syz.4.19328': attribute type 39 has an invalid length. [ 3429.042455][ T1378] netlink: 'syz.1.19331': attribute type 11 has an invalid length. [ 3429.959011][ T1406] netlink: 'syz.3.19352': attribute type 10 has an invalid length. [ 3430.340207][ T1415] netlink: 'syz.2.19344': attribute type 10 has an invalid length. [ 3430.569583][ T1417] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.19343'. [ 3431.077647][ T1415] team0: Device wg1 is of different type [ 3431.152775][ T1416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3431.180980][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3431.189101][ T1416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3431.223618][ T1416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3432.146596][ T1425] netlink: 'syz.0.19346': attribute type 10 has an invalid length. [ 3432.637449][ T1458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19355'. [ 3432.827537][ T1460] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.19360'. [ 3433.018139][ T1463] netlink: 'syz.4.19361': attribute type 10 has an invalid length. [ 3433.074030][ T1463] team0: Device wg1 is up. Set it down before adding it as a team port [ 3433.309402][ T1475] netlink: 'syz.0.19367': attribute type 39 has an invalid length. [ 3433.546786][ T1480] netlink: 'syz.2.19368': attribute type 10 has an invalid length. [ 3433.676125][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 3433.826696][ T1498] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.19374'. [ 3433.888188][ T1498] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 3434.507715][ T1480] device bridge_slave_1 left promiscuous mode [ 3434.516787][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 3434.662253][ T1507] netlink: 'syz.1.19376': attribute type 3 has an invalid length. [ 3434.702885][ T1507] netlink: 'syz.1.19376': attribute type 1 has an invalid length. [ 3434.729611][ T1507] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.19376'. [ 3434.993626][ T1516] netlink: 'syz.3.19380': attribute type 21 has an invalid length. [ 3435.031826][ T1516] IPv6: NLM_F_CREATE should be specified when creating new route [ 3435.044960][ T1516] IPv6: Can't replace route, no match found [ 3435.097059][ T1516] netlink: 'syz.3.19380': attribute type 1 has an invalid length. [ 3435.134138][ T1516] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.19380'. [ 3435.168800][ T1521] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19380'. [ 3435.215785][ T1528] netlink: 'syz.1.19383': attribute type 10 has an invalid length. [ 3435.231196][ T1528] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.19383'. [ 3436.260529][ T1546] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19391'. [ 3436.836551][ T1554] netlink: 'syz.3.19393': attribute type 10 has an invalid length. [ 3436.869225][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 3436.883775][ T1554] device bridge_slave_1 left promiscuous mode [ 3436.892104][ T1554] bridge0: port 2(bridge_slave_1) entered disabled state [ 3436.943996][ T1557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19395'. [ 3437.211184][ T7095] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 3437.340496][ T1583] netlink: 'syz.3.19402': attribute type 29 has an invalid length. [ 3437.376635][ T1583] netlink: 'syz.3.19402': attribute type 29 has an invalid length. [ 3437.401402][ T1588] netlink: 'syz.3.19402': attribute type 29 has an invalid length. [ 3437.428001][ T1583] netlink: 'syz.3.19402': attribute type 29 has an invalid length. [ 3437.963130][ T1595] netlink: 'syz.3.19406': attribute type 11 has an invalid length. [ 3438.512239][ T1621] netlink: 'syz.2.19415': attribute type 29 has an invalid length. [ 3438.744568][ T1631] device 1 entered promiscuous mode [ 3438.816710][ T1636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3438.838038][ T1636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3438.868799][ T1639] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.19421'. [ 3439.073860][ T1648] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19426'. [ 3439.243613][ T1636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3439.251653][ T1636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3439.423444][ T1649] tipc: Started in network mode [ 3439.458139][ T1649] tipc: Node identity 9215a268, cluster identity 4711 [ 3439.465758][ T1649] tipc: Node number set to 2450891368 [ 3440.115663][ T1682] validate_nla: 7 callbacks suppressed [ 3440.115699][ T1682] netlink: 'syz.2.19436': attribute type 3 has an invalid length. [ 3440.141888][ T1682] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19436'. [ 3441.223671][ T1724] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.19447'. [ 3441.360077][ T1717] device syzkaller0 entered promiscuous mode [ 3441.431346][ T1725] netlink: 'syz.4.19446': attribute type 12 has an invalid length. [ 3441.477725][ T1725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.19446'. [ 3441.707765][ T1738] netlink: 'syz.2.19450': attribute type 3 has an invalid length. [ 3441.721571][ T1738] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19450'. [ 3444.820584][ T1741] netlink: 'syz.0.19451': attribute type 11 has an invalid length. [ 3444.973046][ T1755] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.19456'. [ 3445.226932][ T1765] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.19460'. [ 3445.552952][ T1776] netlink: 'syz.4.19463': attribute type 11 has an invalid length. [ 3445.603493][ T1773] bridge0: port 1(bridge_slave_0) entered disabled state [ 3445.890182][ T1786] netlink: 'syz.4.19467': attribute type 3 has an invalid length. [ 3445.942647][ T1786] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19467'. [ 3446.258012][ T1801] netlink: 'syz.1.19474': attribute type 3 has an invalid length. [ 3446.270901][ T1801] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.19474'. [ 3446.689331][ T1825] netlink: 71 bytes leftover after parsing attributes in process `syz.0.19482'. [ 3446.747967][ T1827] netlink: 'syz.2.19483': attribute type 3 has an invalid length. [ 3446.764069][ T1827] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19483'. [ 3447.300164][ T1841] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3447.322193][ T1850] netlink: 188 bytes leftover after parsing attributes in process `syz.2.19487'. [ 3447.997345][ T1883] netlink: 'syz.4.19498': attribute type 3 has an invalid length. [ 3448.014246][ T1891] netlink: 'syz.0.19501': attribute type 10 has an invalid length. [ 3448.030757][ T1883] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19498'. [ 3448.228407][ T1909] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3448.594970][ T1923] netlink: 'syz.1.19510': attribute type 11 has an invalid length. [ 3448.667284][ T1925] netlink: 830 bytes leftover after parsing attributes in process `syz.0.19511'. [ 3449.103432][ T1934] netlink: 196 bytes leftover after parsing attributes in process `syz.3.19515'. [ 3449.169331][ T1937] netlink: 'syz.1.19517': attribute type 3 has an invalid length. [ 3449.213302][ T1937] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19517'. [ 3449.331417][ T1947] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3450.170633][ T1958] netlink: 'syz.2.19523': attribute type 11 has an invalid length. [ 3450.301277][ T1966] netlink: 'syz.0.19526': attribute type 21 has an invalid length. [ 3450.319469][ T1966] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19526'. [ 3450.423930][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.430298][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.526833][ T1977] netlink: 156 bytes leftover after parsing attributes in process `syz.1.19530'. [ 3450.773613][ T1986] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 3450.779425][ T1986] pim6reg0: linktype set to 780 [ 3450.817982][ T1994] validate_nla: 2 callbacks suppressed [ 3450.818026][ T1994] netlink: 'syz.0.19537': attribute type 3 has an invalid length. [ 3450.920622][ T1994] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19537'. [ 3451.071154][ T2002] netlink: 'syz.1.19539': attribute type 11 has an invalid length. [ 3451.462284][ T2006] device syzkaller0 entered promiscuous mode [ 3451.491798][ T2021] netlink: 'syz.0.19546': attribute type 21 has an invalid length. [ 3451.511278][ T2021] IPv6: Can't replace route, no match found [ 3451.640385][ T2021] netlink: 'syz.0.19546': attribute type 1 has an invalid length. [ 3451.735079][ T2033] __nla_validate_parse: 1 callbacks suppressed [ 3451.735096][ T2033] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19546'. [ 3452.100351][ T2050] netlink: 'syz.0.19553': attribute type 3 has an invalid length. [ 3452.126945][ T2050] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19553'. [ 3454.409881][ T2045] IPv6: Can't replace route, no match found [ 3454.420177][ T2067] netlink: 'syz.4.19559': attribute type 10 has an invalid length. [ 3454.478517][ T2067] team0: Device wg1 is of different type [ 3454.618851][ T2073] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.19562'. [ 3454.668672][ T2079] netlink: 'syz.1.19562': attribute type 10 has an invalid length. [ 3455.303377][ T2079] team0: Device wg1 is of different type [ 3455.788975][ T2103] netlink: 'syz.1.19572': attribute type 3 has an invalid length. [ 3455.809270][ T2103] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19572'. [ 3456.072581][ T2114] netlink: 'syz.3.19576': attribute type 10 has an invalid length. [ 3456.119678][ T2114] bridge0: port 1(bridge_slave_0) entered disabled state [ 3456.200149][ T2114] bridge0: port 1(bridge_slave_0) entered blocking state [ 3456.207447][ T2114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3456.226041][ T2114] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3456.851500][ T2144] netlink: 'syz.4.19588': attribute type 3 has an invalid length. [ 3456.860299][ T2144] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.19588'. [ 3456.996908][ T2154] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.19589'. [ 3457.156583][ T2165] netlink: 'syz.4.19596': attribute type 10 has an invalid length. [ 3457.241307][ T2165] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 3457.291814][ T2162] netlink: 'syz.1.19594': attribute type 4 has an invalid length. [ 3457.413573][ T2169] netlink: 'syz.4.19596': attribute type 10 has an invalid length. [ 3457.436399][ T2177] netlink: 'syz.2.19597': attribute type 25 has an invalid length. [ 3457.450539][ T2177] netlink: 'syz.2.19597': attribute type 10 has an invalid length. [ 3457.461228][ T2181] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.19599'. [ 3457.688250][ T2190] netlink: 'syz.3.19603': attribute type 3 has an invalid length. [ 3457.720934][ T2190] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19603'. [ 3458.366868][ T2226] netlink: 'syz.3.19613': attribute type 10 has an invalid length. [ 3458.396308][ T2226] netlink: 55 bytes leftover after parsing attributes in process `syz.3.19613'. [ 3458.823179][ T2239] netlink: 'syz.2.19619': attribute type 3 has an invalid length. [ 3458.861928][ T2239] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19619'. [ 3458.995337][ T2254] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.19624'. [ 3460.106142][ T2261] team0: Device wg1 is of different type [ 3461.854836][ T2299] validate_nla: 1 callbacks suppressed [ 3461.854871][ T2299] netlink: 'syz.2.19635': attribute type 3 has an invalid length. [ 3461.880676][ T2299] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19635'. [ 3462.346112][ T2309] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.19639'. [ 3462.422642][ T2315] netlink: 'syz.2.19639': attribute type 10 has an invalid length. [ 3462.820573][ T2321] syz.4.19641[2321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3462.820698][ T2321] syz.4.19641[2321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3463.013478][ T2321] syz.4.19641[2321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3463.055100][ C1] [ 3463.055108][ C1] ================================ [ 3463.055114][ C1] WARNING: inconsistent lock state [ 3463.055132][ C1] syzkaller #0 Not tainted [ 3463.055141][ C1] -------------------------------- [ 3463.055146][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 3463.055154][ C1] syz.4.19641/2319 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 3463.055172][ C1] ffff88805917e0f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 3463.055291][ C1] {INITIAL USE} state was registered at: [ 3463.055298][ C1] lock_acquire+0x1bb/0x4a0 [ 3463.055318][ C1] _raw_spin_lock+0x2a/0x40 [ 3463.055335][ C1] htab_lock_bucket+0x179/0x2f0 [ 3463.055351][ C1] htab_lru_map_update_elem+0x2eb/0xe60 [ 3463.055366][ C1] bpf_map_update_value+0x59d/0x670 [ 3463.055383][ C1] generic_map_update_batch+0x52e/0x7f0 [ 3463.055400][ C1] bpf_map_do_batch+0x475/0x5f0 [ 3463.055418][ C1] __sys_bpf+0x6f7/0x780 [ 3463.055434][ C1] __x64_sys_bpf+0x78/0x90 [ 3463.055451][ C1] do_syscall_64+0x4c/0xa0 [ 3463.055470][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3463.055493][ C1] irq event stamp: 7356 [ 3463.055499][ C1] hardirqs last enabled at (7355): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 3463.055524][ C1] hardirqs last disabled at (7356): [] exc_debug+0x6e/0x130 [ 3463.055542][ C1] softirqs last enabled at (7214): [] __irq_exit_rcu+0x13b/0x230 [ 3463.055561][ C1] softirqs last disabled at (7171): [] __irq_exit_rcu+0x13b/0x230 [ 3463.055580][ C1] [ 3463.055580][ C1] other info that might help us debug this: [ 3463.055585][ C1] Possible unsafe locking scenario: [ 3463.055585][ C1] [ 3463.055589][ C1] CPU0 [ 3463.055592][ C1] ---- [ 3463.055596][ C1] lock(&htab->lockdep_key); [ 3463.055606][ C1] [ 3463.055609][ C1] lock(&htab->lockdep_key); [ 3463.055619][ C1] [ 3463.055619][ C1] *** DEADLOCK *** [ 3463.055619][ C1] [ 3463.055623][ C1] no locks held by syz.4.19641/2319. [ 3463.055630][ C1] [ 3463.055630][ C1] stack backtrace: [ 3463.055636][ C1] CPU: 1 PID: 2319 Comm: syz.4.19641 Not tainted syzkaller #0 [ 3463.055651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3463.055665][ C1] Call Trace: [ 3463.055671][ C1] <#DB> [ 3463.055678][ C1] dump_stack_lvl+0x188/0x24e [ 3463.055706][ C1] ? show_regs_print_info+0x12/0x12 [ 3463.055739][ C1] ? print_usage_bug+0x42a/0x690 [ 3463.055760][ C1] ? verify_lock_unused+0x15/0x140 [ 3463.055787][ C1] lock_acquire+0x2df/0x4a0 [ 3463.055815][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 3463.055836][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3463.055868][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 3463.055884][ C1] ? perf_output_begin_forward+0xa7/0xa70 [ 3463.055911][ C1] _raw_spin_lock+0x2a/0x40 [ 3463.055928][ C1] ? htab_lock_bucket+0x179/0x2f0 [ 3463.055945][ C1] htab_lock_bucket+0x179/0x2f0 [ 3463.055969][ C1] ? htab_lru_map_delete_node+0x610/0x610 [ 3463.055988][ C1] ? look_up_lock_class+0x75/0x140 [ 3463.056009][ C1] ? verify_lock_unused+0x15/0x140 [ 3463.056032][ C1] ? htab_map_hash+0x329/0x6d0 [ 3463.056055][ C1] htab_lru_map_delete_elem+0x1a1/0x760 [ 3463.056076][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 3463.056098][ C1] ? htab_lru_map_update_elem+0xe60/0xe60 [ 3463.056132][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 3463.056154][ C1] bpf_overflow_handler+0x6d1/0x790 [ 3463.056173][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 3463.056199][ C1] ? bpf_overflow_handler+0xd9/0x790 [ 3463.056216][ C1] ? perf_swevent_overflow+0x230/0x230 [ 3463.056246][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 3463.056280][ C1] __perf_event_overflow+0x457/0x630 [ 3463.056312][ C1] perf_swevent_event+0x315/0x570 [ 3463.056338][ C1] ? perf_tp_event+0xc10/0xc10 [ 3463.056379][ C1] perf_bp_event+0x311/0x3f0 [ 3463.056407][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 3463.056426][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 3463.056489][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3463.056512][ C1] ? read_lock_is_recursive+0x10/0x10 [ 3463.056544][ C1] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 3463.056574][ C1] atomic_notifier_call_chain+0x17a/0x2b0 [ 3463.056592][ C1] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3463.056617][ C1] notify_die+0x141/0x1a0 [ 3463.056639][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 3463.056679][ C1] notify_debug+0x20/0x30 [ 3463.056697][ C1] exc_debug+0xd9/0x130 [ 3463.056718][ C1] asm_exc_debug+0x1a/0x40 [ 3463.056737][ C1] RIP: 0010:copy_user_short_string+0x24/0x40 [ 3463.056759][ C1] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 3463.056772][ C1] RSP: 0018:ffffc9000604fbc8 EFLAGS: 00040206 [ 3463.056785][ C1] RAX: ffffffff84160273 RBX: 0000000000000006 RCX: 0000000000000003 [ 3463.056797][ C1] RDX: 0000000000000006 RSI: 0000200000000301 RDI: ffff88801a6f9d4b [ 3463.056808][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000006 [ 3463.056818][ C1] R10: dffffc0000000000 R11: ffffed10034df3a9 R12: 00007fffffffeffa [ 3463.056830][ C1] R13: 1ffff92000c09f90 R14: ffff88801a6f9d48 R15: 00002000000002fe [ 3463.056853][ C1] ? _copy_from_user+0xd3/0x170 [ 3463.056880][ C1] [ 3463.056885][ C1] [ 3463.056890][ C1] _copy_from_user+0xf4/0x170 [ 3463.056911][ C1] generic_map_update_batch+0x48d/0x7f0 [ 3463.056948][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 3463.056975][ C1] ? __fdget+0x17c/0x200 [ 3463.056999][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 3463.057018][ C1] bpf_map_do_batch+0x475/0x5f0 [ 3463.057039][ C1] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 3463.057065][ C1] __sys_bpf+0x6f7/0x780 [ 3463.057090][ C1] ? bpf_link_show_fdinfo+0x380/0x380 [ 3463.057132][ C1] ? lock_chain_count+0x20/0x20 [ 3463.057167][ C1] __x64_sys_bpf+0x78/0x90 [ 3463.057189][ C1] do_syscall_64+0x4c/0xa0 [ 3463.057209][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3463.057228][ C1] ? clear_bhb_loop+0x60/0xb0 [ 3463.057251][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3463.057276][ C1] RIP: 0033:0x7fa25719e159 [ 3463.057290][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3463.057303][ C1] RSP: 002b:00007fa257fc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3463.057319][ C1] RAX: ffffffffffffffda RBX: 00007fa257425fa0 RCX: 00007fa25719e159 [ 3463.057330][ C1] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 3463.057341][ C1] RBP: 00007fa257235024 R08: 0000000000000000 R09: 0000000000000000 [ 3463.057351][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3463.057361][ C1] R13: 00007fa257426038 R14: 00007fa257425fa0 R15: 00007ffe3ee5ae18 [ 3463.057395][ C1] [ 3463.183583][ T2321] syz.4.19641[2321] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3463.800915][ T2315] team0: Device wg1 is of different type [ 3463.841965][ T2316] netlink: 'syz.1.19636': attribute type 21 has an invalid length.