last executing test programs: 3.966804364s ago: executing program 0 (id=4402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000040000000700000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x16, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0xb}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x8}, @ringbuf_query, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x79}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x265, 0x0, 0x0, 0x0, 0x81}]}, &(0x7f0000000700)='GPL\x00', 0x4, 0xbc, &(0x7f0000000840)=""/188, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x4, 0x1d}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r0], &(0x7f0000000a00)=[{0x3, 0x1, 0x3, 0xc}, {0x4, 0x3, 0xd}], 0x10, 0x380}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff24}, 0x94) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0xa, 0x6, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000ac0)='ip_vti0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x400000c0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, &(0x7f00000004c0)={&(0x7f0000000300)=@in6={0xa, 0xfffe, 0x80, @empty, 0x1a}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="49cd0d2a0389b25349beb60f1c58fb534cb3", 0x12}], 0x1, 0x0, 0x0, 0x900}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r8 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x6, 0x0, 0xf4, 0x2, 0x0, 0x0, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff19, 0x1, @perf_config_ext={0x1, 0x5}, 0x800, 0x3, 0x8, 0x5, 0x0, 0x7, 0x5, 0x0, 0x8a, 0x0, 0x2}, 0x0, 0x7, r2, 0x1) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 3.466616633s ago: executing program 1 (id=4407): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x1, 0x1, 0xc1eb, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) r7 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r7, 0x0, 0x3, &(0x7f0000000000)=':#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r8}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r6, r0, 0x21, 0x20, r1, @void, @void, @void, @value=r8, r2}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@cgroup, 0x1, 0x1, 0xc1eb, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0]}, 0x40) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000200), &(0x7f00000003c0)=r5}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) (async) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r7, 0x0, 0x3, &(0x7f0000000000)=':#\x00'}, 0x30) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={r8}, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r6, r0, 0x21, 0x20, r1, @void, @void, @void, @value=r8, r2}, 0x20) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.408597566s ago: executing program 0 (id=4409): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="2d700000fcffffff18540000030b00000000000000000000a402ba71941330940d1bfb535c9cbd0d352c6b3320b61f62f50379cbf639682d43d2fed187c8aeea1d1f135df2629ae13743134216fc13a7caa86d454f548f66ef9a8a5bbc3da536415f7d8e727a7a0d1cddae0fde3d2f5ca119ed22df182af7f49f0a7091241cb933743e65b7b877c2335f099c44963f19e957de0373af90560c24b224abe0a7582c8bf80a97dd5c6fcdc3"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x6a19, 0xfffffbff}, 0x10, 0x1bd23, 0xffffffffffffffff, 0x4, &(0x7f00000004c0)=[0x1], &(0x7f0000000500)=[{0x0, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x0, 0x6}, {0x0, 0x2, 0x10, 0xa}, {0x2, 0x3, 0x1, 0x6}], 0x10, 0x7}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r1, 0x36, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0]}, 0x40) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xff, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xe, 0x66c}, 0xda51dad1bd844ca, 0x8, 0xfffffffe, 0x6, 0x0, 0x0, 0x1, 0x0, 0xfffffffe}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=r2], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000b00200006000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e10000000000000000008500000053000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) r6 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) (async) openat$cgroup_procs(r8, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) 3.314677351s ago: executing program 2 (id=4410): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) close(r0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0xb, [@float={0x1, 0x0, 0x0, 0x10, 0x2}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x2, 0x6, 0x6}, {0x2, 0x8, 0x9}, {0x5, 0x1, 0x7}], "fd"}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x6}, @fwd={0x9}, @ptr={0x1, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x1}, @const={0x8}]}, {0x0, [0x30, 0x0, 0x2e, 0x5f, 0x61, 0x61, 0x5f, 0x20, 0x78]}}, &(0x7f00000006c0)=""/4, 0xaf, 0x4, 0x1, 0xdf}, 0x28) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%+9llu \x00'}, 0x20) (rerun: 64) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x24, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x4, 0x0, 0x5, 0xb, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff0}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x35, &(0x7f00000002c0)=""/53, 0x41100, 0x1, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000740)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x8, 0xffffc3a0, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000880)=[r1, r5, r0], &(0x7f00000008c0)=[{0x2, 0x5, 0xf, 0x2}, {0x0, 0x3, 0xf, 0x4}, {0x3, 0x5, 0xb, 0xa}, {0x0, 0x4, 0x10}, {0x0, 0x4, 0xa, 0x4}], 0x10, 0xfffffffa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x1f, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa3f2}, @jmp={0x5, 0x0, 0x6, 0x5, 0xb, 0xfffffffffffffff8, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b00)='GPL\x00', 0x8, 0xad, &(0x7f0000000b40)=""/173, 0x60880, 0x6, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000c00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0x7404}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000c80)=[{0x3, 0x4, 0x8, 0xa}, {0x4, 0x3, 0xe, 0x4}, {0x5, 0x2, 0x2, 0x9}, {0x0, 0x4, 0xa, 0x5}, {0x5, 0x3, 0x5, 0x5}, {0x3, 0x1, 0xa, 0xc}, {0x1, 0x2, 0xc, 0x4}, {0x0, 0x3, 0x5, 0x2}, {0x5, 0x5, 0xc, 0x3}], 0x10, 0x80}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r6}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r4, 0x3, 0x4, 0x4}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002080)=@generic={&(0x7f0000002040)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000020c0)={0x1b, 0x0, 0x0, 0x113e, 0x0, r2, 0x7, '\x00', r3, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xe, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x6000000}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000f40)='GPL\x00', 0x5, 0x1000, &(0x7f0000000f80)=""/4096, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000001f80)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002140)=[r0, r2, r8, r9, r2, r5, r5, r10], &(0x7f0000002180)=[{0x1, 0x5, 0xb, 0x6}, {0x1, 0x2, 0x7, 0x3}, {0x1, 0x3, 0x6, 0xb}], 0x10, 0x2}, 0x94) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002340)='syz0\x00', 0x200002, 0x0) r12 = perf_event_open$cgroup(&(0x7f00000022c0)={0x0, 0x80, 0x2, 0x9, 0xcf, 0x1, 0x0, 0x8, 0x40010, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000002280)}, 0x500, 0x2, 0x6, 0x2, 0x4, 0x6, 0x81, 0x0, 0x0, 0x0, 0xea0}, r11, 0x6, r7, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002380), 0x10000, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000023c0)={'veth1_virt_wifi\x00', 0x1000}) ioctl$TUNGETDEVNETNS(r13, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r12, 0x4008240b, &(0x7f0000002440)={0x3, 0x80, 0x0, 0x9, 0x3, 0x4, 0x0, 0x4, 0x10000, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000002400), 0xc}, 0x4050, 0x4, 0xd, 0x7, 0x2, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x2}) (async) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000024c0)) (async, rerun: 64) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000002500), 0x8) (rerun: 64) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r14, 0x40042409, 0x1) (async) ioctl$TUNSETPERSIST(r14, 0x400454cb, 0x1) (async) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000002540)={'macsec0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002580)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r14, 0xc008240a, &(0x7f00000025c0)={0x1, 0x0, [0x0]}) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002740)={r0, &(0x7f0000002600)="85e485d8d0fd5ce02be620a3044d66f765887143070bc48307d66454b3e831450c93766dd673cab4ec68cd741a13b0d47876a5ecb157ce74730af3ce110ddbc0ce359e372935b327395bcbe8773936de058f765f057d0987ee6d308e42323d9530b342b117a4cce6cc88b0776511f2e8ea4b98a2fbb5fe17ce43eb9bd5a6083c43406cf4666c31bdab42f20583919760bb04947b5a30a633d74dbfd6db4594510207e095cc4072f3afab476f2dd11a10c5cffab86606795adb000dd718891e72237263c9a1ef2e9091cf109de6a02c578d769a8f514357e1", &(0x7f0000002700)=""/12}, 0x20) (async, rerun: 64) socketpair(0x18, 0x808, 0x3, &(0x7f0000002780)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000029c0)={0x6, 0x1e, &(0x7f00000027c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000028c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002900)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000002940)={0x4, 0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002980), 0x0, 0x10, 0x2f12}, 0x94) 3.214125016s ago: executing program 0 (id=4412): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x800}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000)=r0, 0x4) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000297a38483662eedde410cf6b4464a01d48f0df43b03ebad90675f821f76b0de7ad7fdabf381c4ba0b91b711fec5fb89dff7ddf4d30081091efb5f1d1e6bfdaae71e47493aa86eb9aca6cc2856f33e13bbbbd305c2663f22d8b4c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080003aab704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000000000000000000000000000000000000000000dbfe8c1b00000000ae263e97a2b5b85914b10652b2b9d73d329c6d4d0fe6978937369da1656d1397ee614c7728bf520d78dec7eddf3a85"]) r7 = openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b *', @ANYRESOCT=r7], 0x8) socket$kcm(0x10, 0x3, 0x10) 3.163218369s ago: executing program 2 (id=4413): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) 2.954582462s ago: executing program 0 (id=4414): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x1, 0x0, 0x0, 0x5, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x10, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000006000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x500}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x34, &(0x7f0000001440)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x80, 0x1000, &(0x7f0000002240)=""/4096, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x4, 0x4, 0xe, 0x2}], 0x10, 0x5}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11000000040000000400000001", @ANYRESHEX], 0x48) (async) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1a, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000c00020000000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x8001, 0x20, &(0x7f0000000440)=""/32, 0x41100, 0x1, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0x800, 0xcbec, 0x7ff}, 0x10, 0x0, r1, 0x1, &(0x7f0000000dc0)=[0xffffffffffffffff, r6, r4], &(0x7f0000000e00)=[{0x5, 0x1, 0x7, 0x5}]}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x3, 0x80, 0x8, 0x0, 0x0, 0x0, 0x7602, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x4, @perf_bp={&(0x7f0000000340), 0x6}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x18}, 0x18) (async) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x80, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r8 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x100}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)='n', 0x1}], 0x1}, 0x260008c5) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f000000", 0x28}, {0x0}, {&(0x7f00000001c0)="69fb12255ded2b9090888a7996c52e0ea21cedc19622fbcfc0dbae2388f6e3adcd040a10ca29ffb6cb219d208b53912750fa70deb80b2508c56b5ea8d8559e191000fad93ee0f3a7362f26495ab90c044eb26b9438bc897d8fac9767ea3140381a8608e1d2b2c52efd9acec0db1afefbca4c054600ee913d53356b7dfff4024a8784a4b6cea27c5ee7a4fa91f65b295482ece1c352509b9275fc8fc495674491a6cfd1f4577e55cfbf5f11ac078483b2453e7df59336998a046b50d1cd78facfc72cf42c90db1e92dd01c89ee98d7983e8547336425bfb9df653c84bd25114660fdd253c58bea84a9b0fc488ea0e", 0xee}, {&(0x7f0000000800)="6eaeadff7eea014f3a9f2cb2c9d33b97cf5e1653e466626255944afdaaa2e4c1e6640af950ff94a9602f2d7cf7abec1c81b8ed1e8b37683fea11834290051efd0413ceded4e401061dc2c620775cb7efb5a270ee8f25a4f937347881cd83e07c34445f87fbca0f8056d1d84463fcaa89437ca92b8f083ca41573850f0f2cd6fd0c2c4addb3d405285eb5c44bfd85a7e1cd19bc141485ca80fc1c49b72ea36e3b", 0xa0}, {0x0}], 0x5}, 0x0) 2.925799113s ago: executing program 2 (id=4415): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x2, 0x9, 0x4, 0x40000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x5}, 0x50) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pB \x00'}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x747, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x1, 0x3, 0x7, 0x2, 0xc, 0x10}, @call={0x85, 0x0, 0x0, 0x8a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x92, &(0x7f0000000180)=""/146, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r1, r2, 0xffffffffffffffff, r3, r4, r5], &(0x7f00000005c0)=[{0x4, 0x1, 0x10, 0x3}], 0x10, 0x80000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='memory.events.local\x00', 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000700)='cpuacct.usage_sys\x00', 0x0, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000740)='./file1\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@ifindex=0x0, 0x22, 0x1, 0x7fff, &(0x7f00000007c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0], 0x0}, 0x40) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000940), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@ifindex, r7, 0x1b, 0xe, r9, @void, @value=r12, @void, @void, r11}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0x2000, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f00000009c0)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r12, 0x2405, r13) ioctl$TUNGETVNETLE(r13, 0x800454dd, &(0x7f0000000a00)) sendmsg$inet(r13, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000a80)}, 0x0) socket$kcm(0x29, 0x7, 0x0) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x10, r1}, 0x18) write$cgroup_devices(r7, &(0x7f0000000b80)={'b', ' *:* ', 'm\x00'}, 0x8) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000c00)={0x2, &(0x7f0000000bc0)=[{0xc2ad, 0x9, 0x5e, 0x4}, {0x1, 0x0, 0x9, 0x3}]}) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x10000, 0x0) ioctl$TUNSETDEBUG(r15, 0x400454c9, &(0x7f0000000c80)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x320a5200, &(0x7f0000000d00)="f17a612d27bb8481eafffef9deb4b40a937a37e4815deadeb1eb6ba3e4008c50b5c458e7bf85772c538cd840bc0d0211244e382850105a25d4390a1e549c61a0701e6a2a716d24e077", 0x49, &(0x7f0000000d80), &(0x7f0000000dc0), &(0x7f0000000e00)="c2cd44e29b198ba8806bef9b6b34a70e693389ee") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfffffffe, '\x00', r10, r13, 0x1, 0x4, 0x3}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001280)={r7, 0x20, &(0x7f0000001240)={&(0x7f0000001140)=""/145, 0x91, 0x0, &(0x7f0000001200)=""/40, 0x28}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r0, 0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)=r6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@generic={0x5, 0x2, 0x0, 0xfe, 0x7fff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000f80)='syzkaller\x00', 0x81, 0xf0, &(0x7f0000000fc0)=""/240, 0x41000, 0x1, '\x00', 0x0, 0x1b, r13, 0x8, &(0x7f00000010c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0x0, 0x0, 0x8}, 0x10, r17, 0x0, 0x4, &(0x7f0000001400)=[r5, r2, r18, r16, r13, r8, r14, r13, 0xffffffffffffffff], &(0x7f0000001440)=[{0x4, 0x1, 0x6, 0x8}, {0x1, 0x3, 0xb, 0xa}, {0x1, 0x4, 0x0, 0x2}, {0x3, 0x1, 0xd}], 0x10, 0x2}, 0x94) 2.742942153s ago: executing program 2 (id=4416): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0xfe, 0x7, 0x8, 0xf, 0x0, 0x2, 0x400, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x80, 0x8, 0x6, 0x6, 0x3, 0x33a9, 0x1, 0x0, 0xfffffff8, 0x0, 0xfffffffffffffffb}, r0, 0xf, r2, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)={0x3, 0x0, [0x0, 0x0, 0x0]}) close(r1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) 2.62934174s ago: executing program 1 (id=4417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2c18e655fe70473f00"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, r3}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000740), 0xfffffc60, 0x10, &(0x7f0000000640), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x14, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xeb, 0xcd, &(0x7f0000000c00)=""/205, 0x41100, 0x8, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0xe, 0x8000, 0xd7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, r0, r0, r0, r6, r0, r0, r0, r0, r0], 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x5d31, 0x10000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x10062, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x9, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x800000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xec, 0x0, 0xff, 0x0, 0x0, 0x1, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x2, @perf_bp={&(0x7f0000000200), 0xb}, 0x828, 0x2007fffffc, 0x0, 0x1, 0x1, 0x1, 0x1ff, 0x0, 0x8, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x114, 0x8, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0xfffffffffffffce8, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10000000000000001201000000000100100000000000000010005e070000"], 0x20}, 0x40014) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r9, 0x110, 0x2, &(0x7f00000000c0), 0x4) 2.566916944s ago: executing program 0 (id=4418): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001940)={&(0x7f0000000480)=@abs={0x1, 0x0, 0x5c}, 0x6e, 0x0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x3, 0x1, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080c1) sendmsg$sock(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x40, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0xf28, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x45, 0x0, 0x1}, 0x28) sendmsg$inet(r6, 0x0, 0x0) gettid() 2.470921869s ago: executing program 3 (id=4419): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) 2.45903679s ago: executing program 2 (id=4420): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0e000091d028ef8020ab0700050005"], 0xfe33) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x21, 0x1, 0x6, &(0x7f0000000380)) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="adb0d16a051f71bc36139e6aed61eb887146379fc487b4", 0x17}, {&(0x7f0000000c40)="ce9c2f4cf7c8f9c2b3513cf6460e68aa4abd82f7c86879ab41be6d234dd3c01aaf407b4fed2bed13f18ce15f486a0cb2be0f1be92265eced16abe1790a63ec792761a593af5b6d6e9cad7a110d2b55655683dec6017e67d0147f15c2fa0ff70d4c5e0deed882e9c78e2de505ccdac2ba8e5e0a91b5aa8262db40c11389ba00cc7ed259a5a63897633ea7e5b48e688d4d7853922268f838e907b6a048df3e4f9612bca5d2efd91b7e8ea2f6680e45fbdbb7625143e34132304da98f9da2a67fb58225c54c9f693bd0c7469bd9437454248fe8b56af69f822219e28fdfbb3c65e828b3caf89a9dce758cb3eb7b808d3bd106819acf35a48a1e334fa2b8bd1da6b3588c4a92ece3b0d41f0b5c5e16c41433b027f5ab17b54652c6b81bacc7da9941df8e6f3c17231fc852ed2b0722726b350458f604ac6a4b1e64a5d7f1628a528d02c829a567a3d7d0af3033261da00b1c9e708dba1e96f43463ac295e51a42dce4b319b542f9bf26bb8d301f0b5157ee778ca1026cc43790ad800046e0e0271c46bf4437412071e4ab15e979e39a5706d26c3d604f698d564d0143643cbc6e78b0789e9f6996fb54596c0c72ece3fed109aec384a97459b2a3855859c29d3c7997b60fec96b45740a5eb4f2d2be0899e1319402584bd53106bbebe4ee6dc2ca6b3675550433f65cd6df90f1ed7ada4eb672c567c833b9bf8720109046d4940ec6f9df511f419dce95c0bc34fd1b1dd07d5dc390a4eb7aeb9b21eb37730a6f5569b8669d080ebacda2d2054f99c8fd22d2172f036f22b28b96dc34438a7c112a261bfbd7fd1b591b1d896ac549ae999ef1f8f02a152dd8e90f7073b8e8d37027dab9cebd85831859a7859fa26f6cba4e788cce2964bca846332926f64fc475302d28f319fe51ba576b97ba5f4cd81ab430d386de66d9fff535f593d7a201251e97cfcc578560640672124b25446f202b3d0ee550eb750140c9c4ab82c23ec54c396ea7db11cd800d2a581e5b5177eb8e55f785f2b373eea84f4b1fc87c8dbed517b48a39a890e3386faea1a07357fa1043bfc997befd6bdf648d80d9d02cca716173179856a14f384d2a17789f8cd070c5284b22356073ce1b3f4f5ad6a39ad353a322102f0d274bb3e1bdc57ae75f93e4526dd193a791dde78462e50ad52de64b86e1289d0df127184ac7afc418b7e230a7b5cb0ca1a5784e6d2b228367544cf67d438216f8dead081acdd1ceade7a4d701ae79d43ac96b205fa14b6a4906fc2d06fb0b4088dc719920552d19c22fab35861ef8c6699dd8bc116eabc2d72ba8b6f9fd2c4609b1cfa46529b9f5420c42bd085c87761c54996a1e3caa77e99def776faa3a7f86686cf99dc69b38d7bcacc5037fcea754468be52a5c8c6954e9aff94a3af905bb913959aee2bd0121fd2cfcdb8a8f304166480984e4e46b393e8618cda8c0312db3b0752454afa70f19da0b4dab622f9c3d7a71a2b0b4a1725369eb2527148e7bd57e2ccf312218df3c7b04e7a67b5b043f2d079ec6ac323db2cbca5aa771048a0467bd77754f5fe524e35811edaa5c57cc794828da0e8459267ddb0ff9d40caa703b380ba1283da038d2aab90de76d91e47acff35140dc3d02515c3e9eb7878f086c3d25af3b13686cd8135d0a6b2ef213734dcd64e0aa2aec55c7315d1b132084ba6226d6b8595b751ca1a62313591ef2c040171d128d666ae6fb8bc5e20a8e75fb1e0ac1ab163237157b46980ef728cc9b951f93155fad08ead5b91d7e2061acb2229f8aa964830919838029a0d304b1c62fec8685be274095fbc83210ef9548d85b54a929548b657c95fe1d9335336d7d7520a717ee6c5c5249b328bc2fb0a968d28ffd022c8d00a9607017db877c2325c94b97adafd7b454308f214f0c3f3daedba83e39032d4df58a93f2666f6f6968f53d50467c2956855670a9444bab8f19a45fa1799a54c9eba626322e357f788b7a886678ccd8748b75cdca3df594dc975c8cb9cc283bd1e7a4c90f325f186ceff0a00ab910414eb75ff585a7781f192cbd147d29f8610c1cfc7cfc69bdb998d3278d495a1fada86b9ae429390c38ccfbdb0de9ecbf750a41e8aa059a1cd4f9955bc0562bf51c2e651b7752d897d49965bceb4dacd78f593e70f3b1e3e7bd3a68c3914b4d80902cc01380ac70aa84d4552c58a67cc7cb69fd9d584fa82c432eb2f797fe2112f17bddeb3f389d1a9d9f661a3bbcdfefab192156c981d011763c8f932f1b6656153cfaf49b6a1c9719b57cd3ac0999cfad03b02fba1f529072874633c08da97342b366c3335324932220de8d4aedf856950462d202d2d9e0892600bc541442ecedbeb511ce3ac0a90afda55bacaa7f57095479731c48254234c2e3362239eb09da069c424c3a13bc6380296766f06a9f3525a6c84c9fe2ff44986254982201831fdfe72cf55108142df4d0dfc9b687fa577f5225a7cc96caf0b29bef2c4dc529c2c6668086618d29244037ba0afb699361f542c326e280caaa47e63221cbf7d6c3e4206fce0ec4036c789c8f9a49a5a8f6acce673694068e9d45146d4a6b33e231b26589623a5a37a13f4dbcb84315534a06f623834e30c5e6393586ad511b8df795eeda7347a132bd285e2e1dd97fea602fc07a1e3c3e2048e0e4695a31c8c10f42fe7961cb0ee7d84be39bdce9e135d8be4964e0c78957019f95ff3461db64b2e74d16fbbf028a8af1f88fb95640d0ed971e2529a9c23dcc2fc6f1f35a5a560c5d8408956b54657fe39d8b755b3d1857d0913035b2aa8226cc7567b8ad6c94f5ba7c177291eb8d8f5e3cc2f512bc564c0b850e5e2487878cb96f584641825f6fe3f51fefe5c22ba7880f28a8f87601fbaa6b308fb9c1a5961431d8c5c40cabe219543749ce5b9fe4d605fbb04bc459e2e0e19d6b37cb7e9c40a02ad8f46953516146b29070a03f5b98202256362ba8ed739a0f8ffc562e31379a0d12e4383281b0226e755be5045f4bf620d35928abe63506e28b572f5f6c26ecf07a6a591017204240278ee6c2f49d0d3d0fd6f9942a0ddf57c80af752168b427a9afefcd3b1b5aa889d7de127f668b9d1bb1450867ed33e1698cbd078c6198427aa20ad550ce78bba904541dbf3490373fa8d290759bd8d3f28e7fcc6edc6165e181fce7fccbd93c4835945cca30559c055b0030198588d7fe94c7275b48f1a91d638feaa14011c53491fcd928531151b03c5998bb4e85712681527f6ee8abf31619402500797edb76ba3762526c07b97c82f6341d088e2a1d72bcd9f38472b9e1db1cee338ca0dd7ee744cf9726c1f69e060efc0d3a387ee7f273b91f2f6884d701c60ed6f54f321711c267b6f68f1a5097c789a27c4734951f626904b457e17ecca30ec8f07a5d4f1505b9bd809b5863a20134fbce58879d42d1d8308090b57a943b92a4690974291224199916347fabdaf5146daa7d92dd7cd43c7602cee6622d7a1481c6dadb15e39fe8ea12548a2012a0a0d84cd62aaf6ce6689bcd8b25da4c24e39495836ef0a36cfd411d062f347fa54a73e1522748b0db1476b39048e213114b5e9e66e883eecd6fc66ac1fd3e81608eb41332745fd0b5c9ac24c2208755d1ba5e938f1ec7dbc7ba6da8c16348d9ead592198c8226915269cf19c28334435c359fb4da05432c2b95cfe750920b0da081aefbed96cfb76fcd8b2e2c565ab63c05ea4c9c377d34153e219011e3146e61d5c98da8483da33c2bd90a041b76a15285ab47cfbbd17ac950b6751412e63b02413cd71a4100cbdcef7db78348d7aa37364b1039818e9756c781c282c618ed4eba69ee1a0263fe85172d02c715adff6e2d3f6fd154f89bcd1a313574dc1c04b82887d235038098d996bb48d15c30d5a3a212ec60d8938dd915b27c915c2349d57794729affff90288e55f544afcf143ce065de89ec0f26c34a8af240ac0a272b8938927fd06540f649c16ebd4caf3956c15d3cdeeb88b3ee74fe3c5bf1d969f647562767719d47983686df1ea2f535c1e7917b45d4c7cafe1c9a14b5c7de347365bb288cc8aa1a5376dec1806df59af851c1c0b12228bc908810ac7fdc82b44ee7446fbdb2b8dfb38416dd9327fc5483725f48591ef265158e87d0c3709e6cd57f9e3961dd2e8e54cce5292ef5ee031945cdeda48938558b64164fbe215ee6964460839f1174025065f6fa5759c7eeec25bfa920211426564c0dbc2d27ad7579009976a466745b04d1de9926f398cf138129022f741896528717469134fe320aaf706b63fe2b7566199653220be05edc89d09de6b41213b9b1a48a74f08ac428aa9ad3716758d363495d49d8b2d9744bad40136d95b40539d05c25e8dd5f5fea3f0e23577e486f2c8a328962363e0e4d8aece9965824fa34e9538cfe4322aa8035c8f3929e8592df64c02a6d97eaff8fd204221110a7677a19e1a0ceceff6619ac6504451102de864cacd2dd0732547e9d7ac38e858e708a112cd840dbf1e72a158bebca8fb044ded4a85a53f7c3eaa27524683ea5095a2414a445bb39f39e94c831ab7464409813169232a618d78aec70810cbb0c55994081f608dd6bb839b4a5a357e16dd450523f4601d793c90ffb1458693285e13dbbbb46e2ac1d2eab0040583343304fe575c04e9a9f78df256855cfb9fcf295724ce7dc19194af93f093677fa904aa2972ae6b46b9022efe8e1681a6c3869f325fd948ec215e4c7919cd37f7516fe3e8dabe5192d7219a303020d2b7f0bfb0c2184def6c3d585701375d1fd77e985e84d888aee983cbd676f9ae61452ef91b558ed5a5710d667bf0678c86483f286619da14b889efd6e08462776e943efcdd4e1438488f8d4a67128abd4c4d2451bdd26b700f04b7b4611b3cecb90d1b0824abe5168f95e12323c47506d9db120d8bf5cd102e624b3b0c4fbe05698f2dd9d20d11033b3121f28cd166220e04ebf73dc091d575f9920d9b03bac13fe0c76d3d2e9deda00098266009e7f894dba36610435faa0e465d88a2037f0de2dfcbc8b85db498c1ffccbee5f7569d8d96ecb6104f5e833d22372e129d554b8ef982bb470f8e328a2d1834d9858f98adeced2acc4f807cc2da5c5beb3db12c5d5aef92f848114b32bba62605bbdb272788f7d3760623b2b2218dfc5d45cad567fe42bfb99a1ff2d155388b781900a25c985ca487518a23aa42fd3afec0aa3b8ebd229a69b9b7e0d61617c4ccde285259a30c2383cf16b760deb3f12a4beb388be5b3a6a1612100a9dee8eadf0a1f997cf236046151a13219356e60d21cc19648faed1d8303966b2a3a4f3a316eea8556ade13d07ba71dbd168029418d4bb3ecf46ed44df4662a4a3fa07522b0da5127ffb88c2718a1ce873464014650a313a3f17c6f3fbb385aaee6afafdc18b5003279a260fd13a8e1ebbeb61593694bf5fad5846b210a4577ee3cbf9f2b1aee8b0810c105f004c328293a7a755c4d837d41e40144b3ea70b34ebec9c2e459b42b6af928ef49150a51535dbb333195b403822c658212b9bd5a17444b63c904ed931541103ece92c488b398b576789062f8248201ffcd7e72ad210cba149b4178de233df2c058343770973ae38b2f5fcfffa0a4963bce59b1d06249e360bf262a90b0f097d112b79eacfe92caabf60d8b880dfaaec5259ef2747a4269cea5039a948de872254375d184ff519112fbf93e5581994a9bf8c1cf3b96b5eb269a7a291088cf398ab174ab671a85baf686e67fa5e1f9a03ac6e57a0ac7d556a64d8db100a16522452e8c9c3b30c39a5064c7f91b9935574f81d", 0x1000}, {&(0x7f0000001c40)="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", 0x1000}], 0x3, &(0x7f00000002c0)=[{0x68, 0x112, 0x9, "c3627cdb40a8111c7da0068f21610fcf1ef4412a1bff0523c53faf0d0a3c45ff2132fc4b5a5b9ef17ccf91784c98cb20afad0b26f9873b22037fddf6196a397f44d88fdb760d5c245278b2a12b14c424808ad71a3ca8"}], 0x68}, 0x4004000) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 2.383539164s ago: executing program 3 (id=4421): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d0000002e000000", @ANYRES32, @ANYBLOB="42b5fa9cf83cfe24b062f406d9c264f013e8dc4bffb4d1cfb0a3c6e0829800126cadc90a8f0c35209754b7405c1677e4bb81207d9f0695552845c6b15ab62bd02c6e5f5a290bfe1d13db56bac3a397a0fc52d03d3f0c4906dd2f9c50be825c65626bd4bff06f5c407b7612f4cf589fc67a1dc5a6c5eb10a4", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000001300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800010000000000240000002400000002000000000000000000000400000003000000000000000200000000000000000000000d0200000000000000240000000000000000000000000000000000000000000020000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1b) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x8, &(0x7f0000001540)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001200)={&(0x7f0000000080)="fe354ff998b9137d93529c64e02bfa4c224d35b20bc6911aed2987ae0d210cc658d93a567a3e24ca41e14599e2d6547e33f45867", &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)="cd92bc7a8d866170f93938d59320c681a59db9dd3490e485ee1b3b19dec08dcbe0f9a9d6fbb738c8ae738bd20754e738b48fa815dcf8e2368f0d3a71b87c0b5ff8dc9c9c6e7cf6342879eab1d43af2dfa06d1ed1f104019b139980a699e15c4dcaa851a0c31c81895ce181760c", &(0x7f0000001140)="95b93cf6ac094b06f3dae072077e7c6895989a2b83164ffc8f3b7a0e5ee472f382c50835aac7366a0c1683fea769f5980f11dd2ec4b152fc19eab28d97b14edac59ca257a8e41c1e185c3be897b7e6c43ccf2878c6a4adfbd7437de559a0009a6843b87c38ff3557adcc896d3dfb523895d885dcd151a57fcac27ce5026887e1b31c0a8dabf168f913a805f6ccf684ff8690083157249763bdf13629ebe2a3563e34b7c4af", 0xb}, 0x38) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d0000002e000000", @ANYRES32, @ANYBLOB="42b5fa9cf83cfe24b062f406d9c264f013e8dc4bffb4d1cfb0a3c6e0829800126cadc90a8f0c35209754b7405c1677e4bb81207d9f0695552845c6b15ab62bd02c6e5f5a290bfe1d13db56bac3a397a0fc52d03d3f0c4906dd2f9c50be825c65626bd4bff06f5c407b7612f4cf589fc67a1dc5a6c5eb10a4", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={0xffffffffffffffff, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000001280)=[0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x35, &(0x7f0000001300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0xf3, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800010000000000240000002400000002000000000000000000000400000003000000000000000200000000000000000000000d0200000000000000240000000000000000000000000000000000000000000020000000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x1b) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x8, &(0x7f0000001540)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x7b}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001200)={&(0x7f0000000080)="fe354ff998b9137d93529c64e02bfa4c224d35b20bc6911aed2987ae0d210cc658d93a567a3e24ca41e14599e2d6547e33f45867", &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)="cd92bc7a8d866170f93938d59320c681a59db9dd3490e485ee1b3b19dec08dcbe0f9a9d6fbb738c8ae738bd20754e738b48fa815dcf8e2368f0d3a71b87c0b5ff8dc9c9c6e7cf6342879eab1d43af2dfa06d1ed1f104019b139980a699e15c4dcaa851a0c31c81895ce181760c", &(0x7f0000001140)="95b93cf6ac094b06f3dae072077e7c6895989a2b83164ffc8f3b7a0e5ee472f382c50835aac7366a0c1683fea769f5980f11dd2ec4b152fc19eab28d97b14edac59ca257a8e41c1e185c3be897b7e6c43ccf2878c6a4adfbd7437de559a0009a6843b87c38ff3557adcc896d3dfb523895d885dcd151a57fcac27ce5026887e1b31c0a8dabf168f913a805f6ccf684ff8690083157249763bdf13629ebe2a3563e34b7c4af", 0xb}, 0x38) (async) 2.323002737s ago: executing program 1 (id=4422): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x800}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000000)=r0, 0x4) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000297a38483662eedde410cf6b4464a01d48f0df43b03ebad90675f821f76b0de7ad7fdabf381c4ba0b91b711fec5fb89dff7ddf4d30081091efb5f1d1e6bfdaae71e47493aa86eb9aca6cc2856f33e13bbbbd305c2663f22d8b4c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000080003aab704000000000000850000003300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000046cb95a850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000000000000000000000000000000000000000000dbfe8c1b00000000ae263e97a2b5b85914b10652b2b9d73d329c6d4d0fe6978937369da1656d1397ee614c7728bf520d78dec7eddf3a85"]) r7 = openat$cgroup_devices(r6, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='b *', @ANYRESOCT=r7], 0x8) socket$kcm(0x10, 0x3, 0x10) 2.180430946s ago: executing program 3 (id=4423): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x3a00, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.055654983s ago: executing program 1 (id=4424): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6065e220003000000002500020f0f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0200, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x320) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000f80000950000000000000075090200020000007b9a00fe00000000b509000002000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000f4b2562777c7147f397956fcfc1ccab1d96df699cd", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 1.782787708s ago: executing program 3 (id=4425): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x485, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x404c8d0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a425, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x6e70, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@ethernet={0x6, @local}, 0x80, 0x0}, 0x4000000) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) 304.965093ms ago: executing program 2 (id=4426): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c1c800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdde6, r2, 0xfe}, 0x38) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0x19, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000400000000000000feffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000d602000014000000b7030600000000008500000083000000bf09000000000000550901000000000095000000000000001833000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185500000f000000000000000000000018410000060000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0x4, 0x29, &(0x7f0000000b00)=""/41, 0x41100, 0x7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x7, 0x7fffffff, 0x22b}, 0x10, 0x2fcc6, 0xffffffffffffffff, 0x1, &(0x7f0000000bc0)=[r2, r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000c00)=[{0x4, 0x2, 0xa, 0x8}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001000)) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000004c0)={0x0, 0x6, [@multicast, @link_local, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @random="7f5aca88df86", @random="1b283a1e7269"]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400000000000000000000008500000050000000850000000700000095"], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r6}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)="573e00faa2f18d0bbb18299a09ff6ff4c3f606e97d3f6e2c00c132faa5e91e8e6d61e607492a5871c15459f505a191c618b26d8bf25bdbf0b15009a930891f1bbb36eee5d887e36b01344629c36318077fc577e3d151a6536d6b998210f599f9438065ee13c4bf01050a8477352590c678f283bb91b94766ea2689b63820496ff98d38df6da02430d2d72dfbc646", 0x8e}, {&(0x7f0000000280)="3acb92aaee9d80a9387c78372a83bed068c517ac67a77626300467a5baec012a6fbed43a47ad0af9562c05793c80895e3f6cff5b45c985831a3c50b8535336d69aa5ccfba3ad9481925fa766b085786287d88bf4e1c0feaf039be237cf25b3e3bd9aa2b10438f5adafa8ffc1ec4c9ab7c0facc876a7b14f3b0246711", 0x7c}, {&(0x7f00000001c0)="1d26c92b72154b573fc6d93683ee48a433f3224421e3b989a31291", 0x1b}, {&(0x7f0000000300)="d82356a2c18059c3b9348795d083c0c623061f11180784597d73fa0cb1fb636f3ac9ff08bc17716c6510eff626f6ffa85d42f010a5a293b3b8badf238101dc4f", 0x40}, {&(0x7f0000000340)="ce13ef87bd4e72a78a61273a37fc45954dda00f70bea9f9dba75931973969a23b62db16e6d7c8c1a31a6c8ebe3df71b02b1a092f067955b99a47baec179f923cf85ed133b991141b8fd23dcb442541debe8dff1e288d41ea08c56cdc00a2d8bf6333357df47cf3d7f000a0eb24f26f128e3b9c0723dbb9eef85674a991680747161c", 0x82}, {&(0x7f0000000400)="d6ee3c6902b3105666b5876e6370dc6e05e4a8f3f5f99e16451077b67c6a40d55eb8583929f3c012b18f0899d63802fcd570c83c9e51dc4e01359db1093d20d060b383c288be1fc72709512c02dc626ffa5dd091107dfbc403ef2c07fa686164651619838b33feaafe9108ff025e08fe77212919902ff66e9d2039f7fa23e101dfb87b121e26ebfade282769d55d1adf2e", 0x91}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="cbfe15f703d9cd5bd2fb9bf0a764a51d398f51d1119c053851d87dc0615a6a2c04ea5f37270eeb5bd65ae6c1521c58b08611e313a2e77196f2bb961e9f0608635b0a9e33627a1fb9658e776773bffd8d26709b66f843a0d6a2244eca04ecc6e757496ea9de20e58aa4a484f16a718e9e2d5039700d2dc9698d08fd1e41d0a76efd57912445429db88a79fe3ad5f86f361ea0a350e3b6d8af0a5ae1d3958ae2471449882aad65d2dcb091570227e3040262c764bd763cfd1fe0cf10b61fa4bf8e447b0bc6eccfb3e1", 0xc8}], 0x8, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1}}}, @ip_retopts={{0xc4, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x2c, 0xdb, 0x1, 0x1, [{@multicast1, 0x9}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x8e}, {@multicast1, 0xb6d4}, {@broadcast, 0xffffffff}]}, @ssrr={0x89, 0x27, 0x6f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @loopback, @broadcast, @broadcast, @local, @remote, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0xc8, [@multicast1, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0x24, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast1, 0x6}, {@local, 0x10}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x1, [{@private=0xa010101, 0x8}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x6}, {@remote, 0xe32}, {@loopback, 0x80000001}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @dev={0xac, 0x14, 0x14, 0x30}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x158}, 0x40005) 282.612494ms ago: executing program 3 (id=4427): r0 = socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2422, 0x32, 0x43a1bd76, 0x8, 0x9, 0xffff2249, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2422, 0x32, 0x43a1bd76, 0x8, 0x9, 0xffff2249, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000) (async) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000009c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffffffffdc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000002894c6ab1d48be0b000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000002300), 0x8001, r1}, 0x38) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}], 0x1}, 0x0) 170.59426ms ago: executing program 0 (id=4428): openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) close(0x3) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x0, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x840) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x55, 0x1, 0x2, 0x0, 0x0, 0x3ff2, 0xa892, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x1, 0x4}, 0x14105, 0x32, 0x6, 0x8, 0x2, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0x3}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in={0x2, 0x4e22, @local}, 0x80, 0x0}, 0xc0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/68, 0x44}, {&(0x7f0000000840)=""/248, 0xf8}, {&(0x7f0000000a80)=""/213, 0xd5}, {&(0x7f0000000fc0)=""/86, 0x56}, {&(0x7f0000000b80)=""/104, 0x68}], 0x8}, 0x2001) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000940)={r9}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x3, 0x80, 0x7, 0x3, 0x2, 0x7, 0x0, 0x100000000, 0x40, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xad2e, 0x4, @perf_bp={&(0x7f0000000040), 0xa}, 0xc40, 0xfffffffffffffffd, 0x7, 0x3, 0xd, 0x0, 0x55d, 0x0, 0x5, 0x0, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000500)="f70de4fd20d5af3d5439d3abc00dd63d5355d4258e1e052549eb828a8b26a8caaa7dbe29e7e948c24357e7d1ea5dee2fd2f95490f8e0f4ce8870fdd7aac0db908435e861f854bcb40d273890c55b632996489364f9a9c5b35fa13ecadb4b140973fe61f4474c4150a895cf180843109cc9911abe3245d67592876db3ec0221b4e3c69011f87f7f8e19d36931f01f56da8d7b9da8338d3be4e46a76f1adc5ee0d9bafb03273b49be1f2d1d1120d", 0xad}, {&(0x7f00000002c0)="c25bc35fa60fd5330aeb20a61c12c2b1544727cf2d1faa08943a5040a51eda7b29069c644321327477d4d74b780cd385a9cec5f9b239532115be8d74908f0f3c7b78605e2c833114fe4717870ae777550ffaf5df5790e2ec071c", 0x5a}, {&(0x7f0000000140)}, {&(0x7f00000009c0)="27a8fcd1acf570da7dd80804878612aaacfad9ac7d645c1daa1bf9b5e34dcc552255b5a294f9989971b803f4cc138f6ab7d4fe6d4d7d1f97129f8044f1fcd30d1f6002bc2262fe7285f3cb1a1dcab2cc76", 0x51}, {&(0x7f0000000d00)="d169daeb6f5c3b2b6553fe6cdbc842de0797fc8e2b01cec21937a204919cea0f25b233791fc0446d5baf15142f17545799811b65186fdb6d94338ecdb376773357d85595de5bb9cef83f4f16bd42ea501c5f636e65686eab606e08042991e1302b6d620b8ff2255a60956bce6ca9fb8d81d1c1ad1f505e31550865a42b7ece817264a8e80a6142f6862c96029eca20608160049ccc60b90081a47264ebe1af64588bbbf0cfe41217314f8811c655ba55cab358228b5653042246a924d9bf82def582ee16219c5d", 0xc7}, {&(0x7f0000000e00)="80a235ec55a6063569a44acaf13e211e0e6b3b0fd50123844b983b109b14d9a5086400398c01310940335f8fe03a517fa9cb1b035e2391d1a053ab589e8b28f40705224be33ce5d68f24d7f1e6c6520e1ea8ea99f129c84f5a40e513d3b81f076774fee52de3f01a81bce91c97ef2e373f9a4918784cab5636288d5000a1c9f85c241546da70dd1d8bb5371c25941a0c48c2141e37329d5eaf0c03348176ee710bd195434f147602e2f592fca6115c824a4f94fdbbf30c015fda8089814e51ace2f320c927010eae488c528152f0bb753931b24efd93141d41f66e9d73c7e32aff35c0af4155742ebfc6dcf08a2e", 0xee}, {&(0x7f0000000440)="dc", 0x1}, {&(0x7f00000005c0)="e77575bbec5ddb97f923fdc2d32b7523c50027f665eaf9e8d5d595732a70fae508e059577e", 0x25}, {&(0x7f0000000a40)="81ce305b89e39b6d0185559949df5397a5fc51fa185ff619e39113f5475013816fd33dd1d17418d50b1902ac1d2bb35d26123a9eb400fbf761a042f3393fd0", 0x3f}], 0x9, &(0x7f0000003b80)=ANY=[@ANYBLOB="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"], 0x11f8}, 0x40) 167.355171ms ago: executing program 1 (id=4429): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) 50.969177ms ago: executing program 3 (id=4430): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b0"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x2e, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x21, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x3000000, 0x4539}]}]}, {0x0, [0x30, 0x5f, 0x61]}}, &(0x7f0000000080)=""/70, 0x31, 0x46, 0x1, 0x42d0afbf}, 0x28) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) sendmsg(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) 0s ago: executing program 1 (id=4431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000001000aac14140ce060000d49e832f0", 0x0, 0x10004, 0x60000000, 0x0, 0xfffffffffffffdf1, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r1}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x1, 0xb1, 0x4, 0x0, r3, 0xa00000, '\x00', 0x0, r4, 0x4, 0x0, 0x1}, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000040), 0x3}, 0x11efa, 0x4, 0x98, 0x2, 0x40002, 0xfffffffa, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(r5, &(0x7f0000000000)) write$cgroup_pid(r4, &(0x7f0000000080)=r5, 0x12) kernel console output (not intermixed with test programs): ][T13651] ? __sys_sendmsg+0x2a0/0x2a0 [ 460.014614][T13651] ? trace_call_bpf+0xc3/0x6c0 [ 460.019507][T13651] ? debug_mutex_init+0x38/0x70 [ 460.024416][T13651] __se_sys_sendmsg+0x1c2/0x2b0 [ 460.029305][T13651] ? __x64_sys_sendmsg+0x80/0x80 [ 460.034285][T13651] ? lockdep_hardirqs_on+0x98/0x150 [ 460.039521][T13651] do_syscall_64+0x55/0xa0 [ 460.043979][T13651] ? clear_bhb_loop+0x40/0x90 [ 460.048686][T13651] ? clear_bhb_loop+0x40/0x90 [ 460.053395][T13651] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.059320][T13651] RIP: 0033:0x7f384cf9aeb9 [ 460.063808][T13651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.083460][T13651] RSP: 002b:00007f384de49028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.091954][T13651] RAX: ffffffffffffffda RBX: 00007f384d216090 RCX: 00007f384cf9aeb9 [ 460.099985][T13651] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 460.107989][T13651] RBP: 00007f384d008c1f R08: 0000000000000000 R09: 0000000000000000 [ 460.115990][T13651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.123992][T13651] R13: 00007f384d216128 R14: 00007f384d216090 R15: 00007ffcf5c92b78 [ 460.132018][T13651] [ 460.985245][T13429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.175103][T13429] veth0_vlan: entered promiscuous mode [ 461.272773][T13429] veth1_vlan: entered promiscuous mode [ 461.453705][T13685] netlink: 'syz.0.2519': attribute type 4 has an invalid length. [ 461.523030][T13685] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2519'. [ 461.596792][T13685] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 461.660113][T13429] veth0_macvtap: entered promiscuous mode [ 461.691080][T13429] veth1_macvtap: entered promiscuous mode [ 461.715786][T13694] netlink: 'syz.3.2522': attribute type 4 has an invalid length. [ 461.777791][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.791840][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.804913][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.816306][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.835675][T13429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.877392][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.894437][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.912499][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 461.931370][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.943568][T13429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.960663][T13429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.975746][T13429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.990885][T13696] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2523'. [ 462.026646][T13429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.055234][T13696] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2523'. [ 462.060039][T13429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.087520][T13429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.096346][T13429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.317355][T13700] netlink: 'syz.0.2524': attribute type 4 has an invalid length. [ 462.346704][T13700] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2524'. [ 462.575269][T13700] .`: renamed from bond0 (while UP) [ 462.719274][T10187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.746943][T10187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.852594][T10193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.880242][T10193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.907344][T13712] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2529'. [ 463.342826][T13731] netlink: 'syz.2.2533': attribute type 4 has an invalid length. [ 463.475912][T13738] netlink: 'syz.0.2535': attribute type 3 has an invalid length. [ 463.564117][T13738] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2535'. [ 463.638598][T13737] netlink: 'syz.0.2535': attribute type 3 has an invalid length. [ 463.674948][T13737] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2535'. [ 463.776745][T13742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2537'. [ 463.830875][T13743] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2537'. [ 464.166104][T13752] netlink: 'syz.1.2540': attribute type 21 has an invalid length. [ 464.226805][T13752] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2540'. [ 464.308274][T13752] netlink: 'syz.1.2540': attribute type 4 has an invalid length. [ 464.408973][T13761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2541'. [ 464.419281][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.429594][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.440029][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.450002][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.462806][T13761] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2541'. [ 464.473638][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.481282][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.634324][T10201] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.751462][T13765] netlink: 'syz.0.2542': attribute type 39 has an invalid length. [ 465.065114][T10201] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.098221][T13767] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.111245][T13767] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.144775][T13767] bridge0: entered allmulticast mode [ 465.329006][T10201] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.375087][T13770] netlink: 'syz.1.2544': attribute type 4 has an invalid length. [ 465.387085][T13770] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2544'. [ 465.976523][T13770] .`: renamed from bond0 (while UP) [ 466.096489][T13784] C: renamed from team_slave_0 (while UP) [ 466.105669][T13784] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 466.113726][T13784] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 466.179504][T10201] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.202357][T13773] netlink: 'syz.0.2545': attribute type 4 has an invalid length. [ 466.238602][T13786] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 466.284766][T13787] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 466.308973][T13786] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 466.542395][ T5773] Bluetooth: hci0: command tx timeout [ 466.614366][T13759] chnl_net:caif_netlink_parms(): no params data found [ 467.816490][T13759] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.825333][T13759] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.847159][T13759] bridge_slave_0: entered allmulticast mode [ 467.860640][T13759] bridge_slave_0: entered promiscuous mode [ 467.933972][T13850] netlink: 'syz.2.2561': attribute type 25 has an invalid length. [ 467.952557][T13850] __nla_validate_parse: 2 callbacks suppressed [ 467.952575][T13850] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2561'. [ 468.006897][T13759] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.014139][T13759] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.057443][T13759] bridge_slave_1: entered allmulticast mode [ 468.065011][T13759] bridge_slave_1: entered promiscuous mode [ 468.303475][T13759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.339418][T13759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.594227][T13759] team0: Port device team_slave_0 added [ 468.618915][ T5773] Bluetooth: hci0: command tx timeout [ 468.656142][T13759] team0: Port device team_slave_1 added [ 468.835548][T13759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.847806][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.906657][T13759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.004662][T13759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.012355][T13759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.039622][T13759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.316437][T13878] netlink: 'syz.1.2570': attribute type 27 has an invalid length. [ 469.346956][T13878] netlink: 'syz.1.2570': attribute type 4 has an invalid length. [ 469.356087][T13878] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2570'. [ 469.745644][T13759] hsr_slave_0: entered promiscuous mode [ 469.850615][T13759] hsr_slave_1: entered promiscuous mode [ 469.996442][T10201] veth1_macvtap: left promiscuous mode [ 470.016779][T10201] veth0_macvtap: left promiscuous mode [ 470.384830][T10201] team0 (unregistering): Port device geneve1 removed [ 470.696757][ T5773] Bluetooth: hci0: command tx timeout [ 470.872790][T10201] team0 (unregistering): Port device team_slave_1 removed [ 471.480275][T13908] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2574'. [ 472.565468][T13943] netlink: 'syz.1.2581': attribute type 10 has an invalid length. [ 472.597251][T13943] syz_tun: entered promiscuous mode [ 472.654931][T13943] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 472.664120][T13941] netlink: 'syz.2.2580': attribute type 39 has an invalid length. [ 472.777106][ T5773] Bluetooth: hci0: command tx timeout [ 473.439770][T13759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 473.491678][T13759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 473.525518][T13969] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 473.535587][T13759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 473.566032][T13759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 473.799160][T13759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.842581][T13983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2589'. [ 473.879777][T13759] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.943199][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.950516][T10195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.990400][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.997695][T10195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.563691][T13995] netlink: 'syz.1.2593': attribute type 39 has an invalid length. [ 475.091372][T13759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.307884][T13759] veth0_vlan: entered promiscuous mode [ 475.360369][T13759] veth1_vlan: entered promiscuous mode [ 475.521655][T13759] veth0_macvtap: entered promiscuous mode [ 475.573152][T13759] veth1_macvtap: entered promiscuous mode [ 475.661510][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.713977][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.762693][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.795005][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.829306][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.871145][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.893971][T13759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.926971][T14014] netlink: 'syz.1.2596': attribute type 10 has an invalid length. [ 476.240147][T14014] wlan1: mtu less than device minimum [ 476.256238][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.298388][T14013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.313181][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.331469][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 476.362227][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.387755][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.407242][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.418897][T13759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.429617][T13759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.453810][T13759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.493958][T13759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.510453][T13759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.521339][T13759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.530451][T13759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.584516][T14030] tap0: tun_chr_ioctl cmd 1074025675 [ 476.613235][T14030] tap0: persist enabled [ 476.673017][T14024] tap1: tun_chr_ioctl cmd 1074025677 [ 476.679158][T14024] tap1: linktype set to 778 [ 476.719091][T14024] tap0: tun_chr_ioctl cmd 1074025675 [ 476.735419][T14024] tap0: persist enabled [ 476.883718][T10195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.902643][T10195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.975874][T10195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.987296][T10195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.227445][T14053] netlink: 'syz.3.2536': attribute type 7 has an invalid length. [ 478.489144][T14089] netlink: 142528 bytes leftover after parsing attributes in process `syz.2.2611'. [ 478.828012][T14089] netlink: 'syz.2.2611': attribute type 1 has an invalid length. [ 479.132325][T14101] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2613'. [ 483.357178][T14156] delete_channel: no stack [ 483.644724][T14178] 2žß2Gðx—: renamed from bond0 (while UP) [ 484.378077][T14191] netlink: 'syz.1.2631': attribute type 12 has an invalid length. [ 484.442100][T14188] delete_channel: no stack [ 484.608191][T14193] tap1: tun_chr_ioctl cmd 1074025677 [ 484.646233][T14193] tap1: linktype set to 24 [ 484.717440][T14200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2632'. [ 484.722576][T14205] netlink: 'syz.3.2636': attribute type 16 has an invalid length. [ 484.735550][T14205] netlink: 'syz.3.2636': attribute type 3 has an invalid length. [ 484.743953][T14199] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2635'. [ 484.770228][T14205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2636'. [ 484.796708][T14204] netlink: 'syz.3.2636': attribute type 10 has an invalid length. [ 485.013819][T14201] syzkaller0: entered promiscuous mode [ 485.020456][T14201] syzkaller0: entered allmulticast mode [ 485.145617][T14217] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2639'. [ 490.521689][T14232] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 490.535450][T14232] netlink: 'syz.2.2643': attribute type 2 has an invalid length. [ 490.578512][T14232] netlink: 'syz.2.2643': attribute type 2 has an invalid length. [ 490.586383][T14232] netlink: 'syz.2.2643': attribute type 3 has an invalid length. [ 490.698441][T14232] netlink: 'syz.2.2643': attribute type 4 has an invalid length. [ 490.730410][T14232] netlink: 'syz.2.2643': attribute type 5 has an invalid length. [ 490.753458][T14232] netlink: 'syz.2.2643': attribute type 6 has an invalid length. [ 490.787731][T14232] netlink: 'syz.2.2643': attribute type 7 has an invalid length. [ 490.826048][T14232] netlink: 'syz.2.2643': attribute type 9 has an invalid length. [ 490.849416][T14232] netlink: 'syz.2.2643': attribute type 10 has an invalid length. [ 490.876426][T14232] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.2643'. [ 491.171203][T14234] delete_channel: no stack [ 491.605677][T14255] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2650'. [ 491.769188][T14259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.850500][T14256] tap0: tun_chr_ioctl cmd 1074025677 [ 491.865752][T14256] tap0: linktype set to 24 [ 491.882851][T14257] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2648'. [ 492.074722][T14264] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2652'. [ 492.705055][T14286] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2660'. [ 492.809320][T14285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.002057][T14282] delete_channel: no stack [ 493.194437][T14301] tap0: tun_chr_ioctl cmd 1074025677 [ 493.220403][T14301] tap0: linktype set to 24 [ 493.313826][T14301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2663'. [ 493.385910][T14303] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2664'. [ 493.541575][ T9159] hsr_slave_1: left promiscuous mode [ 493.571208][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.604921][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.642093][ T9159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.674974][ T9159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.716798][ T9159] bridge0: port 3(dummy0) entered disabled state [ 493.808234][ T9159] bridge_slave_1: left allmulticast mode [ 493.818667][ T9159] bridge_slave_1: left promiscuous mode [ 493.832746][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.326874][ T9159] bridge_slave_0: left allmulticast mode [ 494.382402][ T9159] bridge_slave_0: left promiscuous mode [ 494.399665][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.478479][ T9159] veth1_vlan: left promiscuous mode [ 496.201850][ T9159] team0 (unregistering): Port device team_slave_1 removed [ 496.771794][T14303] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 496.810591][T14333] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2674'. [ 496.827207][T14333] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2674'. [ 497.049237][T14344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.121248][T14347] sit0: entered allmulticast mode [ 497.173929][T14347] sit0: entered promiscuous mode [ 497.420084][T14358] validate_nla: 4 callbacks suppressed [ 497.420118][T14358] netlink: 'syz.0.2678': attribute type 3 has an invalid length. [ 497.482815][T14358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2678'. [ 497.574526][T14353] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2680'. [ 497.703804][T14359] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 497.717421][T14359] pim6reg0: ignored: set checksum disabled [ 497.753913][T14360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.787106][T14350] delete_channel: no stack [ 498.606491][T14384] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2686'. [ 498.643852][T14384] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 498.762251][T14394] pim6reg1: entered allmulticast mode [ 500.012458][T14422] netlink: 'syz.0.2698': attribute type 9 has an invalid length. [ 500.082780][T14422] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2698'. [ 500.806342][T14426] netlink: 'syz.2.2699': attribute type 10 has an invalid length. [ 500.887041][T14426] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 500.958042][T14425] netlink: 'syz.0.2698': attribute type 10 has an invalid length. [ 501.051767][T14425] team0: Port device wlan1 added [ 501.068467][T14432] netlink: 'syz.0.2698': attribute type 4 has an invalid length. [ 501.076394][T14432] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2698'. [ 501.245852][T14440] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2702'. [ 501.560543][T14451] sit0: entered promiscuous mode [ 501.571092][T14451] sit0: entered allmulticast mode [ 501.902906][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.909486][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.090744][T14464] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2710'. [ 502.303335][T14469] netlink: 'syz.1.2712': attribute type 9 has an invalid length. [ 502.326166][T14469] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2712'. [ 502.350794][T14472] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2713'. [ 502.734974][T14467] delete_channel: no stack [ 502.960694][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2718'. [ 502.985393][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2718'. [ 503.006176][T14485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2718'. [ 503.026886][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2718'. [ 503.057984][T14485] netlink: 'syz.3.2718': attribute type 10 has an invalid length. [ 503.320202][T14495] netlink: 'syz.2.2721': attribute type 1 has an invalid length. [ 503.346715][T14495] netlink: 'syz.2.2721': attribute type 2 has an invalid length. [ 503.354648][T14495] netlink: 'syz.2.2721': attribute type 2 has an invalid length. [ 503.393910][T14495] netlink: 'syz.2.2721': attribute type 3 has an invalid length. [ 503.449323][T14495] netlink: 'syz.2.2721': attribute type 4 has an invalid length. [ 503.490431][T14495] netlink: 'syz.2.2721': attribute type 5 has an invalid length. [ 503.507453][T14495] netlink: 'syz.2.2721': attribute type 6 has an invalid length. [ 503.525708][T14495] netlink: 'syz.2.2721': attribute type 7 has an invalid length. [ 503.536112][T14495] netlink: 'syz.2.2721': attribute type 9 has an invalid length. [ 503.562441][T14495] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.2721'. [ 504.265865][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.297212][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.327539][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.347479][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.377125][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.386054][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.409395][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.434708][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.467142][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.497079][T14513] netlink: 'syz.3.2724': attribute type 11 has an invalid length. [ 504.505584][T14513] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.2724'. [ 509.073690][T14544] hsr_slave_0 (unregistering): left promiscuous mode [ 509.113873][T14542] validate_nla: 8 callbacks suppressed [ 509.113890][T14542] netlink: 'syz.3.2734': attribute type 19 has an invalid length. [ 509.132649][T14542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2734'. [ 509.142167][T14556] netlink: 'syz.1.2737': attribute type 21 has an invalid length. [ 509.566207][T14575] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2743'. [ 509.852925][T14578] tun0: tun_chr_ioctl cmd 1074025677 [ 509.887070][T14578] tun0: linktype set to 776 [ 510.324426][T14592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 510.361122][T14592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 511.234310][T14587] netlink: 'syz.0.2739': attribute type 4 has an invalid length. [ 511.285252][T14587] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2739'. [ 511.297749][T14587] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 511.347371][T14605] netlink: 'syz.3.2750': attribute type 21 has an invalid length. [ 511.489647][T14592] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2748'. [ 512.562529][T14620] netlink: 'syz.2.2755': attribute type 1 has an invalid length. [ 512.607129][T14620] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2755'. [ 512.772288][T14630] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2758'. [ 513.973756][T14646] syz.1.2763[14646] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 515.074700][T14665] netlink: 'syz.2.2769': attribute type 12 has an invalid length. [ 515.155386][T14665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2769'. [ 515.225607][T14669] netlink: 'syz.3.2771': attribute type 33 has an invalid length. [ 515.244516][T14669] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2771'. [ 515.717005][T14681] netlink: 'syz.2.2774': attribute type 10 has an invalid length. [ 516.814760][T14702] netlink: 'syz.1.2781': attribute type 6 has an invalid length. [ 516.836047][T14702] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2781'. [ 516.883555][T14706] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.891398][T14706] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.934612][T14706] bridge0: entered allmulticast mode [ 517.987010][T14730] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2787'. [ 518.013850][T14729] netlink: 'syz.2.2788': attribute type 13 has an invalid length. [ 518.035063][T14732] netlink: 'syz.3.2790': attribute type 29 has an invalid length. [ 518.063321][T14729] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2788'. [ 518.143419][T14729] erspan0: refused to change device tx_queue_len [ 518.198371][T14729] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 518.335329][T14732] netlink: 'syz.3.2790': attribute type 29 has an invalid length. [ 518.407004][T14734] netlink: 'syz.3.2790': attribute type 29 has an invalid length. [ 520.118748][T14780] netlink: 'syz.1.2804': attribute type 21 has an invalid length. [ 520.126853][T14780] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2804'. [ 520.148486][T14773] netlink: 'syz.3.2801': attribute type 21 has an invalid length. [ 520.227205][T14773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2801'. [ 521.190081][T14802] pim6reg1: entered promiscuous mode [ 521.195685][T14802] pim6reg1: entered allmulticast mode [ 521.273530][T14803] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2812'. [ 521.869838][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2817'. [ 521.929171][T14820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2817'. [ 522.003595][T14824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2818'. [ 522.052139][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2817'. [ 522.242199][T14831] netlink: 'syz.0.2819': attribute type 8 has an invalid length. [ 522.693804][T14857] Â: renamed from pim6reg1 [ 522.861616][T14865] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2828'. [ 523.309050][T14888] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2836'. [ 523.325045][T14887] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2835'. [ 523.352802][T14890] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 523.379037][T14888] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2836'. [ 523.886987][T14905] netlink: 'syz.1.2838': attribute type 10 has an invalid length. [ 523.930847][T14905] .`: entered promiscuous mode [ 523.935712][T14905] bond_slave_0: entered promiscuous mode [ 523.948587][T14905] bond_slave_1: entered promiscuous mode [ 523.984024][T14905] team0: entered promiscuous mode [ 524.027019][T14905] team_slave_0: entered promiscuous mode [ 524.076898][T14905] team_slave_1: entered promiscuous mode [ 524.084268][T14905] 8021q: adding VLAN 0 to HW filter on device .` [ 524.092947][T14905] bridge0: port 3(.`) entered blocking state [ 524.099693][T14905] bridge0: port 3(.`) entered disabled state [ 524.106038][T14905] .`: entered allmulticast mode [ 524.116369][T14905] bond_slave_0: entered allmulticast mode [ 524.125428][T14905] bond_slave_1: entered allmulticast mode [ 524.153998][T14905] team0: entered allmulticast mode [ 524.161206][T14905] team_slave_0: entered allmulticast mode [ 524.171453][T14905] team_slave_1: entered allmulticast mode [ 524.179445][T14905] syz_tun: entered allmulticast mode [ 525.454053][T14939] IPv6: Can't replace route, no match found [ 525.823043][T14944] netlink: 'syz.0.2853': attribute type 21 has an invalid length. [ 525.864772][T14944] __nla_validate_parse: 1 callbacks suppressed [ 525.864794][T14944] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2853'. [ 525.905432][T14945] netlink: 'syz.0.2853': attribute type 10 has an invalid length. [ 525.926288][T14945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2853'. [ 525.938279][T14945] bridge0: port 3(dummy0) entered blocking state [ 525.944933][T14945] bridge0: port 3(dummy0) entered disabled state [ 525.960982][T14945] dummy0: entered allmulticast mode [ 525.974379][T14945] dummy0: entered promiscuous mode [ 525.987325][T14945] bridge0: port 3(dummy0) entered blocking state [ 525.993882][T14945] bridge0: port 3(dummy0) entered forwarding state [ 526.245767][T14958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.533887][T14966] netlink: 'syz.0.2861': attribute type 10 has an invalid length. [ 526.583537][T14966] team0: Port device geneve1 added [ 526.606786][T14965] netlink: 'syz.0.2861': attribute type 10 has an invalid length. [ 526.824846][T14966] netlink: 'syz.0.2861': attribute type 21 has an invalid length. [ 526.842905][T14966] netlink: 'syz.0.2861': attribute type 5 has an invalid length. [ 526.858814][T14966] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2861'. [ 527.093512][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2863'. [ 527.973949][T14999] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2868'. [ 527.993675][T14994] netlink: 'syz.2.2867': attribute type 2 has an invalid length. [ 528.064556][T14994] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2867'. [ 529.586548][T15044] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2883'. [ 530.319995][T15067] C: renamed from team_slave_0 (while UP) [ 530.364176][T15067] netlink: 'syz.3.2891': attribute type 3 has an invalid length. [ 530.417124][T15067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2891'. [ 530.447384][T15067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 530.533127][T15066] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2890'. [ 531.014797][T15083] netlink: 'syz.3.2894': attribute type 1 has an invalid length. [ 531.075762][T15083] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2894'. [ 532.138219][T15097] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2899'. [ 532.175201][T15097] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 532.343028][T15100] syzkaller0: entered promiscuous mode [ 532.357359][T15100] syzkaller0: entered allmulticast mode [ 532.380042][T15099] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2901'. [ 532.455016][T15108] netlink: 'syz.1.2903': attribute type 21 has an invalid length. [ 532.466712][T15108] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2903'. [ 532.490236][T15108] netlink: 'syz.1.2903': attribute type 10 has an invalid length. [ 532.512193][T15108] hsr_slave_0: entered allmulticast mode [ 534.701010][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 537.109360][T15114] netlink: 'syz.1.2906': attribute type 10 has an invalid length. [ 537.117618][T15114] hsr_slave_0: left allmulticast mode [ 537.125881][T15114] team0: Device hsr_slave_0 failed to register rx_handler [ 537.142774][T15112] netlink: 'syz.0.2905': attribute type 58 has an invalid length. [ 537.166599][T15112] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2905'. [ 537.175810][T15119] netlink: 'syz.2.2904': attribute type 28 has an invalid length. [ 537.575703][T15125] netlink: 'syz.3.2907': attribute type 10 has an invalid length. [ 537.604188][T15125] netlink: 'syz.3.2907': attribute type 19 has an invalid length. [ 537.627167][T15125] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2907'. [ 537.678295][T15141] netlink: 'syz.1.2912': attribute type 2 has an invalid length. [ 537.686139][T15141] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2912'. [ 539.272389][T15195] netlink: 'syz.0.2930': attribute type 21 has an invalid length. [ 540.055329][ T5773] Bluetooth: hci3: ISO packet for unknown connection handle 815 [ 540.113466][T15216] netlink: 'syz.0.2936': attribute type 10 has an invalid length. [ 540.150478][T15218] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2936'. [ 540.769681][T15216] team0: Port device netdevsim0 added [ 540.904641][T15216] syz.0.2936 (15216) used greatest stack depth: 17224 bytes left [ 542.541093][T15264] pim6reg1: entered promiscuous mode [ 542.577237][T15264] pim6reg1: entered allmulticast mode [ 544.334343][T15290] netlink: 'syz.3.2958': attribute type 12 has an invalid length. [ 544.344105][T15290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2958'. [ 546.022425][T15324] syzkaller0: entered promiscuous mode [ 546.056313][T15324] syzkaller0: entered allmulticast mode [ 547.107190][T15340] syz.1.2971[15340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.107344][T15340] syz.1.2971[15340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 547.916783][T15338] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2971'. [ 547.957542][T15339] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 547.975090][T15339] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 550.070006][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 550.516871][T15348] netlink: 11391 bytes leftover after parsing attributes in process `syz.0.2972'. [ 550.687839][T15360] netlink: 'syz.2.2975': attribute type 10 has an invalid length. [ 550.695763][T15360] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2975'. [ 550.740991][T15360] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2975'. [ 551.242427][T15384] netlink: 'syz.3.2983': attribute type 2 has an invalid length. [ 552.014899][T15412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 552.096305][T15410] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2992'. [ 552.109061][T15410] openvswitch: netlink: Key type 29 is not supported [ 552.593072][T15432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.649624][T15432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.670234][T15432] batman_adv: batadv0: Interface deactivated: €Â0 [ 552.692143][T15432] batman_adv: batadv0: Removing interface: €Â0 [ 554.514981][T15465] netlink: 'syz.1.3008': attribute type 2 has an invalid length. [ 554.567322][T15465] netlink: 'syz.1.3008': attribute type 8 has an invalid length. [ 554.586429][T15465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3008'. [ 555.157872][T15480] netlink: 'syz.3.3011': attribute type 10 has an invalid length. [ 555.165924][T15480] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3011'. [ 555.246106][T15480] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 555.288051][T15480] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.406848][T15480] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 555.645862][T15501] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3015'. [ 559.679193][T15501] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 559.699312][T15501] CPU: 1 PID: 15501 Comm: syz.2.3015 Not tainted syzkaller #0 [ 559.706865][T15501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 559.716974][T15501] Call Trace: [ 559.720302][T15501] [ 559.723285][T15501] dump_stack_lvl+0x18c/0x250 [ 559.728051][T15501] ? show_regs_print_info+0x20/0x20 [ 559.733313][T15501] ? load_image+0x400/0x400 [ 559.737888][T15501] sysfs_warn_dup+0x8e/0xa0 [ 559.742442][T15501] sysfs_do_create_link_sd+0xc0/0x110 [ 559.747876][T15501] device_add_class_symlinks+0x1cf/0x240 [ 559.753573][T15501] device_add+0x507/0xc20 [ 559.757967][T15501] wiphy_register+0x1dad/0x2ae0 [ 559.763017][T15501] ? cfg80211_event_work+0x40/0x40 [ 559.768198][T15501] ? minstrel_ht_alloc+0x88a/0x990 [ 559.773380][T15501] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 559.779511][T15501] ieee80211_register_hw+0x3464/0x4250 [ 559.785085][T15501] ? ieee80211_tasklet_handler+0x20/0x20 [ 559.790791][T15501] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 559.796777][T15501] ? __debug_object_init+0xec/0x450 [ 559.802130][T15501] ? __asan_memset+0x22/0x40 [ 559.806780][T15501] ? __hrtimer_init+0x186/0x270 [ 559.811700][T15501] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 559.817505][T15501] ? mac80211_hwsim_free+0x220/0x220 [ 559.822855][T15501] ? rcu_is_watching+0x15/0xb0 [ 559.827672][T15501] ? kstrndup+0xbd/0x140 [ 559.831996][T15501] hwsim_new_radio_nl+0xdc9/0x1a90 [ 559.837173][T15501] ? __nla_validate+0x50/0x50 [ 559.841918][T15501] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 559.848315][T15501] ? __nla_parse+0x40/0x50 [ 559.852817][T15501] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 559.859216][T15501] genl_family_rcv_msg_doit+0x211/0x310 [ 559.864829][T15501] ? end_current_label_crit_section+0x170/0x170 [ 559.871133][T15501] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 559.877094][T15501] ? bpf_lsm_capable+0x9/0x10 [ 559.881831][T15501] ? security_capable+0x89/0xb0 [ 559.886740][T15501] genl_rcv_msg+0x619/0x7a0 [ 559.891316][T15501] ? genl_bind+0x360/0x360 [ 559.895793][T15501] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 559.902196][T15501] ? lockdep_hardirqs_on+0x98/0x150 [ 559.907443][T15501] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 559.913663][T15501] netlink_rcv_skb+0x241/0x4d0 [ 559.918482][T15501] ? genl_bind+0x360/0x360 [ 559.922954][T15501] ? netlink_ack+0x1180/0x1180 [ 559.927785][T15501] ? __lock_acquire+0x7d40/0x7d40 [ 559.932909][T15501] ? down_read+0x1ac/0x2e0 [ 559.937388][T15501] genl_rcv+0x28/0x40 [ 559.941425][T15501] netlink_unicast+0x751/0x8d0 [ 559.946238][T15501] netlink_sendmsg+0x8d0/0xbf0 [ 559.951032][T15501] ? lockdep_hardirqs_on+0x98/0x150 [ 559.956272][T15501] ? netlink_getsockopt+0x590/0x590 [ 559.961506][T15501] ? aa_sock_msg_perm+0x94/0x150 [ 559.966486][T15501] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 559.971841][T15501] ? security_socket_sendmsg+0x80/0xa0 [ 559.977312][T15501] ? netlink_getsockopt+0x590/0x590 [ 559.982527][T15501] ____sys_sendmsg+0x5ba/0x960 [ 559.987315][T15501] ? __asan_memset+0x22/0x40 [ 559.991942][T15501] ? __sys_sendmsg_sock+0x30/0x30 [ 559.996987][T15501] ? __import_iovec+0x5f2/0x850 [ 560.001864][T15501] ? import_iovec+0x73/0xa0 [ 560.006387][T15501] ___sys_sendmsg+0x2a6/0x360 [ 560.011106][T15501] ? __sys_sendmsg+0x2a0/0x2a0 [ 560.015951][T15501] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 560.022242][T15501] __se_sys_sendmsg+0x1c2/0x2b0 [ 560.027110][T15501] ? __x64_sys_sendmsg+0x80/0x80 [ 560.032074][T15501] do_syscall_64+0x55/0xa0 [ 560.036530][T15501] ? clear_bhb_loop+0x40/0x90 [ 560.041253][T15501] ? clear_bhb_loop+0x40/0x90 [ 560.045941][T15501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.051850][T15501] RIP: 0033:0x7f5a5ff9aeb9 [ 560.056277][T15501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.075917][T15501] RSP: 002b:00007f5a60df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.084353][T15501] RAX: ffffffffffffffda RBX: 00007f5a60216090 RCX: 00007f5a5ff9aeb9 [ 560.092351][T15501] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 560.100335][T15501] RBP: 00007f5a60008c1f R08: 0000000000000000 R09: 0000000000000000 [ 560.108343][T15501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.116339][T15501] R13: 00007f5a60216128 R14: 00007f5a60216090 R15: 00007ffe13080198 [ 560.124334][T15501] [ 560.180426][T15476] delete_channel: no stack [ 561.071184][T15544] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3028'. [ 561.170394][T15544] netlink: 'syz.3.3028': attribute type 3 has an invalid length. [ 561.180234][T15544] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3028'. [ 561.261886][T15549] netlink: 'syz.1.3030': attribute type 3 has an invalid length. [ 561.287019][T15549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3030'. [ 561.335294][T15555] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3032'. [ 561.351013][T15555] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3032'. [ 561.362091][T15555] openvswitch: netlink: Message has 20476 unknown bytes. [ 561.646882][T15563] bridge0: port 3(dummy0) entered disabled state [ 561.654338][T15563] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.663205][T15563] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.713665][T15563] bridge0: entered allmulticast mode [ 561.822098][T15579] netlink: 'syz.1.3037': attribute type 10 has an invalid length. [ 561.852465][T15579] team0: Device hsr_slave_0 failed to register rx_handler [ 561.880309][T15581] netlink: 'syz.2.3040': attribute type 41 has an invalid length. [ 561.896434][T15581] netlink: 'syz.2.3040': attribute type 41 has an invalid length. [ 562.473289][T15599] wg2: entered allmulticast mode [ 562.661419][T15600] wg2: entered promiscuous mode [ 562.676662][T15611] netlink: 'syz.3.3047': attribute type 4 has an invalid length. [ 562.702555][T15611] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3047'. [ 562.778287][T15611] .`: renamed from 72žß2Gðx— (while UP) [ 562.842995][T15613] netlink: 'syz.2.3049': attribute type 2 has an invalid length. [ 562.876812][T15613] netlink: 183156 bytes leftover after parsing attributes in process `syz.2.3049'. [ 563.131122][T15625] veth0_vlan: left promiscuous mode [ 563.185385][T15625] veth0_vlan: entered promiscuous mode [ 563.233993][T15623] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3052'. [ 563.279343][T15623] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3052'. [ 563.316791][T15623] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3052'. [ 563.343925][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.350358][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.877526][T15643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.190441][T15654] netlink: 'syz.0.3065': attribute type 12 has an invalid length. [ 564.228057][T15659] netlink: 'syz.1.3064': attribute type 10 has an invalid length. [ 564.282893][T15659] geneve1: entered promiscuous mode [ 564.318963][T15659] geneve1: entered allmulticast mode [ 564.333295][T15659] team0: Port device geneve1 added [ 564.651213][T15677] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 564.678857][T15677] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 564.927128][T15689] netlink: 'syz.3.3073': attribute type 10 has an invalid length. [ 565.138141][T15695] team0: entered promiscuous mode [ 565.143566][T15695] C: entered promiscuous mode [ 565.167711][T15695] team_slave_1: entered promiscuous mode [ 565.174749][T15695] team0: entered allmulticast mode [ 565.206725][T15695] C: entered allmulticast mode [ 565.211777][T15695] team_slave_1: entered allmulticast mode [ 565.251065][T15695] bridge0: port 3(team0) entered blocking state [ 565.269552][T15695] bridge0: port 3(team0) entered disabled state [ 565.320489][T15699] IPv6: NLM_F_CREATE should be specified when creating new route [ 565.956669][T15719] sit0: left promiscuous mode [ 566.207615][T15724] validate_nla: 3 callbacks suppressed [ 566.207634][T15724] netlink: 'syz.0.3083': attribute type 1 has an invalid length. [ 566.785590][T15745] netlink: 'syz.3.3087': attribute type 21 has an invalid length. [ 566.795981][T15745] netlink: 'syz.3.3087': attribute type 6 has an invalid length. [ 567.607447][T15769] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 569.469979][T15812] __nla_validate_parse: 4 callbacks suppressed [ 569.469999][T15812] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3106'. [ 569.773323][T15822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3108'. [ 570.537511][ T5773] Bluetooth: hci4: command 0x0406 tx timeout [ 570.723943][T15848] delete_channel: no stack [ 570.866601][T15855] netlink: 'syz.3.3120': attribute type 21 has an invalid length. [ 570.876371][T15855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3120'. [ 571.063000][T15856] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3120'. [ 571.463005][T15863] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3122'. [ 571.620072][T15868] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3124'. [ 571.634733][T15868] bridge_slave_1: left allmulticast mode [ 571.644527][T15868] bridge_slave_1: left promiscuous mode [ 571.663566][T15868] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.712129][T15870] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3124'. [ 571.916246][T15868] bridge_slave_0: left allmulticast mode [ 571.925634][T15868] bridge_slave_0: left promiscuous mode [ 571.961369][T15868] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.164031][T15881] sit0: left promiscuous mode [ 572.530742][T15881] sit0: entered promiscuous mode [ 572.955341][T15912] pim6reg1: entered promiscuous mode [ 572.996763][T15912] pim6reg1: entered allmulticast mode [ 573.516818][T15917] delete_channel: no stack [ 573.527246][T15917] delete_channel: no stack [ 573.771437][T15939] netlink: 'syz.1.3142': attribute type 13 has an invalid length. [ 573.843960][T15943] netlink: set zone limit has 8 unknown bytes [ 573.984924][T15950] netlink: 'syz.1.3146': attribute type 2 has an invalid length. [ 573.993495][T15950] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3146'. [ 574.221167][T15956] netlink: 'syz.1.3148': attribute type 6 has an invalid length. [ 574.590448][T15960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3148'. [ 574.601917][T15965] delete_channel: no stack [ 574.610170][T15960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3148'. [ 574.621816][T15965] delete_channel: no stack [ 574.637544][T15956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3148'. [ 574.655624][T15960] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3148'. [ 574.674206][T15968] netlink: 'syz.2.3152': attribute type 29 has an invalid length. [ 574.714238][T15968] netlink: 'syz.2.3152': attribute type 29 has an invalid length. [ 574.971438][T15977] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3154'. [ 575.045246][T15984] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.3157'. [ 575.740818][T15999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3161'. [ 575.768916][T15999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3161'. [ 575.789479][T15998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3161'. [ 579.855834][T16060] netlink: 'syz.2.3180': attribute type 13 has an invalid length. [ 579.871650][T16060] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3180'. [ 579.882135][T16060] erspan0: refused to change device tx_queue_len [ 579.893529][T16060] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 579.926730][T16063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3179'. [ 580.185410][T16068] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3182'. [ 580.992953][T16083] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3187'. [ 581.067327][T16085] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3187'. [ 581.114396][T16083] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3187'. [ 581.145850][T16083] netlink: 'syz.1.3187': attribute type 29 has an invalid length. [ 581.590122][T16085] .` (unregistering): left allmulticast mode [ 581.605898][T16085] bond_slave_0: left allmulticast mode [ 581.614521][T16085] bond_slave_1: left allmulticast mode [ 581.631622][T16085] team0: left allmulticast mode [ 581.674119][T16085] team_slave_0: left allmulticast mode [ 581.694086][T16085] team_slave_1: left allmulticast mode [ 581.707645][T16085] geneve1: left allmulticast mode [ 581.715075][T16085] syz_tun: left allmulticast mode [ 581.733938][T16085] bridge0: port 3(.`) entered disabled state [ 581.804243][T16085] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.822799][T16085] bond_slave_0: left promiscuous mode [ 581.845634][T16085] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.857944][T16085] bond_slave_1: left promiscuous mode [ 581.898571][T16085] .` (unregistering): (slave team0): Releasing backup interface [ 581.933106][T16085] team0: left promiscuous mode [ 581.956450][T16085] team_slave_0: left promiscuous mode [ 581.973727][T16085] team_slave_1: left promiscuous mode [ 581.985451][T16085] geneve1: left promiscuous mode [ 582.023675][T16085] .` (unregistering): (slave syz_tun): Releasing backup interface [ 582.049338][T16085] .` (unregistering): Released all slaves [ 582.072399][T16083] netlink: 'syz.1.3187': attribute type 29 has an invalid length. [ 582.105678][T16098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3189'. [ 583.701895][T16126] À: port 1(vlan0) entered blocking state [ 583.736759][T16126] À: port 1(vlan0) entered disabled state [ 583.753241][T16126] vlan0: entered allmulticast mode [ 583.760792][T16126] veth0_vlan: entered allmulticast mode [ 583.771601][T16126] vlan0: entered promiscuous mode [ 583.796606][T16123] À: port 1(vlan0) entered blocking state [ 583.803793][T16123] À: port 1(vlan0) entered forwarding state [ 584.427905][T16143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3203'. [ 584.574831][T16145] netlink: 'syz.0.3204': attribute type 8 has an invalid length. [ 584.593269][T16145] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.3204'. [ 584.688786][T16150] netlink: 'syz.2.3207': attribute type 1 has an invalid length. [ 584.731525][T16150] netlink: 'syz.2.3207': attribute type 4 has an invalid length. [ 584.787719][T16150] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3207'. [ 584.857012][T16145] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 584.866402][T16145] CPU: 1 PID: 16145 Comm: syz.0.3204 Not tainted syzkaller #0 [ 584.873926][T16145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 584.884033][T16145] Call Trace: [ 584.887357][T16145] [ 584.890332][T16145] dump_stack_lvl+0x18c/0x250 [ 584.895072][T16145] ? show_regs_print_info+0x20/0x20 [ 584.900336][T16145] ? load_image+0x400/0x400 [ 584.904962][T16145] sysfs_warn_dup+0x8e/0xa0 [ 584.909520][T16145] sysfs_do_create_link_sd+0xc0/0x110 [ 584.914949][T16145] device_add_class_symlinks+0x1cf/0x240 [ 584.920648][T16145] device_add+0x507/0xc20 [ 584.925048][T16145] wiphy_register+0x1dad/0x2ae0 [ 584.930000][T16145] ? cfg80211_event_work+0x40/0x40 [ 584.935185][T16145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 584.941424][T16145] ieee80211_register_hw+0x3464/0x4250 [ 584.946985][T16145] ? ieee80211_tasklet_handler+0x20/0x20 [ 584.952676][T16145] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 584.958617][T16145] ? __debug_object_init+0xec/0x450 [ 584.963872][T16145] ? __asan_memset+0x22/0x40 [ 584.968506][T16145] ? __hrtimer_init+0x186/0x270 [ 584.973410][T16145] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 584.979225][T16145] ? mac80211_hwsim_free+0x220/0x220 [ 584.984570][T16145] ? rcu_is_watching+0x15/0xb0 [ 584.989390][T16145] ? kstrndup+0xbd/0x140 [ 584.993702][T16145] hwsim_new_radio_nl+0xdc9/0x1a90 [ 584.998898][T16145] ? mark_lock+0x94/0x320 [ 585.003294][T16145] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 585.009699][T16145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.015900][T16145] ? lockdep_hardirqs_on+0x98/0x150 [ 585.021154][T16145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 585.027442][T16145] genl_family_rcv_msg_doit+0x211/0x310 [ 585.033058][T16145] ? end_current_label_crit_section+0x170/0x170 [ 585.039368][T16145] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 585.045350][T16145] ? bpf_lsm_capable+0x9/0x10 [ 585.050085][T16145] ? security_capable+0x89/0xb0 [ 585.055004][T16145] genl_rcv_msg+0x619/0x7a0 [ 585.059673][T16145] ? genl_bind+0x360/0x360 [ 585.064150][T16145] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 585.070544][T16145] ? ref_tracker_free+0x690/0x840 [ 585.075652][T16145] netlink_rcv_skb+0x241/0x4d0 [ 585.080573][T16145] ? genl_bind+0x360/0x360 [ 585.085055][T16145] ? netlink_ack+0x1180/0x1180 [ 585.089917][T16145] ? __lock_acquire+0x7d40/0x7d40 [ 585.095008][T16145] ? down_read+0x1ac/0x2e0 [ 585.099510][T16145] genl_rcv+0x28/0x40 [ 585.103599][T16145] netlink_unicast+0x751/0x8d0 [ 585.108439][T16145] netlink_sendmsg+0x8d0/0xbf0 [ 585.113280][T16145] ? netlink_getsockopt+0x590/0x590 [ 585.118543][T16145] ? aa_sock_msg_perm+0x94/0x150 [ 585.123632][T16145] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 585.128984][T16145] ? security_socket_sendmsg+0x80/0xa0 [ 585.134504][T16145] ? netlink_getsockopt+0x590/0x590 [ 585.139798][T16145] ____sys_sendmsg+0x5ba/0x960 [ 585.144647][T16145] ? __asan_memset+0x22/0x40 [ 585.149303][T16145] ? __sys_sendmsg_sock+0x30/0x30 [ 585.155096][T16145] ? __import_iovec+0x5f2/0x850 [ 585.160029][T16145] ? import_iovec+0x73/0xa0 [ 585.164609][T16145] ___sys_sendmsg+0x2a6/0x360 [ 585.169349][T16145] ? __sys_sendmsg+0x2a0/0x2a0 [ 585.174304][T16145] __se_sys_sendmsg+0x1c2/0x2b0 [ 585.179221][T16145] ? __x64_sys_sendmsg+0x80/0x80 [ 585.184223][T16145] ? lockdep_hardirqs_on+0x98/0x150 [ 585.189492][T16145] do_syscall_64+0x55/0xa0 [ 585.193984][T16145] ? clear_bhb_loop+0x40/0x90 [ 585.198762][T16145] ? clear_bhb_loop+0x40/0x90 [ 585.203508][T16145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.209463][T16145] RIP: 0033:0x7fc1f119aeb9 [ 585.213927][T16145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.233597][T16145] RSP: 002b:00007fc1f20c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.242085][T16145] RAX: ffffffffffffffda RBX: 00007fc1f1415fa0 RCX: 00007fc1f119aeb9 [ 585.250138][T16145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 585.258156][T16145] RBP: 00007fc1f1208c1f R08: 0000000000000000 R09: 0000000000000000 [ 585.266168][T16145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.274190][T16145] R13: 00007fc1f1416038 R14: 00007fc1f1415fa0 R15: 00007ffd5c5b5238 [ 585.282227][T16145] [ 585.548258][ T5778] Bluetooth: hci4: unexpected event 0x03 length: 151 > 11 [ 585.889642][T16179] netlink: 'syz.2.3213': attribute type 2 has an invalid length. [ 585.925924][T16179] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3213'. [ 585.958094][T16181] netlink: 'syz.2.3213': attribute type 2 has an invalid length. [ 585.975367][T16181] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3213'. [ 586.102956][T16186] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3216'. [ 586.479549][T16201] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3221'. [ 586.929247][T16219] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3225'. [ 586.967094][T16219] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3225'. [ 587.475312][T16228] netlink: 'syz.1.3229': attribute type 10 has an invalid length. [ 587.590403][T16230] netlink: 'syz.1.3229': attribute type 9 has an invalid length. [ 587.706684][T16230] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3229'. [ 588.284232][T16237] netlink: 'syz.1.3229': attribute type 9 has an invalid length. [ 588.320541][T16237] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3229'. [ 588.507197][T16246] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3233'. [ 588.577137][T16257] netlink: 'syz.1.3236': attribute type 21 has an invalid length. [ 588.743485][T16259] netlink: 'syz.0.3237': attribute type 33 has an invalid length. [ 588.766993][T16259] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3237'. [ 590.374885][T16294] netlink: 'syz.3.3248': attribute type 2 has an invalid length. [ 590.422097][T16273] delete_channel: no stack [ 591.017204][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 591.879248][ T5778] Bluetooth: hci4: unexpected event 0x14 length: 151 > 6 [ 592.377966][T16319] __nla_validate_parse: 2 callbacks suppressed [ 592.377984][T16319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3256'. [ 594.011471][T16345] netlink: 'syz.3.3263': attribute type 10 has an invalid length. [ 594.715011][T16358] netlink: 'syz.2.3267': attribute type 21 has an invalid length. [ 595.523859][T16379] netlink: 'syz.2.3274': attribute type 21 has an invalid length. [ 595.535412][T16379] netlink: 'syz.2.3274': attribute type 10 has an invalid length. [ 595.622239][T16379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.671714][T16379] bond0: entered promiscuous mode [ 595.681294][T16379] bond_slave_0: entered promiscuous mode [ 595.693144][T16379] bond_slave_1: entered promiscuous mode [ 595.701172][T16385] netlink: 'syz.3.3275': attribute type 12 has an invalid length. [ 595.711614][T16379] bond0: entered allmulticast mode [ 595.719175][T16379] bond_slave_0: entered allmulticast mode [ 595.725554][T16379] bond_slave_1: entered allmulticast mode [ 595.737042][T16385] nla_validate_range_unsigned: 25 callbacks suppressed [ 595.737061][T16385] netlink: 'syz.3.3275': attribute type 11 has an invalid length. [ 595.761968][T16379] team0: Port device bond0 added [ 595.775429][T16385] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.3275'. [ 595.811369][T16382] netlink: 'syz.2.3274': attribute type 4 has an invalid length. [ 595.827466][T16382] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3274'. [ 596.941214][T16397] netlink: 'syz.2.3279': attribute type 10 has an invalid length. [ 597.440101][T16409] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3282'. [ 597.504920][T16411] netlink: 'syz.0.3282': attribute type 6 has an invalid length. [ 597.516817][T16411] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3282'. [ 597.536972][T16416] Ÿë: port 1(gretap0) entered blocking state [ 597.546735][T16416] Ÿë: port 1(gretap0) entered disabled state [ 597.553033][T16416] gretap0: entered allmulticast mode [ 597.574967][T16416] gretap0: entered promiscuous mode [ 597.913315][T16434] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3288'. [ 597.953041][T16434] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 598.112034][T16435] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3288'. [ 598.159254][T16436] netlink: 'syz.1.3288': attribute type 10 has an invalid length. [ 598.221397][T16436] team0: Port device dummy0 added [ 598.235692][T16434] netlink: 'syz.1.3288': attribute type 10 has an invalid length. [ 598.338116][T16434] team0: Port device dummy0 removed [ 598.344052][T16438] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.357051][T16438] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3289'. [ 598.375082][T16434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3288'. [ 598.384285][T16434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3288'. [ 598.414115][T16435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3288'. [ 598.454901][T16434] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3288'. [ 598.668284][T16452] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3294'. [ 598.842655][T16460] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.866730][T16460] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.880646][T16460] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.905080][T16460] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.967874][T16460] geneve0: entered promiscuous mode [ 599.520334][T16460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.555339][T16460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.584725][T16460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.623552][T16460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.720576][T16460] .`: (slave geneve0): Enslaving as an active interface with an up link [ 601.284207][ T5778] Bluetooth: hci4: Malformed LE Event: 0x1d [ 601.318356][T16514] validate_nla: 3 callbacks suppressed [ 601.318370][T16514] netlink: 'syz.1.3314': attribute type 1 has an invalid length. [ 601.375123][T16514] netlink: 'syz.1.3314': attribute type 1 has an invalid length. [ 601.782614][T16520] netlink: 'syz.2.3317': attribute type 3 has an invalid length. [ 602.107915][T16533] netlink: 'syz.3.3320': attribute type 2 has an invalid length. [ 602.120993][T16533] netlink: 'syz.3.3320': attribute type 8 has an invalid length. [ 602.457858][T16544] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 602.465247][T16544] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 602.482081][T16550] netlink: 'syz.1.3325': attribute type 39 has an invalid length. [ 603.100992][T16557] netlink: 'syz.2.3329': attribute type 10 has an invalid length. [ 603.145801][T16557] dummy0: entered promiscuous mode [ 603.158420][T16557] dummy0: entered allmulticast mode [ 603.188289][T16557] team0: Port device dummy0 added [ 603.198421][T16558] netlink: 'syz.2.3329': attribute type 10 has an invalid length. [ 603.322428][T16558] dummy0: left promiscuous mode [ 603.338319][T16560] __nla_validate_parse: 4 callbacks suppressed [ 603.338337][T16560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3329'. [ 603.341275][T16558] dummy0: left allmulticast mode [ 603.401688][T16558] team0: Port device dummy0 removed [ 603.435981][T16558] dummy0: entered promiscuous mode [ 603.446394][T16558] dummy0: entered allmulticast mode [ 603.460917][T16558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 603.491221][T16560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3329'. [ 603.513294][T16557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3329'. [ 603.551704][T16566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3329'. [ 604.121942][T16574] netlink: 'syz.1.3335': attribute type 7 has an invalid length. [ 604.149862][T16574] netlink: 'syz.1.3335': attribute type 1 has an invalid length. [ 604.191374][T16574] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3335'. [ 604.484300][T16593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3340'. [ 604.702828][T16602] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3342'. [ 605.487812][T16633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3351'. [ 605.690488][T16643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3355'. [ 607.068275][T16671] validate_nla: 4 callbacks suppressed [ 607.068293][T16671] netlink: 'syz.0.3362': attribute type 21 has an invalid length. [ 607.092001][T16671] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3362'. [ 607.768545][T16677] netlink: 'syz.2.3364': attribute type 12 has an invalid length. [ 608.047559][T16684] netlink: 'syz.0.3366': attribute type 10 has an invalid length. [ 608.254904][T16691] netlink: zone id is out of range [ 608.484712][T16688] netlink: 'syz.3.3367': attribute type 10 has an invalid length. [ 608.495148][T16688] __nla_validate_parse: 2 callbacks suppressed [ 608.495184][T16688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3367'. [ 608.518432][T16688] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 609.260269][T16711] netlink: 'syz.1.3376': attribute type 6 has an invalid length. [ 609.298279][T16711] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3376'. [ 609.656146][T16732] netlink: 171476 bytes leftover after parsing attributes in process `syz.0.3383'. [ 609.755019][T16739] netlink: 'syz.2.3385': attribute type 2 has an invalid length. [ 609.766926][T16739] netlink: 'syz.2.3385': attribute type 8 has an invalid length. [ 609.786876][T16739] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3385'. [ 610.235610][T16768] netlink: 'syz.1.3393': attribute type 29 has an invalid length. [ 610.258378][T16768] netlink: 'syz.1.3393': attribute type 29 has an invalid length. [ 610.272114][T16768] netlink: 'syz.1.3393': attribute type 29 has an invalid length. [ 610.428505][T16774] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3391'. [ 610.477552][T16774] `: renamed from team0 (while UP) [ 610.812859][T16778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3395'. [ 611.338549][T16795] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3401'. [ 611.622329][T16791] `: Port device wlan1 added [ 611.656036][T16790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.178492][T16827] validate_nla: 5 callbacks suppressed [ 612.178509][T16827] netlink: 'syz.2.3410': attribute type 39 has an invalid length. [ 612.340905][T16845] netlink: 'syz.1.3412': attribute type 3 has an invalid length. [ 612.376756][T16845] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3412'. [ 612.519119][T16827] hsr_slave_1 (unregistering): left promiscuous mode [ 612.613555][T16841] netlink: 'syz.1.3412': attribute type 10 has an invalid length. [ 612.625390][T16841] team0: Device veth1_macvtap failed to register rx_handler [ 612.733302][T16852] lo: entered allmulticast mode [ 612.786079][T16852] lo: entered promiscuous mode [ 612.793071][T16852] lo: left allmulticast mode [ 613.318951][T16869] netlink: 'syz.0.3420': attribute type 33 has an invalid length. [ 613.341779][T16869] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3420'. [ 613.372756][T16869] netlink: 'syz.0.3420': attribute type 1 has an invalid length. [ 613.400975][T16869] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.3420'. [ 614.024004][T16876] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.3422'. [ 614.051185][T16876] netlink: del zone limit has 8 unknown bytes [ 616.322595][T16887] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3425'. [ 616.599293][T16890] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3426'. [ 616.679742][T16892] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3427'. [ 616.823143][T16893] netlink: 'syz.0.3426': attribute type 29 has an invalid length. [ 616.832535][T16893] netlink: 'syz.0.3426': attribute type 29 has an invalid length. [ 616.867124][T16896] netlink: 822 bytes leftover after parsing attributes in process `syz.2.3427'. [ 618.025936][T16916] netlink: 'syz.3.3435': attribute type 39 has an invalid length. [ 618.466147][T16933] netlink: 'syz.1.3439': attribute type 9 has an invalid length. [ 618.485480][T16933] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3439'. [ 618.568384][T16937] bridge_slave_0: entered allmulticast mode [ 618.731932][T16939] netlink: 'syz.3.3441': attribute type 9 has an invalid length. [ 618.750172][T16939] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3441'. [ 619.145897][T16949] netlink: 'syz.1.3443': attribute type 21 has an invalid length. [ 619.166785][T16949] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3443'. [ 619.594923][T16959] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3448'. [ 619.639092][T16960] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3448'. [ 619.654033][T16964] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3450'. [ 619.833882][T16969] sctp: [Deprecated]: syz.3.3453 (pid 16969) Use of int in maxseg socket option. [ 619.833882][T16969] Use struct sctp_assoc_value instead [ 619.881675][T16969] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3453'. [ 619.966629][T16972] delete_channel: no stack [ 620.130571][T16979] netlink: 'syz.1.3457': attribute type 6 has an invalid length. [ 621.840276][T17017] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.3468'. [ 621.912187][T17023] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3469'. [ 622.175644][T17028] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 622.206861][T17028] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 622.307662][T17032] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3470'. [ 622.349811][T17034] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3472'. [ 622.500886][T17038] netlink: 'syz.3.3473': attribute type 21 has an invalid length. [ 624.460899][T17080] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3484'. [ 624.476756][T17080] netlink: 'syz.1.3484': attribute type 2 has an invalid length. [ 624.783577][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.790084][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.353361][T17090] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3488'. [ 627.228182][T17114] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.3493'. [ 632.777034][T17184] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3518'. [ 632.792140][T17184] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 632.817085][T17186] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3518'. [ 632.834781][T17186] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 633.293740][T17218] netlink: 'syz.2.3529': attribute type 10 has an invalid length. [ 633.426991][T17222] netlink: 'syz.3.3530': attribute type 3 has an invalid length. [ 633.435080][T17222] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3530'. [ 633.725306][T17224] netlink: 'syz.0.3531': attribute type 10 has an invalid length. [ 633.786801][T17228] netlink: 'syz.2.3532': attribute type 39 has an invalid length. [ 633.871900][T17223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.004094][T17235] netlink: 'syz.3.3533': attribute type 9 has an invalid length. [ 634.010933][T17238] À: port 1(vlan0) entered blocking state [ 634.018251][T17235] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3533'. [ 634.028691][T17238] À: port 1(vlan0) entered disabled state [ 634.034666][T17238] vlan0: entered allmulticast mode [ 634.040260][T17238] veth0_vlan: entered allmulticast mode [ 634.067830][T17238] vlan0: entered promiscuous mode [ 634.093076][T17233] À: port 1(vlan0) entered blocking state [ 634.099567][T17233] À: port 1(vlan0) entered forwarding state [ 634.247662][T17242] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3535'. [ 634.290845][T17246] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3544'. [ 634.348587][T17249] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3536'. [ 634.454968][T17255] netlink: 'syz.1.3538': attribute type 2 has an invalid length. [ 634.465773][T17255] netlink: 'syz.1.3538': attribute type 2 has an invalid length. [ 635.070103][T17273] netlink: 'syz.1.3553': attribute type 10 has an invalid length. [ 635.082059][T17273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3553'. [ 635.121645][T17273] team0: entered promiscuous mode [ 635.137862][T17273] team_slave_0: entered promiscuous mode [ 635.144752][T17273] team_slave_1: entered promiscuous mode [ 635.156085][T17273] geneve1: entered promiscuous mode [ 635.162912][T17273] team0: entered allmulticast mode [ 635.190506][T17273] team_slave_0: entered allmulticast mode [ 635.206630][T17273] team_slave_1: entered allmulticast mode [ 635.212650][T17273] geneve1: entered allmulticast mode [ 635.283156][T17273] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.336351][T17273] bridge0: port 3(team0) entered blocking state [ 635.357532][T17273] bridge0: port 3(team0) entered disabled state [ 635.462790][T17278] À: port 1(vlan0) entered blocking state [ 635.477646][T17278] À: port 1(vlan0) entered disabled state [ 635.483755][T17278] vlan0: entered allmulticast mode [ 635.490066][T17278] veth0_vlan: entered allmulticast mode [ 635.500795][T17278] vlan0: entered promiscuous mode [ 635.595373][T17276] À: port 1(vlan0) entered blocking state [ 635.601885][T17276] À: port 1(vlan0) entered forwarding state [ 635.687281][T17284] netlink: 'syz.1.3546': attribute type 10 has an invalid length. [ 635.930856][T17288] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3548'. [ 635.974832][T17294] netlink: 'syz.0.3547': attribute type 3 has an invalid length. [ 635.985293][T17294] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3547'. [ 636.185043][T17289] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 636.212124][T17289] mac80211_hwsim hwsim25 wlan1: entered allmulticast mode [ 636.262090][T17289] team0: Port device wlan1 added [ 636.300380][T17286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.710337][T17342] validate_nla: 1 callbacks suppressed [ 638.710399][T17342] netlink: 'syz.2.3570': attribute type 10 has an invalid length. [ 638.893832][T17342] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 638.904821][T17342] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 638.953504][T17342] team0: Port device wlan1 added [ 639.065596][T17354] netlink: 'syz.0.3571': attribute type 9 has an invalid length. [ 639.088019][T17354] __nla_validate_parse: 3 callbacks suppressed [ 639.088040][T17354] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3571'. [ 639.113039][T17341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.277383][T17361] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3573'. [ 639.898748][T17372] netlink: 'syz.3.3587': attribute type 2 has an invalid length. [ 639.992747][T17372] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3587'. [ 640.890457][T17388] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3584'. [ 641.964602][T17418] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3596'. [ 642.105724][T17420] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3597'. [ 642.825087][T17437] netlink: 'syz.1.3602': attribute type 2 has an invalid length. [ 642.871004][T17437] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3602'. [ 643.462700][T17457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3606'. [ 643.474573][T17457] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3606'. [ 643.487426][T17452] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3606'. [ 643.969540][T17480] syz.1.3616[17480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 643.969797][T17480] syz.1.3616[17480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 644.493780][T17499] __nla_validate_parse: 4 callbacks suppressed [ 644.493908][T17499] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3622'. [ 644.571131][T17500] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3622'. [ 645.411800][T17521] netlink: 'syz.0.3627': attribute type 33 has an invalid length. [ 645.432566][T17521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3627'. [ 646.356132][T17561] netlink: 'syz.1.3639': attribute type 10 has an invalid length. [ 646.373865][T17561] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3639'. [ 646.393890][T17561] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 646.633044][T17570] -1: renamed from syzkaller0 [ 646.688811][T17570] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3642'. [ 646.998320][T17578] netlink: 'syz.0.3643': attribute type 2 has an invalid length. [ 647.142201][T17578] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3643'. [ 647.376870][T17589] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3645'. [ 647.390238][T17589] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.3645'. [ 647.405561][T17589] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3645'. [ 648.620962][T17629] syzkaller0: entered promiscuous mode [ 648.638162][T17629] syzkaller0: entered allmulticast mode [ 650.961361][T17634] hsr0: entered promiscuous mode [ 650.966359][T17634] hsr0: entered allmulticast mode [ 650.971552][T17634] hsr_slave_0: entered allmulticast mode [ 650.980370][T17638] netlink: 'syz.2.3659': attribute type 2 has an invalid length. [ 650.988244][T17638] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3659'. [ 651.010574][T17639] netlink: 'syz.0.3660': attribute type 10 has an invalid length. [ 651.065487][T17639] dummy0: left allmulticast mode [ 651.076572][T17639] dummy0: left promiscuous mode [ 651.081997][T17639] bridge0: port 3(dummy0) entered disabled state [ 651.100712][T17639] team0: Port device dummy0 added [ 651.175095][T17646] netlink: 150456 bytes leftover after parsing attributes in process `syz.2.3662'. [ 651.197814][T17646] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 651.302500][T17653] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 651.309881][T17653] IPv6: NLM_F_CREATE should be set when creating new route [ 651.317244][T17653] IPv6: NLM_F_CREATE should be set when creating new route [ 651.324514][T17653] IPv6: NLM_F_CREATE should be set when creating new route [ 652.001467][T17676] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3673'. [ 652.100450][T17678] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3674'. [ 652.452821][T17695] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3678'. [ 652.556958][T17701] netlink: 'syz.0.3679': attribute type 10 has an invalid length. [ 652.643634][T17700] netlink: 'syz.0.3679': attribute type 3 has an invalid length. [ 652.666847][T17700] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3679'. [ 652.703760][T17707] netlink: 'syz.1.3683': attribute type 10 has an invalid length. [ 652.721201][T17710] sock: sock_timestamping_bind_phc: sock not bind to device [ 652.740080][T17707] macvlan0: entered promiscuous mode [ 652.750638][T17707] macvlan0: entered allmulticast mode [ 652.766673][T17707] veth1_vlan: entered allmulticast mode [ 652.773482][T17707] team0: Port device macvlan0 added [ 653.002579][T17724] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.3688'. [ 653.069980][T17724] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3688'. [ 653.272944][T17732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3692'. [ 653.639747][T17741] netlink: 'syz.3.3695': attribute type 10 has an invalid length. [ 653.742520][T17741] ` (unregistering): Port device C removed [ 653.763323][T17741] ` (unregistering): Port device team_slave_1 removed [ 653.784823][T17745] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3696'. [ 653.805230][T17741] ` (unregistering): Port device wlan1 removed [ 653.948444][T17751] netlink: 'syz.3.3698': attribute type 9 has an invalid length. [ 654.214872][T17762] openvswitch: netlink: Duplicate key (type 0). [ 654.468884][T17772] netlink: 'syz.3.3703': attribute type 21 has an invalid length. [ 654.491998][T17772] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.214723][T17786] netlink: 'syz.3.3706': attribute type 21 has an invalid length. [ 657.257005][T17786] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 657.276573][T17786] netlink: 'syz.3.3706': attribute type 12 has an invalid length. [ 657.298317][T17786] netlink: 'syz.3.3706': attribute type 13 has an invalid length. [ 657.327732][T17786] netlink: 'syz.3.3706': attribute type 14 has an invalid length. [ 657.357002][T17786] netlink: 'syz.3.3706': attribute type 15 has an invalid length. [ 657.379024][T17786] netlink: 'syz.3.3706': attribute type 16 has an invalid length. [ 657.399164][T17786] netlink: 'syz.3.3706': attribute type 19 has an invalid length. [ 657.409952][T17786] netlink: 'syz.3.3706': attribute type 21 has an invalid length. [ 657.419756][T17786] netlink: 'syz.3.3706': attribute type 22 has an invalid length. [ 657.434859][T17796] __nla_validate_parse: 4 callbacks suppressed [ 657.434901][T17796] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3708'. [ 657.461303][T17786] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.3706'. [ 657.526021][T17788] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.546907][T17788] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 657.554204][T17788] IPv6: NLM_F_CREATE should be set when creating new route [ 657.561616][T17788] IPv6: NLM_F_CREATE should be set when creating new route [ 657.676175][T17796] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 658.576279][T17829] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3717'. [ 658.650877][T17829] À: port 1(vlan0) entered disabled state [ 658.924513][T17829] vlan0 (unregistering): left allmulticast mode [ 658.931368][T17829] veth0_vlan (unregistering): left allmulticast mode [ 658.950164][T17829] vlan0 (unregistering): left promiscuous mode [ 658.961988][T17829] À: port 1(vlan0) entered disabled state [ 659.371972][T17838] À: port 1(vlan0) entered disabled state [ 659.441568][T17838] À: port 1(vlan0) entered blocking state [ 659.448894][T17838] À: port 1(vlan0) entered forwarding state [ 659.505094][T17838] team0: Device veth0_vlan failed to register rx_handler [ 659.625534][T17838] À: port 1(vlan0) entered disabled state [ 660.199403][T17875] sctp: [Deprecated]: syz.1.3733 (pid 17875) Use of int in maxseg socket option. [ 660.199403][T17875] Use struct sctp_assoc_value instead [ 660.224227][T17875] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3733'. [ 660.660473][T17885] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3736'. [ 660.796316][T17891] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3738'. [ 660.852289][T17888] sock: sock_set_timeout: `syz.3.3737' (pid 17888) tries to set negative timeout [ 661.176260][T17901] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3739'. [ 661.227277][T17902] team0: Device vxcan1 is of different type [ 661.585468][T17903] .`: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 661.617756][T17918] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3745'. [ 661.635521][T17918] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.3745'. [ 661.768095][T17924] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3747'. [ 665.314000][T17964] __nla_validate_parse: 4 callbacks suppressed [ 665.314019][T17964] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3758'. [ 665.479064][T17961] syzkaller0: entered promiscuous mode [ 665.492024][T17961] syzkaller0: entered allmulticast mode [ 665.580537][T17972] validate_nla: 6 callbacks suppressed [ 665.580562][T17972] netlink: 'syz.1.3761': attribute type 8 has an invalid length. [ 665.625017][T17972] netlink: 186224 bytes leftover after parsing attributes in process `syz.1.3761'. [ 667.525237][T17974] netlink: 'syz.0.3763': attribute type 10 has an invalid length. [ 667.544014][T17971] netlink: 'syz.2.3762': attribute type 33 has an invalid length. [ 667.566038][T17971] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3762'. [ 667.577162][T17971] `: renamed from team0 (while UP) [ 667.597855][T17972] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 667.626892][T17972] CPU: 0 PID: 17972 Comm: syz.1.3761 Not tainted syzkaller #0 [ 667.634448][T17972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 667.644553][T17972] Call Trace: [ 667.647868][T17972] [ 667.650833][T17972] dump_stack_lvl+0x18c/0x250 [ 667.655555][T17972] ? show_regs_print_info+0x20/0x20 [ 667.660797][T17972] ? load_image+0x400/0x400 [ 667.665343][T17972] sysfs_warn_dup+0x8e/0xa0 [ 667.669974][T17972] sysfs_do_create_link_sd+0xc0/0x110 [ 667.675388][T17972] device_add_class_symlinks+0x1cf/0x240 [ 667.681056][T17972] device_add+0x507/0xc20 [ 667.685427][T17972] wiphy_register+0x1dad/0x2ae0 [ 667.690361][T17972] ? cfg80211_event_work+0x40/0x40 [ 667.695510][T17972] ? minstrel_ht_alloc+0x88a/0x990 [ 667.700674][T17972] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 667.706788][T17972] ieee80211_register_hw+0x3464/0x4250 [ 667.712324][T17972] ? ieee80211_tasklet_handler+0x20/0x20 [ 667.717990][T17972] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 667.723917][T17972] ? __debug_object_init+0xec/0x450 [ 667.729160][T17972] ? __asan_memset+0x22/0x40 [ 667.733786][T17972] ? __hrtimer_init+0x186/0x270 [ 667.738672][T17972] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 667.744445][T17972] ? mac80211_hwsim_free+0x220/0x220 [ 667.749762][T17972] ? rcu_is_watching+0x15/0xb0 [ 667.754563][T17972] ? kstrndup+0xbd/0x140 [ 667.758845][T17972] hwsim_new_radio_nl+0xdc9/0x1a90 [ 667.764004][T17972] ? __nla_validate+0x50/0x50 [ 667.768736][T17972] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 667.775119][T17972] ? __nla_parse+0x40/0x50 [ 667.779586][T17972] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 667.785957][T17972] genl_family_rcv_msg_doit+0x211/0x310 [ 667.791540][T17972] ? end_current_label_crit_section+0x170/0x170 [ 667.797830][T17972] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 667.803769][T17972] ? bpf_lsm_capable+0x9/0x10 [ 667.808481][T17972] ? security_capable+0x89/0xb0 [ 667.813372][T17972] genl_rcv_msg+0x619/0x7a0 [ 667.817919][T17972] ? genl_bind+0x360/0x360 [ 667.822380][T17972] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 667.828752][T17972] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 667.835384][T17972] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 667.842021][T17972] netlink_rcv_skb+0x241/0x4d0 [ 667.846825][T17972] ? genl_bind+0x360/0x360 [ 667.851275][T17972] ? netlink_ack+0x1180/0x1180 [ 667.856080][T17972] ? __lock_acquire+0x7d40/0x7d40 [ 667.861134][T17972] ? net_generic+0x1e/0x240 [ 667.865679][T17972] ? down_read+0x1ac/0x2e0 [ 667.870133][T17972] genl_rcv+0x28/0x40 [ 667.874165][T17972] netlink_unicast+0x751/0x8d0 [ 667.878979][T17972] netlink_sendmsg+0x8d0/0xbf0 [ 667.883814][T17972] ? netlink_getsockopt+0x590/0x590 [ 667.889051][T17972] ? aa_sock_msg_perm+0x94/0x150 [ 667.894023][T17972] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 667.899348][T17972] ? security_socket_sendmsg+0x80/0xa0 [ 667.904835][T17972] ? netlink_getsockopt+0x590/0x590 [ 667.910072][T17972] ____sys_sendmsg+0x5ba/0x960 [ 667.914880][T17972] ? __asan_memset+0x22/0x40 [ 667.919518][T17972] ? __sys_sendmsg_sock+0x30/0x30 [ 667.924577][T17972] ? __import_iovec+0x5f2/0x850 [ 667.929471][T17972] ? import_iovec+0x73/0xa0 [ 667.934100][T17972] ___sys_sendmsg+0x2a6/0x360 [ 667.938814][T17972] ? __sys_sendmsg+0x2a0/0x2a0 [ 667.943657][T17972] __se_sys_sendmsg+0x1c2/0x2b0 [ 667.948623][T17972] ? __x64_sys_sendmsg+0x80/0x80 [ 667.953601][T17972] ? lockdep_hardirqs_on+0x98/0x150 [ 667.958827][T17972] do_syscall_64+0x55/0xa0 [ 667.963278][T17972] ? clear_bhb_loop+0x40/0x90 [ 667.967988][T17972] ? clear_bhb_loop+0x40/0x90 [ 667.972700][T17972] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.978623][T17972] RIP: 0033:0x7f32d4d9aeb9 [ 667.983070][T17972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.002718][T17972] RSP: 002b:00007f32d5cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.011191][T17972] RAX: ffffffffffffffda RBX: 00007f32d5015fa0 RCX: 00007f32d4d9aeb9 [ 668.019207][T17972] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 668.027251][T17972] RBP: 00007f32d4e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 668.035252][T17972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.043252][T17972] R13: 00007f32d5016038 R14: 00007f32d5015fa0 R15: 00007ffdb403b8f8 [ 668.051271][T17972] [ 669.918003][T18011] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3772'. [ 671.021432][ T5778] Bluetooth: hci0: Malformed HCI Event [ 671.364008][T18058] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3787'. [ 671.415498][T18061] netlink: 'syz.0.3789': attribute type 7 has an invalid length. [ 672.515112][T18071] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3793'. [ 672.525295][T18071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3793'. [ 673.318434][T18085] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3797'. [ 674.890382][T18085] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3797'. [ 675.122721][T18090] syzkaller0: entered promiscuous mode [ 675.136600][T18090] syzkaller0: entered allmulticast mode [ 675.150142][T18099] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3801'. [ 675.171568][T18092] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3800'. [ 675.201855][T18092] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.3800'. [ 675.224994][T18092] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3800'. [ 675.265222][T18101] netlink: 'syz.0.3802': attribute type 3 has an invalid length. [ 675.278468][T18101] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3802'. [ 675.511328][T18106] netlink: 'syz.3.3803': attribute type 2 has an invalid length. [ 675.523874][T18106] netlink: 'syz.3.3803': attribute type 1 has an invalid length. [ 677.720656][T18109] __nla_validate_parse: 2 callbacks suppressed [ 677.720696][T18109] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3805'. [ 677.736702][T18110] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 677.758286][T18110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.786698][T18110] .`: (slave batadv0): Enslaving as an active interface with an up link [ 677.809075][T18111] .`: entered promiscuous mode [ 677.813918][T18111] bond_slave_0: entered promiscuous mode [ 677.827790][T18111] bond_slave_1: entered promiscuous mode [ 677.833655][T18111] batadv0: entered promiscuous mode [ 677.859393][T18118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'. [ 678.364273][T18145] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3815'. [ 678.398575][T18147] netlink: 'syz.3.3816': attribute type 10 has an invalid length. [ 678.470283][T18150] netlink: 'syz.3.3816': attribute type 10 has an invalid length. [ 678.504549][T18150] dummy0: entered promiscuous mode [ 678.510898][T18150] .`: (slave dummy0): Enslaving as an active interface with an up link [ 679.400288][T18184] netlink: 'syz.2.3833': attribute type 2 has an invalid length. [ 682.034029][T18285] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3880'. [ 682.323290][T10201] tipc: Subscription rejected, illegal request [ 682.802573][T18317] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3896'. [ 685.193291][T18404] netlink: 'syz.2.3937': attribute type 1 has an invalid length. [ 685.216541][T18404] netlink: 'syz.2.3937': attribute type 4 has an invalid length. [ 685.224359][T18404] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3937'. [ 685.276603][T18408] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3939'. [ 685.285717][T18408] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 685.573352][T18420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3944'. [ 685.584810][T18420] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3944'. [ 685.643117][T18422] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3944'. [ 685.679660][T18423] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3946'. [ 685.705933][T18423] netlink: 6316 bytes leftover after parsing attributes in process `syz.0.3946'. [ 685.827242][T18431] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3949'. [ 685.847653][T18430] netlink: 'syz.1.3950': attribute type 2 has an invalid length. [ 685.866643][T18430] netlink: 'syz.1.3950': attribute type 4 has an invalid length. [ 685.884704][T18430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3950'. [ 685.977756][T18433] netlink: 'syz.0.3951': attribute type 10 has an invalid length. [ 685.985708][T18433] lo: left promiscuous mode [ 686.021496][T18433] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 686.079423][T18433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 686.268074][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.274468][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.080804][T18509] __nla_validate_parse: 3 callbacks suppressed [ 688.080821][T18509] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3972'. [ 690.240157][T18571] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3987'. [ 692.092404][T18608] netlink: 'syz.2.3999': attribute type 19 has an invalid length. [ 692.240018][T18604] netlink: 'syz.3.3996': attribute type 21 has an invalid length. [ 692.354510][T18608] netlink: 'syz.2.3999': attribute type 16 has an invalid length. [ 692.396815][T18608] netlink: 'syz.2.3999': attribute type 3 has an invalid length. [ 692.440709][T18613] netlink: 'syz.2.3999': attribute type 3 has an invalid length. [ 692.496623][T18613] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3999'. [ 692.516214][T18608] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3999'. [ 693.117326][T18622] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.4000'. [ 693.436179][T18630] netlink: 'syz.1.4002': attribute type 10 has an invalid length. [ 693.980983][T18630] bridge0: port 3(team0) entered disabled state [ 694.061073][T18630] team_slave_0: left promiscuous mode [ 694.098115][T18630] team_slave_0: left allmulticast mode [ 694.118587][T18638] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4003'. [ 694.226277][T18630] team0 (unregistering): Port device team_slave_0 removed [ 694.268725][T18630] team_slave_1: left promiscuous mode [ 694.274372][T18630] team_slave_1: left allmulticast mode [ 694.378407][T18630] team0 (unregistering): Port device team_slave_1 removed [ 694.406798][T18630] geneve1: left promiscuous mode [ 694.412139][T18630] geneve1: left allmulticast mode [ 694.458354][T18630] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.496575][T18630] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.505526][T18630] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.566694][T18630] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.612110][T18630] team0 (unregistering): Port device geneve1 removed [ 694.667165][T18630] mac80211_hwsim hwsim25 wlan1: left promiscuous mode [ 694.702885][T18630] mac80211_hwsim hwsim25 wlan1: left allmulticast mode [ 694.781970][T18630] team0 (unregistering): Port device wlan1 removed [ 694.814730][T18630] macvlan0: left promiscuous mode [ 694.827061][T18630] macvlan0: left allmulticast mode [ 694.839034][T18630] veth1_vlan: left allmulticast mode [ 694.933456][T18630] team0 (unregistering): Port device macvlan0 removed [ 695.334792][T18655] netlink: 'syz.2.4008': attribute type 28 has an invalid length. [ 695.373419][T18655] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4008'. [ 695.648426][T18664] netlink: 'syz.0.4011': attribute type 21 has an invalid length. [ 695.678360][T18664] IPv6: NLM_F_CREATE should be specified when creating new route [ 695.708608][T18664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 695.716103][T18664] IPv6: NLM_F_CREATE should be set when creating new route [ 695.723906][T18664] IPv6: NLM_F_CREATE should be set when creating new route [ 695.789783][T18672] netlink: 'syz.3.4010': attribute type 8 has an invalid length. [ 695.875517][T18672] netlink: 'syz.3.4010': attribute type 6 has an invalid length. [ 695.951942][T18672] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.4010'. [ 696.621424][T18683] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4014'. [ 699.069073][T18721] validate_nla: 1 callbacks suppressed [ 699.069094][T18721] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 699.197187][T18730] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4026'. [ 699.219726][T18732] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.266592][T18732] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.297924][T18732] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.356614][T18732] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.407839][T18732] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.421732][T18732] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.435174][T18732] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.451657][T18732] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.4028'. [ 699.466177][T18732] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4028'. [ 700.018769][T18744] netlink: zone id is out of range [ 700.023982][T18744] netlink: set zone limit has 8 unknown bytes [ 700.196956][T18756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 700.204918][T18756] IPv6: NLM_F_CREATE should be set when creating new route [ 700.576656][T18773] netlink: 'syz.1.4038': attribute type 10 has an invalid length. [ 700.648972][T18773] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 700.825321][T18777] netlink: 'syz.0.4039': attribute type 10 has an invalid length. [ 700.881598][T18777] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.891041][T18781] netlink: 'syz.0.4039': attribute type 9 has an invalid length. [ 700.927001][T18777] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.947062][T18777] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.961693][T18777] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.108343][T18791] syz.2.4041[18791] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 701.858945][T18777] .`: (slave geneve0): Releasing backup interface [ 701.993441][T18805] netlink: 'syz.1.4045': attribute type 39 has an invalid length. [ 702.105164][T18783] netlink: 'syz.0.4039': attribute type 9 has an invalid length. [ 702.371455][T18819] netlink: 'syz.3.4047': attribute type 10 has an invalid length. [ 703.678879][T18847] netlink: 'syz.3.4058': attribute type 10 has an invalid length. [ 703.784038][T18852] netlink: 'syz.3.4058': attribute type 10 has an invalid length. [ 704.044656][T18866] netlink: 'syz.1.4071': attribute type 21 has an invalid length. [ 705.586756][T18890] netlink: 'syz.3.4070': attribute type 4 has an invalid length. [ 705.646682][T18890] __nla_validate_parse: 132 callbacks suppressed [ 705.646700][T18890] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4070'. [ 705.697911][T18890] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 705.726693][T18895] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4073'. [ 705.738840][T18890] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 705.860087][T18897] netlink: 'syz.2.4075': attribute type 13 has an invalid length. [ 705.880077][T18897] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4075'. [ 706.022043][T18905] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4078'. [ 706.048846][T18908] netlink: 'syz.2.4075': attribute type 2 has an invalid length. [ 706.057144][T18908] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4075'. [ 706.421752][T18916] netlink: 'syz.3.4081': attribute type 1 has an invalid length. [ 706.643362][T18922] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.4082'. [ 706.909896][T18932] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4087'. [ 707.218933][T18944] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4090'. [ 707.514440][T18949] netlink: 'syz.1.4092': attribute type 8 has an invalid length. [ 708.504699][T18969] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4099'. [ 709.286367][T18998] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4106'. [ 709.310539][T18998] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 709.420284][T19002] netlink: 'syz.3.4106': attribute type 10 has an invalid length. [ 710.019376][T19006] netlink: 'syz.1.4105': attribute type 21 has an invalid length. [ 710.134750][T19012] netlink: 'syz.3.4110': attribute type 2 has an invalid length. [ 710.945953][T19042] __nla_validate_parse: 5 callbacks suppressed [ 710.945971][T19042] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4119'. [ 711.036129][T19044] netlink: 'syz.3.4121': attribute type 10 has an invalid length. [ 711.270415][T19047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4122'. [ 711.356130][T19047] netlink: 'syz.2.4122': attribute type 5 has an invalid length. [ 711.634276][T19055] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.4124'. [ 711.673117][T19055] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 711.783285][T19058] netlink: 'syz.0.4125': attribute type 1 has an invalid length. [ 711.804329][T19058] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4125'. [ 712.107471][T19076] ±ÿ: renamed from team_slave_1 (while UP) [ 712.909637][T19099] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4135'. [ 713.842949][T19132] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.4148'. [ 714.008660][ T5778] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 714.181354][T19162] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4157'. [ 714.233849][T19162] smc: net device  applied user defined pnetid CONFIG [ 714.314784][T19170] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4158'. [ 714.826180][T19178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4159'. [ 715.835666][T19215] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4173'. [ 716.633887][T19234] netlink: 'syz.3.4176': attribute type 9 has an invalid length. [ 716.663282][T19229] syzkaller0: entered promiscuous mode [ 716.686072][T19229] syzkaller0: entered allmulticast mode [ 716.776794][T19234] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4176'. [ 716.887629][T19232] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4177'. [ 717.107984][T19232] bond0 (unregistering): left promiscuous mode [ 717.166654][T19232] bond_slave_0: left promiscuous mode [ 717.172430][T19232] bond_slave_1: left promiscuous mode [ 717.214205][T19232] dummy0: left promiscuous mode [ 717.246788][T19232] bond0 (unregistering): left allmulticast mode [ 717.253186][T19232] bond_slave_0: left allmulticast mode [ 717.309225][T19232] bond_slave_1: left allmulticast mode [ 717.314826][T19232] dummy0: left allmulticast mode [ 717.396118][T19232] `: Port device bond0 removed [ 717.423072][T19232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.484330][T19232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.562927][T19232] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 717.591257][T19232] bond0 (unregistering): Released all slaves [ 717.639806][T19231] netlink: 'syz.3.4176': attribute type 10 has an invalid length. [ 717.778844][T19238] netlink: 'syz.0.4178': attribute type 10 has an invalid length. [ 717.796193][T19238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4178'. [ 717.817245][T19235] netlink: 'syz.3.4176': attribute type 9 has an invalid length. [ 717.846840][T19238] caif0: entered promiscuous mode [ 717.852043][T19238] caif0: entered allmulticast mode [ 717.854251][T19235] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4176'. [ 718.068831][ T5778] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 718.078930][ T5778] Bluetooth: hci2: Injecting HCI hardware error event [ 718.088452][ T5778] Bluetooth: hci2: hardware error 0x00 [ 720.147533][ T5778] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 725.023391][T19237] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4178'. [ 725.038916][T19237] netlink: 'syz.0.4178': attribute type 2 has an invalid length. [ 725.245847][T19249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4181'. [ 725.494691][T19262] netlink: 'syz.3.4185': attribute type 21 has an invalid length. [ 725.503580][T19262] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4185'. [ 725.611438][T19266] netlink: 'syz.2.4186': attribute type 10 has an invalid length. [ 725.836025][T19266] macvlan0: entered promiscuous mode [ 725.846905][T19266] macvlan0: entered allmulticast mode [ 725.853912][T19266] veth1_vlan: entered allmulticast mode [ 725.869482][T19266] `: Port device macvlan0 added [ 725.884225][T19261] delete_channel: no stack [ 725.965153][T19273] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4187'. [ 726.111085][T19277] Ÿë: port 1(gretap0) entered blocking state [ 726.118824][T19277] Ÿë: port 1(gretap0) entered disabled state [ 726.125749][T19277] gretap0: entered allmulticast mode [ 726.150288][T19277] gretap0: entered promiscuous mode [ 726.390672][T19282] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4191'. [ 726.451127][T19282] netlink: 'syz.0.4191': attribute type 10 has an invalid length. [ 726.492958][T19282] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4191'. [ 726.528150][T19282] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 726.998619][T19291] netlink: 'syz.0.4193': attribute type 27 has an invalid length. [ 727.011572][T19291] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.4193'. [ 728.035689][T19316] lo: entered allmulticast mode [ 728.291231][T19319] lo: entered promiscuous mode [ 728.296095][T19319] lo: left allmulticast mode [ 729.044913][T19398] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.4205'. [ 729.056984][T19399] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4204'. [ 729.124889][ T5778] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 729.173808][T19398] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.4205'. [ 729.357003][T19408] netlink: 'syz.1.4208': attribute type 21 has an invalid length. [ 729.365194][T19408] IPv6: NLM_F_CREATE should be specified when creating new route [ 729.641354][T19418] netlink: 'syz.1.4211': attribute type 29 has an invalid length. [ 729.670360][T19418] netlink: 'syz.1.4211': attribute type 29 has an invalid length. [ 729.693470][T19417] netlink: 'syz.1.4211': attribute type 29 has an invalid length. [ 730.306208][T19436] syzkaller0: entered promiscuous mode [ 730.312105][T19436] syzkaller0: entered allmulticast mode [ 730.858524][T19453] netlink: 'syz.0.4220': attribute type 9 has an invalid length. [ 730.872319][T19453] netlink: 144384 bytes leftover after parsing attributes in process `syz.0.4220'. [ 733.464859][T19446] netlink: 'syz.1.4218': attribute type 27 has an invalid length. [ 733.940280][T19468] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4225'. [ 735.997034][T19471] netlink: 'syz.1.4226': attribute type 10 has an invalid length. [ 736.050460][T19455] netlink: 'syz.0.4220': attribute type 9 has an invalid length. [ 736.066328][T19455] netlink: 150916 bytes leftover after parsing attributes in process `syz.0.4220'. [ 736.186755][T19470] netlink: 'syz.1.4226': attribute type 9 has an invalid length. [ 736.194593][T19470] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4226'. [ 736.299631][T19472] netlink: 'syz.1.4226': attribute type 9 has an invalid length. [ 736.321325][T19472] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4226'. [ 736.529518][T19500] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4235'. [ 736.751619][T19507] netlink: 'syz.2.4238': attribute type 1 has an invalid length. [ 737.088696][T19531] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4247'. [ 737.468652][T19546] netlink: 'syz.2.4250': attribute type 33 has an invalid length. [ 737.498202][T19546] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4250'. [ 738.172105][T19570] netlink: 'syz.1.4256': attribute type 29 has an invalid length. [ 738.205632][T19570] netlink: 'syz.1.4256': attribute type 29 has an invalid length. [ 738.268246][T19563] netlink: 'syz.1.4256': attribute type 29 has an invalid length. [ 738.480305][T19579] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4261'. [ 738.693735][T19575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.865791][T19589] netlink: 'syz.3.4264': attribute type 3 has an invalid length. [ 738.892986][T19589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4264'. [ 739.531519][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4269'. [ 740.420849][T19626] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4279'. [ 740.615502][T19634] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 740.628551][T19634] dvmrp1: linktype set to 825 [ 744.991936][T19685] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4297'. [ 745.965181][T19709] validate_nla: 7 callbacks suppressed [ 745.965199][T19709] netlink: 'syz.0.4303': attribute type 6 has an invalid length. [ 746.008216][T19708] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4301'. [ 746.967665][T19744] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4311'. [ 747.268137][T19756] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4316'. [ 747.464844][T19772] netlink: 'syz.2.4320': attribute type 39 has an invalid length. [ 747.672612][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.682007][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.862431][T19775] netlink: 'syz.2.4320': attribute type 21 has an invalid length. [ 747.889814][T19775] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4320'. [ 748.372120][T19792] netlink: 'syz.1.4325': attribute type 29 has an invalid length. [ 748.967816][T19813] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4330'. [ 749.437435][T19825] netlink: 'syz.0.4334': attribute type 10 has an invalid length. [ 749.602454][T19829] netlink: 'syz.1.4335': attribute type 7 has an invalid length. [ 749.620354][T19829] netlink: 'syz.1.4335': attribute type 1 has an invalid length. [ 749.637941][T19829] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4335'. [ 749.664673][T19829] netlink: 'syz.1.4335': attribute type 22 has an invalid length. [ 749.681341][T19829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4335'. [ 750.518255][T19838] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4336'. [ 750.758593][T19846] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4340'. [ 750.777029][T19846] veth0_to_bond: left promiscuous mode [ 750.910266][ T5778] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 751.639505][T19865] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4346'. [ 752.363921][T19876] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4349'. [ 752.440573][T19876] netlink: 'syz.3.4349': attribute type 21 has an invalid length. [ 752.496752][T19876] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4349'. [ 752.736014][T19883] tap1: tun_chr_ioctl cmd 1074025677 [ 752.772578][T19883] tap1: linktype set to 778 [ 752.886040][T19883] netlink: 'syz.2.4351': attribute type 1 has an invalid length. [ 752.922202][T19883] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4351'. [ 753.258056][T19896] netlink: 'syz.1.4355': attribute type 10 has an invalid length. [ 753.296644][T19896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4355'. [ 753.305611][T19896] €Â0: entered promiscuous mode [ 753.641080][T19912] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.4359'. [ 753.932529][T19923] netlink: 'syz.2.4361': attribute type 12 has an invalid length. [ 753.940967][T19923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4361'. [ 754.342206][T19930] netlink: 'syz.2.4362': attribute type 2 has an invalid length. [ 754.401147][T19930] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4362'. [ 754.447063][T19930] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 755.135595][T19951] netlink: 'syz.2.4369': attribute type 29 has an invalid length. [ 755.183123][T19948] netlink: 'syz.3.4370': attribute type 9 has an invalid length. [ 755.210241][T19948] netlink: 'syz.3.4370': attribute type 28 has an invalid length. [ 755.229242][T19948] netlink: 'syz.3.4370': attribute type 29 has an invalid length. [ 755.887104][T19978] __nla_validate_parse: 3 callbacks suppressed [ 755.887122][T19978] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4374'. [ 756.276223][T19984] netlink: 'syz.3.4378': attribute type 4 has an invalid length. [ 756.297751][T19984] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4378'. [ 756.504986][T19996] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4382'. [ 757.603104][T20038] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4394'. [ 757.737992][T20042] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4396'. [ 757.954830][T20042] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 757.970468][T20042] CPU: 0 PID: 20042 Comm: syz.2.4396 Not tainted syzkaller #0 [ 757.978011][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 757.978818][T20051] validate_nla: 2 callbacks suppressed [ 757.978862][T20051] netlink: 'syz.0.4398': attribute type 29 has an invalid length. [ 757.988270][T20042] Call Trace: [ 757.988340][T20042] [ 757.988352][T20042] dump_stack_lvl+0x18c/0x250 [ 757.988396][T20042] ? show_regs_print_info+0x20/0x20 [ 757.988428][T20042] ? load_image+0x400/0x400 [ 757.988477][T20042] sysfs_warn_dup+0x8e/0xa0 [ 757.988501][T20042] sysfs_do_create_link_sd+0xc0/0x110 [ 758.032450][T20042] device_add_class_symlinks+0x1cf/0x240 [ 758.038124][T20042] device_add+0x507/0xc20 [ 758.042495][T20042] wiphy_register+0x1dad/0x2ae0 [ 758.047391][T20042] ? cfg80211_event_work+0x40/0x40 [ 758.052522][T20042] ? minstrel_ht_alloc+0x88a/0x990 [ 758.057666][T20042] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 758.063756][T20042] ieee80211_register_hw+0x3464/0x4250 [ 758.069284][T20042] ? ieee80211_tasklet_handler+0x20/0x20 [ 758.075031][T20042] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 758.080991][T20042] ? __debug_object_init+0xec/0x450 [ 758.086248][T20042] ? __asan_memset+0x22/0x40 [ 758.090895][T20042] ? __hrtimer_init+0x186/0x270 [ 758.095807][T20042] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 758.101688][T20042] ? mac80211_hwsim_free+0x220/0x220 [ 758.107033][T20042] ? rcu_is_watching+0x15/0xb0 [ 758.111840][T20042] ? kstrndup+0xbd/0x140 [ 758.116144][T20042] hwsim_new_radio_nl+0xdc9/0x1a90 [ 758.121334][T20042] ? __nla_validate+0x50/0x50 [ 758.126093][T20042] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 758.132493][T20042] ? __nla_parse+0x40/0x50 [ 758.137003][T20042] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 758.143395][T20042] genl_family_rcv_msg_doit+0x211/0x310 [ 758.148961][T20042] ? end_current_label_crit_section+0x170/0x170 [ 758.155228][T20042] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 758.161146][T20042] ? bpf_lsm_capable+0x9/0x10 [ 758.165833][T20042] ? security_capable+0x89/0xb0 [ 758.170721][T20042] genl_rcv_msg+0x619/0x7a0 [ 758.175298][T20042] ? genl_bind+0x360/0x360 [ 758.179752][T20042] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 758.186126][T20042] ? ref_tracker_free+0x690/0x840 [ 758.191199][T20042] netlink_rcv_skb+0x241/0x4d0 [ 758.196026][T20042] ? genl_bind+0x360/0x360 [ 758.200496][T20042] ? netlink_ack+0x1180/0x1180 [ 758.205334][T20042] ? __lock_acquire+0x7d40/0x7d40 [ 758.210408][T20042] ? down_read+0x1ac/0x2e0 [ 758.214880][T20042] genl_rcv+0x28/0x40 [ 758.218926][T20042] netlink_unicast+0x751/0x8d0 [ 758.223770][T20042] netlink_sendmsg+0x8d0/0xbf0 [ 758.228602][T20042] ? netlink_getsockopt+0x590/0x590 [ 758.233864][T20042] ? aa_sock_msg_perm+0x94/0x150 [ 758.238825][T20042] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 758.244123][T20042] ? security_socket_sendmsg+0x80/0xa0 [ 758.249592][T20042] ? netlink_getsockopt+0x590/0x590 [ 758.254809][T20042] ____sys_sendmsg+0x5ba/0x960 [ 758.259600][T20042] ? __asan_memset+0x22/0x40 [ 758.264207][T20042] ? __sys_sendmsg_sock+0x30/0x30 [ 758.269260][T20042] ? __import_iovec+0x5f2/0x850 [ 758.274163][T20042] ? import_iovec+0x73/0xa0 [ 758.278687][T20042] ___sys_sendmsg+0x2a6/0x360 [ 758.283398][T20042] ? __sys_sendmsg+0x2a0/0x2a0 [ 758.288258][T20042] ? trace_call_bpf+0xc3/0x6c0 [ 758.293114][T20042] __se_sys_sendmsg+0x1c2/0x2b0 [ 758.298012][T20042] ? __x64_sys_sendmsg+0x80/0x80 [ 758.303014][T20042] ? lockdep_hardirqs_on+0x98/0x150 [ 758.308275][T20042] do_syscall_64+0x55/0xa0 [ 758.312753][T20042] ? clear_bhb_loop+0x40/0x90 [ 758.317470][T20042] ? clear_bhb_loop+0x40/0x90 [ 758.322178][T20042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.328108][T20042] RIP: 0033:0x7f5a5ff9aeb9 [ 758.332548][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.352185][T20042] RSP: 002b:00007f5a60e17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.360633][T20042] RAX: ffffffffffffffda RBX: 00007f5a60215fa0 RCX: 00007f5a5ff9aeb9 [ 758.368648][T20042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000008d [ 758.376649][T20042] RBP: 00007f5a60008c1f R08: 0000000000000000 R09: 0000000000000000 [ 758.384649][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.392678][T20042] R13: 00007f5a60216038 R14: 00007f5a60215fa0 R15: 00007ffe13080198 [ 758.400692][T20042] [ 758.477882][T20051] netlink: 'syz.0.4398': attribute type 29 has an invalid length. [ 758.498198][T20052] netlink: 'syz.0.4398': attribute type 29 has an invalid length. [ 758.568642][T20053] netlink: 'syz.0.4398': attribute type 29 has an invalid length. [ 758.579616][T20055] netlink: 'syz.0.4398': attribute type 29 has an invalid length. [ 758.952430][T20070] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4402'. [ 759.312271][T20084] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4405'. [ 759.413413][T20088] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4408'. [ 759.457411][T20090] netlink: 'syz.0.4409': attribute type 10 has an invalid length. [ 759.482282][T20090] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4409'. [ 760.324852][T20129] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.4419'. [ 760.491067][T20133] netlink: 'syz.2.4420': attribute type 9 has an invalid length. [ 760.678979][T20142] netlink: 'syz.2.4420': attribute type 10 has an invalid length. [ 760.699801][T20142] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 762.511506][T20155] __nla_validate_parse: 3 callbacks suppressed [ 762.511526][T20155] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.4426'. [ 762.566171][T20155] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4426'. [ 762.609337][T20157] netlink: 'syz.3.4427': attribute type 29 has an invalid length. [ 762.640641][T20157] netlink: 'syz.3.4427': attribute type 29 has an invalid length. [ 762.703379][T20166] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4429'. [ 762.865082][ C1] ================================================================== [ 762.873267][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 762.881137][ C1] Write of size 104 at addr ffff88801cf8a390 by task syz.3.4430/20172 [ 762.889325][ C1] [ 762.891681][ C1] CPU: 1 PID: 20172 Comm: syz.3.4430 Not tainted syzkaller #0 [ 762.899179][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 762.909271][ C1] Call Trace: [ 762.912599][ C1] [ 762.915481][ C1] dump_stack_lvl+0x18c/0x250 [ 762.920217][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 762.925293][ C1] ? show_regs_print_info+0x20/0x20 [ 762.930543][ C1] ? load_image+0x400/0x400 [ 762.935127][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 762.940642][ C1] ? __virt_addr_valid+0x18c/0x540 [ 762.945857][ C1] ? __virt_addr_valid+0x469/0x540 [ 762.951046][ C1] print_report+0xa8/0x210 [ 762.955516][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 762.960680][ C1] kasan_report+0x117/0x150 [ 762.965247][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 762.970402][ C1] kasan_check_range+0x241/0x290 [ 762.975385][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 762.980540][ C1] __asan_memcpy+0x40/0x70 [ 762.985009][ C1] __bpf_get_stackid+0x6bf/0x900 [ 762.990088][ C1] bpf_get_stackid_pe+0x343/0x410 [ 762.995179][ C1] bpf_prog_888c70248be4b0cb+0x30/0x40 [ 763.000684][ C1] bpf_overflow_handler+0x1fc/0x510 [ 763.005940][ C1] ? verify_lock_unused+0x140/0x140 [ 763.011210][ C1] ? bpf_overflow_handler+0xde/0x510 [ 763.016540][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 763.021877][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 763.028167][ C1] __perf_event_overflow+0x447/0x630 [ 763.033682][ C1] perf_swevent_hrtimer+0x4aa/0x570 [ 763.038929][ C1] ? cpu_clock_event_read+0x40/0x40 [ 763.044187][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 763.050133][ C1] ? _raw_spin_unlock+0x40/0x40 [ 763.055030][ C1] ? debug_object_deactivate+0x67/0x390 [ 763.060642][ C1] __hrtimer_run_queues+0x4eb/0xc40 [ 763.065892][ C1] ? cpu_clock_event_read+0x40/0x40 [ 763.071143][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 763.076271][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 763.082380][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 763.087376][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 763.093317][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 763.099015][ C1] [ 763.101980][ C1] [ 763.104942][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 763.110993][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 763.116835][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 93 30 09 e8 7b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 763.136479][ C1] RSP: 0018:ffffc900047af7d8 EFLAGS: 00000286 [ 763.142603][ C1] RAX: 50371ccf88a15800 RBX: 0000000000000000 RCX: 50371ccf88a15800 [ 763.150626][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 763.158628][ C1] RBP: ffffc900047af830 R08: ffffffff8e8add2f R09: 1ffffffff1d15ba5 [ 763.166621][ C1] R10: dffffc0000000000 R11: fffffbfff1d15ba6 R12: ffff88807cb90000 [ 763.174611][ C1] R13: dffffc0000000000 R14: ffff888057a13c00 R15: ffff8880b8f3cac8 [ 763.182618][ C1] ? finish_task_switch+0x265/0x8f0 [ 763.187847][ C1] __schedule+0x155b/0x45a0 [ 763.192396][ C1] ? min_deadline_cb_rotate+0x150/0x150 [ 763.197960][ C1] ? asan.module_dtor+0x20/0x20 [ 763.202867][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 763.208899][ C1] ? preempt_schedule+0xc0/0xd0 [ 763.213777][ C1] preempt_schedule_common+0x82/0xc0 [ 763.219113][ C1] preempt_schedule+0xc0/0xd0 [ 763.223809][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 763.229462][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 763.235382][ C1] ? _raw_spin_unlock+0x40/0x40 [ 763.240267][ C1] preempt_schedule_thunk+0x1a/0x30 [ 763.245503][ C1] try_to_wake_up+0x781/0x1190 [ 763.250286][ C1] wake_up_q+0xb6/0x100 [ 763.254458][ C1] futex_wake+0x42a/0x4f0 [ 763.258823][ C1] ? futex_wake_mark+0x150/0x150 [ 763.263777][ C1] ? perf_poll+0x1b0/0x1b0 [ 763.268221][ C1] do_futex+0x35d/0x3e0 [ 763.272398][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 763.278311][ C1] __se_sys_futex+0x3a9/0x440 [ 763.283007][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 763.287790][ C1] ? __x64_sys_futex+0x21/0xf0 [ 763.292581][ C1] do_syscall_64+0x55/0xa0 [ 763.297025][ C1] ? clear_bhb_loop+0x40/0x90 [ 763.301716][ C1] ? clear_bhb_loop+0x40/0x90 [ 763.306408][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.312323][ C1] RIP: 0033:0x7f3b4619aeb9 [ 763.316754][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.336392][ C1] RSP: 002b:00007f3b470f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 763.344835][ C1] RAX: ffffffffffffffda RBX: 00007f3b46415fa8 RCX: 00007f3b4619aeb9 [ 763.352830][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b46415fac [ 763.360826][ C1] RBP: 00007f3b46415fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 763.368832][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.376831][ C1] R13: 00007f3b46416038 R14: 00007ffcab221550 R15: 00007ffcab221638 [ 763.384857][ C1] [ 763.387894][ C1] [ 763.390243][ C1] Allocated by task 20172: [ 763.394669][ C1] kasan_set_track+0x4e/0x70 [ 763.399284][ C1] __kasan_kmalloc+0x8f/0xa0 [ 763.403895][ C1] __kmalloc_node+0xb4/0x230 [ 763.408503][ C1] bpf_map_area_alloc+0x5e/0x110 [ 763.413461][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 763.419198][ C1] stack_map_alloc+0x33a/0x4c0 [ 763.423979][ C1] map_create+0x877/0x12f0 [ 763.428437][ C1] __sys_bpf+0x651/0x890 [ 763.432697][ C1] __x64_sys_bpf+0x7c/0x90 [ 763.437131][ C1] do_syscall_64+0x55/0xa0 [ 763.441567][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.447476][ C1] [ 763.449817][ C1] Last potentially related work creation: [ 763.455544][ C1] kasan_save_stack+0x3e/0x60 [ 763.460259][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 763.465660][ C1] call_rcu+0x153/0x950 [ 763.469835][ C1] __nf_register_net_hook+0x788/0x910 [ 763.475236][ C1] nf_register_net_hook+0xb2/0x190 [ 763.480382][ C1] nf_register_net_hooks+0x44/0x1b0 [ 763.485616][ C1] nf_ct_netns_do_get+0x3c0/0x5c0 [ 763.490665][ C1] nf_ct_netns_inet_get+0x1f/0x150 [ 763.495794][ C1] nf_conncount_init+0x127/0x380 [ 763.500755][ C1] ovs_ct_init+0x316/0x490 [ 763.505192][ C1] ovs_init_net+0x1e6/0x250 [ 763.509716][ C1] ops_init+0x397/0x640 [ 763.513891][ C1] setup_net+0x3b6/0xa30 [ 763.518150][ C1] copy_net_ns+0x36d/0x5e0 [ 763.522582][ C1] create_new_namespaces+0x3d3/0x6f0 [ 763.527893][ C1] copy_namespaces+0x430/0x4a0 [ 763.532684][ C1] copy_process+0x1724/0x3d80 [ 763.537370][ C1] kernel_clone+0x24b/0x8a0 [ 763.541905][ C1] __x64_sys_clone+0x1b7/0x230 [ 763.546698][ C1] do_syscall_64+0x55/0xa0 [ 763.551135][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.557041][ C1] [ 763.559372][ C1] Second to last potentially related work creation: [ 763.565966][ C1] kasan_save_stack+0x3e/0x60 [ 763.570653][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 763.576039][ C1] call_rcu+0x153/0x950 [ 763.580229][ C1] __nf_register_net_hook+0x788/0x910 [ 763.585617][ C1] nf_register_net_hook+0xb2/0x190 [ 763.590781][ C1] nf_register_net_hooks+0x44/0x1b0 [ 763.595994][ C1] ip6t_register_table+0x543/0x7e0 [ 763.601207][ C1] ip6table_mangle_table_init+0x41/0x60 [ 763.606770][ C1] xt_find_table_lock+0x306/0x3e0 [ 763.611814][ C1] xt_request_find_table_lock+0x26/0x100 [ 763.617459][ C1] do_ip6t_get_ctl+0x717/0x1210 [ 763.622320][ C1] nf_getsockopt+0x262/0x280 [ 763.626922][ C1] ipv6_getsockopt+0x226/0x2e0 [ 763.631712][ C1] do_sock_getsockopt+0x379/0x450 [ 763.636775][ C1] __x64_sys_getsockopt+0x1d6/0x280 [ 763.641993][ C1] do_syscall_64+0x55/0xa0 [ 763.646423][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.652417][ C1] [ 763.654752][ C1] The buggy address belongs to the object at ffff88801cf8a380 [ 763.654752][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 763.668912][ C1] The buggy address is located 16 bytes inside of [ 763.668912][ C1] allocated 40-byte region [ffff88801cf8a380, ffff88801cf8a3a8) [ 763.682893][ C1] [ 763.685230][ C1] The buggy address belongs to the physical page: [ 763.691758][ C1] page:ffffea000073e280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cf8a [ 763.701923][ C1] memcg:ffff88802ffbd201 [ 763.706169][ C1] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 763.714174][ C1] page_type: 0xffffffff() [ 763.718512][ C1] raw: 00fff00000000800 ffff888017c4da00 ffffea00006bd680 dead000000000005 [ 763.727119][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802ffbd201 [ 763.735708][ C1] page dumped because: kasan: bad access detected [ 763.742142][ C1] page_owner tracks the page as allocated [ 763.747867][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5769, tgid 5769 (syz-executor), ts 92001143667, free_ts 92000669336 [ 763.766121][ C1] post_alloc_hook+0x1c1/0x200 [ 763.770917][ C1] get_page_from_freelist+0x1951/0x19e0 [ 763.776474][ C1] __alloc_pages+0x1f0/0x460 [ 763.781088][ C1] alloc_slab_page+0x5d/0x160 [ 763.785777][ C1] new_slab+0x87/0x2d0 [ 763.789875][ C1] ___slab_alloc+0xc5d/0x12f0 [ 763.794590][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 763.800070][ C1] kmalloc_trace+0x2a/0xe0 [ 763.804508][ C1] alloc_fdtable+0xca/0x2c0 [ 763.809032][ C1] dup_fd+0x786/0xa50 [ 763.813034][ C1] copy_files+0xc3/0x120 [ 763.817294][ C1] copy_process+0x15ab/0x3d80 [ 763.821979][ C1] kernel_clone+0x24b/0x8a0 [ 763.826518][ C1] __x64_sys_clone+0x1b7/0x230 [ 763.831311][ C1] do_syscall_64+0x55/0xa0 [ 763.835833][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.841744][ C1] page last free stack trace: [ 763.846429][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 763.851914][ C1] free_unref_page+0x32/0x2e0 [ 763.856619][ C1] vfree+0x1a6/0x320 [ 763.860608][ C1] __do_replace+0x858/0x990 [ 763.865223][ C1] do_ip6t_set_ctl+0xb48/0xe10 [ 763.870001][ C1] nf_setsockopt+0x263/0x280 [ 763.874604][ C1] do_sock_setsockopt+0x175/0x1a0 [ 763.879645][ C1] __x64_sys_setsockopt+0x182/0x200 [ 763.884863][ C1] do_syscall_64+0x55/0xa0 [ 763.889299][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.895217][ C1] [ 763.897551][ C1] Memory state around the buggy address: [ 763.903192][ C1] ffff88801cf8a280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 763.911267][ C1] ffff88801cf8a300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 763.919365][ C1] >ffff88801cf8a380: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 763.927436][ C1] ^ [ 763.932821][ C1] ffff88801cf8a400: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 763.940892][ C1] ffff88801cf8a480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 763.948964][ C1] ================================================================== [ 763.957041][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 763.964241][ C1] CPU: 1 PID: 20172 Comm: syz.3.4430 Not tainted syzkaller #0 [ 763.971709][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 763.981778][ C1] Call Trace: [ 763.985068][ C1] [ 763.987926][ C1] dump_stack_lvl+0x18c/0x250 [ 763.992626][ C1] ? show_regs_print_info+0x20/0x20 [ 763.997845][ C1] ? load_image+0x400/0x400 [ 764.002369][ C1] panic+0x2dc/0x730 [ 764.006283][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 764.011327][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 764.015849][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 764.021760][ C1] ? _raw_spin_unlock+0x40/0x40 [ 764.026627][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 764.031763][ C1] check_panic_on_warn+0x84/0xa0 [ 764.036734][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 764.041869][ C1] end_report+0x6f/0x130 [ 764.046125][ C1] kasan_report+0x128/0x150 [ 764.050660][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 764.055876][ C1] kasan_check_range+0x241/0x290 [ 764.060843][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 764.065970][ C1] __asan_memcpy+0x40/0x70 [ 764.070408][ C1] __bpf_get_stackid+0x6bf/0x900 [ 764.075368][ C1] bpf_get_stackid_pe+0x343/0x410 [ 764.080414][ C1] bpf_prog_888c70248be4b0cb+0x30/0x40 [ 764.085891][ C1] bpf_overflow_handler+0x1fc/0x510 [ 764.091137][ C1] ? verify_lock_unused+0x140/0x140 [ 764.096355][ C1] ? bpf_overflow_handler+0xde/0x510 [ 764.101704][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 764.107025][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 764.113282][ C1] __perf_event_overflow+0x447/0x630 [ 764.118591][ C1] perf_swevent_hrtimer+0x4aa/0x570 [ 764.123812][ C1] ? cpu_clock_event_read+0x40/0x40 [ 764.129048][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 764.134963][ C1] ? _raw_spin_unlock+0x40/0x40 [ 764.139830][ C1] ? debug_object_deactivate+0x67/0x390 [ 764.145403][ C1] __hrtimer_run_queues+0x4eb/0xc40 [ 764.150617][ C1] ? cpu_clock_event_read+0x40/0x40 [ 764.155839][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 764.160983][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 764.167073][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 764.172044][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 764.177958][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 764.183610][ C1] [ 764.186563][ C1] [ 764.189516][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 764.195543][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 764.201397][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 93 30 09 e8 7b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 764.221021][ C1] RSP: 0018:ffffc900047af7d8 EFLAGS: 00000286 [ 764.227107][ C1] RAX: 50371ccf88a15800 RBX: 0000000000000000 RCX: 50371ccf88a15800 [ 764.235097][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 764.243087][ C1] RBP: ffffc900047af830 R08: ffffffff8e8add2f R09: 1ffffffff1d15ba5 [ 764.251113][ C1] R10: dffffc0000000000 R11: fffffbfff1d15ba6 R12: ffff88807cb90000 [ 764.259127][ C1] R13: dffffc0000000000 R14: ffff888057a13c00 R15: ffff8880b8f3cac8 [ 764.267124][ C1] ? finish_task_switch+0x265/0x8f0 [ 764.272339][ C1] __schedule+0x155b/0x45a0 [ 764.276885][ C1] ? min_deadline_cb_rotate+0x150/0x150 [ 764.282450][ C1] ? asan.module_dtor+0x20/0x20 [ 764.287330][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 764.293338][ C1] ? preempt_schedule+0xc0/0xd0 [ 764.298213][ C1] preempt_schedule_common+0x82/0xc0 [ 764.303521][ C1] preempt_schedule+0xc0/0xd0 [ 764.308224][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 764.313882][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 764.319791][ C1] ? _raw_spin_unlock+0x40/0x40 [ 764.324656][ C1] preempt_schedule_thunk+0x1a/0x30 [ 764.329887][ C1] try_to_wake_up+0x781/0x1190 [ 764.334680][ C1] wake_up_q+0xb6/0x100 [ 764.338862][ C1] futex_wake+0x42a/0x4f0 [ 764.343215][ C1] ? futex_wake_mark+0x150/0x150 [ 764.348173][ C1] ? perf_poll+0x1b0/0x1b0 [ 764.352623][ C1] do_futex+0x35d/0x3e0 [ 764.356798][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 764.362713][ C1] __se_sys_futex+0x3a9/0x440 [ 764.367410][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 764.372193][ C1] ? __x64_sys_futex+0x21/0xf0 [ 764.376975][ C1] do_syscall_64+0x55/0xa0 [ 764.381415][ C1] ? clear_bhb_loop+0x40/0x90 [ 764.386114][ C1] ? clear_bhb_loop+0x40/0x90 [ 764.390814][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.396726][ C1] RIP: 0033:0x7f3b4619aeb9 [ 764.401155][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.420785][ C1] RSP: 002b:00007f3b470f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 764.429222][ C1] RAX: ffffffffffffffda RBX: 00007f3b46415fa8 RCX: 00007f3b4619aeb9 [ 764.437223][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3b46415fac [ 764.445218][ C1] RBP: 00007f3b46415fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 764.453214][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.461205][ C1] R13: 00007f3b46416038 R14: 00007ffcab221550 R15: 00007ffcab221638 [ 764.469208][ C1] [ 764.472834][ C1] Kernel Offset: disabled [ 764.477166][ C1] Rebooting in 86400 seconds..