last executing test programs: 9m58.221841355s ago: executing program 4 (id=138): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0xa8, 0xff, 0x9, 0x0, 0x80000001, 0x80020, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x3}, 0x102000, 0xfffffffffffffffd, 0x9, 0x9, 0x43, 0x9, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0x4c, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4000000c, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x1}, 0x14403, 0x7ffc, 0xfffffffc, 0x5, 0x582, 0x5, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0xa, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000c1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="170000007600a921059f317a9dab000000000000000100", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@fallback, r1, 0x28, 0x20}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x5) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000180000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0x58, &(0x7f0000001680)}, 0x10) 9m58.01554578s ago: executing program 4 (id=141): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) 9m57.930705952s ago: executing program 4 (id=144): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x700, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xffffffffffffffff, r0, 0x0) 9m57.658714558s ago: executing program 4 (id=148): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0x36, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x6000}, 0x0) r11 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) recvmsg(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/110, 0x6e}], 0x1}, 0x40002081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100400"/24], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3}, 0x94) 9m56.894167986s ago: executing program 4 (id=156): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x101608, 0x2, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x11, 0x4, 0x4, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540), &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000640), &(0x7f0000000700), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000600), 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x4, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000900)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0xc, 0xffff, 0xfffffffe}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r0], 0x0, 0x10, 0x13}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r3, @ANYBLOB="1200000000000900200000000000000000002000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="04000000010000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b15c84e21008bf32c19020000f80200000044000200edb556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9m56.046101227s ago: executing program 4 (id=167): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x2, 0x9, 0x0, r0, 0x100}, 0x50) socket$kcm(0xa, 0x2, 0x3a) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000040)={'wg2\x00', @random="02000400e508"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x7, 0x271fe896, 0x500, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x5, [{@rand_addr=0x64010100, 0x1}, {@multicast2, 0x4}, {@remote, 0x6}, {@empty, 0x7f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x70}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) close(r4) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m40.969263094s ago: executing program 32 (id=167): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x6, 0x2, 0x9, 0x0, r0, 0x100}, 0x50) socket$kcm(0xa, 0x2, 0x3a) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8918, &(0x7f0000000040)={'wg2\x00', @random="02000400e508"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x7, 0x271fe896, 0x500, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x1}, 0x50) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x17, 0x1, 0x5, [{@rand_addr=0x64010100, 0x1}, {@multicast2, 0x4}, {@remote, 0x6}, {@empty, 0x7f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x70}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) close(r4) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m27.680061071s ago: executing program 0 (id=1121): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520003a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0) 8m27.584370343s ago: executing program 0 (id=1112): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x17, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0xa, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x9, 0xfffffd6d}, 0x10, 0x0, r0, 0x4, &(0x7f0000000240)=[0xffffffffffffffff], &(0x7f0000000280)=[{0x5, 0x3, 0xf}, {0x0, 0x5, 0x6, 0x5}, {0x1, 0x2, 0x9, 0x9}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0xd1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000040), &(0x7f0000000380)=r4}, 0x20) 8m26.140621257s ago: executing program 0 (id=1128): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x481}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d40100004000000018000000000000000000000001400000950000000000000038722c013653e84c584fdd38a1990000dfe83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) 8m25.839224345s ago: executing program 0 (id=1129): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xa}], 0x20}, 0xfc00) sendmsg$inet(r1, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x5744935563dc1402) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a1180021000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8902, &(0x7f0000000440)='|u\xa5\xd2\xb5\xdc\x9387\xe3\xc7\xbc\xe7:t\xbf\xe1\xa7\xa5\xcb\x80\xa6t\xa20\xb1\xd2z\xfe\xea\xfc\x15\r\xd6.eEF\xb8 mC,\xf9gj?v\xa1t\x7f=\x00\x8e0\x95\x1c\x7f\xee\xe9oun*p\xf6\xa2{\xcb#\xb7z%e\\\xd9&\xac9\x88O\xb86g1\x93\xeb\xa9\xc3C\f\x88\x03\xb9\xfbM_\xbf?\xf0\x80\x9e\x97\xe5SL>\x95\xce\xbd\xe1\xe5/b\xf3\x87xV:*\xd1W\x05r\x0eY\x90\xaaD\xed]\r\xa2\xee\xc4Y\xdc\xbc\xb2+\x94*\xc7\xaf\xecg2\x17\x84\x99\xc5\xb4\x87\x9a\xac\xa2\xfew\xfa\xdd\xff\xec\x89\x89\x86\xda\xf2N\xfc\xe26\x87\xe5\xf7|\xa3\x9ce\'{\xd8\xca\xeb\x14\xb0\xdcYb\xcf\xd0\xe1+\xd0\x0f\x14\xe3\x18x)M\x95/|\x96&\xbb0R\x00?\x9a\x8e\\\x17~\n\b\xd43.CrM\xc5\x02I\xd3{Y0I\x17\\\x89\xd6]Z\x95-\x04\xdek') write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef02"], 0x33fe0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0100"}) sendmsg(r3, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x0, @perf_config_ext={0x1e99, 0xe}, 0x9, 0x1, 0xff, 0x6, 0x2, 0x0, 0xc, 0x0, 0x20}, 0x0, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r9, &(0x7f0000000200)}, 0x20) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000002c40)=""/4108, 0x100c}, {&(0x7f0000000580)=""/172, 0xac}, {&(0x7f00000009c0)=""/78, 0x4e}, {&(0x7f0000000740)=""/129, 0x81}, {&(0x7f00000006c0)=""/103, 0x67}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f00000008c0)=""/147, 0x93}, {&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000000500)=""/27, 0x1b}], 0xb}, 0x220) 8m24.925092506s ago: executing program 0 (id=1135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d64050000000000650404000100010104040000f1000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0x36, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r11 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x101a0) recvmsg(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/110, 0x6e}], 0x1}, 0x40002081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3}, 0x94) 8m24.289614801s ago: executing program 0 (id=1139): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socket$kcm(0x10, 0x5, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x38000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x101}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0x1000}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000330000120c0000000c75000002000000000000202200000f000c00000000"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$kcm(r6, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 8m9.067394232s ago: executing program 33 (id=1139): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socket$kcm(0x10, 0x5, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8808}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x38000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x101}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0x1000}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000330000120c0000000c75000002000000000000202200000f000c00000000"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x4b200000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$kcm(r6, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x40000040) 3.753575499s ago: executing program 1 (id=5571): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfe, 0x9, 0x0, 0x0, 0x297f, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3}, 0x0, 0xc8, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11300, 0x101, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fec03e0000000300875a65059ff57b00000000000000000000000000ac1414aa35f088be"], 0xcfa4) 3.606637343s ago: executing program 1 (id=5572): bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000013000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.461714276s ago: executing program 1 (id=5576): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa474}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b000000850000002a000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000080)={'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000005000000020000000100000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000004000000eeff00000000000000000010000000000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) 3.087190415s ago: executing program 3 (id=5582): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) 3.014549147s ago: executing program 3 (id=5583): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) socketpair(0x11, 0x5, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="21272136089cf2107f74af165ebc957239298df07d7870c5e28e38954b7a705bc6757db552c63dfbb308f6bf9419f705ddad374bc5fc21b77486f444708b51cedc30b32b3543bb450109", 0x4a}, {&(0x7f0000000300)="72e04a00fa607f331e1814e103ea0e0b4a48d568aabf17448a74e9d2248a9710b3008413a2fca9d39f26456d14d0c66a4f952cf36adab59ebc46374866262a9e26b71d8ca310db7c77cfc3efabc86d660c22f95f345afbacf7469fd0bd07260afacd48ccd7c0a1d21e4292501f07a0e5cd02b9c41c15db1bf25cae9f700d31c17f3b33cb9a6c932870a9a814e3be2df32d1f3d4b4debbb2a9a795d36392f3bbfc23437528fe174ff4cbe5506a12c558b0e3163fa4a4b3635f92773d6d87e241094ebc72df212ae1758ed6b717d18b776ff3c1381d8a08b539ebb027a389e4d", 0xdf}, {&(0x7f0000000400)="afd33d2637435cdc359dffdd9e283a272f7519daafb3dda610a744b19db7f467c587f3d9ce95bec0075335576ee744aedfa31967890837ea00a9821126fc83f1de6d335990b1c0b4e36a8209a50f9024eba3c9ab775fe38d652421d43b0a068ec12a076cae67fe186f22a35b5764d373c119a839611022cf9e37f06d304e3c5722eb898e2164ec1340d6e357392839d558eaa338bac0", 0x96}], 0x3, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x70, 0x0, 0x7, {[@cipso={0x86, 0x41, 0xffffffffffffffff, [{0x1, 0xf, "84e013cd887445104c8dc10190"}, {0x0, 0x4, "fe83"}, {0x6, 0x9, "75bde4597f8e70"}, {0x0, 0x12, "212f921378c9c829d791fdad41d638ba"}, {0x7, 0xd, "565348e5523c058c44feff"}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0xaf, [@loopback, @private=0xa010100, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x118}, 0x80) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8", 0x4b}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badfa122797d62c09ada748195f31cd5e6fc4b2a327cd453bfacfae9fd63e0c7e07aa29db43fcbec44f24e506fa0c9cc7cefa0570eddd9fb6af7e4ccd0529396472e7dae6d691aad7a376f1d", 0x8d}], 0x2}, 0x20000050) 2.90152838s ago: executing program 1 (id=5586): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x2000, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.804103952s ago: executing program 1 (id=5587): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0x36, 0x0, &(0x7f0000000a40)="e402004470d8d400eb00c15286dd94945ce296f162f1489768c8c3cfd6d5225fc1204ccf1bf9febd0d25aaaa49d4ea55395beec17ac8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x0, 0x1}, {0x10000002, 0x10}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r11 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1d}, [], {0x95, 0x0, 0x20}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r12 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x101a0) recvmsg(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/110, 0x6e}], 0x1}, 0x40002081) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061100400"/24], 0x0, 0x5, 0xb7, &(0x7f000000cf3d)=""/183, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3}, 0x94) 2.791697792s ago: executing program 3 (id=5588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) (async) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x40, 0x1, 0x0, 0xfffffc00}, {0x6, 0x0, 0x0, 0x2000000}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) (async) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) 2.546534398s ago: executing program 5 (id=5592): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(0x0, r1, 0x3fffffffffffffc, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffff7}, 0x105e39, 0x0, 0xfffffffe, 0x5, 0x5, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x12) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000300)=ANY=[@ANYRES8=r5], 0x0, 0x8000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x1c}, 0x94) 2.186554617s ago: executing program 5 (id=5596): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102a00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001900)=ANY=[@ANYBLOB="1b00002419000000000000fa547cc7a2659c02fc51000020eb5f0dbcf19f37c73ca62e9c46784248534ac6828ccaca4648b19cc846e5ead3ab3e3b4c0beecefbe76f118e8cce7acd78dae7cfbe492895e304036f4a8471096e0f00758381db2630dd84ae6efa45ee", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000400000008500000095000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x6, 0x6, 0x0, 0x0, 0x0, 0xd0688, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffc0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0xa0}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018080000000000002400000024000000020000000000009085c33737f200000000040000000300000000000000060400000000000000007a000d"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) 2.186093757s ago: executing program 1 (id=5597): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x3, 0x9, 0x6, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5de6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x60000000}, 0x94) socketpair(0x9, 0x3, 0x1000004, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x67, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x2800, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000005c0)=0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 1.711773618s ago: executing program 3 (id=5598): socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x804, 0x0, 0x0, 0x0, 0xf, 0x6829e557}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) socket$kcm(0x11, 0x0, 0x300) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x6, 0x10}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r2, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000065ba63110c000000000085837910000002000000850000000500000095008000000000009500a5050000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000580)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af448d8bf4a16c4d4aaf896a2bdd50a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab", 0x0, 0x0, 0x0, 0xffffffff, r4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, 0x0, 0x600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x100, 0x102}, 0x114895, 0x4, 0xfffffffd, 0x1, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r10) recvmsg$unix(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000840)=ANY=[@ANYRES16=r5], 0xfdef) recvmsg(r6, &(0x7f0000000500)={0x0, 0x46, 0x0}, 0x40003c22) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.66196327s ago: executing program 5 (id=5599): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23cf0d8e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001cc0)=""/4109, 0x100d}, {&(0x7f0000004000)=""/4108, 0x100c}], 0x2}, 0x10000) 1.466489774s ago: executing program 2 (id=5600): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000bc970a8b02000000090000000000000e02ffffffff0000000a0000000000000203000000000000000500000d00000000060000000100d3d4c1d5647117b0000000000000009200000900000000000000010000000366d51b"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) syz_clone(0x64002800, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0x2}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000b}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081154e81f782db4cb904021d0800fd02fe02e8fe50a10a0006ef258848000c600e41b0000900ac0008112500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 1.374022837s ago: executing program 2 (id=5602): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) 1.277294079s ago: executing program 6 (id=5603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x8000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000b00)="000000952ba3000000000000000089198d", 0x0, 0x6639, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0xf9, 0x15, &(0x7f0000000240)="59f46a30cb92f109319dfad0272b3f62b0c6079bf89c753302bcfb3bed17ead4c68464097fa571d02dc0cab82bd66ad4367a5d614dd77e63c918cb1620e2e753c6949a4417e1a6e32a93d7db032ad9d5543e768605ac2866bb20623f0ac6ece547dd23b47bd7e3f8e8c6721dd554e57a0d857069d7678803da1f3ca860f65b8bc526c2874279a4093737542602638c13a25ea1e77a505eb3b01d18b96324a16e41cb99721b60fb9db7566d663352948626bc4b0eadf29e4ed4e807a4b05f6637fd84bb310e8cdeda25def33e935ff4356832c6c93d770beb948b6fdf2217d32b8b3f961df2819be9da2daa2c9b3ddbe858640e8ca7ec365259", &(0x7f0000000340)=""/21, 0xffff, 0x0, 0xd6, 0xf3, &(0x7f0000000380)="b37b7966d6e0ba4f69ffb37541f6ec3990e95aa27a4c36202f8b1c99e9b4ee18a0a3a022bda9209a58aee4d9f9414bb3ac7e986e70c5c9955a5ba3f5a0c61ccb2d3df5f38353ee57dcf6fc19819d52fb3eb2699924c8587db85c023c1d209b2165ea87976221c0debb2526d93d2e6d1c8295f405285037c5e2e964c9f1952afb9000ccc6b986275789ddf25b31d2dd8dbd1931701f72fdc85b8988f40caf2cfad497f5bb586a4eac2d4294a85a24e0bac684711bf38d2c201c788b5c7d43219e4d9335139de1fd6f8b430b054c0d766b58b9ce3bed24", &(0x7f00000006c0)="fddca4cc6fe020dbda0e33a388cb95f2578bf53cd19247a610dab4ae570e6454d35a46ff9e234ae71eefa7133c80c5b90249ce1da2f3d22f9490be1376b290063a8055d701cbe124f685a072087c609928dfeb3e5fc4538c82e1d06618f6f8a024ab8b055e2b7cd7ef7792b0c16f51e310b2d8b90c79660411ca55da2af55545d54ff084b269e4ec48e30793f4ef84bc1a0cc843b918379799ed44929d0ed7c990ecaa3e46ae138e52c2b5cfe17b0e30b71fdf2653e2027af3cae592d0a7093fdca487f675e9bf34a044c548fb7628a130dec66a92b5d8233b52161e98751599138971cc0e9fb79ebe6d378d11628006968611", 0x1, 0x0, 0x7ff}, 0x50) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="720a0500000000007110360000000000178023ee6c0000000000000000950000000000000072"], &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000009c0)={0x2, &(0x7f0000000a00)=[{0x30, 0x80, 0x5, 0xfffff030}, {0x6, 0x0, 0x8, 0x200007}]}) 1.256453819s ago: executing program 2 (id=5604): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000120081a2040f46ecdb4cb9d8a7480ef4100000", 0x17}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.134367462s ago: executing program 6 (id=5605): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) 1.112113833s ago: executing program 6 (id=5606): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000080)="d4", 0x1}], 0x1}, 0x8001) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23cf0d8e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x800) recvmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001cc0)=""/4109, 0x100d}, {&(0x7f0000004000)=""/4108, 0x100c}], 0x2}, 0x10000) (fail_nth: 2) 722.373882ms ago: executing program 3 (id=5607): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000021010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) 682.971693ms ago: executing program 5 (id=5608): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xc, &(0x7f00000008c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xc, &(0x7f00000008c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b878847000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006b009a3fe3d86e17aa31106b878847000000000000050000006504001a0038001d002a31a0e69ee52bd34460bc06000000a705251e6182949a3651f60a84c9f0d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000900)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000900)={r2}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001700)) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="5c00000012006bab9a3fe3d96e17aa0a046b876c1d0048007ea60864160af36504001a003800eb0ea3fa01de8eb006000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb000000000017a7016306569fa5dad17a91", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003ec0)=""/4047, 0xfcf}, {&(0x7f0000000140)=""/187, 0xbb}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000003dc0)=""/207, 0xcf}, {&(0x7f0000001c00)=""/173, 0xad}, {&(0x7f0000001cc0)=""/88, 0x58}, {&(0x7f00000003c0)=""/92, 0x5c}, {&(0x7f0000000440)=""/113, 0x71}], 0x8}, 0x20) recvmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) (async) recvmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10000) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xd}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0x6, 0x0, 0x1, 0x40, 0x10}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa31}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x3, 0x8, 0x4}, 0x10, 0x23c4c, 0xffffffffffffffff, 0x8, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x0, 0x5, 0x0, 0xb}, {0x2, 0x2, 0xc}, {0x4, 0x3, 0x3, 0x2}, {0x1, 0x5, 0x9}, {0x2, 0x9, 0x7, 0x3}, {0x0, 0x2}, {0x4, 0x4, 0x4, 0x9}, {0x3, 0x1, 0x2, 0x8}], 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="18430000fdffffff000000000000000018000000010000800000000006000000181100001148fae5b27a6cc9d978a5fbc5c438e31193f5800799722e4f7e27c6801459df8a8e1e701357e942638155d468064b759634e8413d00"/100, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0xa, 0xae, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a00)=[0x1, 0xffffffffffffffff, r4], &(0x7f0000000a40)=[{0x1, 0x5, 0xa, 0xa}, {0x2, 0x1, 0xb, 0xc}, {0x4, 0x2, 0xf, 0x5}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@ifindex, 0x36, 0x0, 0x5, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000b80)=[0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r8, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000d00)}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d80), 0x4) (async) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000d80), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r9, @ANYRES32=r5, @ANYBLOB="1b00000000200000", @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="09a50bf4ad6009ffc5e52fbdd59188aebaaae134c0ea9b60b0abdbd0fb5995", @ANYRES64=r7], 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x39) 542.608286ms ago: executing program 3 (id=5609): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000200000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1e00000077000000ab0400000700000002000300", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x38, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x20044010) close(r2) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000200000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080020e9ff0000000000000000000018110000794fe68bf2383854f39fe74dca19894e84c927034d4b43c413426f85b54ae67978f690660eceeae1f65e2b290b18ecc9f9b3e2c6a684fa55ccfa2be9f22714d5cd5d4223b6", @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc402000008000000182200", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b700000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 512.905448ms ago: executing program 5 (id=5610): socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a00000000000fffff00000b02000000000000000300000d000000000000000003000000030000000300000004000000030000000000000000000005000000000000005f", @ANYRES64=r0], &(0x7f0000000900)=""/4105, 0x5e, 0x1009, 0x1}, 0x28) 417.75894ms ago: executing program 5 (id=5611): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xfef5, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc09a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r2, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 322.515782ms ago: executing program 2 (id=5612): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0xd69e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x29, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000005000000050000000bc970a8b02000000090000000000000e02ffffffff0000000a0000000000000203000000000000000500000d00000000060000000100d3d4c1d5647117b0000000000000009200000900000000000000010000000366d51b"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) syz_clone(0x64002800, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0x2}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000b}, 0x0, 0x6, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081154e81f782db4cb904021d0800fd02fe02e8fe50a10a0006ef258848000c600e41b0000900ac0008112500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 267.669593ms ago: executing program 2 (id=5613): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0xc05}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03"], 0x50) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x900, 0x3, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) recvmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) sendmsg$inet(r2, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 221.701084ms ago: executing program 6 (id=5614): r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) 165.382546ms ago: executing program 2 (id=5615): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x3510, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c00000009000000feffffff4000000000800000", @ANYRES32, @ANYBLOB="08000000000000000000000000000000000000002d0982d6f3576a8362f7e9e754b47a5e89c7592df0e359644529a70dc6db3bb5c600832a99f0a7e0d62d0022f187e63359f096218624edfb7663c001a3eb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="186400000e000000000000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000a6f2453dfbd07d9a87260bb3857cbbb2caffa1b11eff451568822079d785ecba8de70f7c080f42456e4ba03152ced9be0c8e6faff3361a823530992ccdd332341a901b91a0"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xaa, &(0x7f0000000280)=""/170, 0x41000, 0x30, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xe, 0xa, 0xc2a}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0xf, 0x6}, {0x1, 0x4, 0x0, 0x4}, {0x5, 0x4, 0x1, 0xc}], 0x10, 0xd2bb}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r7, 0x20, &(0x7f0000000a00)={&(0x7f00000008c0)=""/193, 0xc1, 0x0, &(0x7f00000009c0)=""/46, 0x2e}}, 0x10) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r10, r8, 0x0, r7}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000580)={0xffffffffffffffff, r6}) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 101.145397ms ago: executing program 6 (id=5616): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8, @ANYBLOB="00000000f3ffffffff7459e3cd2e5f"], 0x48) 0s ago: executing program 6 (id=5617): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) kernel console output (not intermixed with test programs): netdevsim5 netdevsim1: renamed from eth1 [ 821.952093][T14329] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3237'. [ 821.966006][T14330] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3237'. [ 821.978919][T14123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 822.002726][T14123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 822.132741][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 822.198888][T14334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.471034][T14123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.514440][T14345] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3240'. [ 822.549056][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 822.575968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 822.640664][T14352] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3242'. [ 822.666716][T14123] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.711828][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 822.731872][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 822.805074][T14018] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.812255][T14018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.861302][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 822.908748][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 822.951911][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.978856][T14018] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.986044][T14018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.020355][T14363] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3243'. [ 823.030035][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 823.058104][T14363] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3243'. [ 823.082369][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 823.112323][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 823.145793][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 823.163447][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 823.190611][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 823.226798][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 823.271866][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 823.319833][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 823.360502][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 823.381749][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 823.438794][T14123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 823.670704][ T8905] Bluetooth: hci1: command 0x0419 tx timeout [ 823.831965][T14375] device syzkaller0 entered promiscuous mode [ 823.869175][T14385] validate_nla: 2 callbacks suppressed [ 823.869193][T14385] netlink: 'syz.3.3248': attribute type 10 has an invalid length. [ 824.028506][T14385] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 824.361455][T14398] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 824.395610][T14398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 824.436109][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 824.453639][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 824.497633][T14123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.027733][T14420] netlink: 'syz.2.3256': attribute type 10 has an invalid length. [ 825.205053][T14420] team0: Device hsr_slave_0 failed to register rx_handler [ 825.591226][T14418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.791180][T14442] cgroup: fork rejected by pids controller in /syz6 [ 825.930416][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 825.976382][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 826.362665][T14477] device syzkaller0 entered promiscuous mode [ 826.439253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 826.473380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 826.494750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 826.565340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 826.606154][T14570] __nla_validate_parse: 3 callbacks suppressed [ 826.606173][T14570] netlink: 10490 bytes leftover after parsing attributes in process `syz.3.3268'. [ 826.748768][T14123] device veth0_vlan entered promiscuous mode [ 826.816478][T14123] device veth1_vlan entered promiscuous mode [ 826.994360][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 827.043337][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 827.115152][T14123] device veth0_macvtap entered promiscuous mode [ 827.153577][T14123] device veth1_macvtap entered promiscuous mode [ 827.230793][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.256433][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.324167][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.342876][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.359420][T14123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.368221][T14594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3274'. [ 827.387959][T14591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3273'. [ 827.410624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 827.421377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 827.441510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 827.484043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 827.499721][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.517303][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.532661][T14123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.555086][T14123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.576204][T14123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.588779][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 827.598577][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 827.612678][T14123] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.623439][T14123] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.633327][T14123] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.652730][T14123] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.748528][ T4256] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.854539][T14604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3277'. [ 827.868787][T14605] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3276'. [ 827.909021][ T4256] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.926723][T14605] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3276'. [ 827.977884][ T4256] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.008428][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.036457][ T4256] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.049131][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.092259][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 828.157405][ T4298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.170132][ T4298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.201588][T14018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 828.339401][T14596] chnl_net:caif_netlink_parms(): no params data found [ 828.627020][T14596] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.635598][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.644550][T14596] device bridge_slave_0 entered promiscuous mode [ 828.654785][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.662153][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.670590][T14596] device bridge_slave_1 entered promiscuous mode [ 828.808740][T14596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.848973][T14596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.210720][T14624] device syzkaller0 entered promiscuous mode [ 829.466613][T14596] team0: Port device team_slave_0 added [ 829.477077][T14650] device syzkaller0 entered promiscuous mode [ 829.485359][T14653] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3285'. [ 829.505227][T14596] team0: Port device team_slave_1 added [ 829.582436][ T8899] Bluetooth: hci2: command 0x0409 tx timeout [ 829.628537][T14596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.662761][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.721167][T14596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.821293][T14596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.839060][T14596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 829.945518][T14596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.971418][T14680] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3292'. [ 830.111677][T14680] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.3292'. [ 830.206857][T14596] device hsr_slave_0 entered promiscuous mode [ 830.241758][T14596] device hsr_slave_1 entered promiscuous mode [ 830.268558][T14596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 830.278537][T14596] Cannot create hsr debugfs directory [ 830.608169][T14689] device syzkaller0 entered promiscuous mode [ 831.009416][T14723] netlink: 'syz.2.3305': attribute type 1 has an invalid length. [ 831.033662][T14723] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3305'. [ 831.546706][T14742] device syzkaller0 entered promiscuous mode [ 831.662553][ T8993] Bluetooth: hci2: command 0x041b tx timeout [ 831.721651][T14755] device syzkaller0 entered promiscuous mode [ 831.852423][T14764] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3315'. [ 832.031088][T14764] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.3315'. [ 832.420098][ T4256] device hsr_slave_0 left promiscuous mode [ 832.428410][ T4256] device hsr_slave_1 left promiscuous mode [ 832.439416][ T4256] bridge0: port 4(hsr0) entered disabled state [ 832.449640][ T4256] bridge0: port 3(dummy0) entered disabled state [ 832.460038][ T4256] device bridge_slave_1 left promiscuous mode [ 832.466539][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.476059][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.487452][ T4256] device veth1_macvtap left promiscuous mode [ 832.495031][ T4256] device veth1_vlan left promiscuous mode [ 832.500894][ T4256] device veth0_vlan left promiscuous mode [ 832.746662][ T4256] team0 (unregistering): Port device team_slave_1 removed [ 832.761792][ T4256] team0 (unregistering): Port device team_slave_0 removed [ 833.108957][T14596] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 833.174309][T14596] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 833.252917][T14596] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 833.288621][T14596] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 833.602066][T14825] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3330'. [ 833.631594][T14825] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3330'. [ 833.661059][T14596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.735077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 833.759179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 833.777088][ T8993] Bluetooth: hci2: command 0x040f tx timeout [ 833.801154][T14596] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.839993][T14829] netlink: 63763 bytes leftover after parsing attributes in process `syz.2.3331'. [ 833.858164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 833.875176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 833.908587][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.915788][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.967999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 833.976715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.005532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.024708][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.031905][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.046181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 834.114552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 834.137561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 834.170174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 834.470706][T14838] device syzkaller0 entered promiscuous mode [ 834.510272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 834.535301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 834.550007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 834.573751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.589753][T14846] netlink: 'syz.3.3337': attribute type 41 has an invalid length. [ 834.600156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.614154][T14842] netlink: 'syz.5.3336': attribute type 10 has an invalid length. [ 834.807615][T14846] netlink: 'syz.3.3337': attribute type 41 has an invalid length. [ 834.838785][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 834.849453][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 834.869388][T14596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.893046][T14848] netlink: 'syz.3.3337': attribute type 41 has an invalid length. [ 835.159187][T14867] netlink: 'syz.5.3342': attribute type 10 has an invalid length. [ 835.241683][T14867] device veth0_macvtap left promiscuous mode [ 835.305936][T14881] syz.1.3344[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.307891][T14881] syz.1.3344[14881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 835.547259][T14875] netlink: 'syz.3.3343': attribute type 10 has an invalid length. [ 835.656348][T14875] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 835.832952][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 836.021475][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 836.036453][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 836.052335][T14900] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3348'. [ 836.114404][T14596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.159392][T14900] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3348'. [ 836.906699][T14906] device syzkaller0 entered promiscuous mode [ 837.288912][T14924] netlink: 'syz.5.3355': attribute type 10 has an invalid length. [ 837.684851][T14938] device syzkaller0 entered promiscuous mode [ 837.726818][T14944] netlink: 'syz.2.3360': attribute type 2 has an invalid length. [ 837.857603][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 837.897696][T14957] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3361'. [ 837.912870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 837.959823][T14954] netlink: 'syz.3.3361': attribute type 13 has an invalid length. [ 838.083114][T14596] device veth0_vlan entered promiscuous mode [ 838.091426][T14962] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.3363'. [ 838.127822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 838.151367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 838.195993][T14962] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.3363'. [ 838.243561][T14967] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3364'. [ 838.302439][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 838.318360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 838.350408][T14596] device veth1_vlan entered promiscuous mode [ 838.374542][T14967] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.3364'. [ 838.532229][T14596] device veth0_macvtap entered promiscuous mode [ 838.581738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 838.598721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 838.618118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 838.798855][T14987] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 838.850355][T14987] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3369'. [ 838.899678][T14974] device syzkaller0 entered promiscuous mode [ 838.925998][T14596] device veth1_macvtap entered promiscuous mode [ 838.964410][T14983] netlink: 'syz.3.3368': attribute type 21 has an invalid length. [ 838.982873][T14986] device lo entered promiscuous mode [ 838.991602][T14986] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 839.129162][T14992] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3370'. [ 839.173652][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.301965][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.336336][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.385202][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.413434][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.500225][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.539196][T14596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.584375][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 839.604323][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 839.665215][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 839.700805][T15009] netlink: 'syz.1.3375': attribute type 10 has an invalid length. [ 839.799176][T15009] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 839.846845][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.872157][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.938900][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.958773][T15032] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3380'. [ 839.969404][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.985271][T14596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.997606][T14596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.058045][T14596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.085555][T15032] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3380'. [ 840.108829][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 840.159262][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 840.250680][T14596] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.270038][T14596] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.299537][T14596] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.333390][T14596] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.476698][T15054] netlink: 'syz.2.3385': attribute type 10 has an invalid length. [ 840.504864][T15054] team0: Device hsr_slave_0 failed to register rx_handler [ 840.605049][T15053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.665207][T15050] device syzkaller0 entered promiscuous mode [ 840.935142][T15067] netlink: 'syz.3.3389': attribute type 10 has an invalid length. [ 840.943392][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.951699][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.981120][T15067] netlink: 'syz.3.3389': attribute type 4 has an invalid length. [ 841.014835][T15067] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3389'. [ 841.054242][T15067] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 841.087785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 841.176955][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.179977][T15074] netlink: 'syz.1.3392': attribute type 4 has an invalid length. [ 841.207076][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.225161][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 842.714665][T15087] device syzkaller0 entered promiscuous mode [ 842.995287][T15104] __nla_validate_parse: 4 callbacks suppressed [ 842.995307][T15104] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3401'. [ 843.858453][T15111] device syzkaller0 entered promiscuous mode [ 843.866232][T15118] validate_nla: 1 callbacks suppressed [ 843.866252][T15118] netlink: 'syz.5.3403': attribute type 2 has an invalid length. [ 843.898539][T15122] netlink: 'syz.1.3404': attribute type 10 has an invalid length. [ 843.979607][T15122] team0: Device wg1 is of different type [ 844.120753][T15128] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3407'. [ 844.136173][T15115] delete_channel: no stack [ 844.302845][T15141] netlink: 26 bytes leftover after parsing attributes in process `syz.6.3411'. [ 844.465426][T15148] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3413'. [ 844.488770][T15148] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.3413'. [ 845.388427][T15166] netlink: zone id is out of range [ 845.434336][T15166] netlink: set zone limit has 8 unknown bytes [ 846.164313][T15177] device syzkaller0 entered promiscuous mode [ 846.548425][T15204] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3429'. [ 846.595609][T15204] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.3429'. [ 846.649011][T15203] netlink: 'syz.6.3431': attribute type 1 has an invalid length. [ 846.659159][T15205] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.3430'. [ 846.677824][T15203] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.3431'. [ 847.309297][T15220] device syzkaller0 entered promiscuous mode [ 848.639301][T15242] device syzkaller0 entered promiscuous mode [ 848.708325][T15262] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3451'. [ 848.998395][T15268] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3452'. [ 849.032406][T15268] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3452'. [ 849.441822][T15271] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3454'. [ 849.860567][T15282] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3458'. [ 849.877459][T15284] netlink: 'syz.2.3459': attribute type 10 has an invalid length. [ 849.897938][T15284] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3459'. [ 849.913393][T15284] team0: Device hsr_slave_0 failed to register rx_handler [ 850.791058][T15312] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3469'. [ 851.007567][T15300] device syzkaller0 entered promiscuous mode [ 851.040552][T15302] netlink: 'syz.6.3467': attribute type 10 has an invalid length. [ 851.076409][T15302] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 851.180100][T15312] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3469'. [ 851.200550][T15311] netlink: 'syz.5.3471': attribute type 10 has an invalid length. [ 851.440498][T15324] netlink: 'syz.1.3474': attribute type 46 has an invalid length. [ 851.531218][T15324] netlink: 'syz.1.3474': attribute type 46 has an invalid length. [ 851.618164][T15327] netlink: 'syz.2.3477': attribute type 10 has an invalid length. [ 852.269016][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 852.284084][T15342] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.3482'. [ 852.326004][T15328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.370252][T15328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 852.387496][T15328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.477488][T15340] netlink: 'syz.2.3481': attribute type 2 has an invalid length. [ 852.648230][T15352] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.3485'. [ 852.947891][T15349] device syzkaller0 entered promiscuous mode [ 853.036710][T15354] device syzkaller0 entered promiscuous mode [ 853.275878][T15371] netlink: 'syz.2.3490': attribute type 1 has an invalid length. [ 854.896569][T15418] __nla_validate_parse: 6 callbacks suppressed [ 854.896587][T15418] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.3506'. [ 854.927211][T15395] device syzkaller0 entered promiscuous mode [ 854.951157][T15404] netlink: 'syz.1.3503': attribute type 10 has an invalid length. [ 854.963555][T15417] netlink: 'syz.2.3508': attribute type 10 has an invalid length. [ 855.004388][T15417] team0: Device hsr_slave_0 failed to register rx_handler [ 855.109463][T15418] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.3506'. [ 855.129498][T15415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 855.241627][T15424] netlink: 'syz.5.3509': attribute type 10 has an invalid length. [ 855.252874][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3509'. [ 855.277594][T15424] netlink: 'syz.5.3509': attribute type 10 has an invalid length. [ 855.310625][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3509'. [ 855.417563][T15433] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 855.463738][T15433] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3513'. [ 855.520792][T15436] netlink: 'syz.2.3516': attribute type 2 has an invalid length. [ 855.532274][T15433] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 855.540453][T15433] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3513'. [ 855.557873][T15437] netlink: 'syz.2.3516': attribute type 2 has an invalid length. [ 855.597663][T15438] netlink: 'syz.5.3515': attribute type 2 has an invalid length. [ 855.630379][T15433] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 855.665723][T15433] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3513'. [ 855.680890][T15437] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3516'. [ 855.695678][T15433] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3513'. [ 855.734849][T15433] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.3513'. [ 856.765489][T15466] device syzkaller0 entered promiscuous mode [ 857.707027][T15509] device syzkaller0 entered promiscuous mode [ 857.901500][T15512] device syzkaller0 entered promiscuous mode [ 859.051101][T15564] device syzkaller0 entered promiscuous mode [ 859.100162][T15560] device syzkaller0 entered promiscuous mode [ 859.340803][T15572] device syzkaller0 entered promiscuous mode [ 860.010115][T15603] __nla_validate_parse: 42 callbacks suppressed [ 860.010133][T15603] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.3572'. [ 860.314163][T15602] device syzkaller0 entered promiscuous mode [ 860.336687][T15603] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.3572'. [ 860.690211][T15631] validate_nla: 37 callbacks suppressed [ 860.690228][T15631] netlink: 'syz.6.3584': attribute type 10 has an invalid length. [ 860.785683][T15631] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3584'. [ 860.888137][T15631] team0: Device hsr_slave_0 failed to register rx_handler [ 861.159743][T15648] netlink: 'syz.6.3590': attribute type 10 has an invalid length. [ 861.540120][T15665] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3596'. [ 861.560692][T15653] device syzkaller0 entered promiscuous mode [ 861.591903][T15666] netlink: 'syz.1.3597': attribute type 3 has an invalid length. [ 861.606563][T15666] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3597'. [ 861.701049][T15665] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3596'. [ 861.841347][T15668] netlink: 'syz.6.3598': attribute type 10 has an invalid length. [ 861.910624][T15668] device veth0_macvtap left promiscuous mode [ 861.957711][T15679] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.3602'. [ 862.183083][T15675] netlink: 'syz.3.3599': attribute type 10 has an invalid length. [ 862.207033][T15678] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3601'. [ 862.266317][T15687] netlink: 'syz.5.3604': attribute type 2 has an invalid length. [ 862.327679][T15689] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3605'. [ 862.360487][T15689] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.3605'. [ 862.525631][T15701] netlink: 'syz.5.3609': attribute type 1 has an invalid length. [ 862.630014][T15696] device syzkaller0 entered promiscuous mode [ 863.017260][T15706] device syzkaller0 entered promiscuous mode [ 863.617640][T15743] netlink: 'syz.2.3624': attribute type 10 has an invalid length. [ 863.712408][T15743] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 863.861777][T15752] netlink: 'syz.6.3626': attribute type 10 has an invalid length. [ 863.913233][T15752] team0: Device hsr_slave_0 failed to register rx_handler [ 864.037970][T15751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.286614][T15760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 864.316765][T15760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 864.600225][T15778] netlink: 'syz.2.3634': attribute type 2 has an invalid length. [ 865.405052][T15805] bond0: (slave geneve0): Releasing backup interface [ 865.500975][T15810] __nla_validate_parse: 9 callbacks suppressed [ 865.501004][T15810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3644'. [ 865.864659][T15822] validate_nla: 2 callbacks suppressed [ 865.864678][T15822] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 865.882098][T15822] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.3646'. [ 865.927417][T15817] device syzkaller0 entered promiscuous mode [ 865.947401][T15815] netlink: 'syz.3.3646': attribute type 10 has an invalid length. [ 865.957288][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3646'. [ 865.968768][T15815] device lo left promiscuous mode [ 865.975254][T15815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 866.004072][T15815] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 866.023761][T15815] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 866.045421][T15815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.063576][T15820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3648'. [ 866.385790][T15837] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3653'. [ 866.407372][T15839] netlink: 'syz.1.3654': attribute type 10 has an invalid length. [ 866.456301][T15839] team0: Device hsr_slave_0 failed to register rx_handler [ 866.651165][T15846] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3656'. [ 866.661556][T15838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.687495][T15846] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3656'. [ 867.037869][T15854] device syzkaller0 entered promiscuous mode [ 867.117983][T15874] netlink: 'syz.2.3669': attribute type 21 has an invalid length. [ 867.127196][T15874] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3669'. [ 867.458733][T15890] netlink: 'syz.2.3674': attribute type 1 has an invalid length. [ 867.519118][T15890] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3674'. [ 867.771281][T15902] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3679'. [ 867.931306][T15904] device syzkaller0 entered promiscuous mode [ 868.177315][T15924] device syzkaller0 entered promiscuous mode [ 869.602926][T15968] device syzkaller0 entered promiscuous mode [ 869.637182][T15970] netlink: 'syz.5.3702': attribute type 10 has an invalid length. [ 869.671884][T15970] team0: Device hsr_slave_0 failed to register rx_handler [ 869.860649][T15984] netlink: 'syz.5.3707': attribute type 10 has an invalid length. [ 869.920843][T15984] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 870.037029][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.043507][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.450759][T16008] netlink: 'syz.1.3716': attribute type 10 has an invalid length. [ 870.734546][T16020] netlink: 'syz.6.3721': attribute type 2 has an invalid length. [ 871.120699][T16023] device syzkaller0 entered promiscuous mode [ 871.182772][T16024] netlink: 'syz.3.3720': attribute type 10 has an invalid length. [ 871.216181][T16035] netlink: 'syz.1.3725': attribute type 1 has an invalid length. [ 871.304298][T16035] __nla_validate_parse: 6 callbacks suppressed [ 871.304317][T16035] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3725'. [ 871.604793][T16049] device syzkaller0 entered promiscuous mode [ 871.899647][T16063] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.3735'. [ 871.974934][T16063] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.3735'. [ 871.988739][T16066] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.3737'. [ 872.039344][T16068] netlink: 'syz.1.3738': attribute type 10 has an invalid length. [ 872.608507][T16072] device syzkaller0 entered promiscuous mode [ 872.669054][T16087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3742'. [ 872.701138][T16091] netlink: 'syz.6.3745': attribute type 10 has an invalid length. [ 872.718394][T16091] team0: Device hsr_slave_0 failed to register rx_handler [ 872.823864][T16090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.166385][T16111] netlink: 'syz.1.3750': attribute type 2 has an invalid length. [ 873.402353][T16119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 873.473256][T16122] netlink: 'syz.6.3753': attribute type 2 has an invalid length. [ 873.599752][T16120] netlink: 189104 bytes leftover after parsing attributes in process `syz.3.3748'. [ 873.751245][T16133] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3756'. [ 873.773096][T16133] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3756'. [ 874.284741][T16147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3761'. [ 874.890229][T16156] device syzkaller0 entered promiscuous mode [ 876.979431][T16215] device syzkaller0 entered promiscuous mode [ 877.096413][T16230] netlink: 'syz.1.3789': attribute type 1 has an invalid length. [ 877.172068][T16230] __nla_validate_parse: 6 callbacks suppressed [ 877.172088][T16230] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3789'. [ 877.198309][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 877.845870][T16252] device syzkaller0 entered promiscuous mode [ 877.881464][T16255] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3797'. [ 877.952540][T16255] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3797'. [ 878.160259][T16260] raw_sendmsg: syz.2.3799 forgot to set AF_INET. Fix it! [ 878.447667][T16269] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3802'. [ 878.472081][T16269] tc_dump_action: action bad kind [ 878.592123][T16273] netlink: 'syz.6.3802': attribute type 10 has an invalid length. [ 878.600009][T16273] netlink: 212412 bytes leftover after parsing attributes in process `syz.6.3802'. [ 878.691392][T16273] openvswitch: netlink: Flow key attr not present in new flow. [ 879.574543][T16277] device syzkaller0 entered promiscuous mode [ 879.855749][T16295] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.3809'. [ 879.945890][T16295] openvswitch: netlink: Flow key attr not present in new flow. [ 880.491224][T16314] netlink: 'syz.3.3819': attribute type 10 has an invalid length. [ 880.524213][T16318] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3816'. [ 880.598216][T16314] team0: Device hsr_slave_0 failed to register rx_handler [ 880.697090][T16318] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3816'. [ 880.745764][T16321] netlink: 'syz.1.3821': attribute type 10 has an invalid length. [ 881.089231][T16333] netlink: 208644 bytes leftover after parsing attributes in process `syz.1.3825'. [ 881.162257][T16333] netlink: 'syz.1.3825': attribute type 1 has an invalid length. [ 881.767894][T16327] device syzkaller0 entered promiscuous mode [ 881.988796][T16348] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3830'. [ 881.998777][T16346] netlink: 'syz.3.3829': attribute type 10 has an invalid length. [ 882.256760][T16355] netlink: 'syz.6.3832': attribute type 2 has an invalid length. [ 882.465324][T16362] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 882.498809][T16362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 883.008189][T16375] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3838'. [ 883.035491][T16375] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3838'. [ 883.098928][T16378] netlink: 'syz.2.3840': attribute type 1 has an invalid length. [ 883.145244][T16378] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3840'. [ 883.837788][T16383] device syzkaller0 entered promiscuous mode [ 883.861851][T16380] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 884.571808][T16405] device syzkaller0 entered promiscuous mode [ 885.112201][T16420] netlink: 'syz.6.3855': attribute type 10 has an invalid length. [ 885.135563][T16427] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3854'. [ 885.307992][T16420] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 885.335896][T16427] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.3854'. [ 885.531685][T16431] device syzkaller0 entered promiscuous mode [ 885.552879][T16434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3859'. [ 885.895942][T16440] netlink: 'syz.2.3861': attribute type 10 has an invalid length. [ 885.943913][T16440] team0: Device hsr_slave_0 failed to register rx_handler [ 886.043443][T16439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.178469][T16449] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3865'. [ 886.317637][T16449] team0: Port device team_slave_0 removed [ 886.413653][T16454] netlink: 'syz.1.3867': attribute type 2 has an invalid length. [ 886.698428][T16458] netlink: 'syz.6.3869': attribute type 2 has an invalid length. [ 887.512633][T16469] device syzkaller0 entered promiscuous mode [ 887.564190][T16477] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3873'. [ 887.604306][T16477] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3873'. [ 887.852965][T16485] device wlan1 entered promiscuous mode [ 887.983993][T16487] netlink: 'syz.3.3877': attribute type 2 has an invalid length. [ 888.013498][T16487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3877'. [ 888.109595][T16493] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3879'. [ 888.269744][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3881'. [ 889.269158][T16514] device syzkaller0 entered promiscuous mode [ 889.323325][T16528] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3892'. [ 889.342806][T16524] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3890'. [ 889.393219][T16535] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3891'. [ 889.443303][T16535] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.3891'. [ 890.316371][T16582] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3910'. [ 890.372269][T16582] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 890.626867][T16589] device syzkaller0 entered promiscuous mode [ 890.705165][T16594] netlink: 'syz.1.3917': attribute type 3 has an invalid length. [ 890.786721][T16594] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3917'. [ 890.836990][T16602] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3916'. [ 890.891159][ T4254] tipc: Subscription rejected, illegal request [ 891.979813][T16644] netlink: set zone limit has 8 unknown bytes [ 891.994756][T16647] netlink: 'syz.1.3935': attribute type 10 has an invalid length. [ 892.038293][T16647] team0: Device hsr_slave_0 failed to register rx_handler [ 892.093931][T16642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 892.101197][T16642] IPv6: NLM_F_CREATE should be set when creating new route [ 892.108536][T16642] IPv6: NLM_F_CREATE should be set when creating new route [ 892.115839][T16642] IPv6: NLM_F_CREATE should be set when creating new route [ 892.352919][T16659] netlink: 'syz.6.3941': attribute type 10 has an invalid length. [ 892.399876][T16659] device wlan1 left promiscuous mode [ 892.542256][ T8993] Bluetooth: hci3: command 0x0406 tx timeout [ 892.730942][T16673] netlink: 'syz.5.3945': attribute type 10 has an invalid length. [ 892.871686][T16678] netlink: 'syz.5.3947': attribute type 2 has an invalid length. [ 893.166721][T16686] __nla_validate_parse: 5 callbacks suppressed [ 893.166740][T16686] netlink: 202920 bytes leftover after parsing attributes in process `syz.6.3950'. [ 893.590859][T16710] bridge0: port 3(batadv0) entered blocking state [ 893.689677][T16710] bridge0: port 3(batadv0) entered disabled state [ 893.722527][T16710] device batadv0 entered promiscuous mode [ 893.809579][T16710] bridge0: port 3(batadv0) entered blocking state [ 893.816643][T16710] bridge0: port 3(batadv0) entered forwarding state [ 893.970950][ T4254] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 893.981082][ T4254] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 894.084157][T16708] netlink: 'syz.6.3957': attribute type 29 has an invalid length. [ 894.176172][T16708] netlink: 'syz.6.3957': attribute type 29 has an invalid length. [ 894.567765][T16730] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3963'. [ 894.621653][T16730] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.3963'. [ 894.805981][T16739] device syzkaller0 entered promiscuous mode [ 895.142792][T16753] netlink: 'syz.1.3974': attribute type 10 has an invalid length. [ 895.219913][T16755] netlink: 'syz.6.3975': attribute type 10 has an invalid length. [ 895.303466][T16755] team0: Device hsr_slave_0 failed to register rx_handler [ 895.416111][T16757] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3976'. [ 895.432454][T16754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.460872][T16763] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3978'. [ 895.522255][T16757] netlink: 'syz.3.3976': attribute type 25 has an invalid length. [ 895.573316][T16757] netlink: 'syz.3.3976': attribute type 25 has an invalid length. [ 896.302630][T16775] netlink: 'syz.6.3981': attribute type 2 has an invalid length. [ 896.834845][T16799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3985'. [ 897.089332][T16787] netlink: 'syz.5.3986': attribute type 2 has an invalid length. [ 897.311481][T16808] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.3990'. [ 897.368153][T16808] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.3990'. [ 897.530463][T16814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3993'. [ 897.688782][T16825] netlink: 'syz.5.3998': attribute type 1 has an invalid length. [ 897.707992][T16825] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.3998'. [ 898.197620][T16844] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4004'. [ 898.447311][T16848] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4007'. [ 898.980581][T16877] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4014'. [ 899.092193][T16877] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4014'. [ 899.733815][T16905] netlink: 'syz.6.4022': attribute type 1 has an invalid length. [ 899.741622][T16905] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4022'. [ 900.258492][T16918] ÿÿÿÿ: port 1(macsec0) entered blocking state [ 900.275097][T16918] ÿÿÿÿ: port 1(macsec0) entered disabled state [ 900.287021][T16918] device macsec0 entered promiscuous mode [ 900.694916][T16929] device syzkaller0 entered promiscuous mode [ 900.958395][T16949] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4036'. [ 901.015433][T16949] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4036'. [ 901.400631][T16951] device syzkaller0 entered promiscuous mode [ 901.773379][T16984] netlink: 'syz.2.4052': attribute type 10 has an invalid length. [ 901.798177][T16984] team0: Device hsr_slave_0 failed to register rx_handler [ 902.068906][T16996] netlink: 'syz.1.4055': attribute type 10 has an invalid length. [ 902.334243][T17004] netlink: 'syz.1.4058': attribute type 10 has an invalid length. [ 902.407860][T17008] netlink: 'syz.6.4060': attribute type 2 has an invalid length. [ 902.482276][T17009] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4059'. [ 902.799322][T17009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.904893][T17009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.918109][T17025] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4061'. [ 902.955946][T17009] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 902.985012][T17009] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 903.012567][T17009] bond0 (unregistering): Released all slaves [ 903.373089][T17015] device syzkaller0 entered promiscuous mode [ 903.404364][T17025] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4061'. [ 903.467100][T17029] netlink: 'syz.5.4067': attribute type 1 has an invalid length. [ 903.486078][T17029] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4067'. [ 903.867794][T17032] device syzkaller0 entered promiscuous mode [ 904.403326][T17065] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4080'. [ 904.418735][T17065] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4080'. [ 904.860025][T17072] device syzkaller0 entered promiscuous mode [ 904.877537][T17062] netlink: 'syz.3.4079': attribute type 10 has an invalid length. [ 905.170987][T17077] netlink: 'syz.5.4084': attribute type 10 has an invalid length. [ 905.330833][T17084] device syzkaller0 entered promiscuous mode [ 905.342747][T17087] netlink: 'syz.1.4088': attribute type 10 has an invalid length. [ 905.636225][T17096] netlink: 'syz.2.4093': attribute type 10 has an invalid length. [ 905.675056][T17096] team0: Device hsr_slave_0 failed to register rx_handler [ 905.763681][T17095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.928161][T17103] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4096'. [ 905.989689][T17108] netlink: 'syz.2.4098': attribute type 2 has an invalid length. [ 907.027920][T17118] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4099'. [ 907.028743][T17113] device syzkaller0 entered promiscuous mode [ 907.072601][T17116] netlink: 'syz.2.4102': attribute type 10 has an invalid length. [ 907.111344][T17118] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4099'. [ 907.147642][T17125] netlink: 'syz.5.4103': attribute type 2 has an invalid length. [ 908.352345][T17159] netlink: 'syz.1.4114': attribute type 10 has an invalid length. [ 908.474179][T17164] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4116'. [ 908.608193][T17164] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4116'. [ 909.007828][T17174] device syzkaller0 entered promiscuous mode [ 909.041268][T17184] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4125'. [ 909.054811][T17186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4126'. [ 909.217531][T17193] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4127'. [ 909.754270][T17206] netlink: 'syz.6.4131': attribute type 21 has an invalid length. [ 909.792536][T17206] netlink: 'syz.6.4131': attribute type 1 has an invalid length. [ 910.006530][T17222] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4138'. [ 910.278135][T17237] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4139'. [ 910.292457][T17237] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4139'. [ 910.461544][T17242] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4144'. [ 910.960837][T17244] device syzkaller0 entered promiscuous mode [ 911.229958][T17258] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 911.405748][T17258] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4150'. [ 911.837495][T17267] device syzkaller0 entered promiscuous mode [ 912.206827][T17290] netlink: 'syz.2.4159': attribute type 1 has an invalid length. [ 913.022160][ T8899] Bluetooth: hci4: command 0x0406 tx timeout [ 913.099280][T17319] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 913.450976][T17321] device syzkaller0 entered promiscuous mode [ 913.651049][T17340] netlink: 'syz.5.4178': attribute type 1 has an invalid length. [ 913.672893][T17340] __nla_validate_parse: 7 callbacks suppressed [ 913.672929][T17340] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.4178'. [ 913.917242][T17355] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4182'. [ 913.980882][T17355] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4182'. [ 914.067954][T17361] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4184'. [ 914.178938][T17354] device syzkaller0 entered promiscuous mode [ 914.206240][T17361] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4184'. [ 914.627869][T17371] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 914.741694][T17371] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4189'. [ 914.836625][T17376] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4201'. [ 914.886037][T17376] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4201'. [ 915.164682][T17393] device syzkaller0 entered promiscuous mode [ 915.228054][T17400] device syzkaller0 entered promiscuous mode [ 915.235447][T17401] netlink: 'syz.6.4199': attribute type 1 has an invalid length. [ 915.244637][T17401] netlink: 112865 bytes leftover after parsing attributes in process `syz.6.4199'. [ 915.543381][T17408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 915.629657][T17408] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4205'. [ 915.970813][T17427] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 916.077355][T17431] device syzkaller0 entered promiscuous mode [ 916.305576][T17441] netlink: 'syz.1.4219': attribute type 1 has an invalid length. [ 916.423637][T17443] device syzkaller0 entered promiscuous mode [ 916.686515][T17451] netlink: 'syz.3.4223': attribute type 10 has an invalid length. [ 916.722419][T17451] team0: Device hsr_slave_0 failed to register rx_handler [ 916.912865][T17467] netlink: 'syz.6.4228': attribute type 10 has an invalid length. [ 917.290726][T17486] device syzkaller0 entered promiscuous mode [ 917.302780][T17490] netlink: 'syz.6.4238': attribute type 10 has an invalid length. [ 917.448484][T17496] ref_ctr_offset mismatch. inode: 0x623 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 917.483192][T17499] netlink: 'syz.3.4240': attribute type 2 has an invalid length. [ 917.792515][T17513] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.922524][T17513] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.932687][T17513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.348822][T17532] netlink: 'syz.3.4253': attribute type 1 has an invalid length. [ 918.656328][T17525] device syzkaller0 entered promiscuous mode [ 918.709309][T17530] netlink: 'syz.2.4252': attribute type 21 has an invalid length. [ 918.853676][T17542] __nla_validate_parse: 16 callbacks suppressed [ 918.853695][T17542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4255'. [ 918.971295][T17550] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4257'. [ 918.988979][T17550] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4257'. [ 919.115616][T17549] device syzkaller0 entered promiscuous mode [ 919.139299][T17558] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4258'. [ 919.144020][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.170859][T17556] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.178593][T17556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.236680][T17558] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4258'. [ 919.415986][T17566] netlink: 'syz.6.4264': attribute type 17 has an invalid length. [ 919.425259][T17566] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4264'. [ 919.453295][T17566] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.503422][T17567] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4264'. [ 919.537757][T17567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 919.559900][T17567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.853986][T17584] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4267'. [ 919.907767][T17586] netlink: 'syz.2.4272': attribute type 3 has an invalid length. [ 919.920040][T17584] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4267'. [ 919.959340][T17586] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4272'. [ 920.086689][T17598] FAULT_INJECTION: forcing a failure. [ 920.086689][T17598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.114354][T17598] CPU: 1 PID: 17598 Comm: syz.1.4277 Not tainted syzkaller #0 [ 920.121872][T17598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 920.131964][T17598] Call Trace: [ 920.135272][T17598] [ 920.138257][T17598] dump_stack_lvl+0x188/0x250 [ 920.142979][T17598] ? show_regs_print_info+0x20/0x20 [ 920.148223][T17598] ? load_image+0x410/0x410 [ 920.152802][T17598] ? __lock_acquire+0x7b50/0x7b50 [ 920.157903][T17598] should_fail+0x383/0x4b0 [ 920.162364][T17598] _copy_to_user+0x2e/0x130 [ 920.166905][T17598] simple_read_from_buffer+0xe3/0x150 [ 920.172322][T17598] proc_fail_nth_read+0x1a6/0x220 [ 920.177394][T17598] ? proc_fault_inject_write+0x310/0x310 [ 920.183073][T17598] ? fsnotify_perm+0x254/0x560 [ 920.187877][T17598] ? proc_fault_inject_write+0x310/0x310 [ 920.193542][T17598] vfs_read+0x2ff/0xd50 [ 920.197733][T17598] ? __lock_acquire+0x7b50/0x7b50 [ 920.202804][T17598] ? kernel_read+0x1e0/0x1e0 [ 920.207453][T17598] ? mutex_lock_nested+0x17/0x20 [ 920.212427][T17598] ? __fdget_pos+0x2bf/0x370 [ 920.217054][T17598] ? ksys_read+0x70/0x260 [ 920.221425][T17598] ksys_read+0x153/0x260 [ 920.225702][T17598] ? vfs_write+0xd70/0xd70 [ 920.230150][T17598] ? lockdep_hardirqs_on+0x94/0x140 [ 920.235388][T17598] do_syscall_64+0x4c/0xa0 [ 920.239841][T17598] ? clear_bhb_loop+0x30/0x80 [ 920.244548][T17598] ? clear_bhb_loop+0x30/0x80 [ 920.249263][T17598] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 920.255186][T17598] RIP: 0033:0x7fbad8bb790e [ 920.259629][T17598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 920.279355][T17598] RSP: 002b:00007fbad6e4efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 920.288077][T17598] RAX: ffffffffffffffda RBX: 00007fbad6e4f6c0 RCX: 00007fbad8bb790e [ 920.296093][T17598] RDX: 000000000000000f RSI: 00007fbad6e4f0a0 RDI: 0000000000000006 [ 920.304113][T17598] RBP: 00007fbad6e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 920.312140][T17598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.320153][T17598] R13: 00007fbad8e7f038 R14: 00007fbad8e7efa0 R15: 00007ffc65ab81b8 [ 920.328181][T17598] [ 920.916818][T17629] netlink: 'syz.1.4290': attribute type 3 has an invalid length. [ 922.016757][T17655] device syzkaller0 entered promiscuous mode [ 922.258164][T17667] netlink: 'syz.2.4313': attribute type 27 has an invalid length. [ 922.267585][T17669] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.275555][T17667] netlink: 'syz.2.4313': attribute type 3 has an invalid length. [ 922.321983][T17670] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.329877][T17670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.425657][T17672] netlink: 'syz.3.4304': attribute type 3 has an invalid length. [ 922.819825][T17690] netlink: 'syz.2.4312': attribute type 10 has an invalid length. [ 923.740975][T17704] netlink: 'syz.5.4320': attribute type 3 has an invalid length. [ 923.831172][T17699] device syzkaller0 entered promiscuous mode [ 923.930523][T17712] __nla_validate_parse: 17 callbacks suppressed [ 923.930543][T17712] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4316'. [ 924.014366][T17712] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4316'. [ 924.336429][T17720] device syzkaller0 entered promiscuous mode [ 924.346983][T17724] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4328'. [ 924.357659][T17728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4327'. [ 924.459826][T17733] netlink: 'syz.5.4329': attribute type 10 has an invalid length. [ 924.485142][T17733] team0: Device hsr_slave_0 failed to register rx_handler [ 924.516312][T17732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 924.587445][T17736] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4330'. [ 924.719137][T17745] netlink: 'syz.5.4334': attribute type 3 has an invalid length. [ 924.728161][T17746] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4331'. [ 924.728192][T17746] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4331'. [ 924.755136][T17747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4333'. [ 924.766624][T17745] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4334'. [ 925.001167][T17750] netlink: 'syz.2.4335': attribute type 3 has an invalid length. [ 925.011799][T17750] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4335'. [ 925.030037][T17752] netlink: 'syz.5.4336': attribute type 2 has an invalid length. [ 925.422264][T17761] device syzkaller0 entered promiscuous mode [ 925.603532][T17775] netlink: 'syz.2.4343': attribute type 2 has an invalid length. [ 925.626522][T17779] netlink: 'syz.6.4346': attribute type 3 has an invalid length. [ 925.771545][T17767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 925.925578][T17788] netlink: 'syz.6.4348': attribute type 3 has an invalid length. [ 927.330999][T17821] device syzkaller0 entered promiscuous mode [ 927.680207][T17848] validate_nla: 6 callbacks suppressed [ 927.680229][T17848] netlink: 'syz.1.4371': attribute type 3 has an invalid length. [ 927.855990][T17854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 927.894858][T17854] netlink: 'syz.6.4374': attribute type 4 has an invalid length. [ 928.351551][T17869] netlink: 'syz.6.4380': attribute type 41 has an invalid length. [ 928.386865][T17869] netlink: 'syz.6.4380': attribute type 41 has an invalid length. [ 928.424098][T17871] netlink: 'syz.6.4380': attribute type 41 has an invalid length. [ 929.318556][T17889] netlink: 'syz.3.4387': attribute type 3 has an invalid length. [ 929.329270][T17889] __nla_validate_parse: 16 callbacks suppressed [ 929.329290][T17889] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4387'. [ 929.374830][T17874] device syzkaller0 entered promiscuous mode [ 929.398751][T17885] netlink: 'syz.1.4386': attribute type 10 has an invalid length. [ 929.509318][T17885] team0 (unregistering): Port device team_slave_0 removed [ 929.560521][T17885] team0 (unregistering): Port device team_slave_1 removed [ 929.607900][T17880] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4385'. [ 929.861202][T17898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4391'. [ 929.970054][T17910] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4393'. [ 929.995117][T17910] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4393'. [ 930.538406][T17921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4398'. [ 930.770853][T17929] netlink: 'syz.3.4401': attribute type 3 has an invalid length. [ 930.788139][T17929] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4401'. [ 931.120760][T17932] device syzkaller0 entered promiscuous mode [ 931.341744][T17945] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4405'. [ 931.434642][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.441127][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.580262][T17955] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4409'. [ 931.800112][T17973] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4413'. [ 932.295557][T17980] device syzkaller0 entered promiscuous mode [ 932.409073][T17983] netlink: 'syz.6.4420': attribute type 41 has an invalid length. [ 932.435196][T17983] netlink: 'syz.6.4420': attribute type 41 has an invalid length. [ 934.000639][T18028] device syzkaller0 entered promiscuous mode [ 934.277850][T18039] validate_nla: 1 callbacks suppressed [ 934.277873][T18039] netlink: 'syz.6.4443': attribute type 3 has an invalid length. [ 934.511777][T18047] __nla_validate_parse: 9 callbacks suppressed [ 934.511814][T18047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4446'. [ 935.421149][T18075] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4455'. [ 935.514809][T18065] device syzkaller0 entered promiscuous mode [ 935.529033][T18075] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4455'. [ 935.539098][T18070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4453'. [ 935.799771][T18086] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4457'. [ 936.158434][T18108] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4467'. [ 936.590686][T18115] device syzkaller0 entered promiscuous mode [ 936.636425][T18126] netlink: 'syz.5.4474': attribute type 1 has an invalid length. [ 936.652190][T18126] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.4474'. [ 937.016968][T18151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4484'. [ 937.036139][T18155] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4483'. [ 937.052637][T18155] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4483'. [ 937.465106][T18173] netlink: 'syz.1.4490': attribute type 41 has an invalid length. [ 937.698919][T18167] device syzkaller0 entered promiscuous mode [ 938.087304][T18173] netlink: 'syz.1.4490': attribute type 41 has an invalid length. [ 938.121114][T18164] netlink: 'syz.1.4490': attribute type 41 has an invalid length. [ 938.143080][T18184] netlink: 'syz.3.4496': attribute type 16 has an invalid length. [ 938.238994][T18187] device pim6reg1 entered promiscuous mode [ 938.566831][T18201] device syzkaller0 entered promiscuous mode [ 938.622167][ T8897] Bluetooth: hci1: command 0x0406 tx timeout [ 939.289137][T18224] netlink: 'syz.2.4510': attribute type 41 has an invalid length. [ 939.350924][T18224] netlink: 'syz.2.4510': attribute type 41 has an invalid length. [ 939.376670][T18231] netlink: 'syz.2.4510': attribute type 41 has an invalid length. [ 939.758771][T18235] netlink: 'syz.1.4513': attribute type 1 has an invalid length. [ 939.772872][T18235] __nla_validate_parse: 6 callbacks suppressed [ 939.772889][T18235] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4513'. [ 939.869212][T18255] netlink: 'syz.3.4522': attribute type 10 has an invalid length. [ 939.900052][T18255] team0: Device hsr_slave_0 failed to register rx_handler [ 939.944370][T18260] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.4523'. [ 940.024310][T18254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 940.111224][T18265] netlink: 'syz.6.4526': attribute type 10 has an invalid length. [ 940.150608][T18265] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4526'. [ 940.347843][T18274] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4528'. [ 940.493368][T18267] device syzkaller0 entered promiscuous mode [ 940.505891][T18265] netlink: 'syz.6.4526': attribute type 10 has an invalid length. [ 940.514585][T18265] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4526'. [ 940.525854][T18274] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4528'. [ 940.807614][T18287] netlink: 'syz.2.4533': attribute type 1 has an invalid length. [ 940.842614][T18287] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4533'. [ 940.916899][T18286] netlink: 'syz.5.4532': attribute type 41 has an invalid length. [ 940.932622][T18286] netlink: 'syz.5.4532': attribute type 41 has an invalid length. [ 941.150485][T18298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 941.377632][T18313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4545'. [ 941.405090][T18313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4545'. [ 941.584066][T18316] device syzkaller0 entered promiscuous mode [ 941.859190][T18335] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4551'. [ 942.192621][T18345] team0: Device hsr_slave_0 failed to register rx_handler [ 942.930731][T18344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.258794][T18362] device syzkaller0 entered promiscuous mode [ 944.913791][T18411] device syzkaller0 entered promiscuous mode [ 944.944224][T18423] __nla_validate_parse: 7 callbacks suppressed [ 944.944241][T18423] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4584'. [ 945.012601][T18434] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4589'. [ 945.178752][T18440] validate_nla: 17 callbacks suppressed [ 945.178772][T18440] netlink: 'syz.1.4592': attribute type 1 has an invalid length. [ 945.206219][T18440] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4592'. [ 945.844963][T18454] netlink: 'syz.3.4597': attribute type 41 has an invalid length. [ 945.871837][T18454] netlink: 'syz.3.4597': attribute type 41 has an invalid length. [ 945.891444][T18453] netlink: 'syz.3.4597': attribute type 41 has an invalid length. [ 946.291017][T18471] device syzkaller0 entered promiscuous mode [ 946.397154][T18481] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4607'. [ 946.402030][T18465] netlink: 'syz.1.4601': attribute type 41 has an invalid length. [ 946.459323][T18465] netlink: 'syz.1.4601': attribute type 41 has an invalid length. [ 946.475276][T18481] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4607'. [ 946.559331][T18465] netlink: 'syz.1.4601': attribute type 41 has an invalid length. [ 947.738488][T18516] device syzkaller0 entered promiscuous mode [ 948.343085][T18547] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4630'. [ 948.405225][T18547] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4630'. [ 948.725083][T18544] netlink: 'syz.5.4632': attribute type 41 has an invalid length. [ 948.756098][T18544] netlink: 'syz.5.4632': attribute type 41 has an invalid length. [ 948.801385][T18544] netlink: 'syz.5.4632': attribute type 41 has an invalid length. [ 949.543487][T18563] device syzkaller0 entered promiscuous mode [ 949.916360][T18586] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4646'. [ 949.952989][T18591] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4648'. [ 949.983844][T18591] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4648'. [ 950.875716][T18606] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4663'. [ 950.926418][T18606] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4663'. [ 951.068110][T18611] validate_nla: 1 callbacks suppressed [ 951.068129][T18611] netlink: 'syz.1.4651': attribute type 41 has an invalid length. [ 951.167790][T18611] netlink: 'syz.1.4651': attribute type 41 has an invalid length. [ 951.291455][T18604] netlink: 'syz.1.4651': attribute type 41 has an invalid length. [ 951.600998][T18619] device syzkaller0 entered promiscuous mode [ 952.730689][T18660] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4673'. [ 952.773804][T18660] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4673'. [ 952.914289][T18666] netlink: 'syz.6.4675': attribute type 10 has an invalid length. [ 952.946645][T18668] netlink: 'syz.3.4678': attribute type 10 has an invalid length. [ 953.270313][T18672] device syzkaller0 entered promiscuous mode [ 953.983204][T17229] Bluetooth: hci2: command 0x0406 tx timeout [ 954.049990][T18698] netlink: 'syz.6.4688': attribute type 10 has an invalid length. [ 954.064969][T18698] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4688'. [ 954.132174][T18698] device team0 entered promiscuous mode [ 954.138143][T18698] device team_slave_0 entered promiscuous mode [ 954.145108][T18698] device team_slave_1 entered promiscuous mode [ 954.152870][T18698] bridge0: port 4(team0) entered blocking state [ 954.159681][T18698] bridge0: port 4(team0) entered disabled state [ 954.176797][T18698] bridge0: port 4(team0) entered blocking state [ 954.183270][T18698] bridge0: port 4(team0) entered forwarding state [ 954.753321][T18715] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4692'. [ 954.883826][T18715] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4692'. [ 955.126767][T18721] device syzkaller0 entered promiscuous mode [ 955.383207][T18723] device syzkaller0 entered promiscuous mode [ 955.411422][T18729] netlink: 'syz.2.4699': attribute type 10 has an invalid length. [ 955.431777][T18729] team0: Device hsr_slave_0 failed to register rx_handler [ 955.528600][T18728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 955.748105][T18734] netlink: 'syz.5.4700': attribute type 2 has an invalid length. [ 955.766310][T18734] netlink: 'syz.5.4700': attribute type 1 has an invalid length. [ 956.005854][T18739] netlink: 'syz.2.4702': attribute type 2 has an invalid length. [ 956.881784][T18766] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4711'. [ 956.928357][T18766] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4711'. [ 956.969815][T18765] netlink: 'syz.3.4713': attribute type 10 has an invalid length. [ 957.015730][T18765] team0: Device hsr_slave_0 failed to register rx_handler [ 957.095220][T18772] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.4715'. [ 957.254685][T18764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.289589][T18770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4714'. [ 958.220823][T18778] device syzkaller0 entered promiscuous mode [ 958.536137][T18789] device syzkaller0 entered promiscuous mode [ 959.062424][T18812] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4727'. [ 959.176039][T18810] netlink: 'syz.3.4726': attribute type 41 has an invalid length. [ 959.208580][T18812] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4727'. [ 959.345667][T18810] netlink: 'syz.3.4726': attribute type 41 has an invalid length. [ 959.663070][T18821] netlink: 'syz.1.4728': attribute type 10 has an invalid length. [ 959.686703][T18816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 959.762178][T18820] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4729'. [ 960.504722][T18845] device syzkaller0 entered promiscuous mode [ 960.573321][T18844] netlink: 'syz.1.4741': attribute type 41 has an invalid length. [ 960.593601][T18844] netlink: 'syz.1.4741': attribute type 41 has an invalid length. [ 960.889960][T18859] netlink: 'syz.5.4744': attribute type 10 has an invalid length. [ 960.921474][T18859] team0: Device hsr_slave_0 failed to register rx_handler [ 961.036157][T18858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 961.046522][T18864] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4745'. [ 961.089683][T18864] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4745'. [ 961.737439][T18881] device syzkaller0 entered promiscuous mode [ 961.900451][T18891] device syzkaller0 entered promiscuous mode [ 962.107309][T18896] netlink: 'syz.6.4760': attribute type 41 has an invalid length. [ 962.307863][T18896] netlink: 'syz.6.4760': attribute type 41 has an invalid length. [ 962.468393][T18907] netlink: 'syz.2.4763': attribute type 6 has an invalid length. [ 962.536595][T18907] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4763'. [ 962.778096][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4768'. [ 963.009514][T18929] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4771'. [ 963.072307][T18929] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4771'. [ 963.148625][T18924] netlink: 189104 bytes leftover after parsing attributes in process `syz.1.4770'. [ 963.544871][T18932] device syzkaller0 entered promiscuous mode [ 963.977764][T18953] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 964.063051][T18953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.133204][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4784'. [ 964.234990][T18960] netlink: 'syz.3.4782': attribute type 41 has an invalid length. [ 964.292835][T18960] netlink: 'syz.3.4782': attribute type 41 has an invalid length. [ 964.354411][T18965] netlink: 'syz.3.4782': attribute type 41 has an invalid length. [ 964.584787][T18974] netlink: 189104 bytes leftover after parsing attributes in process `syz.5.4787'. [ 964.668902][T18986] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4790'. [ 964.732012][T18986] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4790'. [ 965.184586][T18991] device syzkaller0 entered promiscuous mode [ 965.349479][T19002] netlink: 'syz.3.4808': attribute type 3 has an invalid length. [ 965.396511][T19002] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4808'. [ 967.150793][T19046] netlink: 'syz.3.4814': attribute type 3 has an invalid length. [ 967.310975][T19043] device syzkaller0 entered promiscuous mode [ 967.517577][T19053] netlink: 'syz.3.4826': attribute type 3 has an invalid length. [ 967.656990][T19060] __nla_validate_parse: 9 callbacks suppressed [ 967.657003][T19060] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.4816'. [ 967.695452][T19060] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.4816'. [ 967.747943][T19062] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4817'. [ 967.767402][T19062] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4817'. [ 968.855504][T19088] device syzkaller0 entered promiscuous mode [ 969.036494][T19094] netlink: 'syz.5.4829': attribute type 3 has an invalid length. [ 969.068908][T19094] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4829'. [ 969.136793][T19100] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4830'. [ 969.147999][T19100] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4830'. [ 969.967098][T19107] netlink: 'syz.5.4843': attribute type 3 has an invalid length. [ 969.999906][T19107] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4843'. [ 970.083773][T19106] device syzkaller0 entered promiscuous mode [ 970.107317][T19108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4834'. [ 970.124199][T19116] netlink: 189104 bytes leftover after parsing attributes in process `syz.2.4832'. [ 971.640141][T19145] netlink: 'syz.5.4846': attribute type 41 has an invalid length. [ 971.651765][T19145] netlink: 'syz.5.4846': attribute type 41 has an invalid length. [ 971.690714][T19145] netlink: 'syz.5.4846': attribute type 41 has an invalid length. [ 972.341199][T19161] device syzkaller0 entered promiscuous mode [ 972.568960][T19167] device syzkaller0 entered promiscuous mode [ 973.250235][T19196] __nla_validate_parse: 7 callbacks suppressed [ 973.250254][T19196] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4856'. [ 973.277747][T19194] netlink: 'syz.1.4860': attribute type 3 has an invalid length. [ 973.286885][T19194] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4860'. [ 973.297111][T19196] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4856'. [ 973.457647][T19202] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4862'. [ 973.477579][T19202] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4862'. [ 973.488674][T19192] netlink: 'syz.3.4859': attribute type 41 has an invalid length. [ 973.500569][T19192] netlink: 'syz.3.4859': attribute type 41 has an invalid length. [ 973.509072][T19192] netlink: 'syz.3.4859': attribute type 41 has an invalid length. [ 974.624599][T19215] device syzkaller0 entered promiscuous mode [ 974.869487][T19229] device syzkaller0 entered promiscuous mode [ 975.029766][T19237] netlink: 'syz.6.4875': attribute type 3 has an invalid length. [ 975.039342][T19237] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4875'. [ 975.148075][T19244] netlink: 'syz.6.4876': attribute type 10 has an invalid length. [ 975.169897][T19244] team0: Device hsr_slave_0 failed to register rx_handler [ 975.231403][T19241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.340799][T19245] netlink: 'syz.3.4877': attribute type 41 has an invalid length. [ 975.372252][T19245] netlink: 'syz.3.4877': attribute type 41 has an invalid length. [ 975.394260][T19252] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4878'. [ 975.413994][T19253] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4880'. [ 975.423930][T19245] netlink: 'syz.3.4877': attribute type 41 has an invalid length. [ 975.460702][T19253] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4880'. [ 976.097583][T19268] device syzkaller0 entered promiscuous mode [ 976.659628][T19281] device syzkaller0 entered promiscuous mode [ 976.684455][T19283] netlink: 'syz.3.4892': attribute type 10 has an invalid length. [ 976.723284][T19283] team0: Device hsr_slave_0 failed to register rx_handler [ 976.810347][T19282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.997357][T19296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4897'. [ 977.478012][T19315] device syzkaller0 entered promiscuous mode [ 978.276124][T19335] team0: Device hsr_slave_0 failed to register rx_handler [ 978.354942][T19334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 978.643278][T19345] validate_nla: 6 callbacks suppressed [ 978.643315][T19345] netlink: 'syz.1.4912': attribute type 41 has an invalid length. [ 978.698218][T19343] device syzkaller0 entered promiscuous mode [ 978.742343][T19353] netlink: 'syz.5.4915': attribute type 2 has an invalid length. [ 978.790433][T19353] __nla_validate_parse: 5 callbacks suppressed [ 978.790452][T19353] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4915'. [ 978.816928][T19345] netlink: 'syz.1.4912': attribute type 41 has an invalid length. [ 979.199103][T19374] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4919'. [ 979.247740][T19374] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4919'. [ 979.516906][T19379] netlink: 'syz.2.4923': attribute type 3 has an invalid length. [ 979.527657][T19379] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4923'. [ 979.758899][T19389] netlink: 'syz.6.4927': attribute type 2 has an invalid length. [ 979.779050][T19389] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4927'. [ 980.195216][T19401] device syzkaller0 entered promiscuous mode [ 980.515392][T19405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4933'. [ 980.592196][T19405] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4933'. [ 980.652615][T19407] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4934'. [ 980.794567][T19417] netlink: 'syz.6.4937': attribute type 3 has an invalid length. [ 980.829614][T19417] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4937'. [ 981.053152][T19431] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4941'. [ 981.098692][T19433] netlink: 'syz.3.4953': attribute type 3 has an invalid length. [ 981.169788][T19434] netlink: 'syz.1.4942': attribute type 41 has an invalid length. [ 981.184868][T19434] netlink: 'syz.1.4942': attribute type 41 has an invalid length. [ 981.204799][T19429] netlink: 'syz.1.4942': attribute type 41 has an invalid length. [ 982.007971][T19446] device syzkaller0 entered promiscuous mode [ 984.715236][T19467] netlink: 'syz.1.4956': attribute type 3 has an invalid length. [ 984.725163][T19467] __nla_validate_parse: 2 callbacks suppressed [ 984.725196][T19467] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4956'. [ 984.777012][T19470] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4964'. [ 984.835733][T19470] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.4964'. [ 985.028726][T19477] netlink: 'syz.6.4957': attribute type 41 has an invalid length. [ 985.086235][T19477] netlink: 'syz.6.4957': attribute type 41 has an invalid length. [ 985.114648][T19488] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4961'. [ 985.135671][T19481] netlink: 'syz.6.4957': attribute type 41 has an invalid length. [ 985.195218][T19488] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4961'. [ 985.428287][T19490] device syzkaller0 entered promiscuous mode [ 988.174057][T19509] netlink: 'syz.5.4971': attribute type 3 has an invalid length. [ 988.209769][T19509] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4971'. [ 988.522421][T19537] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4979'. [ 988.552699][T19537] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4979'. [ 988.592083][T19539] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4978'. [ 988.625488][T19539] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.4978'. [ 988.817325][T19542] netlink: 'syz.2.4982': attribute type 41 has an invalid length. [ 988.856722][T19542] netlink: 'syz.2.4982': attribute type 41 has an invalid length. [ 989.530985][T19545] device syzkaller0 entered promiscuous mode [ 992.098599][T19573] netlink: 'syz.6.4992': attribute type 3 has an invalid length. [ 992.120781][T19563] device syzkaller0 entered promiscuous mode [ 992.151221][T19573] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4992'. [ 992.167895][T19571] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4991'. [ 992.199721][T19582] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4995'. [ 992.210034][T19571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 992.233030][T19571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 992.333262][T19582] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.4995'. [ 992.517376][T19586] netlink: 'syz.3.4998': attribute type 41 has an invalid length. [ 992.532014][T19586] netlink: 'syz.3.4998': attribute type 41 has an invalid length. [ 992.550656][T19586] netlink: 'syz.3.4998': attribute type 41 has an invalid length. [ 992.873983][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.880532][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.062184][T19595] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.4999'. [ 993.093133][T19595] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.4999'. [ 993.958572][T19613] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5008'. [ 994.873217][T19616] netlink: 'syz.5.5009': attribute type 3 has an invalid length. [ 994.882483][T19616] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5009'. [ 995.728541][T19629] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5013'. [ 995.827466][T19629] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.5013'. [ 995.962562][T19638] netlink: 'syz.2.5017': attribute type 41 has an invalid length. [ 995.970744][T19638] netlink: 'syz.2.5017': attribute type 41 has an invalid length. [ 995.979871][T19638] netlink: 'syz.2.5017': attribute type 41 has an invalid length. [ 996.099610][T19644] netlink: 'syz.1.5021': attribute type 3 has an invalid length. [ 997.898599][T19676] netlink: 'syz.3.5034': attribute type 3 has an invalid length. [ 997.961001][T19676] __nla_validate_parse: 1 callbacks suppressed [ 997.961045][T19676] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5034'. [ 997.997535][T19681] netlink: 'syz.2.5035': attribute type 1 has an invalid length. [ 998.044028][T19681] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5035'. [ 998.063638][T19681] netlink: 'syz.2.5035': attribute type 1 has an invalid length. [ 998.191117][T19688] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.5037'. [ 998.208897][T19688] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.5037'. [ 998.376442][T19690] netlink: 'syz.5.5039': attribute type 41 has an invalid length. [ 999.096034][T19690] netlink: 'syz.5.5039': attribute type 41 has an invalid length. [ 1001.430953][T19713] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1001.473094][T19713] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1001.547563][T19713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1001.591797][T19723] netlink: 'syz.3.5049': attribute type 3 has an invalid length. [ 1001.610898][T19723] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5049'. [ 1001.914348][T19744] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5051'. [ 1001.961982][T19744] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.5051'. [ 1001.997323][T19739] netlink: 'syz.3.5054': attribute type 41 has an invalid length. [ 1002.054245][T19739] netlink: 'syz.3.5054': attribute type 41 has an invalid length. [ 1002.117118][T19746] netlink: 'syz.3.5054': attribute type 41 has an invalid length. [ 1002.310281][T19752] device syzkaller0 entered promiscuous mode [ 1005.089449][T19759] netlink: 'syz.5.5062': attribute type 3 has an invalid length. [ 1005.153105][T19759] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5062'. [ 1005.340582][T19771] netlink: 'syz.1.5064': attribute type 3 has an invalid length. [ 1005.360101][T19771] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5064'. [ 1005.365450][T19769] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5065'. [ 1005.392947][T19769] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1005.431199][T19769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1005.539200][T19779] netlink: 'syz.3.5077': attribute type 3 has an invalid length. [ 1005.574088][T19779] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5077'. [ 1005.699879][T19787] netlink: 'syz.2.5068': attribute type 41 has an invalid length. [ 1005.767128][T19788] netlink: 'syz.5.5069': attribute type 41 has an invalid length. [ 1005.784487][T19787] netlink: 'syz.2.5068': attribute type 41 has an invalid length. [ 1005.805477][T19790] netlink: 'syz.2.5068': attribute type 41 has an invalid length. [ 1005.834288][T19788] netlink: 'syz.5.5069': attribute type 41 has an invalid length. [ 1005.853102][T19781] netlink: 'syz.5.5069': attribute type 41 has an invalid length. [ 1005.863653][T19793] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5071'. [ 1005.883650][T19793] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.5071'. [ 1006.368086][T19808] netlink: 'syz.2.5076': attribute type 13 has an invalid length. [ 1006.391969][T19808] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.5076'. [ 1008.940054][T19826] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5083'. [ 1008.952312][T19827] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1009.035008][T19827] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1009.147327][T19827] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1009.594304][T19854] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5090'. [ 1010.203421][T19865] __nla_validate_parse: 2 callbacks suppressed [ 1010.203442][T19865] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1010.222094][T19865] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.5095'. [ 1010.631796][T19880] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5102'. [ 1010.643034][T19880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1010.672183][T19881] validate_nla: 7 callbacks suppressed [ 1010.672224][T19881] netlink: 'syz.6.5100': attribute type 41 has an invalid length. [ 1010.709024][T19880] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1010.813674][T19881] netlink: 'syz.6.5100': attribute type 41 has an invalid length. [ 1010.838053][T19883] netlink: 'syz.6.5100': attribute type 41 has an invalid length. [ 1011.163117][T19894] netlink: 'syz.2.5104': attribute type 41 has an invalid length. [ 1011.276498][T19894] netlink: 'syz.2.5104': attribute type 41 has an invalid length. [ 1011.385824][T19899] netlink: 'syz.2.5104': attribute type 41 has an invalid length. [ 1011.638417][T19905] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1011.657731][T19905] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1012.129725][T19913] netlink: 'syz.1.5113': attribute type 3 has an invalid length. [ 1012.162035][T19913] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1012.251678][T19916] netlink: 'syz.1.5114': attribute type 10 has an invalid length. [ 1012.492064][T19918] netlink: 'syz.1.5117': attribute type 10 has an invalid length. [ 1012.543289][T19925] netlink: 'syz.3.5118': attribute type 41 has an invalid length. [ 1012.560186][T19928] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.5116'. [ 1012.602570][T19928] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.5116'. [ 1012.773945][T19933] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5122'. [ 1012.802729][T19933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1012.864643][T19933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1013.018251][T19947] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5126'. [ 1014.227186][T19981] FAULT_INJECTION: forcing a failure. [ 1014.227186][T19981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1014.261473][T19981] CPU: 1 PID: 19981 Comm: syz.6.5141 Not tainted syzkaller #0 [ 1014.269019][T19981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1014.279129][T19981] Call Trace: [ 1014.282445][T19981] [ 1014.285405][T19981] dump_stack_lvl+0x188/0x250 [ 1014.290129][T19981] ? show_regs_print_info+0x20/0x20 [ 1014.295367][T19981] ? load_image+0x410/0x410 [ 1014.299923][T19981] ? __lock_acquire+0x7b50/0x7b50 [ 1014.305000][T19981] should_fail+0x383/0x4b0 [ 1014.309462][T19981] _copy_from_user+0x2e/0x170 [ 1014.314181][T19981] __sys_bpf+0x26d/0x6f0 [ 1014.318467][T19981] ? bpf_link_show_fdinfo+0x380/0x380 [ 1014.323979][T19981] ? rcu_nmi_exit+0x6f/0xf0 [ 1014.328544][T19981] __x64_sys_bpf+0x78/0x90 [ 1014.333017][T19981] do_syscall_64+0x4c/0xa0 [ 1014.337475][T19981] ? clear_bhb_loop+0x30/0x80 [ 1014.342191][T19981] ? clear_bhb_loop+0x30/0x80 [ 1014.346911][T19981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1014.352841][T19981] RIP: 0033:0x7fc42fc280d9 [ 1014.357301][T19981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.376965][T19981] RSP: 002b:00007fc42de80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1014.385438][T19981] RAX: ffffffffffffffda RBX: 00007fc42feaffa0 RCX: 00007fc42fc280d9 [ 1014.393452][T19981] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1014.401470][T19981] RBP: 00007fc42de80090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.409483][T19981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.417491][T19981] R13: 00007fc42feb0038 R14: 00007fc42feaffa0 R15: 00007ffedc3ee0b8 [ 1014.425524][T19981] [ 1016.397344][T20009] validate_nla: 7 callbacks suppressed [ 1016.397365][T20009] netlink: 'syz.1.5149': attribute type 41 has an invalid length. [ 1016.417594][T20009] netlink: 'syz.1.5149': attribute type 41 has an invalid length. [ 1016.427323][T20009] netlink: 'syz.1.5149': attribute type 41 has an invalid length. [ 1016.457843][T20012] __nla_validate_parse: 4 callbacks suppressed [ 1016.457862][T20012] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5148'. [ 1016.499154][T20012] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.5148'. [ 1016.583987][T20017] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1016.608985][T20017] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.5150'. [ 1016.682637][T20019] netlink: 'syz.6.5153': attribute type 3 has an invalid length. [ 1016.696795][T20021] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1016.709285][T20019] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5153'. [ 1017.095813][T20036] netlink: 'syz.6.5169': attribute type 3 has an invalid length. [ 1017.112329][T20036] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5169'. [ 1017.304168][T20045] netlink: 'syz.5.5161': attribute type 2 has an invalid length. [ 1017.329649][T20046] netlink: 'syz.2.5163': attribute type 41 has an invalid length. [ 1017.391498][T20046] netlink: 'syz.2.5163': attribute type 41 has an invalid length. [ 1017.408253][T20051] netlink: 'syz.2.5163': attribute type 41 has an invalid length. [ 1017.700758][T20060] netlink: 'syz.1.5171': attribute type 10 has an invalid length. [ 1017.929503][T20068] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5174'. [ 1018.213491][T20085] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5177'. [ 1018.302425][T20085] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.5177'. [ 1022.094997][T20291] validate_nla: 13 callbacks suppressed [ 1022.095039][T20291] netlink: 'syz.1.5228': attribute type 3 has an invalid length. [ 1022.152875][T20291] __nla_validate_parse: 11 callbacks suppressed [ 1022.152917][T20291] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1022.254615][T20298] netlink: 'syz.3.5232': attribute type 3 has an invalid length. [ 1022.274412][T20298] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5232'. [ 1022.731042][T20323] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1022.749535][T20323] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1022.805174][T20326] netlink: 'syz.3.5245': attribute type 10 has an invalid length. [ 1023.141608][T20339] netlink: 'syz.6.5248': attribute type 3 has an invalid length. [ 1023.150184][T20339] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5248'. [ 1023.680613][T20354] netlink: 'syz.3.5251': attribute type 10 has an invalid length. [ 1023.987922][T20372] netlink: 'syz.5.5261': attribute type 3 has an invalid length. [ 1023.998108][T20372] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5261'. [ 1025.405489][T20389] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5266'. [ 1025.441992][T20389] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.5266'. [ 1026.294149][T20392] netlink: 'syz.5.5267': attribute type 10 has an invalid length. [ 1026.314571][T20392] team0: Device hsr_slave_0 failed to register rx_handler [ 1026.554073][T20390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1026.809164][T20401] netlink: 'syz.2.5272': attribute type 3 has an invalid length. [ 1026.846360][T20405] netlink: 'syz.1.5273': attribute type 3 has an invalid length. [ 1026.866884][T20401] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5272'. [ 1026.882913][T20405] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5273'. [ 1026.950351][T20407] device syzkaller0 entered promiscuous mode [ 1027.015385][T20415] netlink: 'syz.3.5277': attribute type 2 has an invalid length. [ 1027.579784][T20439] netlink: 'syz.3.5288': attribute type 3 has an invalid length. [ 1027.612851][T20439] __nla_validate_parse: 2 callbacks suppressed [ 1027.612888][T20439] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5288'. [ 1027.650762][T20444] netlink: 'syz.6.5289': attribute type 10 has an invalid length. [ 1027.747669][T20444] device wg1 entered promiscuous mode [ 1027.839569][T20448] netlink: 'syz.3.5290': attribute type 3 has an invalid length. [ 1027.862215][T20444] team0: Device wg1 is of different type [ 1027.900871][T20448] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5290'. [ 1028.359330][T20473] netlink: 'syz.2.5302': attribute type 3 has an invalid length. [ 1028.376857][T20473] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5302'. [ 1028.412506][T20440] delete_channel: no stack [ 1028.599833][T20485] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5304'. [ 1028.641257][T20485] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.5304'. [ 1028.893816][T20495] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5311'. [ 1029.222313][T20508] netlink: 'syz.3.5317': attribute type 3 has an invalid length. [ 1029.230208][T20508] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5317'. [ 1030.286747][T20552] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5332'. [ 1030.336588][T20551] netlink: 'syz.1.5343': attribute type 21 has an invalid length. [ 1030.346160][T20551] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5343'. [ 1030.356843][T20552] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.5332'. [ 1030.878138][T20566] FAULT_INJECTION: forcing a failure. [ 1030.878138][T20566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.895818][T20566] CPU: 0 PID: 20566 Comm: syz.3.5336 Not tainted syzkaller #0 [ 1030.903325][T20566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1030.913508][T20566] Call Trace: [ 1030.916800][T20566] [ 1030.919769][T20566] dump_stack_lvl+0x188/0x250 [ 1030.924475][T20566] ? show_regs_print_info+0x20/0x20 [ 1030.929742][T20566] ? load_image+0x410/0x410 [ 1030.934308][T20566] ? __lock_acquire+0x7b50/0x7b50 [ 1030.939388][T20566] ? perf_trace_lock+0xe4/0x390 [ 1030.944287][T20566] should_fail+0x383/0x4b0 [ 1030.948732][T20566] _copy_from_user+0x2e/0x170 [ 1030.953462][T20566] ___sys_recvmsg+0x173/0x5c0 [ 1030.958183][T20566] ? __sys_recvmsg+0x280/0x280 [ 1030.963002][T20566] ? __fget_files+0x402/0x470 [ 1030.967819][T20566] __x64_sys_recvmsg+0x201/0x2d0 [ 1030.972800][T20566] ? ___sys_recvmsg+0x5c0/0x5c0 [ 1030.977680][T20566] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1030.983698][T20566] ? lockdep_hardirqs_on+0x94/0x140 [ 1030.988941][T20566] do_syscall_64+0x4c/0xa0 [ 1030.993402][T20566] ? clear_bhb_loop+0x30/0x80 [ 1030.998112][T20566] ? clear_bhb_loop+0x30/0x80 [ 1031.002798][T20566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1031.008711][T20566] RIP: 0033:0x7fd98f8140d9 [ 1031.013159][T20566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.032805][T20566] RSP: 002b:00007fd98da2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1031.041259][T20566] RAX: ffffffffffffffda RBX: 00007fd98fa9c180 RCX: 00007fd98f8140d9 [ 1031.049251][T20566] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1031.057245][T20566] RBP: 00007fd98da2a090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.065253][T20566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.073259][T20566] R13: 00007fd98fa9c218 R14: 00007fd98fa9c180 R15: 00007fffecd6c148 [ 1031.081282][T20566] [ 1031.914675][T20584] netlink: 'syz.2.5342': attribute type 21 has an invalid length. [ 1031.940930][T20584] netlink: 'syz.2.5342': attribute type 4 has an invalid length. [ 1033.534177][T20639] __nla_validate_parse: 4 callbacks suppressed [ 1033.534199][T20639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1033.974137][T20658] netlink: 'syz.2.5372': attribute type 3 has an invalid length. [ 1033.981492][T20659] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1033.987870][T20658] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5372'. [ 1034.042509][T20650] device syzkaller0 entered promiscuous mode [ 1034.057789][T20659] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1034.311415][T20669] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5376'. [ 1034.321611][T20669] netlink: 'syz.5.5376': attribute type 1 has an invalid length. [ 1034.349440][T20669] netlink: 6 bytes leftover after parsing attributes in process `syz.5.5376'. [ 1034.588150][T20674] FAULT_INJECTION: forcing a failure. [ 1034.588150][T20674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.625650][T20674] CPU: 1 PID: 20674 Comm: syz.6.5378 Not tainted syzkaller #0 [ 1034.633222][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1034.643311][T20674] Call Trace: [ 1034.646622][T20674] [ 1034.649587][T20674] dump_stack_lvl+0x188/0x250 [ 1034.654313][T20674] ? show_regs_print_info+0x20/0x20 [ 1034.659565][T20674] ? load_image+0x410/0x410 [ 1034.664125][T20674] ? __lock_acquire+0x7b50/0x7b50 [ 1034.669201][T20674] should_fail+0x383/0x4b0 [ 1034.673667][T20674] _copy_from_user+0x2e/0x170 [ 1034.678395][T20674] __copy_msghdr_from_user+0xc9/0x630 [ 1034.683810][T20674] ? verify_lock_unused+0x140/0x140 [ 1034.689051][T20674] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1034.694396][T20674] ___sys_sendmsg+0x19a/0x2e0 [ 1034.699120][T20674] ? __sys_sendmsg+0x290/0x290 [ 1034.703936][T20674] ? trace_event_raw_event_lock+0x250/0x250 [ 1034.709901][T20674] __se_sys_sendmsg+0x1b7/0x2a0 [ 1034.714801][T20674] ? __x64_sys_sendmsg+0x80/0x80 [ 1034.719783][T20674] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1034.725810][T20674] ? lockdep_hardirqs_on+0x94/0x140 [ 1034.731025][T20674] do_syscall_64+0x4c/0xa0 [ 1034.735457][T20674] ? clear_bhb_loop+0x30/0x80 [ 1034.740166][T20674] ? clear_bhb_loop+0x30/0x80 [ 1034.744884][T20674] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1034.750824][T20674] RIP: 0033:0x7fc42fc280d9 [ 1034.755279][T20674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1034.775067][T20674] RSP: 002b:00007fc42de80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1034.783531][T20674] RAX: ffffffffffffffda RBX: 00007fc42feaffa0 RCX: 00007fc42fc280d9 [ 1034.791533][T20674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1034.799513][T20674] RBP: 00007fc42de80090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.807496][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.815505][T20674] R13: 00007fc42feb0038 R14: 00007fc42feaffa0 R15: 00007ffedc3ee0b8 [ 1034.823520][T20674] [ 1035.393607][T20674] device syzkaller0 entered promiscuous mode [ 1035.410747][T20680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5380'. [ 1035.413920][T20695] netlink: 'syz.1.5385': attribute type 3 has an invalid length. [ 1035.438609][T20695] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5385'. [ 1035.749929][T20713] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.5391'. [ 1035.781292][T20713] netlink: 22808 bytes leftover after parsing attributes in process `syz.5.5391'. [ 1036.199057][T20726] netlink: 'syz.6.5396': attribute type 9 has an invalid length. [ 1036.217292][T20730] netlink: 'syz.1.5399': attribute type 3 has an invalid length. [ 1036.231140][T20727] netlink: 'syz.6.5396': attribute type 3 has an invalid length. [ 1036.734505][T20744] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1036.778904][T20744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1036.819656][T20744] syz.6.5404 (20744) used greatest stack depth: 18576 bytes left [ 1036.836607][T20750] netlink: 'syz.5.5407': attribute type 10 has an invalid length. [ 1036.874737][T20750] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1036.886286][T20750] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.916529][T20750] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1037.050361][T20759] netlink: 'syz.1.5411': attribute type 3 has an invalid length. [ 1037.315729][T20769] netlink: 'syz.1.5414': attribute type 3 has an invalid length. [ 1037.336758][T20769] netlink: 'syz.1.5414': attribute type 9 has an invalid length. [ 1037.791811][T20789] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1037.836123][T20787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1037.869210][T20787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.629159][T20825] __nla_validate_parse: 14 callbacks suppressed [ 1038.629197][T20825] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5439'. [ 1038.716802][T20825] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1038.736289][T20825] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.742840][T20830] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5438'. [ 1038.780636][T20833] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5438'. [ 1038.792208][T20825] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1038.811634][T20827] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5440'. [ 1038.837326][T20832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1038.918778][T20832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.059982][T20838] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.5443'. [ 1039.080774][T20838] netlink: 22808 bytes leftover after parsing attributes in process `syz.1.5443'. [ 1039.220283][T20846] device syzkaller0 entered promiscuous mode [ 1039.769741][T20858] validate_nla: 6 callbacks suppressed [ 1039.769781][T20858] netlink: 'syz.5.5452': attribute type 3 has an invalid length. [ 1039.824784][T20858] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5452'. [ 1039.918001][T20866] netlink: 'syz.1.5454': attribute type 10 has an invalid length. [ 1039.932184][T20866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5454'. [ 1039.976336][T20866] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1040.003823][T20870] netlink: 'syz.6.5467': attribute type 3 has an invalid length. [ 1040.040676][T20873] netlink: 'syz.5.5455': attribute type 3 has an invalid length. [ 1040.062140][T20870] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5467'. [ 1040.085267][T20873] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5455'. [ 1040.155285][T20874] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1040.173335][T20874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1040.196207][T20868] netlink: 'syz.5.5455': attribute type 9 has an invalid length. [ 1040.313378][T20879] netlink: 'syz.3.5469': attribute type 3 has an invalid length. [ 1040.626703][T20891] device syzkaller0 entered promiscuous mode [ 1040.984134][T20914] netlink: 'syz.5.5474': attribute type 10 has an invalid length. [ 1040.999658][T20914] team0: Device hsr_slave_0 failed to register rx_handler [ 1041.046270][T20915] netlink: 'syz.2.5475': attribute type 10 has an invalid length. [ 1041.060298][T20915] team0: Device hsr_slave_0 failed to register rx_handler [ 1041.110591][T20917] netlink: 'syz.6.5476': attribute type 3 has an invalid length. [ 1041.299636][T20927] netlink: 'syz.6.5489': attribute type 3 has an invalid length. [ 1041.898797][T20947] device syzkaller0 entered promiscuous mode [ 1042.236335][T20973] FAULT_INJECTION: forcing a failure. [ 1042.236335][T20973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.250313][T20973] CPU: 1 PID: 20973 Comm: syz.1.5499 Not tainted syzkaller #0 [ 1042.257864][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.267960][T20973] Call Trace: [ 1042.271275][T20973] [ 1042.274235][T20973] dump_stack_lvl+0x188/0x250 [ 1042.278952][T20973] ? show_regs_print_info+0x20/0x20 [ 1042.284184][T20973] ? load_image+0x410/0x410 [ 1042.288731][T20973] ? __lock_acquire+0x7b50/0x7b50 [ 1042.293801][T20973] ? __lock_acquire+0x13dc/0x7b50 [ 1042.298874][T20973] should_fail+0x383/0x4b0 [ 1042.303342][T20973] strncpy_from_user+0x32/0x350 [ 1042.308242][T20973] bpf_prog_load+0x1fd/0x14e0 [ 1042.312966][T20973] ? map_freeze+0x360/0x360 [ 1042.317509][T20973] ? __might_fault+0xb7/0x110 [ 1042.322227][T20973] ? __might_fault+0xb3/0x110 [ 1042.326930][T20973] ? bpf_lsm_bpf+0x5/0x10 [ 1042.331289][T20973] ? security_bpf+0x7a/0xa0 [ 1042.335820][T20973] __sys_bpf+0x532/0x6f0 [ 1042.340139][T20973] ? bpf_link_show_fdinfo+0x380/0x380 [ 1042.345569][T20973] __x64_sys_bpf+0x78/0x90 [ 1042.350025][T20973] do_syscall_64+0x4c/0xa0 [ 1042.354468][T20973] ? clear_bhb_loop+0x30/0x80 [ 1042.359172][T20973] ? clear_bhb_loop+0x30/0x80 [ 1042.363884][T20973] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1042.369816][T20973] RIP: 0033:0x7fbad8bf70d9 [ 1042.374266][T20973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.393913][T20973] RSP: 002b:00007fbad6e4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.402375][T20973] RAX: ffffffffffffffda RBX: 00007fbad8e7efa0 RCX: 00007fbad8bf70d9 [ 1042.410379][T20973] RDX: 0000000000000094 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1042.418369][T20973] RBP: 00007fbad6e4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.426347][T20973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.434332][T20973] R13: 00007fbad8e7f038 R14: 00007fbad8e7efa0 R15: 00007ffc65ab81b8 [ 1042.442385][T20973] [ 1042.809257][T20993] FAULT_INJECTION: forcing a failure. [ 1042.809257][T20993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1042.853708][T20993] CPU: 1 PID: 20993 Comm: syz.2.5507 Not tainted syzkaller #0 [ 1042.861248][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1042.871343][T20993] Call Trace: [ 1042.874681][T20993] [ 1042.877690][T20993] dump_stack_lvl+0x188/0x250 [ 1042.882424][T20993] ? show_regs_print_info+0x20/0x20 [ 1042.887665][T20993] ? load_image+0x410/0x410 [ 1042.892211][T20993] ? __lock_acquire+0x7b50/0x7b50 [ 1042.897298][T20993] should_fail+0x383/0x4b0 [ 1042.901804][T20993] _copy_from_user+0x2e/0x170 [ 1042.906523][T20993] __sys_bpf+0x26d/0x6f0 [ 1042.910806][T20993] ? bpf_link_show_fdinfo+0x380/0x380 [ 1042.916242][T20993] __x64_sys_bpf+0x78/0x90 [ 1042.920770][T20993] do_syscall_64+0x4c/0xa0 [ 1042.925223][T20993] ? clear_bhb_loop+0x30/0x80 [ 1042.929934][T20993] ? clear_bhb_loop+0x30/0x80 [ 1042.934648][T20993] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1042.940572][T20993] RIP: 0033:0x7f0eb48050d9 [ 1042.945037][T20993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.964812][T20993] RSP: 002b:00007f0eb2a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1042.973300][T20993] RAX: ffffffffffffffda RBX: 00007f0eb4a8cfa0 RCX: 00007f0eb48050d9 [ 1042.981359][T20993] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1042.989372][T20993] RBP: 00007f0eb2a5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.997380][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1043.005391][T20993] R13: 00007f0eb4a8d038 R14: 00007f0eb4a8cfa0 R15: 00007ffcce270928 [ 1043.013414][T20993] [ 1043.293906][T20998] device syzkaller0 entered promiscuous mode [ 1045.842518][T21009] validate_nla: 5 callbacks suppressed [ 1045.842536][T21009] netlink: 'syz.2.5514': attribute type 10 has an invalid length. [ 1045.907764][T21009] __nla_validate_parse: 15 callbacks suppressed [ 1045.907777][T21009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5514'. [ 1045.958778][T21009] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1045.974123][T21009] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.002637][T21009] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1046.329463][T21035] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1046.356372][T21035] netlink: 22808 bytes leftover after parsing attributes in process `syz.3.5522'. [ 1046.392819][T21032] netlink: 'syz.5.5523': attribute type 10 has an invalid length. [ 1046.575825][T21039] device syzkaller0 entered promiscuous mode [ 1046.596300][T21039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1046.681267][T21039] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5526'. [ 1047.334280][T21081] netlink: 'syz.6.5543': attribute type 41 has an invalid length. [ 1047.350986][T21081] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5543'. [ 1047.364966][T21081] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1047.389512][T21084] netlink: 'syz.1.5545': attribute type 10 has an invalid length. [ 1047.407013][T21081] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1047.446354][T21081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1047.705560][T21099] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1047.727091][T21099] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1047.875546][T21114] netlink: 'syz.2.5555': attribute type 10 has an invalid length. [ 1047.895893][T21114] team0: Device hsr_slave_0 failed to register rx_handler [ 1047.970374][T21113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1048.200599][T21128] netlink: 'syz.3.5562': attribute type 2 has an invalid length. [ 1048.273429][T21132] netlink: 'syz.2.5560': attribute type 10 has an invalid length. [ 1048.378226][T21136] device syzkaller0 entered promiscuous mode [ 1048.620750][T21141] netlink: 121460 bytes leftover after parsing attributes in process `syz.6.5566'. [ 1048.645331][T21138] netlink: 'syz.3.5565': attribute type 2 has an invalid length. [ 1048.684421][T21141] netlink: 22808 bytes leftover after parsing attributes in process `syz.6.5566'. [ 1049.402085][T21167] ªªªªª6: renamed from veth0_vlan [ 1049.624543][T21183] bond0: (slave bond_slave_0): Releasing backup interface [ 1049.655243][T21183] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1050.671510][T21220] device syzkaller0 entered promiscuous mode [ 1051.546064][T21246] FAULT_INJECTION: forcing a failure. [ 1051.546064][T21246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.563135][T21246] CPU: 0 PID: 21246 Comm: syz.6.5606 Not tainted syzkaller #0 [ 1051.570675][T21246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.580759][T21246] Call Trace: [ 1051.584074][T21246] [ 1051.587037][T21246] dump_stack_lvl+0x188/0x250 [ 1051.591768][T21246] ? show_regs_print_info+0x20/0x20 [ 1051.596990][T21246] ? load_image+0x410/0x410 [ 1051.601526][T21246] ? __lock_acquire+0x7b50/0x7b50 [ 1051.606588][T21246] should_fail+0x383/0x4b0 [ 1051.611082][T21246] _copy_from_user+0x2e/0x170 [ 1051.615799][T21246] iovec_from_user+0x142/0x370 [ 1051.620605][T21246] __import_iovec+0x70/0x490 [ 1051.625251][T21246] import_iovec+0x6f/0xa0 [ 1051.629618][T21246] ___sys_recvmsg+0x4e2/0x5c0 [ 1051.634330][T21246] ? __sys_recvmsg+0x280/0x280 [ 1051.639141][T21246] ? __fget_files+0x402/0x470 [ 1051.643863][T21246] __x64_sys_recvmsg+0x201/0x2d0 [ 1051.648839][T21246] ? ___sys_recvmsg+0x5c0/0x5c0 [ 1051.653715][T21246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1051.659759][T21246] ? lockdep_hardirqs_on+0x94/0x140 [ 1051.665010][T21246] do_syscall_64+0x4c/0xa0 [ 1051.669474][T21246] ? clear_bhb_loop+0x30/0x80 [ 1051.674188][T21246] ? clear_bhb_loop+0x30/0x80 [ 1051.678897][T21246] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1051.684839][T21246] RIP: 0033:0x7fc42fc280d9 [ 1051.689289][T21246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.708931][T21246] RSP: 002b:00007fc42de3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1051.717470][T21246] RAX: ffffffffffffffda RBX: 00007fc42feb0180 RCX: 00007fc42fc280d9 [ 1051.725478][T21246] RDX: 0000000000010000 RSI: 0000200000000180 RDI: 0000000000000004 [ 1051.733490][T21246] RBP: 00007fc42de3e090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.741487][T21246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.749487][T21246] R13: 00007fc42feb0218 R14: 00007fc42feb0180 R15: 00007ffedc3ee0b8 [ 1051.757532][T21246] [ 1051.899622][T21249] netlink: 'syz.5.5608': attribute type 29 has an invalid length. [ 1051.926790][T21251] netlink: 'syz.5.5608': attribute type 29 has an invalid length. [ 1052.083447][T21254] __nla_validate_parse: 6 callbacks suppressed [ 1052.083487][T21254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5609'. [ 1052.474045][T21268] [ 1052.480996][T21268] ============================= [ 1052.486704][T21268] WARNING: suspicious RCU usage [ 1052.492905][T21268] syzkaller #0 Not tainted [ 1052.497730][T21268] ----------------------------- [ 1052.503477][T21268] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1052.512731][T21268] [ 1052.512731][T21268] other info that might help us debug this: [ 1052.512731][T21268] [ 1052.528930][T21268] [ 1052.528930][T21268] rcu_scheduler_active = 2, debug_locks = 1 [ 1052.548831][T21272] netlink: 'syz.2.5615': attribute type 8 has an invalid length. [ 1052.560221][T21268] 1 lock held by syz.2.5615/21268: [ 1052.566513][T21268] #0: ffffffff8c31f0e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 1052.577683][T21272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5615'. [ 1052.588065][T21268] [ 1052.588065][T21268] stack backtrace: [ 1052.605301][T21268] CPU: 0 PID: 21268 Comm: syz.2.5615 Not tainted syzkaller #0 [ 1052.612829][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1052.622920][T21268] Call Trace: [ 1052.626243][T21268] [ 1052.629208][T21268] dump_stack_lvl+0x188/0x250 [ 1052.633932][T21268] ? load_image+0x410/0x410 [ 1052.638500][T21268] ? show_regs_print_info+0x20/0x20 [ 1052.643732][T21268] ? print_tainted+0x148/0x170 [ 1052.648554][T21268] ? lockdep_rcu_suspicious+0x110/0x180 [ 1052.654149][T21268] get_callchain_entry+0x2a5/0x3b0 [ 1052.659374][T21268] get_perf_callchain+0xab/0x460 [ 1052.664348][T21268] ? put_callchain_entry+0xb0/0xb0 [ 1052.669504][T21268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1052.675694][T21268] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.680950][T21268] __bpf_get_stack+0x2db/0x530 [ 1052.685847][T21268] ? stack_map_get_build_id_offset+0x860/0x860 [ 1052.692063][T21268] ? bpf_prog_421ca263305b4469_F+0x29/0x9a0 [ 1052.697967][T21268] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1052.703182][T21268] bpf_prog_421ca263305b4469_F+0x29/0x9a0 [ 1052.708914][T21268] bpf_prog_19484586d131c401+0x18/0xcd8 [ 1052.714482][T21268] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 1052.719894][T21268] bpf_prog_test_run_syscall+0x361/0x500 [ 1052.725540][T21268] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.730754][T21268] ? sock_gen_cookie+0x60/0x60 [ 1052.735529][T21268] ? bpf_prog_test_run+0x310/0x390 [ 1052.740657][T21268] ? sock_gen_cookie+0x60/0x60 [ 1052.745436][T21268] bpf_prog_test_run+0x31c/0x390 [ 1052.750414][T21268] __sys_bpf+0x5a5/0x6f0 [ 1052.754677][T21268] ? bpf_link_show_fdinfo+0x380/0x380 [ 1052.760079][T21268] __x64_sys_bpf+0x78/0x90 [ 1052.764546][T21268] do_syscall_64+0x4c/0xa0 [ 1052.768971][T21268] ? clear_bhb_loop+0x30/0x80 [ 1052.773663][T21268] ? clear_bhb_loop+0x30/0x80 [ 1052.778358][T21268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1052.784271][T21268] RIP: 0033:0x7f0eb48050d9 [ 1052.788717][T21268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1052.808337][T21268] RSP: 002b:00007f0eb2a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1052.816818][T21268] RAX: ffffffffffffffda RBX: 00007f0eb4a8cfa0 RCX: 00007f0eb48050d9 [ 1052.824827][T21268] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1052.832805][T21268] RBP: 00007f0eb489c024 R08: 0000000000000000 R09: 0000000000000000 [ 1052.840784][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.848771][T21268] R13: 00007f0eb4a8d038 R14: 00007f0eb4a8cfa0 R15: 00007ffcce270928 [ 1052.856769][T21268] [ 1052.872058][T21268] [ 1052.875927][T21268] ============================= [ 1052.880892][T21268] WARNING: suspicious RCU usage [ 1052.905156][T21268] syzkaller #0 Not tainted [ 1052.909674][T21268] ----------------------------- [ 1052.916282][T21268] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage! [ 1052.932146][T21268] [ 1052.932146][T21268] other info that might help us debug this: [ 1052.932146][T21268] [ 1052.948208][T21268] [ 1052.948208][T21268] rcu_scheduler_active = 2, debug_locks = 1 [ 1052.957222][T21268] 1 lock held by syz.2.5615/21268: [ 1052.964004][T21268] #0: ffffffff8c31f0e0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30 [ 1052.977226][T21268] [ 1052.977226][T21268] stack backtrace: [ 1052.983606][T21268] CPU: 0 PID: 21268 Comm: syz.2.5615 Not tainted syzkaller #0 [ 1052.991147][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.001325][T21268] Call Trace: [ 1053.004634][T21268] [ 1053.007593][T21268] dump_stack_lvl+0x188/0x250 [ 1053.012314][T21268] ? load_image+0x410/0x410 [ 1053.016860][T21268] ? show_regs_print_info+0x20/0x20 [ 1053.022106][T21268] ? lockdep_rcu_suspicious+0x110/0x180 [ 1053.027698][T21268] perf_callchain_kernel+0x625/0x760 [ 1053.033069][T21268] ? load_image+0x410/0x410 [ 1053.037614][T21268] ? show_regs_print_info+0x20/0x20 [ 1053.042853][T21268] ? print_tainted+0x148/0x170 [ 1053.047659][T21268] ? arch_perf_update_userpage+0x3c0/0x3c0 [ 1053.053525][T21268] ? get_callchain_entry+0x181/0x3b0 [ 1053.058853][T21268] get_perf_callchain+0x356/0x460 [ 1053.063912][T21268] ? put_callchain_entry+0xb0/0xb0 [ 1053.069062][T21268] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1053.075274][T21268] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.080488][T21268] __bpf_get_stack+0x2db/0x530 [ 1053.085323][T21268] ? stack_map_get_build_id_offset+0x860/0x860 [ 1053.091516][T21268] ? bpf_prog_421ca263305b4469_F+0x29/0x9a0 [ 1053.097487][T21268] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1053.102734][T21268] bpf_prog_421ca263305b4469_F+0x29/0x9a0 [ 1053.108495][T21268] bpf_prog_19484586d131c401+0x18/0xcd8 [ 1053.114524][T21268] bpf_prog_run_pin_on_cpu+0x63/0x140 [ 1053.119936][T21268] bpf_prog_test_run_syscall+0x361/0x500 [ 1053.125606][T21268] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.130854][T21268] ? sock_gen_cookie+0x60/0x60 [ 1053.135658][T21268] ? bpf_prog_test_run+0x310/0x390 [ 1053.140821][T21268] ? sock_gen_cookie+0x60/0x60 [ 1053.145622][T21268] bpf_prog_test_run+0x31c/0x390 [ 1053.150597][T21268] __sys_bpf+0x5a5/0x6f0 [ 1053.154885][T21268] ? bpf_link_show_fdinfo+0x380/0x380 [ 1053.160319][T21268] __x64_sys_bpf+0x78/0x90 [ 1053.164780][T21268] do_syscall_64+0x4c/0xa0 [ 1053.169347][T21268] ? clear_bhb_loop+0x30/0x80 [ 1053.174056][T21268] ? clear_bhb_loop+0x30/0x80 [ 1053.178773][T21268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1053.184704][T21268] RIP: 0033:0x7f0eb48050d9 [ 1053.189156][T21268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.208800][T21268] RSP: 002b:00007f0eb2a5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1053.217287][T21268] RAX: ffffffffffffffda RBX: 00007f0eb4a8cfa0 RCX: 00007f0eb48050d9 [ 1053.225292][T21268] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1053.233300][T21268] RBP: 00007f0eb489c024 R08: 0000000000000000 R09: 0000000000000000 [ 1053.241307][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.249308][T21268] R13: 00007f0eb4a8d038 R14: 00007f0eb4a8cfa0 R15: 00007ffcce270928 [ 1053.257338][T21268] [ 1054.306410][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.312819][ T1420] ieee802154 phy1 wpan1: encryption failed: -22