last executing test programs: 22.141278877s ago: executing program 2 (id=2302): r0 = socket$kcm(0xa, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x59}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f00000001c0), 0x2, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x1, 0x8, 0x2, 0x1, 0x0, 0xc, 0x40, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0x81}, 0x2148, 0x7, 0xca9a, 0x2, 0x7, 0x4, 0x6, 0x0, 0x7ab, 0x0, 0xffffffffffffffff}, r1, 0x4, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0xc, 0xf, &(0x7f0000000440)=""/15, 0x41100, 0x32, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xa, 0x632, 0x5e6e7fdd}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000780)=[{0x1, 0x5, 0x3, 0xb}, {0x5, 0x3, 0x7, 0x9}, {0x2, 0x4, 0x8, 0xc}, {0x5, 0x3, 0x8, 0x4}, {0x1, 0x4, 0x8, 0xe}, {0x3, 0x5, 0xd, 0xa}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_type(r2, &(0x7f0000000100), 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f00000008c0)=@xdp, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/159, 0x9f}, {&(0x7f0000000b00)=""/80, 0x50}], 0x2, &(0x7f0000000bc0)}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0008000600000003600e120800110002000401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900030020000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bf600000069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7adf4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edab57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2a, &(0x7f0000000040), 0xcf) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="260a000000000007611173000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 18.98160225s ago: executing program 2 (id=2307): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000180)=0x7) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000100000000000000000000850000002a000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x3, 0x2, 0x0, 0x5, 0x405020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x479a, 0x1000}, 0x0, 0x7c, 0x0, 0x7, 0x8000000000000000, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000200)=r5, 0xfffffffffffffff3) r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f00000000c0)='THAWED\x00', 0x7) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket$kcm(0x2b, 0x1, 0x0) 18.174433737s ago: executing program 2 (id=2311): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000650901000000000066000000ffffff80180100002020692500000000002020207b9a00fe000000005e9100000000000037010100f8ffffffb702000008000000b703000000000000560000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.94645871s ago: executing program 2 (id=2312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r0]}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000000)=@raw=[@map_idx, @generic={0x0, 0x0, 0x0, 0x0, 0x9}, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xffffffffffffffff}], 0x0}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) sendmsg$kcm(r5, &(0x7f0000000640)={&(0x7f00000003c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x4, 0xd2, "a191d1ffbe248c8e7532b4e808aa9f535f6de0f4875ccb829e2f574c17eeac413f554937c247300c091c128d6500909e2d248d3be251885dfa757b07886732", 0x38}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000540)="bbdff1ea93e8d080759ef0aacd99c044c1275c2e6dd78082ea90ea0335a91ee4b20a30bb09841a04a4e278eae4e7b38897bbd56bf06770c277bb50543a8e8b5e255a0722e654378d3c050c3f0f954222e910f9c44b87cbb3bc26e26c556e2661a5a0e5", 0x63}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f0000000800)="966f0a63bcbf539ee1f65c68ba7e0797aa2dd9e76dac34d9dee1bed98a4889132785d914c1847fe9c38cab06fedb52d71644294bcdf9c73f8c90805eba060e4a2fae2e1bed7fbb2a9023b7f45337670303801e5018a7bd8dada889fcdacca3451af9e009fc243aaf9f05bac598c89ef5e252497d58127b61b3b54d04ef52797d672d9eaeb88d8871486093c51868add7d3c80c6bbf4f4d8bd5b19441028a424ed392673a5ac55be5edc04183f3d5956a01a8924942b721040a36f86544821b3921a6bac4da56a9cea4f01d91b3b53443a0973dac1c80677fca1bc1f299ec8713793a6a4a", 0xe4}, {&(0x7f00000005c0)="81b30934e39417423387739d430cc60358c73d2a136029456d71ceeb5e5ed05f3061fb2f69bf6d0a13b6bfbf943e8e2b74cad1b9d34cc7a2724d5160adfa43bbb2dbd701b72bf06e", 0x48}, {&(0x7f00000001c0)}], 0x5, &(0x7f0000000f00)=[{0xc8, 0x88, 0x5, "f22cbab01b71191fde15f03193496d79f339ff615e2eb711516daa2be39b408bbf90e456776e08c9195bede38ae391ebbfa66f7c366cf90b0ed92012a29823ca7168ff769f10928d10164186463731416659c6da29f76ffa327c26e56781e114033199e47524fa719da8ef930a03437ad943edfc964bc4fcbef4bb70a23b5c192dfeb586afb7f1e20b3da5ace65e6b369b1ba6177965c4640ab3f4b6079ad55fb8be1b8745d61e00c9ef1fec0a81944ec0a21dbba3b1183a"}], 0xc8}, 0x480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000300"}) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0x43, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r9, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r8, &(0x7f0000000940)={&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000bc0)="5ff36b19ab12234b491b58e14ae737312377a57c86d8bc35d06429c15908bacc101625c5df7d449c5257dabca96c364963885ee0d5936f3ed239530c15c5a673fe9983cd14ab4bf6628080b8acaef9f95d40ef4fe55b3289124227ebfdea32ffdc752decb8f8d73afc05470a53e9c3a09b5491999a496ca785df6d768201cba1fb37b3514442d4590fb8b8eccf8acedaf5d07df4b17e0ebf72c8a9072534b202ffca375f8d1581c53cb978b37d28c89335c92675725f7bbaeb27e1be2a200c9f1ca4825a306d02fd", 0xc8}, {&(0x7f0000000380)="3c28eab5ae0ef2ca7ee99fb1d917bdaf8360900b8724d53164", 0x19}, {&(0x7f0000000cc0)="f192baf6a97ef02d1cd03ee9c58466c06ec4361678f9773896c21257e1da015a018cb769dd3d025618e43a64b938e525fa7236ee9735475f0c4818511fc2a39e6a217ba618619e2cc09f77829913714e2d13d60e5be7e912beb11bb2912a5a4738105e80c86120277b9088fbdcf57c7abe448658d22bed13a42c68f58bc81f2d13aa8e31bc330d253964586bcb4e5f18056f1f86c055963911772c539b1dc167c17e142f787fcc5274f0b3167e347938cf5fbd89c6f54a0530d69ed6835a64c60d", 0xc1}], 0x3, &(0x7f0000000dc0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x36, 0x0, 0xa, [0x1, 0x4]}, @timestamp={0x44, 0x10, 0xe8, 0x0, 0x4, [0x7ff, 0x1, 0x67f]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x6f, [@private=0xa010101, @broadcast, @private=0xa010100]}, @noop, @noop, @timestamp={0x44, 0x4, 0x52, 0x0, 0x4}, @ssrr={0x89, 0x23, 0xbf, [@dev={0xac, 0x14, 0x14, 0xa}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @local, @multicast1]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @remote, @multicast1}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x32, 0xffffffffffffffff, [{0x6, 0xf, "2f8d0039fad220443d263f510e"}, {0x1, 0xc, "4fdf763674ef436270c6"}, {0x7, 0xd, "ce58f9288a6855eb18fff3"}, {0x7, 0x4, "2e88"}]}, @generic={0x94, 0x2}, @timestamp={0x44, 0x14, 0xcf, 0x0, 0x9, [0x3ff, 0x8, 0x5, 0xff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11}}], 0x138}, 0x40) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0700bdf7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xaa}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', r10, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0x1, 0xdcfc, 0x6525}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000200)=[r0, r11, r0], &(0x7f0000000240)=[{0x3, 0x3, 0xe, 0x5}], 0x10, 0x8}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r12}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r12, &(0x7f0000000480)="b18bdb10d0feb1cb4b6488a2b85abe4c6354f958914f81c7c5d041fae502bb99d5f64479df3e86912dc171ae23ff733d6e1a348357a605cfd2db0fec605cf09b6022be8b88a2561de272f48e88956c2be97f880290c97678afa2bd95323951a1fd98609e35b936473d76f5721fdf024d466e18485f41508e7115755089902a742c99dcb986bc34b23ae6faa24088897a2fe44eb93a20c09c2589c98b520b1470b6493dee9c86f66d39f88f90529e904e8d33c4ca51"}, 0x20) 16.687600643s ago: executing program 2 (id=2316): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, 0x0}, 0x4c810) close(r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000300), &(0x7f00000003c0)=r0}, 0x20) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80a9, 0x5, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x33d0980, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c2864"], 0x6b}, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x19, 0x0, 0xfcd8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x208000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) 6.655437544s ago: executing program 1 (id=2359): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, 0x1}, 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) socketpair(0x6, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (rerun: 64) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0xff0f000000000000) (async) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x4, &(0x7f0000000000), 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 6.306359195s ago: executing program 1 (id=2360): socket$kcm(0x10, 0x2, 0x0) (async) r0 = syz_clone(0x40000200, &(0x7f0000001240)="debbc77c8009a6286cd47c16f5b5b7e02b7902552abeacdd5e15611d14c77b5c0154e546b8b5ee20cab0853a6d780a40ed31b669b155ca3e489cd4dded4272fd", 0x40, 0x0, &(0x7f0000001300), &(0x7f0000001340)="543d74d8054e54e391d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f60fb2b8c750ceac8f90620d21fad6587297325eaec7391587ffd1e28e54fa5f9e07bc72573a53a061495921e1c23ce69b8616f7342c05c9bed373fc069a54df01f4b") syz_open_procfs$namespace(r0, &(0x7f0000001440)='ns/cgroup\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/net/\x01?\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000d1800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x14202, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = syz_clone(0x10000000, &(0x7f0000000780)="8b0773cda2f846a143357b193dceb6ec9c315bedd436e5cba50f4ffeebfcab792b324a9b9154eb394500e4ead1265ab777dbf909067a53b979c6ad6702fa6316573bfa6c387071147cd4401f1573f621980f98f972e92893f62736da09ae748501fd8337afcb45cfeb7c1350a071bddcb5c118a7ae0925bbd3c2beb9b5ac92582f95ee209669fc2642028cf22cef5f3c54ce373a893a4a4c411b8baa6ac2a9a952d1becbb49cbe35fd174f3f", 0xac, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000a40)="2e395a3dfb67cf42f498e7138875d771f6c533a61e1648bba1652c13df3e57505c2c0cf3ca75f60742265de1a29275dc939efc6d5f697fc9562b24c381a9b179bb5bf8299f1fe02da503055b9e065760b4b93a633e5fc218c7d06d487508f2b5ed9494c68d9754ad07d852fe7b908025a5386304d8183ac19f28f0894cfe3aab9b662ae1ea519eaeb5e961f5336ed1f0aff91da8389ecc3d82") (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r6}, 0x8) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x91, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x14}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x3111, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x2e}], 0x1}, 0x40080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b70800e7ff0000007b8af8ff00000000aa080000000000007b8af0ff00000000bfa100000000000007010000f8d1e222e8215affffffbfa4"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2, 0x1, 0x84) 2.5782973s ago: executing program 3 (id=2366): socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x0, 0x1a, 0x0, 0x0, 0x3}, 0x28) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000040)) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7, 0xff, 0xb, 0x6, 0x0, 0x778a, 0x200fe, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x2}, 0x1, 0x2, 0x1, 0x9, 0x45b, 0x3, 0x403, 0x0, 0x7, 0x0, 0x4fac}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x7100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp={0x0, 0xa}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) (async) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 2.566819401s ago: executing program 1 (id=2367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x5) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)=0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000e00)=ANY=[@ANYBLOB="009c27dd99ce8f29eb39e8ab75a549d015478dcd9f97e52638e49a32d133bab9d1e4a0e7d3e1f5507754455bb50e8bc35cc77ead6415ff24453375b2fba6c4b0d0b6731d93e66e2cf0070d1f357c6afef29cc68d3c1e46be5327f8de118bd8dc1c618288f4ecdef64ea2786ab823f471eef873e092841f21f7a74ce78d867d50e3a3f53dd23161a751aa18b969100790b8731868436e62d83025bd72a55190ded4400d6662419dd4a6293335acac1732c7a00891011bafeeb9d1f8b63aa95f526c0a03dad55718fd9fe363012b900b0be00b75283fd8c15c2e3c804e5cac0fb858569d062888d5803bcd27095e37824f17c0df67d6dd5c", @ANYRES32, @ANYBLOB="0000000004000000"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000140)=[{0x0, 0x4, 0x0, 0xb}, {0x2, 0x5, 0xb, 0x5}, {0x3, 0x2, 0x5, 0xa}, {0x4, 0x2, 0x7, 0x1}, {0x5, 0x1, 0x4, 0xa}, {0x0, 0x2, 0xf, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x15, 0x1, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r3, 0x10) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x3, 0x54197, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002140)={@cgroup, 0xffffffffffffffff, 0x1c, 0x14}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0a00fef8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000001404000000ffffffdc04000040000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b570ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198010000000000008050d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d18165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0144587734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbf8ea2a77dccdc3fe247feb121d9440a3ea9012a9d23a7e3110b0f25c5f8bf803d688de4d92b5dfdbd69fb8b426b55c10ba01b5e18b10cce8de33693"], &(0x7f0000000280)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000008000000000020386aa8cc6a7a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0xa, 0x3, 0x106) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000ed25"], 0x50) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.257235709s ago: executing program 0 (id=2368): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100009, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x664e, 0x800}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x96, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x10, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="a5af8f5549182f00000009000118110000cfad", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x500}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0xb, 0x1, 0xffd, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000080)=[0x0], &(0x7f00000000c0), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="5c00000013006bcc9e3be35c6e17b9310400876c1d0000007ea60864160af36514001ac00400020004004400eab556a705251e61aae5f66f8294ff0051f60a84c9f4d4938037e786a6d0001004000e4509c57f74ff241854990200", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24008880) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000009, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x6b, 0x1ef7}, 0x11efa, 0x6, 0x27c6, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) 2.200830602s ago: executing program 3 (id=2369): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000400000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000000ffffff80180000000000000000000000000000009500000000000000760a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000500000085000000068000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r0, &(0x7f0000000300)="745da6ce771681a7fdc398c0bd482d9c62c635b363bde445410d7c69bef3a362eff8733f9b715a5374ad6f9d626b94b8c3", &(0x7f00000003c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xfffffffffffffcea, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0, &(0x7f00000005c0)=[{}], 0x8, 0x8, &(0x7f0000000000), &(0x7f0000000640), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000036000000850000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, 0x0, 0x8020) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040500000000000040edffff40000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4d) close(0x3) 1.807774915s ago: executing program 3 (id=2370): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x401}, 0x0, 0xc8, 0x0, 0x7, 0x0, 0x0, 0x770a}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007111b30000000000850000007500000095"], &(0x7f0000000800)='GPL\x00', 0x1000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f00000006c0)="6d28dbe1717f801649678c9743ecfacfcb04f0d25cbbfea487abfd2fb2b8ff35df19af71deecb00ba02a9392a7920f357e34114957ec891f997f60b9d0ed2eeb4d395580f46d44e7a96d642bd85b1420b0802f76bdd3f4d076e167fb7cc66c65426de8d55c219075ed7fc3bccffb98fd86b7c70c8a38de38a432e447caf0740b7440", 0x82}], 0x1, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}, 0x404c880) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff65ec5deb000071673fa79d93014b8e7781c2", @ANYRES8=r1], 0xfdef) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f00000002c0)=""/110, 0x6e}], 0x2}, 0x40010280) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000180), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r7, 0x58, &(0x7f0000000240)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x10}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000b00), &(0x7f0000000b40)=r7}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x7}, 0x104101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) 1.451331065s ago: executing program 0 (id=2371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0xffff, 0x8, 0x200, 0x120, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x9, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c0}, [@generic={0x2, 0xd, 0x5, 0x6, 0x4}, @jmp={0x5, 0x1, 0x2, 0x6, 0x7, 0x18, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0x3, &(0x7f00000003c0)=""/3, 0x41100, 0x40, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xc, 0x4, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r8, r0, r2, r3, r0, r0, r0, r0], &(0x7f0000000640)=[{0x4, 0x4, 0x1, 0xc}], 0x10, 0x5}, 0x94) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1.318782733s ago: executing program 1 (id=2372): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x92, 0x3, 0x9, 0x0, 0x100000080001, 0x91239, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3, 0x1}, 0x102200, 0x1, 0xb, 0x6, 0x3, 0x8, 0x43, 0x0, 0xe18a, 0x0, 0x1000000000000007}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x3b, 0x6, 0x8, 0x2, 0x0, 0x0, 0x40818, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1240, 0x1b9, 0x8, 0x7, 0x2e31a4e0, 0xf9c8, 0x7, 0x0, 0x6, 0x0, 0x4}, 0xffffffffffffffff, 0xc, r1, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x10) 1.226429789s ago: executing program 0 (id=2373): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x80}, 0x50) socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000650901000000000066000000ffffff80180100002020692500000000002020207b9a00fe000000005e9100000000000037010100f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b7000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.224039519s ago: executing program 3 (id=2374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x0, &(0x7f0000000c40)="63bd998e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffffff23, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x0, 0xad, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000300), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x10001, 0x80000001, 0xc, 0x2000, 0xffffffffffffffff, 0x232, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x6}, 0x50) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x80, 0x0, 0x0, 0x0, 0x7fffffff}, @generic={0x3, 0x3, 0x2, 0x515, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x4b, &(0x7f00000001c0)=""/75, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x7, 0xfffffff9, 0x10001}, 0x10, r3, r4, 0x0, &(0x7f0000000480)=[r5, r8, r9], 0x0, 0x10, 0x3}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000810) 918.296136ms ago: executing program 0 (id=2375): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180200d20ec89f3100000000efffffff850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300003f000000850000007b00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x4, '\x00', r8, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r10, &(0x7f00000001c0)='syz0\x00', 0x1ff) 578.647516ms ago: executing program 1 (id=2376): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000440)={'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x8, [@typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @int={0xe, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x25, 0x1}, @union={0x9, 0x3, 0x0, 0x5, 0x0, 0x9, [{0x9, 0x2, 0xfff}, {0x8, 0x3, 0x2011}, {0xd, 0x0, 0x9}]}]}, {0x0, [0xea8cf2f432ac1afc, 0x30, 0x2e, 0x10, 0x0, 0x5f]}}, &(0x7f00000002c0)=""/108, 0x6c, 0x6c, 0x0, 0x5, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1c00c96511fde833bd66c40000a85e11c2942c36d9b46251cc0000007d0000", @ANYRES64=r1, @ANYBLOB="00e19900"/20, @ANYRES32=r2, @ANYRESOCT=r3, @ANYBLOB="030000000500000000000085672afb40281f10ef48c2355700000000ba798ddba0a18b5618d7588a264470d49ad73e8cfa0c7bcbaf773f509602095a6f9efbb9a80dce4b7c0a44594d920ce3fc688c0437a7599c73778126d3f3f30a92631994b5ddaf60e4cf7062404534928602226159a99a3c97b73a1f25088aada90697dbc885525fc33236a5089c08121b10"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xffffffffffffff15, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000001}, 0x94) socket$kcm(0x2, 0x5, 0x84) (async) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x40000001) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x40000001) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200090004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200090004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000), 0x10) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f0, &(0x7f0000000080)) 346.61571ms ago: executing program 0 (id=2377): socket$kcm(0xa, 0x3, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x46e6}, [@call={0x85, 0x0, 0x0, 0x37}]}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) (async) sendmsg$inet(r1, &(0x7f00000014c0)={&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 267.289844ms ago: executing program 1 (id=2378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x3) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x20}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x218001, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000180)) (async) r3 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0xa8, 0x1, 0x3, 0x6, 0x0, 0xf, 0x10, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc9bb, 0x4, @perf_bp={&(0x7f00000001c0), 0xa}, 0x1002, 0x7, 0x101, 0x4, 0x7, 0x200, 0x0, 0x0, 0xd6, 0x0, 0x6}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5d7df399, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @exit, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x4}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2}]}, &(0x7f0000000340)='GPL\x00', 0x5ec7, 0x98, &(0x7f0000000380)=""/152, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xf, 0xfffffffc, 0x7fffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x9, &(0x7f00000004c0)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x4, 0x4, 0xd, 0x3}, {0x1, 0x2, 0x7, 0x7}, {0x0, 0x3, 0x9, 0x3}, {0x1, 0x1, 0x10, 0x4}, {0x4, 0x5, 0xa, 0xb}, {0x4, 0x2, 0x5, 0x9}, {0x3, 0x2, 0xa, 0x5}, {0x4, 0x3, 0x10, 0x6}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) (async, rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r4, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x22, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x3, 0x0, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x0, 0x2, 0x2, 0xd, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000980)='GPL\x00', 0x56c2, 0x0, 0x0, 0x41100, 0x3b, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x0, 0x8, 0x817, 0x1ff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000d80)=[{0x0, 0x3, 0x10}, {0x3, 0x1, 0xd, 0x5}, {0x2, 0x5, 0xe, 0x2}, {0x3, 0x5, 0x6, 0x4}], 0x10, 0x8}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x7, 0x22, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x4, 0x0, 0x3, 0x6, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0xa, 0x8, 0x9, 0x7fffffffffffffa9, 0xfffffffffffffff0}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001200)='GPL\x00', 0x9, 0x39, &(0x7f0000001240)=""/57, 0x60680, 0x5, '\x00', r9, @fallback=0x25, r6, 0x8, &(0x7f0000001280)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x1, 0x6, 0x5}, 0x10, r10, r6, 0x0, 0x0, 0x0, 0x10, 0x228}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xd, 0x10, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x1, 0x0, 0x7, 0x50, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000f00)='syzkaller\x00', 0x0, 0xfc, &(0x7f0000000f40)=""/252, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, r6, 0x8, &(0x7f0000001040)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x0, 0xe, 0x7f, 0xffffffff}, 0x10, r10, r11, 0x6, 0x0, &(0x7f00000013c0)=[{0x4, 0x4, 0x2, 0x9}, {0x0, 0x1, 0xc, 0x3}, {0x2, 0x4, 0x4, 0xb}, {0x0, 0x5, 0xe, 0x3}, {0x4, 0x2, 0x5, 0x9}, {0x3, 0x1, 0x9, 0x3}], 0x10, 0x3b}, 0x94) (async) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001500)={'veth1_macvtap\x00', @link_local}) (async) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xf42b, '\x00', 0x0, r6, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x34, &(0x7f0000001540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbe4d}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x8d}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xe0b37d3479044db0}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='syzkaller\x00', 0x9, 0x60, &(0x7f0000001740)=""/96, 0x40f00, 0x65, '\x00', r9, 0x0, r6, 0x8, &(0x7f00000017c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000001800)={0x5, 0xe, 0x6, 0xfffffffd}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000018c0)=[r7, r7, r7, r13, r5, r7, r6, r5, r7], &(0x7f0000001900)=[{0x2, 0x3, 0xf, 0x4}, {0x5, 0x3, 0xd, 0x4}, {0x4, 0x5, 0x4, 0x1}, {0x2, 0x5, 0x2, 0xc}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x2}, 0x94) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002b40)={r8, 0x58, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x5, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000001a80)='GPL\x00', 0x81, 0x1000, &(0x7f0000001ac0)=""/4096, 0x40f00, 0x18, '\x00', r14, 0x0, r6, 0x8, &(0x7f0000002b80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002bc0)={0x1, 0x4, 0x2, 0x10001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002c00)=[r7], &(0x7f0000002c40)=[{0x0, 0x2, 0x5, 0x4}], 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) (async, rerun: 64) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000002d80)) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f00)={&(0x7f0000002dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa, 0x5}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f, 0x61, 0x0, 0x30, 0x5f]}}, &(0x7f0000002e40)=""/180, 0x5b, 0xb4, 0x0, 0x1, 0x10000, @value=r6}, 0x28) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f40)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x4, '\x00', r14, r3, 0x3, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003040)={{r15}, &(0x7f0000002fc0), &(0x7f0000003000)=r12}, 0x20) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000003080)=0x1) 254.526905ms ago: executing program 3 (id=2379): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x4, '\x00', 0x0, r2, 0x4, 0x3, 0x3}, 0x50) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x2, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x2, &(0x7f0000000000), 0x4) 94.134614ms ago: executing program 0 (id=2380): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6f, 0x4, 0x40, 0x4, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000100), 0x4}, 0x10000, 0x7401, 0xc4, 0x9, 0x7, 0x800, 0x18, 0x0, 0x7fff, 0x0, 0x4}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x80, 0x5, 0x6, 0x6c, 0xf1, 0x0, 0x86, 0xc0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc970, 0x4, @perf_bp={&(0x7f0000000000), 0x7a7b556335f52e4}, 0x1044e, 0x7f, 0xa88, 0x8, 0x4, 0x9, 0x958, 0x0, 0xe4, 0x0, 0x3}, r0, 0x10, r1, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000200)=0xbb06cce) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) (async) r3 = socket$kcm(0x29, 0x7, 0x0) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000280)=r4, 0x4) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x6, 0xf3, 0x71f, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) sendmsg(r3, &(0x7f0000001840)={&(0x7f0000000440)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)="2b4236ae7cee2bd20534647cfd3d1fd05ac1e760c47c2635a386be84922df2ec04257f12120b2a169399dd4016e06f2bf6b1b61a79b7c057de6af2fc8d521924bc33ad13847829d085c0928bafcddb4ef36dd255f249037fd42b7520d11f4105f4dddde2721092a6a74f67fe4984f748aa247a0392b1d23bbbe577c645e6b83e3a3f04e18abcd678637fcb5bebf633785e6b8874a5193f7f7acc313dcc703cf84da0991f0d9659da6d6c0bf4984cfe70541434c89874bbd8119165f738c8df571419ac44f31bb5b36fcdbe100fd50f9cdf", 0xd1}], 0x1, &(0x7f0000000600)=[{0xb8, 0x119, 0x6, "0839d10b0574874743bc0f7fde5c87221d0071b8a202bbfc4ba747cf98b64cea432ba615efc9c8c36cb75697b9329dae1a2ad0980a1c6303a54d7669f3f072cef9bcf729c763c6d5dc278612d037a9c23523202d256e4668394949bbddcb2cd4b54fba8c0f75f8c66c61c9a24c73bd9e4e4647d42bed6752bfa0935dbbe2a80f75aca43a412e844056a1c37623397c824cb7731c98de2dd2320f2fab066206321492c410ac4fd114"}, {0x1010, 0x110, 0x1000, "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"}, {0x78, 0x10e, 0x80000000, "1e429b8ced21d6c021a8e0e893db3e3b8f2059eacc0244ac030dc657c7f789ae7c6d3530fa4a1b323038a2d93b537aec82a5fd7df5e44edbe77e3f6123314386e2ffc467de26c1a2ebe6f6b5a7da63cdb8b69e05d654bd397de4157bfced91d241cdb4cdba92"}, {0xd0, 0xa6719e0b1866f443, 0x3, "629b23ec78394ccf4feffcfaf40893df974bf7b7845a9625dcd4f1652de8b106a816098b274cead941ebde2d58b57b823c90aba2dcce064c00f277b24132714dc7f4a15cc4ceab77303bc638d785d7f78aa89bae3419e002b00d3d0607c867ac932d532c4a136f0666ca39e93ed507a568e7f44f4f0188e5058a57c46695f0946a6b2af2870b265ef7352572aac875eb3f6087823c268d33139e58ef9cefd93782fb1a76e594ae2fa7fd8b8d706c90c06e7bdb0f0770aac748"}], 0x1210}, 0x40c4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001880)={0xf93}, 0x8) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000018c0), 0x2200, 0x0) (rerun: 64) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000001900)={'xfrm0\x00', 0x600}) r9 = syz_clone(0xb0244000, &(0x7f0000001940)="6564721ffbb5a816da93dc0880ffa74f348b86a1a100c1f7731d558c85afabadf94ebf44adf612cae5de990728c5c83331de7b68418fa41818e02ea5631d9f19720f8a14c4bd6bf7fb60565f17a680642c076e5465d8616389f2dcaf5b1c", 0x5e, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="d97915fc0e9b54f9d27001c61f") r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={@ifindex=r7, 0x1d, 0x1, 0x81, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c80)={r9, r2, 0x0, 0x1, &(0x7f0000001c40)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c00)={@fallback=r10, 0xffffffffffffffff, 0x2a, 0x2d, 0xffffffffffffffff, @void, @void, @void, @value=r13, r12}, 0x20) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000001cc0), 0x8480, 0x0) (async, rerun: 32) r14 = syz_clone(0x10080, &(0x7f0000001d00)="3ea1ffa6aa7d2991bead1f5e580db26ccd6e77561ec1f737318b698af3b4fb68421d73e67938f10202f37586b12df9e607a70ad2b151e67e0b20ea17371f72d412509bd30526fc9580a51ba622a8f3462c4bdd0ab3977eae22d0553e2c277621f98f97c37e9ed51eb765e098f9f70e982c49495ef8d43819a2e55323b5a141dbe32529c00572bcec3beb3416edc19741f27f0e80feb259d885fdeeb2cf3c0b9c639164ca09db45f4b95290c6b91c1ca5f861cf94977510dbb98045e9", 0xbc, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40)="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") sendmsg$unix(0xffffffffffffffff, &(0x7f00000040c0)={&(0x7f0000002e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004080)=[{&(0x7f0000002ec0)="fb849719acd1eea89ac9da8701dc63a1ab47c412cd781e97ea5c53682bb35e64f9f13a9ad8c525db70561ba63ed927ce60b5673b51756770fa78850484e7", 0x3e}, {&(0x7f0000002f00)="61d56703e5a22998fa7bca2359a6ab87220324dbb1090125cc2e07d59717a0057239fca5a100e5dfbfd140766b75c8ce1af9f34711d94937c694e0fed1caf161eacfda7986e216f418", 0x49}, {&(0x7f0000002f80)="7ecc4da54b27a885558507192863ead82ecd434a58e8a846f1aa4e5eac5188d3615aeebd2fe96e0b63de88c52c392dc20b57a6fd1d1f43bcf1b585d8378005e7bd704f279891b6ec203b2243a221110eadd4173200dc5499e847e75219ba04776d4fb784f6ad8e4115f33125622075054cb9952287af6eb8f0bb36ca8a5b34cb376f655f1785158a96e79db1fbebcde62bc0ec4cb9b235e349b19b886471024c07fafa57797278be7bf246dae6a59207129c062014a066d6b77e9f226e6a2aed8f50", 0xc2}, {&(0x7f0000003080)="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", 0x1000}], 0x4, 0x0, 0x0, 0x4000080}, 0x819) (async) ioctl$TUNSETIFINDEX(r8, 0x400454da, &(0x7f0000004100)=r7) (async) r15 = perf_event_open(&(0x7f0000004200)={0x0, 0x80, 0x4, 0xc, 0x32, 0x24, 0x0, 0x74d, 0x20, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0xc0e, 0x4}, 0x100060, 0x0, 0x7, 0x0, 0x7, 0x5, 0x8, 0x0, 0x7c3e, 0x0, 0x3}, r14, 0x0, r2, 0x3) perf_event_open(&(0x7f0000004180)={0x1, 0x80, 0x6, 0xa, 0xff, 0x9, 0x0, 0xc, 0x2004, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000004140), 0x1}, 0x103400, 0x80000001, 0x80000001, 0x2, 0x6, 0x0, 0x3a1, 0x0, 0xc, 0x0, 0x8}, r14, 0xa, r15, 0x0) (async) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000004280)={r6, 0x0, 0x18}, 0xc) r17 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004600)={0x11, 0x11, &(0x7f0000004300)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}], &(0x7f00000043c0)='syzkaller\x00', 0x3, 0xc6, &(0x7f0000004400)=""/198, 0x1f00, 0x12, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0xe, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000004580)=[r5, r16, r5], &(0x7f00000045c0)=[{0x1, 0x2, 0x7, 0xc}], 0x10, 0x3}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000046c0)=@o_path={&(0x7f00000042c0)='./file0\x00', 0x0, 0x8, r17}, 0x18) 62.680996ms ago: executing program 2 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffff9b0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x70000000, 0x0, 0xffffffffffffffff, 0xed, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pK \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0xd, 0x7, 0x3, 0x20, 0x8}, @jmp={0x5, 0x0, 0xa, 0x7, 0x0, 0xfffffffffffffffe, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x17, r3, 0x8, &(0x7f0000000280)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2a6a5, r5, 0x0, &(0x7f0000000640)=[0x1, r6, r7, r8, r9], 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r10, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="0000faab91cbd3199c2c8c192f3fc33aaf7f780c6ea8fa86f36fc2205179a022d62cb1c2d5583d666b8c8a9b6e0f6e1fc7", 0x31}], 0x1}, 0x20000801) recvmsg(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) socket$kcm(0x25, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r12, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 0s ago: executing program 3 (id=2381): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x237dc104, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x237dc104, 0x4}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(0x0, r1, 0x1, 0xffffffffffffffff, 0x3) (async) perf_event_open$cgroup(0x0, r1, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff0000000071108800000000009500000000000000c46a9cbb5788fe82522264931e976c08f921b5d4e8f70e22816c48f851cd5f1cc9194ed9023d6a34bdf90e670eec43476edc47b578ce91b48f70b2c0203aba71102375657056fbc5cc31f8ac7415b03132dc0a8dd0a688740189ab687b3a9d41e20fae9d4a86c19de22b07c06fb1b97663ae6922da4e3c7535f0e3689f9f4ca57dea06e0803fe7fb66bd7605469b354859"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x555) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x40810) recvmsg(r5, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)}, 0x10100) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x88481) write$cgroup_subtree(r6, 0x0, 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x178}, 0x20040800) (async) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x178}, 0x20040800) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) (async) recvmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) socket$kcm(0x10, 0x2, 0x10) (async) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_subtree(r1, &(0x7f00000003c0), 0x2, 0x0) (async) openat$cgroup_subtree(r1, &(0x7f00000003c0), 0x2, 0x0) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.652'. [ 224.975268][ T8315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 225.708444][ T8352] C: renamed from team_slave_0 (while UP) [ 225.736202][ T8352] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 225.767056][ T8352] netlink: 116 bytes leftover after parsing attributes in process `syz.3.662'. [ 225.789817][ T8357] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.661'. [ 225.817241][ T8356] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.662'. [ 225.842105][ T8352] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 225.877015][ T8356] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 226.162502][ T6947] tipc: Subscription rejected, illegal request [ 226.713251][ T8376] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.668'. [ 228.465246][ T8416] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 229.150277][ T8426] netlink: 'syz.1.681': attribute type 12 has an invalid length. [ 229.163888][ T8426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.681'. [ 230.073370][ T8446] netlink: 10 bytes leftover after parsing attributes in process `syz.2.687'. [ 230.108549][ T8442] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.684'. [ 231.796220][ T8469] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.694'. [ 232.204098][ T8477] netlink: 'syz.1.697': attribute type 10 has an invalid length. [ 232.231946][ T8477] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.697'. [ 232.651400][ T8494] netlink: 'syz.3.703': attribute type 29 has an invalid length. [ 232.977238][ T8505] netlink: 'syz.1.708': attribute type 21 has an invalid length. [ 233.575956][ T239] tipc: Subscription rejected, illegal request [ 233.820421][ T8524] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.713'. [ 234.378614][ T8533] netlink: 'syz.1.716': attribute type 3 has an invalid length. [ 234.397796][ T8533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.716'. [ 234.856483][ T8541] netlink: 'syz.2.718': attribute type 3 has an invalid length. [ 234.885336][ T8541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.718'. [ 236.628793][ T8561] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.724'. [ 236.638882][ T8561] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 236.912828][ T8564] can: request_module (can-proto-0) failed. [ 237.031960][ T8563] netlink: 'syz.0.725': attribute type 5 has an invalid length. [ 237.068242][ T8563] netlink: 'syz.0.725': attribute type 7 has an invalid length. [ 237.420174][ T8578] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.730'. [ 237.441306][ T8578] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 237.767879][ T8593] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.735'. [ 239.092971][ T8635] sctp: [Deprecated]: syz.0.743 (pid 8635) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.092971][ T8635] Use struct sctp_sack_info instead [ 239.797582][ T8657] netlink: 'syz.1.746': attribute type 21 has an invalid length. [ 240.191679][ T8674] netlink: 6 bytes leftover after parsing attributes in process `syz.1.750'. [ 240.225883][ T8674] openvswitch: netlink: Flow actions attr not present in new flow. [ 241.450425][ T8713] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.758'. [ 241.463231][ T8710] Ÿë: port 1(veth0_to_team) entered blocking state [ 241.471595][ T8710] Ÿë: port 1(veth0_to_team) entered disabled state [ 241.479793][ T8710] veth0_to_team: entered allmulticast mode [ 241.508136][ T8710] veth0_to_team: entered promiscuous mode [ 241.611509][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.619345][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.633197][ T8716] bridge0: entered allmulticast mode [ 241.695483][ T8716] netlink: 'syz.3.762': attribute type 1 has an invalid length. [ 241.704180][ T8716] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.762'. [ 241.731489][ T8718] syz.1.763: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 241.752731][ T8719] bridge_slave_1: left allmulticast mode [ 241.763835][ T8718] CPU: 0 PID: 8718 Comm: syz.1.763 Not tainted syzkaller #0 [ 241.771235][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.781374][ T8718] Call Trace: [ 241.784716][ T8718] [ 241.784718][ T8719] bridge_slave_1: left promiscuous mode [ 241.787679][ T8718] dump_stack_lvl+0x18c/0x250 [ 241.787754][ T8718] ? show_regs_print_info+0x20/0x20 [ 241.803318][ T8718] ? load_image+0x400/0x400 [ 241.807925][ T8718] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 241.814420][ T8718] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 241.821025][ T8718] warn_alloc+0x246/0x340 [ 241.825430][ T8718] ? stack_trace_save+0xaa/0x100 [ 241.830448][ T8718] ? zone_watermark_ok_safe+0x230/0x230 [ 241.836066][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.836100][ T8718] ? kasan_set_track+0x5f/0x70 [ 241.836129][ T8718] ? kasan_set_track+0x4e/0x70 [ 241.836152][ T8718] ? __kasan_kmalloc+0x8f/0xa0 [ 241.857854][ T8718] ? xsk_init_queue+0xad/0x100 [ 241.862699][ T8718] ? xsk_setsockopt+0x4e5/0x760 [ 241.867631][ T8718] ? do_sock_setsockopt+0x175/0x1a0 [ 241.872917][ T8718] ? __x64_sys_setsockopt+0x182/0x200 [ 241.878389][ T8718] __vmalloc_node_range+0x126/0x1330 [ 241.883824][ T8718] ? free_vm_area+0x50/0x50 [ 241.888437][ T8718] vmalloc_user+0x74/0x80 [ 241.892854][ T8718] ? xskq_create+0xbf/0x170 [ 241.897438][ T8718] xskq_create+0xbf/0x170 [ 241.901857][ T8718] xsk_init_queue+0xad/0x100 [ 241.906530][ T8718] xsk_setsockopt+0x4e5/0x760 [ 241.911285][ T8718] ? xsk_poll+0x680/0x680 [ 241.915673][ T8718] ? __fget_files+0x28/0x4b0 [ 241.920329][ T8718] ? __fget_files+0x28/0x4b0 [ 241.924986][ T8718] ? aa_sock_opt_perm+0x74/0x100 [ 241.929981][ T8718] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 241.935593][ T8718] ? security_socket_setsockopt+0x7e/0xa0 [ 241.941375][ T8718] ? xsk_poll+0x680/0x680 [ 241.945757][ T8718] do_sock_setsockopt+0x175/0x1a0 [ 241.950831][ T8718] ? __fdget+0x180/0x210 [ 241.955127][ T8718] __x64_sys_setsockopt+0x182/0x200 [ 241.960382][ T8718] do_syscall_64+0x55/0xa0 [ 241.964851][ T8718] ? clear_bhb_loop+0x40/0x90 [ 241.969574][ T8718] ? clear_bhb_loop+0x40/0x90 [ 241.974298][ T8718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.980230][ T8718] RIP: 0033:0x7fb61c99bf79 [ 241.984684][ T8718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.004337][ T8718] RSP: 002b:00007fb61d8a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.012809][ T8718] RAX: ffffffffffffffda RBX: 00007fb61cc15fa0 RCX: 00007fb61c99bf79 [ 242.020832][ T8718] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 242.028849][ T8718] RBP: 00007fb61ca327e0 R08: 0000000000000004 R09: 0000000000000000 [ 242.036876][ T8718] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 242.044900][ T8718] R13: 00007fb61cc16038 R14: 00007fb61cc15fa0 R15: 00007ffc8d67c2f8 [ 242.052962][ T8718] [ 242.071905][ T8718] Mem-Info: [ 242.075655][ T8718] active_anon:6739 inactive_anon:0 isolated_anon:0 [ 242.075655][ T8718] active_file:17171 inactive_file:39994 isolated_file:0 [ 242.075655][ T8718] unevictable:768 dirty:90 writeback:0 [ 242.075655][ T8718] slab_reclaimable:10285 slab_unreclaimable:93688 [ 242.075655][ T8718] mapped:24088 shmem:1361 pagetables:547 [ 242.075655][ T8718] sec_pagetables:0 bounce:0 [ 242.075655][ T8718] kernel_misc_reclaimable:0 [ 242.075655][ T8718] free:1342231 free_pcp:11045 free_cma:0 [ 242.127478][ T8719] bridge_slave_0: left allmulticast mode [ 242.134669][ T8719] bridge_slave_0: left promiscuous mode [ 242.140705][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.159519][ T8718] Node 0 active_anon:27036kB inactive_anon:0kB active_file:68684kB inactive_file:159772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96400kB dirty:372kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11984kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 242.215466][ T8718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 242.251529][ T8718] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.301135][ T8718] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 242.313637][ T8718] Node 0 DMA32 free:1460196kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27000kB inactive_anon:0kB active_file:68684kB inactive_file:158944kB unevictable:1536kB writepending:372kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21816kB local_pcp:16232kB free_cma:0kB [ 242.353982][ T8718] lowmem_reserve[]: 0 0 0 0 0 [ 242.362170][ T8718] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 242.414917][ T8718] lowmem_reserve[]: 0 0 0 0 0 [ 242.430511][ T8718] Node 1 Normal free:3893432kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22664kB local_pcp:13988kB free_cma:0kB [ 242.464000][ T8718] lowmem_reserve[]: 0 0 0 0 0 [ 242.487589][ T8718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.523868][ T8718] Node 0 DMA32: 819*4kB (UE) 565*8kB (UME) 1363*16kB (UM) 792*32kB (UME) 1389*64kB (UME) 588*128kB (UME) 208*256kB (UM) 68*512kB (UME) 30*1024kB (UM) 14*2048kB (UME) 267*4096kB (UM) = 1460196kB [ 242.557291][ T8718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 242.600963][ T8718] Node 1 Normal: 236*4kB (UME) 51*8kB (UME) 45*16kB (UME) 81*32kB (UME) 18*64kB (UME) 4*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893432kB [ 242.654651][ T8718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.666691][ T8718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.695476][ T8718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.720139][ T8732] netlink: 830 bytes leftover after parsing attributes in process `syz.3.767'. [ 242.750387][ T8718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.782033][ T8718] 58526 total pagecache pages [ 242.805324][ T8718] 0 pages in swap cache [ 242.827005][ T8718] Free swap = 124996kB [ 242.831272][ T8718] Total swap = 124996kB [ 242.867753][ T8718] 2097051 pages RAM [ 242.871654][ T8718] 0 pages HighMem/MovableOnly [ 242.876387][ T8718] 416922 pages reserved [ 242.933514][ T8718] 0 pages cma reserved [ 243.073458][ T8735] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 243.123460][ T8735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.768'. [ 243.163743][ T8735] team0: entered promiscuous mode [ 243.207146][ T8735] team_slave_1: entered promiscuous mode [ 243.231746][ T8735] team0: entered allmulticast mode [ 243.256141][ T8735] team_slave_1: entered allmulticast mode [ 243.278373][ T8735] bridge0: port 4(team0) entered blocking state [ 243.303611][ T8735] bridge0: port 4(team0) entered disabled state [ 243.871524][ T8748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.773'. [ 243.907223][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 245.984548][ T8794] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 247.128986][ T8804] netlink: 'syz.0.790': attribute type 21 has an invalid length. [ 247.137144][ T8804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.790'. [ 247.345711][ T6931] tipc: Subscription rejected, illegal request [ 247.757675][ T8823] netlink: 'syz.3.794': attribute type 27 has an invalid length. [ 247.765490][ T8823] netlink: 164 bytes leftover after parsing attributes in process `syz.3.794'. [ 248.624410][ T8848] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.802'. [ 248.754047][ T8848] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 248.775348][ T8848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.948165][ T8848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.138895][ T8848] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 249.475537][ T6947] tipc: Subscription rejected, illegal request [ 250.258379][ T8887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.812'. [ 250.365539][ T8887] netlink: 60 bytes leftover after parsing attributes in process `syz.0.812'. [ 250.420792][ T8892] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.815'. [ 250.472438][ T8889] netlink: 60 bytes leftover after parsing attributes in process `syz.0.812'. [ 250.493314][ T8887] netlink: 9051 bytes leftover after parsing attributes in process `syz.0.812'. [ 250.638526][ T8894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.812'. [ 252.573911][ T8899] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 252.583033][ T8899] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.591783][ T8899] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.647378][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.654780][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.663703][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.670968][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.691834][ T8899] team0: Port device bridge0 added [ 252.916693][ T6943] tipc: Subscription rejected, illegal request [ 253.147471][ T8917] netlink: 'syz.2.821': attribute type 15 has an invalid length. [ 253.163829][ T8917] netlink: 'syz.2.821': attribute type 7 has an invalid length. [ 253.353080][ T8922] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 253.370611][ T8922] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 253.381729][ T8922] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.822'. [ 253.438550][ T8922] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 253.446728][ T8922] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.822'. [ 253.934751][ T8931] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.827'. [ 254.752346][ T8941] netlink: 6 bytes leftover after parsing attributes in process `syz.2.823'. [ 254.879560][ T6922] tipc: Subscription rejected, illegal request [ 255.048586][ T8955] netlink: 'syz.1.830': attribute type 27 has an invalid length. [ 255.056465][ T8955] netlink: 164 bytes leftover after parsing attributes in process `syz.1.830'. [ 255.111365][ T8954] netlink: 'syz.2.831': attribute type 28 has an invalid length. [ 255.140559][ T8954] netlink: 'syz.2.831': attribute type 29 has an invalid length. [ 255.168737][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.184604][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.197418][ T8954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.831'. [ 255.711383][ T8968] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 255.774911][ T8968] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.834'. [ 255.861486][ T8963] tap0: tun_chr_ioctl cmd 1074025677 [ 255.891740][ T8963] tap0: linktype set to 778 [ 255.994110][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003639][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.111495][ T8975] bridge_slave_1: left allmulticast mode [ 256.130067][ T8975] bridge_slave_1: left promiscuous mode [ 256.136062][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.178455][ T8977] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.836'. [ 256.199732][ T8975] bridge_slave_0: left allmulticast mode [ 256.237161][ T8975] bridge_slave_0: left promiscuous mode [ 256.243467][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.257349][ T8977] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 256.265699][ T8977] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 256.389755][ T8975] `: Port device bridge0 removed [ 256.740775][ T6947] tipc: Subscription rejected, illegal request [ 256.867486][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 257.334800][ T9005] syz.2.847[9005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.334953][ T9005] syz.2.847[9005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.655162][ T9020] netlink: 156 bytes leftover after parsing attributes in process `syz.0.850'. [ 260.010130][ T9080] validate_nla: 2 callbacks suppressed [ 260.010147][ T9080] netlink: 'syz.0.865': attribute type 21 has an invalid length. [ 260.129097][ T9080] netlink: 'syz.0.865': attribute type 3 has an invalid length. [ 260.179179][ T9080] netlink: 144 bytes leftover after parsing attributes in process `syz.0.865'. [ 260.278491][ T9085] FAULT_INJECTION: forcing a failure. [ 260.278491][ T9085] name failslab, interval 1, probability 0, space 0, times 1 [ 260.338062][ T9085] CPU: 1 PID: 9085 Comm: syz.1.866 Not tainted syzkaller #0 [ 260.345461][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 260.355586][ T9085] Call Trace: [ 260.358908][ T9085] [ 260.361876][ T9085] dump_stack_lvl+0x18c/0x250 [ 260.366614][ T9085] ? show_regs_print_info+0x20/0x20 [ 260.371897][ T9085] ? load_image+0x400/0x400 [ 260.376442][ T9085] ? __might_sleep+0xe0/0xe0 [ 260.381066][ T9085] ? __lock_acquire+0x7d40/0x7d40 [ 260.386147][ T9085] should_fail_ex+0x39d/0x4d0 [ 260.390902][ T9085] should_failslab+0x9/0x20 [ 260.395467][ T9085] slab_pre_alloc_hook+0x59/0x310 [ 260.400533][ T9085] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 260.406281][ T9085] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 260.412025][ T9085] __kmem_cache_alloc_node+0x53/0x250 [ 260.417435][ T9085] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 260.423271][ T9085] __kmalloc+0xa4/0x230 [ 260.427463][ T9085] tomoyo_realpath_from_path+0xe3/0x5d0 [ 260.433046][ T9085] tomoyo_path_number_perm+0x248/0x620 [ 260.438545][ T9085] ? tomoyo_path_number_perm+0x217/0x620 [ 260.444249][ T9085] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 260.449747][ T9085] ? ksys_write+0x1c4/0x260 [ 260.454305][ T9085] ? __fget_files+0x28/0x4b0 [ 260.458935][ T9085] ? __fget_files+0x28/0x4b0 [ 260.463577][ T9085] security_file_ioctl+0x70/0xa0 [ 260.468558][ T9085] __se_sys_ioctl+0x48/0x170 [ 260.473183][ T9085] do_syscall_64+0x55/0xa0 [ 260.477639][ T9085] ? clear_bhb_loop+0x40/0x90 [ 260.482345][ T9085] ? clear_bhb_loop+0x40/0x90 [ 260.487054][ T9085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.492980][ T9085] RIP: 0033:0x7fb61c99bf79 [ 260.497465][ T9085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.517097][ T9085] RSP: 002b:00007fb61d860028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 260.525538][ T9085] RAX: ffffffffffffffda RBX: 00007fb61cc16180 RCX: 00007fb61c99bf79 [ 260.533530][ T9085] RDX: 0000200000000200 RSI: 0000000000008943 RDI: 0000000000000004 [ 260.541524][ T9085] RBP: 00007fb61d860090 R08: 0000000000000000 R09: 0000000000000000 [ 260.549521][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.557534][ T9085] R13: 00007fb61cc16218 R14: 00007fb61cc16180 R15: 00007ffc8d67c2f8 [ 260.565551][ T9085] [ 260.602740][ T9085] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.966920][ T9101] netlink: 'syz.2.870': attribute type 21 has an invalid length. [ 260.989188][ T9101] netlink: 'syz.2.870': attribute type 6 has an invalid length. [ 261.038517][ T9101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.870'. [ 261.687293][ T9106] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.871'. [ 261.707002][ T9106] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.871'. [ 261.752687][ T9105] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.871'. [ 261.965740][ T9113] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.871'. [ 262.154944][ T9119] netlink: 188 bytes leftover after parsing attributes in process `syz.2.875'. [ 262.502890][ T9127] FAULT_INJECTION: forcing a failure. [ 262.502890][ T9127] name failslab, interval 1, probability 0, space 0, times 0 [ 262.591222][ T9127] CPU: 0 PID: 9127 Comm: syz.1.879 Not tainted syzkaller #0 [ 262.598692][ T9127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.608796][ T9127] Call Trace: [ 262.612109][ T9127] [ 262.615070][ T9127] dump_stack_lvl+0x18c/0x250 [ 262.619790][ T9127] ? show_regs_print_info+0x20/0x20 [ 262.625026][ T9127] ? load_image+0x400/0x400 [ 262.629569][ T9127] ? __might_sleep+0xe0/0xe0 [ 262.634188][ T9127] ? __lock_acquire+0x7d40/0x7d40 [ 262.639245][ T9127] should_fail_ex+0x39d/0x4d0 [ 262.643962][ T9127] should_failslab+0x9/0x20 [ 262.648508][ T9127] slab_pre_alloc_hook+0x59/0x310 [ 262.653574][ T9127] ? tomoyo_encode+0x28b/0x540 [ 262.658372][ T9127] ? tomoyo_encode+0x28b/0x540 [ 262.663163][ T9127] __kmem_cache_alloc_node+0x53/0x250 [ 262.668573][ T9127] ? tomoyo_encode+0x28b/0x540 [ 262.673368][ T9127] __kmalloc+0xa4/0x230 [ 262.677562][ T9127] tomoyo_encode+0x28b/0x540 [ 262.682184][ T9127] tomoyo_realpath_from_path+0x592/0x5d0 [ 262.687857][ T9127] tomoyo_path_number_perm+0x248/0x620 [ 262.693347][ T9127] ? tomoyo_path_number_perm+0x217/0x620 [ 262.699012][ T9127] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 262.704512][ T9127] ? ksys_write+0x1c4/0x260 [ 262.709077][ T9127] ? __fget_files+0x28/0x4b0 [ 262.713692][ T9127] ? __fget_files+0x28/0x4b0 [ 262.718322][ T9127] security_file_ioctl+0x70/0xa0 [ 262.723295][ T9127] __se_sys_ioctl+0x48/0x170 [ 262.727918][ T9127] do_syscall_64+0x55/0xa0 [ 262.732367][ T9127] ? clear_bhb_loop+0x40/0x90 [ 262.737075][ T9127] ? clear_bhb_loop+0x40/0x90 [ 262.741784][ T9127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.747702][ T9127] RIP: 0033:0x7fb61c99bf79 [ 262.752141][ T9127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.771777][ T9127] RSP: 002b:00007fb61d8a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.780222][ T9127] RAX: ffffffffffffffda RBX: 00007fb61cc15fa0 RCX: 00007fb61c99bf79 [ 262.788216][ T9127] RDX: 0000200000000200 RSI: 0000000000008943 RDI: 0000000000000004 [ 262.796215][ T9127] RBP: 00007fb61d8a2090 R08: 0000000000000000 R09: 0000000000000000 [ 262.804211][ T9127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.812205][ T9127] R13: 00007fb61cc16038 R14: 00007fb61cc15fa0 R15: 00007ffc8d67c2f8 [ 262.820215][ T9127] [ 262.827004][ T9127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.952837][ T9133] netlink: 'syz.2.881': attribute type 9 has an invalid length. [ 263.006978][ T9133] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.881'. [ 263.267203][ T9142] syz.1.884 (9142) used obsolete PPPIOCDETACH ioctl [ 263.278611][ T9141] netlink: 'syz.0.885': attribute type 1 has an invalid length. [ 263.290806][ T9141] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.885'. [ 264.075158][ T9167] FAULT_INJECTION: forcing a failure. [ 264.075158][ T9167] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 264.134231][ T9167] CPU: 0 PID: 9167 Comm: syz.2.892 Not tainted syzkaller #0 [ 264.141622][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 264.151736][ T9167] Call Trace: [ 264.155062][ T9167] [ 264.158039][ T9167] dump_stack_lvl+0x18c/0x250 [ 264.162779][ T9167] ? show_regs_print_info+0x20/0x20 [ 264.168038][ T9167] ? load_image+0x400/0x400 [ 264.172623][ T9167] ? __might_fault+0xaa/0x120 [ 264.177355][ T9167] ? __lock_acquire+0x7d40/0x7d40 [ 264.182434][ T9167] ? unix_ioctl+0x261/0x670 [ 264.187018][ T9167] should_fail_ex+0x39d/0x4d0 [ 264.191762][ T9167] _copy_from_user+0x2f/0xe0 [ 264.196419][ T9167] sock_do_ioctl+0x190/0x310 [ 264.201070][ T9167] ? sock_show_fdinfo+0xb0/0xb0 [ 264.205992][ T9167] sock_ioctl+0x5ba/0x7e0 [ 264.210384][ T9167] ? sock_poll+0x3e0/0x3e0 [ 264.214876][ T9167] ? bpf_lsm_file_ioctl+0x9/0x10 [ 264.219879][ T9167] ? security_file_ioctl+0x80/0xa0 [ 264.225072][ T9167] ? sock_poll+0x3e0/0x3e0 [ 264.229550][ T9167] __se_sys_ioctl+0xfd/0x170 [ 264.234214][ T9167] do_syscall_64+0x55/0xa0 [ 264.238716][ T9167] ? clear_bhb_loop+0x40/0x90 [ 264.243471][ T9167] ? clear_bhb_loop+0x40/0x90 [ 264.248216][ T9167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.254175][ T9167] RIP: 0033:0x7fa9e619bf79 [ 264.258641][ T9167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.278302][ T9167] RSP: 002b:00007fa9e70a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.286791][ T9167] RAX: ffffffffffffffda RBX: 00007fa9e6416180 RCX: 00007fa9e619bf79 [ 264.294819][ T9167] RDX: 0000200000000200 RSI: 0000000000008943 RDI: 0000000000000004 [ 264.302849][ T9167] RBP: 00007fa9e70a4090 R08: 0000000000000000 R09: 0000000000000000 [ 264.310881][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.318901][ T9167] R13: 00007fa9e6416218 R14: 00007fa9e6416180 R15: 00007ffde56bac48 [ 264.326944][ T9167] [ 264.875149][ T9183] pim6reg1: entered promiscuous mode [ 264.895715][ T9183] pim6reg1: entered allmulticast mode [ 266.241860][ T9202] netlink: 'syz.1.902': attribute type 10 has an invalid length. [ 266.268487][ T9202] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 266.372876][ T9208] ip6gretap0: refused to change device tx_queue_len [ 266.508197][ T9210] FAULT_INJECTION: forcing a failure. [ 266.508197][ T9210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.567118][ T9210] CPU: 0 PID: 9210 Comm: syz.1.906 Not tainted syzkaller #0 [ 266.574506][ T9210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 266.584605][ T9210] Call Trace: [ 266.587923][ T9210] [ 266.590893][ T9210] dump_stack_lvl+0x18c/0x250 [ 266.595635][ T9210] ? show_regs_print_info+0x20/0x20 [ 266.600897][ T9210] ? load_image+0x400/0x400 [ 266.605466][ T9210] ? __lock_acquire+0x7d40/0x7d40 [ 266.610560][ T9210] ? snprintf+0xe9/0x140 [ 266.614862][ T9210] should_fail_ex+0x39d/0x4d0 [ 266.619599][ T9210] _copy_to_user+0x2f/0xa0 [ 266.624071][ T9210] simple_read_from_buffer+0xe7/0x150 [ 266.629516][ T9210] proc_fail_nth_read+0x1e8/0x260 [ 266.634618][ T9210] ? proc_fault_inject_write+0x360/0x360 [ 266.640331][ T9210] ? fsnotify_perm+0x271/0x5e0 [ 266.645214][ T9210] ? proc_fault_inject_write+0x360/0x360 [ 266.650906][ T9210] vfs_read+0x28b/0x970 [ 266.655131][ T9210] ? kernel_read+0x1e0/0x1e0 [ 266.659785][ T9210] ? __fget_files+0x28/0x4b0 [ 266.664433][ T9210] ? __fget_files+0x28/0x4b0 [ 266.669076][ T9210] ? __fget_files+0x43d/0x4b0 [ 266.673801][ T9210] ? __fdget_pos+0x2a3/0x330 [ 266.678433][ T9210] ? ksys_read+0x75/0x260 [ 266.682802][ T9210] ksys_read+0x150/0x260 [ 266.687111][ T9210] ? vfs_write+0x990/0x990 [ 266.691570][ T9210] ? lockdep_hardirqs_on+0x98/0x150 [ 266.696809][ T9210] do_syscall_64+0x55/0xa0 [ 266.701264][ T9210] ? clear_bhb_loop+0x40/0x90 [ 266.705965][ T9210] ? clear_bhb_loop+0x40/0x90 [ 266.710677][ T9210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.716599][ T9210] RIP: 0033:0x7fb61c95c84e [ 266.721043][ T9210] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.740686][ T9210] RSP: 002b:00007fb61d8a1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.749130][ T9210] RAX: ffffffffffffffda RBX: 00007fb61d8a26c0 RCX: 00007fb61c95c84e [ 266.757144][ T9210] RDX: 000000000000000f RSI: 00007fb61d8a20a0 RDI: 0000000000000006 [ 266.765145][ T9210] RBP: 00007fb61d8a2090 R08: 0000000000000000 R09: 0000000000000000 [ 266.773183][ T9210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.781184][ T9210] R13: 00007fb61cc16038 R14: 00007fb61cc15fa0 R15: 00007ffc8d67c2f8 [ 266.789198][ T9210] [ 267.110146][ T9222] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.909'. [ 267.178154][ T9211] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 267.217021][ T9211] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 267.244684][ T9220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.289780][ T9220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.329243][ T9220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.356659][ T9220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.262887][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 269.416541][ T9282] netlink: 'syz.0.927': attribute type 21 has an invalid length. [ 269.430607][ T9281] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 269.476928][ T9281] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 269.497315][ T9281] netlink: 'syz.3.926': attribute type 29 has an invalid length. [ 270.413211][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 270.468312][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 270.514124][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 270.543551][ T9301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 270.580734][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 270.616666][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 270.633934][ T9297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.932'. [ 271.121312][ T9312] netlink: 'syz.0.936': attribute type 39 has an invalid length. [ 271.810856][ T9324] syzkaller0: entered promiscuous mode [ 271.816435][ T9324] syzkaller0: entered allmulticast mode [ 271.842666][ T6947] syzkaller0: tun_net_xmit 48 [ 272.001603][ T9331] netlink: 'syz.3.941': attribute type 3 has an invalid length. [ 272.032036][ T9331] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.941'. [ 272.484707][ T9345] netlink: 196 bytes leftover after parsing attributes in process `syz.0.945'. [ 273.567109][ T9364] sctp: [Deprecated]: syz.3.950 (pid 9364) Use of int in maxseg socket option. [ 273.567109][ T9364] Use struct sctp_assoc_value instead [ 274.974560][ T9375] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 274.995435][ T9375] team0: Device ipvlan1 failed to register rx_handler [ 275.377749][ T9395] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.960'. [ 275.389954][ T9395] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.960'. [ 275.400530][ T9394] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.960'. [ 275.413492][ T9395] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.960'. [ 276.346224][ T9403] syzkaller0: entered promiscuous mode [ 276.390207][ T9403] syzkaller0: entered allmulticast mode [ 278.760237][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 279.045629][ T5083] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 279.128291][ T9452] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.978'. [ 279.627297][ T9476] netlink: 204416 bytes leftover after parsing attributes in process `syz.2.985'. [ 279.639907][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.985'. [ 279.686530][ T9469] netlink: 'syz.1.983': attribute type 21 has an invalid length. [ 281.178620][ T9526] netlink: 'syz.2.1001': attribute type 21 has an invalid length. [ 281.196033][ T9526] netlink: 'syz.2.1001': attribute type 21 has an invalid length. [ 281.232642][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1002'. [ 282.179815][ T9546] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1006'. [ 283.412861][ T9574] netlink: 'syz.3.1015': attribute type 10 has an invalid length. [ 283.482258][ T9574] geneve0: entered promiscuous mode [ 283.655733][ T9574] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 283.929791][ T9591] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1021'. [ 284.194094][ T9602] C: renamed from team_slave_0 [ 284.206119][ T9602] netlink: 'syz.0.1023': attribute type 3 has an invalid length. [ 284.218409][ T9602] netlink: 'syz.0.1023': attribute type 1 has an invalid length. [ 284.238031][ T9602] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1023'. [ 284.571812][ T9622] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 284.611888][ T9622] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1029'. [ 284.988369][ T9629] netlink: 'syz.3.1031': attribute type 33 has an invalid length. [ 285.021993][ T9629] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1031'. [ 285.100089][ T9631] netlink: 'syz.0.1032': attribute type 10 has an invalid length. [ 285.357865][ T9631] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 285.376283][ T9631] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 285.394149][ T9631] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.451961][ T9663] netlink: 'syz.1.1043': attribute type 10 has an invalid length. [ 286.476042][ T9662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.537198][ T9658] netlink: 'syz.3.1040': attribute type 11 has an invalid length. [ 286.567152][ T9658] netlink: 126332 bytes leftover after parsing attributes in process `syz.3.1040'. [ 286.954476][ T9678] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 286.997541][ T9682] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 287.758682][ T9711] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1055'. [ 288.818907][ T9740] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.1061'. [ 288.885857][ T9737] netlink: 'syz.1.1062': attribute type 3 has an invalid length. [ 288.920963][ T9737] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1062'. [ 289.680186][ T9770] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1073'. [ 289.694016][ T9770] netlink: 'syz.0.1073': attribute type 46 has an invalid length. [ 289.702594][ T9770] netlink: 'syz.0.1073': attribute type 46 has an invalid length. [ 289.737075][ T9772] netlink: 'syz.1.1074': attribute type 10 has an invalid length. [ 290.091479][ T9779] netlink: 'syz.1.1077': attribute type 21 has an invalid length. [ 290.127289][ T9779] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.135235][ T9779] IPv6: Can't replace route, no match found [ 290.268905][ T9779] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1077'. [ 291.567181][ T9818] netlink: 'syz.0.1089': attribute type 13 has an invalid length. [ 291.709204][ T9821] netlink: 'syz.2.1090': attribute type 10 has an invalid length. [ 291.727076][ T9821] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1090'. [ 291.768399][ T9821] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1090'. [ 297.025444][ T9869] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1104'. [ 297.709903][ T9875] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 297.720045][ T9875] netlink: 'syz.3.1106': attribute type 19 has an invalid length. [ 297.729522][ T9875] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1106'. [ 298.044947][ T9883] netlink: 'syz.1.1107': attribute type 9 has an invalid length. [ 298.080836][ T9888] netlink: 'syz.3.1108': attribute type 21 has an invalid length. [ 298.093061][ T9883] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1107'. [ 298.583917][ T9895] netlink: 'syz.1.1111': attribute type 10 has an invalid length. [ 298.624583][ T9895] geneve0: entered promiscuous mode [ 298.896721][ T9895] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 299.679073][ T9912] tap0: tun_chr_ioctl cmd 1074025677 [ 299.717982][ T9912] tap0: linktype set to 778 [ 299.768456][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 299.937268][ T9912] netlink: 'syz.2.1116': attribute type 2 has an invalid length. [ 299.950912][ T9912] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1116'. [ 303.122584][ T9935] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1121'. [ 303.143865][ T9935] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1121'. [ 303.434164][ T9941] netlink: 'syz.1.1124': attribute type 6 has an invalid length. [ 303.444031][ T9941] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1124'. [ 303.507341][ T9947] netlink: 'syz.0.1128': attribute type 10 has an invalid length. [ 303.707656][ T9947] geneve1: entered promiscuous mode [ 303.713375][ T9947] geneve1: entered allmulticast mode [ 303.725463][ T9947] team0: Port device geneve1 added [ 303.792042][ T9957] netlink: 'syz.2.1129': attribute type 22 has an invalid length. [ 304.029876][ T9967] netlink: 'syz.1.1132': attribute type 3 has an invalid length. [ 304.042984][ T9967] netlink: 'syz.1.1132': attribute type 1 has an invalid length. [ 304.052942][ T9967] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1132'. [ 304.349075][ T9980] netlink: 'syz.3.1137': attribute type 27 has an invalid length. [ 304.390214][ T9980] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1137'. [ 308.024690][T10018] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1149'. [ 308.206394][ T5083] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 308.218636][ T5083] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 308.352194][T10028] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 308.670889][T10040] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 308.689091][T10040] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1156'. [ 308.804787][T10040] netlink: 'syz.3.1156': attribute type 16 has an invalid length. [ 308.819117][T10040] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1156'. [ 309.162315][T10053] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1162'. [ 310.911613][T10102] sctp: [Deprecated]: syz.0.1177 (pid 10102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.911613][T10102] Use struct sctp_sack_info instead [ 311.155387][T10111] netlink: 'syz.1.1179': attribute type 41 has an invalid length. [ 311.176596][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1179'. [ 311.425752][T10116] netlink: 'syz.0.1181': attribute type 33 has an invalid length. [ 311.440731][T10116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1181'. [ 311.963246][T10137] netlink: 'syz.0.1189': attribute type 10 has an invalid length. [ 312.010512][T10137] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.1189'. [ 312.246882][T10142] netlink: 'syz.2.1188': attribute type 21 has an invalid length. [ 312.255020][T10142] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1188'. [ 312.273549][T10142] netlink: 'syz.2.1188': attribute type 4 has an invalid length. [ 312.283590][T10142] netlink: 'syz.2.1188': attribute type 5 has an invalid length. [ 312.295068][T10142] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1188'. [ 312.305737][T10144] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 312.680108][T10158] netlink: 'syz.3.1193': attribute type 3 has an invalid length. [ 312.701515][T10158] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1193'. [ 312.757905][T10158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1193'. [ 312.918924][T10167] pim6reg1: entered promiscuous mode [ 312.936219][T10167] pim6reg1: entered allmulticast mode [ 313.051261][T10173] openvswitch: netlink: Flow key attr not present in new flow. [ 313.917301][T10206] __nla_validate_parse: 2 callbacks suppressed [ 313.917321][T10206] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1206'. [ 313.965404][T10206] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1206'. [ 314.126537][T10209] netlink: 150456 bytes leftover after parsing attributes in process `syz.2.1207'. [ 314.148373][T10208] netlink: 150456 bytes leftover after parsing attributes in process `syz.2.1207'. [ 314.165349][T10209] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.178288][T10208] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 314.390703][T10218] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1209'. [ 314.651014][T10237] validate_nla: 1 callbacks suppressed [ 314.651026][T10237] netlink: 'syz.3.1214': attribute type 20 has an invalid length. [ 315.518883][T10251] netlink: 'syz.1.1219': attribute type 7 has an invalid length. [ 315.543043][T10256] syz.1.1219: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 315.579183][T10256] CPU: 0 PID: 10256 Comm: syz.1.1219 Not tainted syzkaller #0 [ 315.586738][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 315.596874][T10256] Call Trace: [ 315.600227][T10256] [ 315.603235][T10256] dump_stack_lvl+0x18c/0x250 [ 315.607984][T10256] ? show_regs_print_info+0x20/0x20 [ 315.613376][T10256] ? load_image+0x400/0x400 [ 315.617957][T10256] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 315.624449][T10256] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 315.631021][T10256] warn_alloc+0x246/0x340 [ 315.635421][T10256] ? stack_trace_save+0xaa/0x100 [ 315.640425][T10256] ? zone_watermark_ok_safe+0x230/0x230 [ 315.646050][T10256] ? kasan_set_track+0x5f/0x70 [ 315.650873][T10256] ? kasan_set_track+0x4e/0x70 [ 315.655690][T10256] ? __kasan_kmalloc+0x8f/0xa0 [ 315.660508][T10256] ? xsk_init_queue+0xad/0x100 [ 315.665335][T10256] ? xsk_setsockopt+0x4e5/0x760 [ 315.670242][T10256] ? do_sock_setsockopt+0x175/0x1a0 [ 315.675512][T10256] ? __x64_sys_setsockopt+0x182/0x200 [ 315.680957][T10256] __vmalloc_node_range+0x126/0x1330 [ 315.686353][T10256] ? free_vm_area+0x50/0x50 [ 315.690942][T10256] vmalloc_user+0x74/0x80 [ 315.695366][T10256] ? xskq_create+0xbf/0x170 [ 315.699939][T10256] xskq_create+0xbf/0x170 [ 315.704345][T10256] xsk_init_queue+0xad/0x100 [ 315.709005][T10256] xsk_setsockopt+0x4e5/0x760 [ 315.713761][T10256] ? xsk_poll+0x680/0x680 [ 315.718164][T10256] ? __fget_files+0x28/0x4b0 [ 315.722814][T10256] ? __fget_files+0x28/0x4b0 [ 315.727461][T10256] ? aa_sock_opt_perm+0x74/0x100 [ 315.732463][T10256] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 315.738070][T10256] ? security_socket_setsockopt+0x7e/0xa0 [ 315.743843][T10256] ? xsk_poll+0x680/0x680 [ 315.748229][T10256] do_sock_setsockopt+0x175/0x1a0 [ 315.753326][T10256] ? __fdget+0x180/0x210 [ 315.757655][T10256] __x64_sys_setsockopt+0x182/0x200 [ 315.762933][T10256] do_syscall_64+0x55/0xa0 [ 315.767417][T10256] ? clear_bhb_loop+0x40/0x90 [ 315.772159][T10256] ? clear_bhb_loop+0x40/0x90 [ 315.776899][T10256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.782859][T10256] RIP: 0033:0x7fb61c99bf79 [ 315.787338][T10256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.807002][T10256] RSP: 002b:00007fb61d881028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.815487][T10256] RAX: ffffffffffffffda RBX: 00007fb61cc16090 RCX: 00007fb61c99bf79 [ 315.823534][T10256] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 315.831573][T10256] RBP: 00007fb61ca327e0 R08: 0000000000000004 R09: 0000000000000000 [ 315.839603][T10256] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 315.847644][T10256] R13: 00007fb61cc16128 R14: 00007fb61cc16090 R15: 00007ffc8d67c2f8 [ 315.855696][T10256] [ 315.863877][T10256] Mem-Info: [ 315.868795][T10256] active_anon:6706 inactive_anon:0 isolated_anon:0 [ 315.868795][T10256] active_file:17248 inactive_file:40025 isolated_file:0 [ 315.868795][T10256] unevictable:768 dirty:54 writeback:0 [ 315.868795][T10256] slab_reclaimable:10283 slab_unreclaimable:94549 [ 315.868795][T10256] mapped:24987 shmem:1361 pagetables:536 [ 315.868795][T10256] sec_pagetables:0 bounce:0 [ 315.868795][T10256] kernel_misc_reclaimable:0 [ 315.868795][T10256] free:1343714 free_pcp:9681 free_cma:0 [ 315.922535][T10258] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1221'. [ 315.957977][T10256] Node 0 active_anon:27024kB inactive_anon:0kB active_file:68992kB inactive_file:159896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100648kB dirty:216kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12004kB pagetables:2144kB sec_pagetables:0kB all_unreclaimable? no [ 316.024640][T10256] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 316.095251][T10256] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.156559][T10256] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 316.165680][T10256] Node 0 DMA32 free:1462656kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26640kB inactive_anon:0kB active_file:68992kB inactive_file:159072kB unevictable:1536kB writepending:216kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:19156kB local_pcp:7224kB free_cma:0kB [ 316.201385][T10256] lowmem_reserve[]: 0 0 0 0 0 [ 316.209133][T10256] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 316.242409][T10256] lowmem_reserve[]: 0 0 0 0 0 [ 316.248322][T10256] Node 1 Normal free:3893432kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22664kB local_pcp:8676kB free_cma:0kB [ 316.282108][T10256] lowmem_reserve[]: 0 0 0 0 0 [ 316.289460][T10256] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.314810][T10256] Node 0 DMA32: 2504*4kB (UME) 1600*8kB (UME) 1571*16kB (UME) 584*32kB (ME) 1148*64kB (UME) 591*128kB (UME) 217*256kB (UME) 70*512kB (UME) 27*1024kB (UME) 14*2048kB (UM) 268*4096kB (UM) = 1461200kB [ 316.339099][T10256] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.372337][T10256] Node 1 Normal: 236*4kB (UME) 51*8kB (UME) 45*16kB (UME) 81*32kB (UME) 18*64kB (UME) 4*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893432kB [ 316.409402][T10256] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.450787][T10256] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.479497][T10256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 316.529895][T10256] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 316.560493][T10256] 58935 total pagecache pages [ 316.565259][T10256] 0 pages in swap cache [ 316.583045][T10256] Free swap = 124996kB [ 316.592202][T10256] Total swap = 124996kB [ 316.596530][T10256] 2097051 pages RAM [ 316.613617][T10256] 0 pages HighMem/MovableOnly [ 316.623730][T10256] 416922 pages reserved [ 316.636874][T10256] 0 pages cma reserved [ 317.435678][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.443524][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.949218][T10314] netlink: 'syz.3.1235': attribute type 10 has an invalid length. [ 318.004470][T10314] bond0: (slave wlan1): Releasing backup interface [ 318.063039][T10314] team0: Port device wlan1 added [ 318.127306][T10313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.564942][T10327] syzkaller0: entered promiscuous mode [ 319.615222][T10355] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1247'. [ 319.644617][T10355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'. [ 321.680505][T10355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'. [ 322.832676][T10403] delete_channel: no stack [ 323.122134][T10423] syzkaller0: entered promiscuous mode [ 323.142533][T10423] syzkaller0: entered allmulticast mode [ 326.417064][T10460] netlink: 'syz.3.1269': attribute type 30 has an invalid length. [ 326.570931][T10468] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1272'. [ 326.863942][T10477] netlink: 'syz.3.1275': attribute type 28 has an invalid length. [ 326.916165][T10477] netlink: 'syz.3.1275': attribute type 4 has an invalid length. [ 326.938620][T10479] netlink: 'syz.1.1274': attribute type 21 has an invalid length. [ 326.967761][T10477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1275'. [ 326.999815][T10479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.007498][T10479] IPv6: NLM_F_CREATE should be set when creating new route [ 327.015143][T10479] IPv6: NLM_F_CREATE should be set when creating new route [ 327.167606][T10479] netlink: 'syz.1.1274': attribute type 21 has an invalid length. [ 327.175611][T10479] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1274'. [ 327.241371][T10479] netlink: 'syz.1.1274': attribute type 5 has an invalid length. [ 327.276865][T10479] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1274'. [ 327.394348][T10489] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1277'. [ 328.131572][T10501] TCP: TCP_TX_DELAY enabled [ 328.505015][T10505] netlink: 'syz.2.1284': attribute type 25 has an invalid length. [ 329.285326][T10537] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1292'. [ 329.558896][T10539] syzkaller0: entered promiscuous mode [ 329.564665][T10539] syzkaller0: entered allmulticast mode [ 329.836401][T10548] netlink: 'syz.0.1296': attribute type 39 has an invalid length. [ 334.706455][T10568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1302'. [ 335.277451][T10582] netlink: 'syz.0.1305': attribute type 21 has an invalid length. [ 335.761644][T10605] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1313'. [ 335.773929][T10602] netlink: 'syz.3.1312': attribute type 10 has an invalid length. [ 335.825575][T10601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.678733][T10637] netlink: 'syz.3.1322': attribute type 10 has an invalid length. [ 336.748328][T10637] team0: Port device wlan1 removed [ 336.774571][T10637] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 336.981878][T10657] netlink: 'syz.2.1326': attribute type 3 has an invalid length. [ 336.993694][T10657] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1326'. [ 338.366894][T10693] delete_channel: no stack [ 338.398972][T10693] delete_channel: no stack [ 340.679874][T10712] netlink: 'syz.3.1338': attribute type 4 has an invalid length. [ 340.707137][T10712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1338'. [ 341.332566][T10711] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1338'. [ 341.369747][T10712] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1338'. [ 342.873315][T10731] bridge0: port 3(bond0) entered disabled state [ 342.880020][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.887688][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.900888][T10731] bridge0: entered allmulticast mode [ 343.041490][T10743] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1347'. [ 343.334103][T10752] netlink: 'syz.1.1350': attribute type 3 has an invalid length. [ 343.355254][T10752] netlink: 'syz.1.1350': attribute type 1 has an invalid length. [ 343.367100][T10752] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1350'. [ 344.294632][T10795] syzkaller0: entered promiscuous mode [ 344.302340][T10795] syzkaller0: entered allmulticast mode [ 344.356955][T10794] netlink: 'syz.0.1361': attribute type 20 has an invalid length. [ 346.827339][T10821] C: renamed from team_slave_0 [ 346.849854][T10821] netlink: 'syz.2.1367': attribute type 3 has an invalid length. [ 346.911271][T10821] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1367'. [ 347.103585][T10828] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 347.159259][T10828] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1371'. [ 347.175425][T10828] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1371'. [ 347.204264][T10832] netlink: 'syz.2.1372': attribute type 10 has an invalid length. [ 347.216258][T10832] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1372'. [ 349.640535][T10876] netlink: 'syz.1.1386': attribute type 21 has an invalid length. [ 349.671954][T10876] netlink: 'syz.1.1386': attribute type 6 has an invalid length. [ 349.686362][T10876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1386'. [ 349.727274][T10879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.736406][T10879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.774163][T10879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.804466][T10879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.839352][T10881] netlink: 'syz.2.1387': attribute type 29 has an invalid length. [ 349.974074][T10888] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 349.983024][T10888] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1388'. [ 350.168672][T10881] netlink: 'syz.2.1387': attribute type 29 has an invalid length. [ 350.177933][T10884] netlink: 'syz.2.1387': attribute type 29 has an invalid length. [ 350.209680][T10891] netlink: 'syz.3.1388': attribute type 10 has an invalid length. [ 350.220914][T10891] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1388'. [ 351.569146][T10921] hsr_slave_1 (unregistering): left promiscuous mode [ 353.652058][T10969] validate_nla: 1 callbacks suppressed [ 353.652079][T10969] netlink: 'syz.3.1412': attribute type 10 has an invalid length. [ 353.670532][T10969] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1412'. [ 353.926174][T10982] netlink: 'syz.1.1414': attribute type 10 has an invalid length. [ 353.995464][T10982] `: Cannot enslave team device to itself [ 354.076359][T10985] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 354.097196][T10985] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1416'. [ 355.486033][T11012] delete_channel: no stack [ 355.747263][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.754702][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.777184][T11020] bridge0: entered allmulticast mode [ 355.831296][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.838673][T11021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.846281][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.853575][T11021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.883022][T11021] bridge0: entered promiscuous mode [ 356.392379][T11046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.400062][T11046] IPv6: NLM_F_CREATE should be set when creating new route [ 356.407984][T11046] IPv6: NLM_F_CREATE should be set when creating new route [ 356.415638][T11046] IPv6: NLM_F_CREATE should be set when creating new route [ 357.710379][T11070] netlink: 'syz.1.1443': attribute type 16 has an invalid length. [ 357.756902][T11070] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1443'. [ 357.817081][T11070] bridge_slave_0: entered allmulticast mode [ 357.865877][T11075] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1445'. [ 358.042779][T11077] macvlan1: entered allmulticast mode [ 358.546443][T11088] netlink: 'syz.3.1448': attribute type 12 has an invalid length. [ 358.568133][T11088] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1448'. [ 358.717124][T11091] sit0: left promiscuous mode [ 358.931719][T11094] netlink: 'syz.2.1449': attribute type 21 has an invalid length. [ 359.024881][T11097] netlink: 'syz.1.1452': attribute type 10 has an invalid length. [ 359.067865][T11097] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1452'. [ 359.133935][T11097] bond0: entered promiscuous mode [ 359.151319][T11097] bond_slave_1: entered promiscuous mode [ 359.169596][T11097] batadv_slave_0: entered promiscuous mode [ 360.171310][T11113] netlink: 'syz.2.1454': attribute type 9 has an invalid length. [ 360.188915][T11113] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1454'. [ 360.241841][T11115] netlink: 'syz.2.1454': attribute type 29 has an invalid length. [ 360.337915][T11115] netlink: 'syz.2.1454': attribute type 29 has an invalid length. [ 360.382204][T11117] netlink: 'syz.2.1454': attribute type 29 has an invalid length. [ 360.762458][T11134] netlink: 'syz.2.1460': attribute type 10 has an invalid length. [ 360.776959][T11134] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1460'. [ 361.170861][T11144] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1464'. [ 361.688591][T11159] netlink: 'syz.3.1471': attribute type 10 has an invalid length. [ 361.850872][T11159] team0: Cannot enslave team device to itself [ 362.909614][T11182] tap0: tun_chr_ioctl cmd 1074025680 [ 363.024411][T11186] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1480'. [ 363.035547][T11186] veth0_to_bond: entered promiscuous mode [ 363.273704][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1483'. [ 363.294886][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1483'. [ 363.308144][T11195] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1483'. [ 363.320747][T11197] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1483'. [ 363.517705][T11207] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1485'. [ 364.213483][T11231] netlink: 'syz.0.1491': attribute type 4 has an invalid length. [ 364.223651][T11231] __nla_validate_parse: 1 callbacks suppressed [ 364.223668][T11231] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1491'. [ 366.338207][T11281] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1505'. [ 366.356971][T11281] veth0_to_bond: entered promiscuous mode [ 366.725898][T11303] netlink: 'syz.1.1514': attribute type 2 has an invalid length. [ 366.765265][T11303] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1514'. [ 367.157303][T11318] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1519'. [ 367.280264][T11320] netlink: 'syz.2.1520': attribute type 10 has an invalid length. [ 370.505421][T11341] netlink: 'syz.2.1526': attribute type 27 has an invalid length. [ 370.515624][T11341] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1526'. [ 370.531513][T11341] netlink: 54795 bytes leftover after parsing attributes in process `syz.2.1526'. [ 370.719658][T11344] netlink: zone id is out of range [ 370.725446][T11344] netlink: set zone limit has 8 unknown bytes [ 370.744001][T11344] netlink: 'syz.3.1528': attribute type 41 has an invalid length. [ 371.048189][T11365] netlink: 'syz.0.1533': attribute type 39 has an invalid length. [ 371.143579][T11370] netlink: 'syz.3.1534': attribute type 6 has an invalid length. [ 371.249843][T11378] netlink: 3787 bytes leftover after parsing attributes in process `syz.1.1536'. [ 371.385168][T11382] netlink: 'syz.2.1539': attribute type 13 has an invalid length. [ 371.435802][T11382] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1539'. [ 371.485666][T11387] netlink: 'syz.1.1538': attribute type 3 has an invalid length. [ 371.529868][T11387] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1538'. [ 371.618675][T11382] erspan0: refused to change device tx_queue_len [ 371.651736][T11382] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 371.718103][T11393] netlink: 'syz.3.1542': attribute type 2 has an invalid length. [ 371.728355][T11393] netlink: 'syz.3.1542': attribute type 8 has an invalid length. [ 371.745803][T11393] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1542'. [ 371.775104][T11396] netlink: 'syz.3.1542': attribute type 2 has an invalid length. [ 371.794209][T11396] netlink: 'syz.3.1542': attribute type 8 has an invalid length. [ 371.810321][T11396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1542'. [ 372.109236][T11400] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1545'. [ 372.508493][T11421] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1549'. [ 373.587233][T11457] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1559'. [ 375.555258][T11534] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 375.585432][T11534] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 375.962536][T11542] validate_nla: 5 callbacks suppressed [ 375.962558][T11542] netlink: 'syz.1.1583': attribute type 5 has an invalid length. [ 376.666117][T11567] IPv6: Can't replace route, no match found [ 376.689562][T11567] netlink: 'syz.2.1589': attribute type 27 has an invalid length. [ 376.714173][T11567] __nla_validate_parse: 6 callbacks suppressed [ 376.714191][T11567] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1589'. [ 376.745720][T11567] netlink: 'syz.2.1589': attribute type 39 has an invalid length. [ 377.349707][T11575] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 377.545021][T11581] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1593'. [ 378.871440][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.879283][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.737153][T11566] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 380.763407][T11593] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 380.810962][T11593] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1596'. [ 381.770330][T11621] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1605'. [ 381.960746][T11634] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1607'. [ 382.017178][T11633] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1608'. [ 384.910118][T11693] netlink: 'syz.1.1623': attribute type 21 has an invalid length. [ 384.921106][T11693] netlink: 'syz.1.1623': attribute type 1 has an invalid length. [ 384.931005][T11693] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.1623'. [ 385.045497][T11697] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1624'. [ 385.096152][T11696] netlink: 'syz.0.1624': attribute type 58 has an invalid length. [ 385.108504][T11696] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1624'. [ 388.077761][T11772] syz.1.1646: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 388.130744][T11772] CPU: 0 PID: 11772 Comm: syz.1.1646 Not tainted syzkaller #0 [ 388.138302][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.148420][T11772] Call Trace: [ 388.151754][T11772] [ 388.154732][T11772] dump_stack_lvl+0x18c/0x250 [ 388.159927][T11772] ? show_regs_print_info+0x20/0x20 [ 388.165196][T11772] ? load_image+0x400/0x400 [ 388.169769][T11772] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 388.176254][T11772] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 388.182830][T11772] warn_alloc+0x246/0x340 [ 388.187221][T11772] ? stack_trace_save+0xaa/0x100 [ 388.192248][T11772] ? zone_watermark_ok_safe+0x230/0x230 [ 388.197891][T11772] ? kasan_set_track+0x5f/0x70 [ 388.202729][T11772] ? kasan_set_track+0x4e/0x70 [ 388.207565][T11772] ? __kasan_kmalloc+0x8f/0xa0 [ 388.212401][T11772] ? xsk_init_queue+0xad/0x100 [ 388.217241][T11772] ? xsk_setsockopt+0x4e5/0x760 [ 388.222171][T11772] ? do_sock_setsockopt+0x175/0x1a0 [ 388.227448][T11772] ? __x64_sys_setsockopt+0x182/0x200 [ 388.232907][T11772] __vmalloc_node_range+0x126/0x1330 [ 388.238308][T11772] ? free_vm_area+0x50/0x50 [ 388.242898][T11772] vmalloc_user+0x74/0x80 [ 388.247308][T11772] ? xskq_create+0xbf/0x170 [ 388.251882][T11772] xskq_create+0xbf/0x170 [ 388.256281][T11772] xsk_init_queue+0xad/0x100 [ 388.260944][T11772] xsk_setsockopt+0x4e5/0x760 [ 388.265694][T11772] ? xsk_poll+0x680/0x680 [ 388.270094][T11772] ? __fget_files+0x28/0x4b0 [ 388.274756][T11772] ? __fget_files+0x28/0x4b0 [ 388.279410][T11772] ? aa_sock_opt_perm+0x74/0x100 [ 388.284427][T11772] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 388.290049][T11772] ? security_socket_setsockopt+0x7e/0xa0 [ 388.295836][T11772] ? xsk_poll+0x680/0x680 [ 388.300234][T11772] do_sock_setsockopt+0x175/0x1a0 [ 388.305335][T11772] ? __fdget+0x180/0x210 [ 388.309653][T11772] __x64_sys_setsockopt+0x182/0x200 [ 388.314936][T11772] do_syscall_64+0x55/0xa0 [ 388.319430][T11772] ? clear_bhb_loop+0x40/0x90 [ 388.324189][T11772] ? clear_bhb_loop+0x40/0x90 [ 388.328937][T11772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.334904][T11772] RIP: 0033:0x7fb61c99bf79 [ 388.339381][T11772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.359142][T11772] RSP: 002b:00007fb61d8a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 388.367688][T11772] RAX: ffffffffffffffda RBX: 00007fb61cc15fa0 RCX: 00007fb61c99bf79 [ 388.375816][T11772] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 388.383861][T11772] RBP: 00007fb61ca327e0 R08: 0000000000000004 R09: 0000000000000000 [ 388.391941][T11772] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 388.399984][T11772] R13: 00007fb61cc16038 R14: 00007fb61cc15fa0 R15: 00007ffc8d67c2f8 [ 388.408058][T11772] [ 388.423539][T11772] Mem-Info: [ 388.428754][T11772] active_anon:6700 inactive_anon:0 isolated_anon:0 [ 388.428754][T11772] active_file:17248 inactive_file:40053 isolated_file:0 [ 388.428754][T11772] unevictable:768 dirty:43 writeback:0 [ 388.428754][T11772] slab_reclaimable:10639 slab_unreclaimable:95537 [ 388.428754][T11772] mapped:24124 shmem:1361 pagetables:551 [ 388.428754][T11772] sec_pagetables:0 bounce:0 [ 388.428754][T11772] kernel_misc_reclaimable:0 [ 388.428754][T11772] free:1340989 free_pcp:10266 free_cma:0 [ 388.479471][T11772] Node 0 active_anon:26800kB inactive_anon:0kB active_file:68992kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96496kB dirty:172kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11864kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no [ 388.534030][T11772] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 388.576267][T11772] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.606265][T11772] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 388.613078][T11772] Node 0 DMA32 free:1454716kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26764kB inactive_anon:0kB active_file:68992kB inactive_file:159180kB unevictable:1536kB writepending:172kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:18508kB local_pcp:4468kB free_cma:0kB [ 388.650162][T11772] lowmem_reserve[]: 0 0 0 0 0 [ 388.655130][T11772] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 388.705508][T11772] lowmem_reserve[]: 0 0 0 0 0 [ 388.726855][T11772] Node 1 Normal free:3893432kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22664kB local_pcp:8676kB free_cma:0kB [ 388.782474][T11772] lowmem_reserve[]: 0 0 0 0 0 [ 388.796914][T11772] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 388.820437][T11772] Node 0 DMA32: 633*4kB (UME) 1795*8kB (UME) 1670*16kB (UME) 921*32kB (UME) 1050*64kB (UME) 619*128kB (UME) 255*256kB (UME) 89*512kB (UM) 36*1024kB (UME) 21*2048kB (UME) 255*4096kB (UM) = 1454716kB [ 388.860608][T11772] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 388.873276][T11772] Node 1 Normal: 236*4kB (UME) 51*8kB (UME) 45*16kB (UME) 81*32kB (UME) 18*64kB (UME) 4*128kB (UME) 2*256kB (UM) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893432kB [ 388.893227][T11772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.908053][T11788] pim6reg1: entered promiscuous mode [ 388.913536][T11788] pim6reg1: entered allmulticast mode [ 388.920064][T11772] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.958015][T11772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.010286][T11772] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 389.043438][T11772] 58662 total pagecache pages [ 389.063859][T11772] 0 pages in swap cache [ 389.068909][T11772] Free swap = 124996kB [ 389.117007][T11772] Total swap = 124996kB [ 389.125836][T11772] 2097051 pages RAM [ 389.140272][T11790] netlink: 'syz.0.1651': attribute type 39 has an invalid length. [ 389.148591][T11772] 0 pages HighMem/MovableOnly [ 389.153606][T11772] 416922 pages reserved [ 389.161866][T11772] 0 pages cma reserved [ 389.476032][T11797] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1652'. [ 389.823719][T11805] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1654'. [ 390.140272][T11820] netlink: 'syz.0.1657': attribute type 3 has an invalid length. [ 390.239338][T11820] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 390.272331][T11820] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1657'. [ 390.321623][T11812] netlink: 'syz.1.1656': attribute type 29 has an invalid length. [ 390.346384][T11812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1656'. [ 390.398760][T11812] netlink: 'syz.1.1656': attribute type 29 has an invalid length. [ 390.437501][T11812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1656'. [ 390.959268][T11831] netlink: 'syz.2.1660': attribute type 9 has an invalid length. [ 390.978695][T11831] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1660'. [ 391.576932][T11850] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1663'. [ 391.939862][T11859] sctp: [Deprecated]: syz.3.1667 (pid 11859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.939862][T11859] Use struct sctp_sack_info instead [ 392.060105][T11863] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 392.108360][T11863] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 392.179692][T11866] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 392.204000][T11868] netlink: 'syz.2.1668': attribute type 29 has an invalid length. [ 392.297383][T11863] netlink: 'syz.2.1668': attribute type 10 has an invalid length. [ 392.773992][T11880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1672'. [ 393.090563][T11880] bond0 (unregistering): (slave 30): Releasing backup interface [ 393.151784][T11880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.201177][T11893] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1675'. [ 393.245156][T11880] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 393.302142][T11880] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 393.361499][T11880] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 393.411383][T11880] bond0 (unregistering): Released all slaves [ 393.492487][T11898] tap0: tun_chr_ioctl cmd 1074025677 [ 393.507028][T11898] tap0: linktype set to 778 [ 395.431379][T11949] validate_nla: 3 callbacks suppressed [ 395.431396][T11949] netlink: 'syz.0.1692': attribute type 1 has an invalid length. [ 395.477730][T11949] netlink: 'syz.0.1692': attribute type 29 has an invalid length. [ 395.495558][T11949] netlink: 'syz.0.1692': attribute type 29 has an invalid length. [ 395.584331][T11949] netlink: 'syz.0.1692': attribute type 29 has an invalid length. [ 395.640619][T11951] netlink: 'syz.0.1692': attribute type 29 has an invalid length. [ 395.653556][T11954] netlink: 'syz.0.1692': attribute type 29 has an invalid length. [ 396.468617][T11980] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1700'. [ 396.495218][T11980] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.1700'. [ 397.369612][T11991] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 397.381718][T11991] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 397.607141][T12001] netlink: 'syz.3.1709': attribute type 21 has an invalid length. [ 397.615120][T12001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1709'. [ 397.642127][T12001] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1709'. [ 397.658893][T12001] netlink: 'syz.3.1709': attribute type 10 has an invalid length. [ 397.857776][T12009] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1706'. [ 398.858373][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1714'. [ 399.249368][T12038] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1722'. [ 399.266079][T12038] team0: Port device C removed [ 399.272006][T12038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 399.290979][T12038] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1722'. [ 399.303556][T12038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 399.336362][T12039] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1721'. [ 399.405128][T12045] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1723'. [ 399.573460][T12047] syzkaller0: entered promiscuous mode [ 400.103184][T12065] sock: sock_timestamping_bind_phc: sock not bind to device [ 401.137862][T12072] validate_nla: 3 callbacks suppressed [ 401.137939][T12072] netlink: 'syz.1.1730': attribute type 153 has an invalid length. [ 401.296057][T12075] sctp: [Deprecated]: syz.1.1730 (pid 12075) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.296057][T12075] Use struct sctp_sack_info instead [ 401.853304][T12056] netlink: 'syz.2.1726': attribute type 10 has an invalid length. [ 401.862301][T12056] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 401.869334][T12056] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 401.888708][T12056] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 401.900492][T12064] netlink: 'syz.0.1728': attribute type 41 has an invalid length. [ 402.127112][T12081] __nla_validate_parse: 1 callbacks suppressed [ 402.127129][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 402.172534][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 402.206103][T12087] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 402.237029][T12081] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1733'. [ 402.944062][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.954558][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.964748][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.974898][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.984388][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 402.995074][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 403.011330][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 403.023409][T12109] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 403.704606][T12139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1748'. [ 404.487952][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 407.187575][T12178] lo: entered allmulticast mode [ 407.219589][T12180] lo: entered promiscuous mode [ 407.224448][T12180] lo: left allmulticast mode [ 407.580851][T12195] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1764'. [ 408.389596][T12216] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 408.404078][T12220] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1771'. [ 408.629310][T12224] sctp: [Deprecated]: syz.2.1772 (pid 12224) Use of int in maxseg socket option. [ 408.629310][T12224] Use struct sctp_assoc_value instead [ 408.716316][T12223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1772'. [ 409.706923][T12261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1783'. [ 409.858569][T12266] netlink: 'syz.1.1785': attribute type 7 has an invalid length. [ 410.320639][T12288] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1790'. [ 410.502052][T12292] netlink: 'syz.2.1793': attribute type 39 has an invalid length. [ 411.108126][T12320] netlink: 'syz.2.1800': attribute type 11 has an invalid length. [ 412.478626][T12365] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1811'. [ 412.488172][T12365] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1811'. [ 412.830228][T12365] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1811'. [ 412.979124][T12374] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1813'. [ 413.492081][T12390] netlink: 'syz.2.1819': attribute type 21 has an invalid length. [ 413.501746][T12390] IPv6: NLM_F_CREATE should be specified when creating new route [ 413.510605][T12390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.517993][T12390] IPv6: NLM_F_CREATE should be set when creating new route [ 413.525310][T12390] IPv6: NLM_F_CREATE should be set when creating new route [ 414.018743][T12403] netlink: 'syz.3.1822': attribute type 28 has an invalid length. [ 414.169362][T12405] netlink: 'syz.3.1822': attribute type 28 has an invalid length. [ 415.840009][T12426] netlink: 'syz.0.1827': attribute type 21 has an invalid length. [ 415.895630][T12426] netlink: 'syz.0.1827': attribute type 6 has an invalid length. [ 415.925018][T12426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1827'. [ 417.444544][T12430] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1827'. [ 417.623968][T12441] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1833'. [ 417.647837][T12440] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1833'. [ 417.837622][T12448] netlink: 'syz.3.1835': attribute type 21 has an invalid length. [ 417.848871][T12448] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1835'. [ 418.548477][T12474] netlink: 'syz.0.1840': attribute type 10 has an invalid length. [ 420.218487][T12517] netlink: 'syz.0.1855': attribute type 21 has an invalid length. [ 420.248148][T12517] netlink: 'syz.0.1855': attribute type 6 has an invalid length. [ 420.256389][T12517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1855'. [ 420.623286][T12520] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 420.632892][T12520] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 420.745444][T12527] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1859'. [ 421.170195][T12543] netlink: 'syz.2.1862': attribute type 8 has an invalid length. [ 421.202006][T12543] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1862'. [ 421.785167][T12561] netlink: 'syz.1.1867': attribute type 12 has an invalid length. [ 421.796337][T12561] netlink: 145120 bytes leftover after parsing attributes in process `syz.1.1867'. [ 421.930587][T12570] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1871'. [ 422.060525][T12575] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 422.070866][T12575] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1873'. [ 422.418415][T12581] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1875'. [ 422.887665][T12588] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1877'. [ 423.182743][T12598] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1882'. [ 423.885769][T12613] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1884'. [ 423.899321][T12613] net_ratelimit: 58 callbacks suppressed [ 423.899341][T12613] openvswitch: netlink: Key type 29 is not supported [ 423.923777][T12613] pim6reg1: entered promiscuous mode [ 423.930563][T12613] pim6reg1: entered allmulticast mode [ 424.443121][T12636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1892'. [ 424.607290][T12645] netlink: 'syz.1.1894': attribute type 2 has an invalid length. [ 424.615375][T12645] netlink: 'syz.1.1894': attribute type 8 has an invalid length. [ 424.624643][T12645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1894'. [ 424.940553][T12653] syzkaller0: entered promiscuous mode [ 424.951216][T12653] syzkaller0: entered allmulticast mode [ 425.210942][T12663] netlink: 'syz.0.1902': attribute type 8 has an invalid length. [ 425.246945][T12663] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.1902'. [ 425.635817][T12672] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1905'. [ 425.734876][T12675] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 425.749563][T12675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1906'. [ 425.785477][T12675] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 426.038319][T12686] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1909'. [ 426.094134][T12686] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 426.506256][T12699] netlink: 'syz.3.1912': attribute type 9 has an invalid length. [ 426.533038][T12699] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1912'. [ 427.988859][T12723] netlink: 'syz.3.1921': attribute type 21 has an invalid length. [ 428.748512][T12738] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 428.756628][T12738] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 428.768382][T12738] __nla_validate_parse: 1 callbacks suppressed [ 428.768400][T12738] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1924'. [ 428.814810][T12738] netlink: 'syz.0.1924': attribute type 1 has an invalid length. [ 428.833703][T12738] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 428.859363][T12738] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1924'. [ 429.149045][T12749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1926'. [ 429.413359][T12747] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1925'. [ 429.462951][T12756] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1927'. [ 429.572939][T12750] netlink: 'syz.3.1925': attribute type 10 has an invalid length. [ 429.667529][T12750] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 429.671752][T12747] netlink: del zone limit has 8 unknown bytes [ 429.944464][T12761] netlink: 'syz.0.1928': attribute type 29 has an invalid length. [ 429.955864][T12761] netlink: 'syz.0.1928': attribute type 29 has an invalid length. [ 430.764758][T12793] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1935'. [ 430.934587][T12795] netlink: 'syz.2.1936': attribute type 21 has an invalid length. [ 430.981843][T12795] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1936'. [ 431.057062][T12795] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1936'. [ 431.610509][T12807] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1939'. [ 431.761153][T12807] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 431.883120][T12807] CPU: 1 PID: 12807 Comm: syz.1.1939 Not tainted syzkaller #0 [ 431.890685][T12807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.900786][T12807] Call Trace: [ 431.904112][T12807] [ 431.907087][T12807] dump_stack_lvl+0x18c/0x250 [ 431.911834][T12807] ? show_regs_print_info+0x20/0x20 [ 431.917084][T12807] ? load_image+0x400/0x400 [ 431.921664][T12807] sysfs_warn_dup+0x8e/0xa0 [ 431.926210][T12807] sysfs_do_create_link_sd+0xc0/0x110 [ 431.931634][T12807] device_add_class_symlinks+0x1cf/0x240 [ 431.937331][T12807] device_add+0x507/0xc20 [ 431.941709][T12807] wiphy_register+0x1dad/0x2ae0 [ 431.946600][T12807] ? cfg80211_event_work+0x40/0x40 [ 431.951749][T12807] ? minstrel_ht_alloc+0x88a/0x990 [ 431.956930][T12807] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 431.963048][T12807] ieee80211_register_hw+0x3464/0x4250 [ 431.968586][T12807] ? ieee80211_tasklet_handler+0x20/0x20 [ 431.974272][T12807] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 431.980223][T12807] ? __debug_object_init+0xec/0x450 [ 431.985477][T12807] ? __asan_memset+0x22/0x40 [ 431.990109][T12807] ? __hrtimer_init+0x186/0x270 [ 431.995014][T12807] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 432.000817][T12807] ? mac80211_hwsim_free+0x220/0x220 [ 432.006158][T12807] ? rcu_is_watching+0x15/0xb0 [ 432.010973][T12807] ? kstrndup+0xbd/0x140 [ 432.015269][T12807] hwsim_new_radio_nl+0xdc9/0x1a90 [ 432.020443][T12807] ? __nla_validate+0x50/0x50 [ 432.025193][T12807] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 432.031699][T12807] ? __nla_parse+0x40/0x50 [ 432.036168][T12807] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 432.042554][T12807] genl_family_rcv_msg_doit+0x211/0x310 [ 432.048161][T12807] ? end_current_label_crit_section+0x170/0x170 [ 432.054458][T12807] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 432.060412][T12807] ? bpf_lsm_capable+0x9/0x10 [ 432.065130][T12807] ? security_capable+0x89/0xb0 [ 432.070046][T12807] genl_rcv_msg+0x619/0x7a0 [ 432.074614][T12807] ? genl_bind+0x360/0x360 [ 432.079079][T12807] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 432.085468][T12807] netlink_rcv_skb+0x241/0x4d0 [ 432.090282][T12807] ? genl_bind+0x360/0x360 [ 432.094750][T12807] ? netlink_ack+0x1180/0x1180 [ 432.099576][T12807] ? __lock_acquire+0x7d40/0x7d40 [ 432.104648][T12807] ? down_read+0x1ac/0x2e0 [ 432.109116][T12807] genl_rcv+0x28/0x40 [ 432.113160][T12807] netlink_unicast+0x751/0x8d0 [ 432.117989][T12807] netlink_sendmsg+0x8d0/0xbf0 [ 432.122817][T12807] ? netlink_getsockopt+0x590/0x590 [ 432.128065][T12807] ? aa_sock_msg_perm+0x94/0x150 [ 432.133058][T12807] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 432.138396][T12807] ? security_socket_sendmsg+0x80/0xa0 [ 432.143897][T12807] ? netlink_getsockopt+0x590/0x590 [ 432.149147][T12807] ____sys_sendmsg+0x5ba/0x960 [ 432.153954][T12807] ? __asan_memset+0x22/0x40 [ 432.158591][T12807] ? __sys_sendmsg_sock+0x30/0x30 [ 432.163656][T12807] ? __import_iovec+0x5f2/0x850 [ 432.168568][T12807] ? import_iovec+0x73/0xa0 [ 432.173122][T12807] ___sys_sendmsg+0x2a6/0x360 [ 432.177843][T12807] ? __sys_sendmsg+0x2a0/0x2a0 [ 432.182680][T12807] ? trace_call_bpf+0xc3/0x6c0 [ 432.187539][T12807] __se_sys_sendmsg+0x1c2/0x2b0 [ 432.192443][T12807] ? __x64_sys_sendmsg+0x80/0x80 [ 432.197439][T12807] ? lockdep_hardirqs_on+0x98/0x150 [ 432.202680][T12807] do_syscall_64+0x55/0xa0 [ 432.207148][T12807] ? clear_bhb_loop+0x40/0x90 [ 432.211875][T12807] ? clear_bhb_loop+0x40/0x90 [ 432.216601][T12807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.222531][T12807] RIP: 0033:0x7fb61c99bf79 [ 432.226987][T12807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.246642][T12807] RSP: 002b:00007fb61d83f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.255103][T12807] RAX: ffffffffffffffda RBX: 00007fb61cc16270 RCX: 00007fb61c99bf79 [ 432.263122][T12807] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 432.271133][T12807] RBP: 00007fb61ca327e0 R08: 0000000000000000 R09: 0000000000000000 [ 432.279140][T12807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.287156][T12807] R13: 00007fb61cc16308 R14: 00007fb61cc16270 R15: 00007ffc8d67c2f8 [ 432.295204][T12807] [ 432.524484][T12813] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1940'. [ 432.616054][T12815] validate_nla: 2 callbacks suppressed [ 432.616071][T12815] netlink: 'syz.3.1941': attribute type 29 has an invalid length. [ 432.650270][T12815] netlink: 'syz.3.1941': attribute type 3 has an invalid length. [ 432.947688][T12825] netlink: 'syz.1.1944': attribute type 10 has an invalid length. [ 432.974024][T12825] `: entered promiscuous mode [ 432.984498][T12825] team_slave_0: entered promiscuous mode [ 432.990678][T12825] team_slave_1: entered promiscuous mode [ 433.000266][T12825] geneve1: entered promiscuous mode [ 433.005894][T12825] `: entered allmulticast mode [ 433.011036][T12825] team_slave_0: entered allmulticast mode [ 433.018183][T12825] team_slave_1: entered allmulticast mode [ 433.024108][T12825] geneve1: entered allmulticast mode [ 433.031886][T12825] 8021q: adding VLAN 0 to HW filter on device ` [ 433.045177][T12825] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 433.063523][T12828] netlink: 'syz.3.1945': attribute type 10 has an invalid length. [ 433.077524][T12828] ipvlan1: entered promiscuous mode [ 433.082957][T12828] ipvlan1: entered allmulticast mode [ 433.090952][T12828] veth0_vlan: entered allmulticast mode [ 433.100118][T12828] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 433.371096][T12841] netlink: 'syz.1.1947': attribute type 6 has an invalid length. [ 434.355488][T12848] sit0: entered promiscuous mode [ 434.361568][T12850] __nla_validate_parse: 5 callbacks suppressed [ 434.361587][T12850] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1953'. [ 434.406231][T12848] sit0: entered allmulticast mode [ 434.723349][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 434.734816][T12855] delete_channel: no stack [ 434.740040][T12856] delete_channel: no stack [ 434.744796][T12856] delete_channel: no stack [ 434.749664][T12855] delete_channel: no stack [ 434.942097][T12864] sctp: [Deprecated]: syz.1.1958 (pid 12864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.942097][T12864] Use struct sctp_sack_info instead [ 435.110151][T12868] netlink: 'syz.2.1959': attribute type 27 has an invalid length. [ 435.153392][T12868] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1959'. [ 435.344500][T12866] netlink: 'syz.2.1959': attribute type 33 has an invalid length. [ 435.357938][T12866] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1959'. [ 435.753344][T12878] netlink: 'syz.2.1962': attribute type 46 has an invalid length. [ 436.412906][T12896] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 436.458329][T12896] pim6reg1: linktype set to 774 [ 437.354899][T12923] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1974'. [ 437.562976][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1977'. [ 437.582280][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1977'. [ 437.599248][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1977'. [ 437.642191][T12931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1977'. [ 438.127271][T12943] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1980'. [ 439.195186][T12991] netlink: 'syz.2.1992': attribute type 29 has an invalid length. [ 439.231633][T12991] netlink: 'syz.2.1992': attribute type 29 has an invalid length. [ 439.253256][T12988] netlink: 'syz.3.1987': attribute type 2 has an invalid length. [ 440.311016][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.317563][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.900220][T12997] __nla_validate_parse: 1 callbacks suppressed [ 441.900238][T12997] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1993'. [ 441.985249][ T5083] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 442.401541][T13006] pim6reg1: entered promiscuous mode [ 442.423944][T13006] pim6reg1: entered allmulticast mode [ 443.301422][T13032] netlink: 'syz.1.2002': attribute type 9 has an invalid length. [ 443.310037][T13032] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2002'. [ 443.346231][T13033] netlink: 'syz.1.2002': attribute type 9 has an invalid length. [ 443.368020][T13033] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2002'. [ 443.388469][T13032] netlink: 'syz.1.2002': attribute type 1 has an invalid length. [ 443.398444][T13032] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2002'. [ 443.409412][T13032] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2002'. [ 443.488900][T13050] netlink: 'syz.1.2006': attribute type 5 has an invalid length. [ 443.499240][T13051] netlink: 'syz.1.2006': attribute type 5 has an invalid length. [ 444.257429][ T51] Bluetooth: hci0: Malformed HCI Event [ 444.470851][T13080] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 444.490992][T13081] netlink: 'syz.0.2016': attribute type 1 has an invalid length. [ 444.853885][T13074] syzkaller0: entered promiscuous mode [ 444.862509][T13074] syzkaller0: entered allmulticast mode [ 444.895972][T13091] netlink: 'syz.2.2020': attribute type 10 has an invalid length. [ 445.404205][T13120] netlink: 'syz.3.2028': attribute type 10 has an invalid length. [ 445.437269][T13120] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.2028'. [ 445.750794][T13132] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.973612][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 446.086428][T13146] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2037'. [ 446.186063][T13146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.227998][T13146] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 446.255677][T13146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.268864][T13146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.280500][T13146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.292189][T13146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.332674][T13146] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 446.358166][T13146] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 446.384927][T13146] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 446.403175][T13146] bond0 (unregistering): Released all slaves [ 446.426970][T13147] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2037'. [ 446.684923][T13169] pim6reg1: entered promiscuous mode [ 446.690778][T13169] pim6reg1: entered allmulticast mode [ 447.645964][T13195] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 447.668655][T13195] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2052'. [ 448.991970][T13217] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2059'. [ 449.016345][T13217] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.2059'. [ 449.309133][T13231] IPv6: Can't replace route, no match found [ 449.464259][T13236] netlink: 'syz.3.2064': attribute type 46 has an invalid length. [ 449.472891][T13236] netlink: 'syz.3.2064': attribute type 46 has an invalid length. [ 449.608619][T13240] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2066'. [ 449.620739][T13240] netlink: del zone limit has 4 unknown bytes [ 450.029095][T13254] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 450.046929][T13254] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2071'. [ 450.586994][T13272] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2077'. [ 450.597408][T13272] bridge_slave_1: default FDB implementation only supports local addresses [ 450.824260][T13283] netlink: 'syz.1.2081': attribute type 21 has an invalid length. [ 450.868005][T13283] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2081'. [ 451.018644][T13292] netlink: 'syz.2.2083': attribute type 3 has an invalid length. [ 451.026472][T13292] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.2083'. [ 451.324139][T13301] netlink: 208092 bytes leftover after parsing attributes in process `syz.2.2085'. [ 451.344238][T13301] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 451.357125][T13301] netlink: 'syz.2.2085': attribute type 2 has an invalid length. [ 451.372660][T13301] netlink: 'syz.2.2085': attribute type 3 has an invalid length. [ 451.400900][T13301] netlink: 'syz.2.2085': attribute type 4 has an invalid length. [ 452.040593][T13312] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 452.057026][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2089'. [ 452.092953][T13312] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 456.036247][T13368] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 456.045434][T13368] __nla_validate_parse: 7 callbacks suppressed [ 456.045477][T13368] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2105'. [ 459.805113][T13430] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 460.209974][T13446] netlink: 'syz.0.2125': attribute type 12 has an invalid length. [ 460.221079][T13446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2125'. [ 460.278224][T13449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2127'. [ 460.295583][T13450] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2126'. [ 460.543385][T13458] netlink: 'syz.2.2130': attribute type 3 has an invalid length. [ 460.658857][T13462] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 460.678979][T13462] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 460.924611][T13469] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2135'. [ 463.898835][T13493] netlink: 'syz.1.2142': attribute type 41 has an invalid length. [ 464.738101][T13492] delete_channel: no stack [ 466.553586][T13514] netlink: 'syz.0.2147': attribute type 22 has an invalid length. [ 466.656456][T13521] netlink: 'syz.2.2148': attribute type 10 has an invalid length. [ 467.242423][T13528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.565855][T13545] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2155'. [ 467.587960][T13545] tc_dump_action: action bad kind [ 467.997010][T13554] netlink: 'syz.1.2157': attribute type 29 has an invalid length. [ 468.018983][T13554] netlink: 'syz.1.2157': attribute type 29 has an invalid length. [ 468.034467][T13554] netlink: 'syz.1.2157': attribute type 29 has an invalid length. [ 468.168908][T13559] netlink: 'syz.2.2159': attribute type 11 has an invalid length. [ 468.207143][T13559] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2159'. [ 468.490027][T13567] netlink: 'syz.3.2162': attribute type 2 has an invalid length. [ 468.498363][T13567] netlink: 'syz.3.2162': attribute type 8 has an invalid length. [ 468.517222][T13567] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2162'. [ 469.450077][T13593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2170'. [ 469.488689][T13593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2170'. [ 469.810007][T13604] netlink: 'syz.3.2175': attribute type 21 has an invalid length. [ 471.090365][T13631] delete_channel: no stack [ 471.894879][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2187'. [ 473.601797][T13679] netlink: 'syz.3.2198': attribute type 3 has an invalid length. [ 473.621594][T13677] netlink: 'syz.1.2197': attribute type 10 has an invalid length. [ 473.637851][T13679] netlink: 'syz.3.2198': attribute type 3 has an invalid length. [ 473.645667][T13679] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2198'. [ 473.666879][T13677] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2197'. [ 473.705663][T13681] netlink: 'syz.3.2198': attribute type 3 has an invalid length. [ 473.724035][T13681] netlink: 'syz.3.2198': attribute type 3 has an invalid length. [ 473.746976][T13681] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.2198'. [ 473.784956][T13683] macsec0: entered allmulticast mode [ 474.823580][T13701] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 474.833397][T13701] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 474.857907][T13701] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 474.868958][T13701] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 474.877464][T13701] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 474.889801][T13701] netlink: 'syz.3.2206': attribute type 29 has an invalid length. [ 474.999935][T13703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2207'. [ 475.110179][T13708] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2208'. [ 475.264607][T13712] netlink: 'syz.3.2210': attribute type 2 has an invalid length. [ 475.283728][T13712] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2210'. [ 475.394023][T13714] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2211'. [ 475.417052][T13714] openvswitch: netlink: Tunnel attr 0 has unexpected len 338 expected 8 [ 475.683722][T13726] pimreg: tun_chr_ioctl cmd 1074025677 [ 475.693954][T13726] pimreg: linktype set to 270 [ 475.755101][T13725] netlink: 'syz.3.2214': attribute type 10 has an invalid length. [ 475.830536][T13724] delete_channel: no stack [ 476.231603][T13738] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2217'. [ 477.231861][T13765] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 477.302125][T13765] bond0: (slave bond_slave_0): Releasing backup interface [ 477.365317][T13765] bond_slave_0: left promiscuous mode [ 477.405876][T13765] bond_slave_0: left allmulticast mode [ 477.577654][T13762] delete_channel: no stack [ 477.934819][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.957648][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.966916][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.980558][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.988558][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 477.996389][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.380795][T13791] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2234'. [ 478.647630][T12948] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.803657][T12948] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.889074][T13777] chnl_net:caif_netlink_parms(): no params data found [ 479.081907][T12948] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.181474][T12948] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.346015][T13777] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.354029][T13777] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.362024][T13777] bridge_slave_0: entered allmulticast mode [ 479.370252][T13777] bridge_slave_0: entered promiscuous mode [ 479.380419][T13777] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.388052][T13777] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.395458][T13777] bridge_slave_1: entered allmulticast mode [ 479.408085][T13777] bridge_slave_1: entered promiscuous mode [ 479.482547][T13777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.498421][T13777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.523249][T13813] netlink: 'syz.2.2238': attribute type 10 has an invalid length. [ 479.603845][T13777] team0: Port device team_slave_0 added [ 479.641124][T13811] delete_channel: no stack [ 479.659190][T13777] team0: Port device team_slave_1 added [ 479.758666][T13777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.765719][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.831468][T13777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.863159][T13777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.878090][T13777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.936201][T13777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.960624][T12948] tipc: Left network mode [ 480.070072][ T51] Bluetooth: hci4: command tx timeout [ 480.260703][T13777] hsr_slave_0: entered promiscuous mode [ 480.330298][T13777] hsr_slave_1: entered promiscuous mode [ 480.350678][T13777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.361810][T13777] Cannot create hsr debugfs directory [ 482.147013][ T51] Bluetooth: hci4: command tx timeout [ 483.353083][T13886] netlink: 'syz.0.2254': attribute type 21 has an invalid length. [ 484.226916][ T51] Bluetooth: hci4: command tx timeout [ 484.478651][T13777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 484.517711][T13777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 484.555097][T13777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 484.666164][T13777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 485.236747][T12948] veth1_macvtap: left promiscuous mode [ 485.256338][T12948] veth0_macvtap: left promiscuous mode [ 485.277401][T12948] veth1_vlan: left promiscuous mode [ 486.144127][T12948] team0 (unregistering): Port device macvlan0 removed [ 486.307885][ T51] Bluetooth: hci4: command tx timeout [ 486.692784][T12948] team0 (unregistering): Port device team_slave_1 removed [ 486.751852][T12948] team0 (unregistering): Port device C removed [ 487.202701][T12948] team0 (unregistering): Port device dummy0 removed [ 487.550093][T13777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.620797][T13777] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.658660][T13022] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.665931][T13022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.791178][ T239] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.798440][ T239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.951324][T13985] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2269'. [ 488.641139][T14018] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2275'. [ 488.690437][T13777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.012877][T13777] veth0_vlan: entered promiscuous mode [ 489.071525][T14025] bridge0: port 4(team0) entered disabled state [ 489.373182][T14025] bond0: left allmulticast mode [ 489.383596][T14025] bond_slave_1: left allmulticast mode [ 489.479157][T14025] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 489.575986][T14025] bridge0: port 3(bond0) entered disabled state [ 489.808973][T14025] bridge_slave_1: left allmulticast mode [ 489.815796][T14025] bridge_slave_1: left promiscuous mode [ 489.827735][T14025] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.953390][T14025] bridge_slave_0: left promiscuous mode [ 489.993908][T14025] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.699621][T14034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2276'. [ 490.784891][T13777] veth1_vlan: entered promiscuous mode [ 490.927633][T13777] veth0_macvtap: entered promiscuous mode [ 490.945424][T13777] veth1_macvtap: entered promiscuous mode [ 491.006489][T13777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.041510][T13777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.066185][T13777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.089467][T13777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.159516][T13777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.198998][T13777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.208571][T13777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.225277][T13777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.472060][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.492042][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.604009][T14057] syzkaller0: entered promiscuous mode [ 491.613691][T14057] syzkaller0: entered allmulticast mode [ 491.670203][ T6943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.687787][ T6943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.603501][T14071] netlink: 'syz.3.2282': attribute type 3 has an invalid length. [ 492.630455][T14071] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2282'. [ 495.950644][T14093] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2287'. [ 496.086108][T14087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.094447][T14087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.171422][T14091] netlink: 'syz.0.2287': attribute type 21 has an invalid length. [ 496.180666][T14091] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2287'. [ 496.193726][T14093] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2287'. [ 497.004985][T14109] netlink: 'syz.1.2292': attribute type 21 has an invalid length. [ 497.028327][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 497.087929][T14110] veth1_to_bond: entered allmulticast mode [ 497.130077][T14117] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2295'. [ 497.150574][T14114] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2294'. [ 497.194380][T14114] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2294'. [ 497.323186][T14126] netlink: 'syz.0.2297': attribute type 3 has an invalid length. [ 497.346668][T14126] netlink: 'syz.0.2297': attribute type 1 has an invalid length. [ 497.355330][T14126] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2297'. [ 498.373168][T14149] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2300'. [ 498.952732][T14155] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2302'. [ 501.289377][T14168] netlink: 'syz.1.2306': attribute type 21 has an invalid length. [ 501.358102][T14168] netlink: 'syz.1.2306': attribute type 19 has an invalid length. [ 501.366016][T14168] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.2306'. [ 501.688337][T14180] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 501.717226][T14180] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 501.738985][T14180] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 501.762325][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.768955][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.819595][T14184] netlink: 'syz.3.2309': attribute type 29 has an invalid length. [ 501.879492][T14180] netlink: 'syz.3.2309': attribute type 10 has an invalid length. [ 501.932861][T14180] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.2309'. [ 502.146136][T14186] netlink: 'syz.1.2310': attribute type 10 has an invalid length. [ 502.170350][T14186] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 502.179280][T14186] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 502.198634][T14186] `: Port device wlan1 added [ 502.565007][T14196] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2312'. [ 503.705696][T14210] sit0: entered promiscuous mode [ 504.074465][T14222] netlink: 'syz.3.2319': attribute type 28 has an invalid length. [ 504.111976][T14222] netlink: 'syz.3.2319': attribute type 29 has an invalid length. [ 504.210293][T14222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2319'. [ 505.190714][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.201454][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.210170][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.219086][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.246625][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 505.254525][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.433028][T14244] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2325'. [ 505.938966][T14240] chnl_net:caif_netlink_parms(): no params data found [ 506.242441][T14240] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.264751][T14240] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.277133][T14240] bridge_slave_0: entered allmulticast mode [ 506.289376][T14240] bridge_slave_0: entered promiscuous mode [ 506.331633][T14240] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.346981][T14240] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.360135][T14240] bridge_slave_1: entered allmulticast mode [ 506.433095][T14240] bridge_slave_1: entered promiscuous mode [ 506.703847][T14271] netlink: 'syz.3.2331': attribute type 3 has an invalid length. [ 506.727064][T14271] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2331'. [ 507.348223][ T5083] Bluetooth: hci2: command tx timeout [ 507.575973][T14240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.616110][T14240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.282597][T14297] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2335'. [ 508.680177][T14240] team0: Port device team_slave_0 added [ 508.702919][T14240] team0: Port device team_slave_1 added [ 508.896626][T14240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.905936][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.936501][T14240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.950112][T14303] netlink: 'syz.0.2336': attribute type 12 has an invalid length. [ 508.971825][T14303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2336'. [ 509.076477][T14240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.086821][T14240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.139728][T14240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.353993][T14312] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2339'. [ 509.427473][ T5083] Bluetooth: hci2: command tx timeout [ 509.867896][T14240] hsr_slave_0: entered promiscuous mode [ 509.879150][T14240] hsr_slave_1: entered promiscuous mode [ 509.897690][T14333] netlink: 192440 bytes leftover after parsing attributes in process `syz.0.2343'. [ 509.919128][T14333] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 509.929310][T14240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.952638][T14240] Cannot create hsr debugfs directory [ 510.047252][T14334] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2342'. [ 510.110653][T14337] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2342'. [ 510.138831][T14333] netlink: 'syz.0.2343': attribute type 3 has an invalid length. [ 510.158380][T14333] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2343'. [ 510.869906][T14363] dvmrp0: tun_chr_ioctl cmd 1074025692 [ 511.507010][ T51] Bluetooth: hci2: command tx timeout [ 513.278464][T14406] netlink: 'syz.0.2355': attribute type 39 has an invalid length. [ 513.588625][ T51] Bluetooth: hci2: command tx timeout [ 513.799624][ T59] bridge_slave_1: left allmulticast mode [ 513.805714][ T59] bridge_slave_1: left promiscuous mode [ 513.838531][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.873982][ T59] bridge_slave_0: left promiscuous mode [ 513.897359][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.111935][ T59] team0 (unregistering): Port device geneve1 removed [ 514.757574][ T59] team0 (unregistering): Port device team_slave_1 removed [ 515.204946][T14443] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2361'. [ 515.918745][ T59] team0 (unregistering): Port device bridge0 removed [ 516.093662][T14240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 516.246904][T14240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 516.356331][T14240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 516.421282][T14240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 516.578170][T14450] netlink: 'syz.0.2362': attribute type 17 has an invalid length. [ 517.254957][T14240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.428216][T14240] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.453097][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.460378][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.525856][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.533125][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.635683][T14471] batadv_slave_1: entered promiscuous mode [ 517.646446][T14471] batadv_slave_1: entered allmulticast mode [ 517.811470][T14481] dvmrp0: tun_chr_ioctl cmd 1074025692 [ 518.279884][T14489] netlink: 'syz.0.2368': attribute type 21 has an invalid length. [ 518.319051][T14489] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2368'. [ 518.370333][T14489] netlink: 'syz.0.2368': attribute type 5 has an invalid length. [ 518.397806][T14489] netlink: 'syz.0.2368': attribute type 6 has an invalid length. [ 518.439665][T14489] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2368'. [ 518.839648][T14240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.010912][T14240] veth0_vlan: entered promiscuous mode [ 519.058381][T14240] veth1_vlan: entered promiscuous mode [ 519.185262][T14240] veth0_macvtap: entered promiscuous mode [ 519.199921][T14520] netlink: 'syz.3.2374': attribute type 10 has an invalid length. [ 519.283952][T14520] team0: Port device macvlan0 added [ 519.303185][T14240] veth1_macvtap: entered promiscuous mode [ 519.333068][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.349826][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.375760][T14240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.426135][T14240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.453711][T14240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.483062][T14240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.541764][T14240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.568121][T14240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.586132][T14240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.627129][T14240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.839398][T12948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.866982][T12948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.974263][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.007859][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.235071][ C1] [ 520.235081][ C1] ================================ [ 520.235088][ C1] WARNING: inconsistent lock state [ 520.235107][ C1] syzkaller #0 Not tainted [ 520.235117][ C1] -------------------------------- [ 520.235122][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 520.235132][ C1] syz.2.2321/14552 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 520.235154][ C1] ffff88802c82e8f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 520.235218][ C1] {INITIAL USE} state was registered at: [ 520.235226][ C1] lock_acquire+0x19e/0x420 [ 520.235248][ C1] _raw_spin_lock+0x2e/0x40 [ 520.235267][ C1] htab_lock_bucket+0x17d/0x300 [ 520.235287][ C1] htab_map_delete_elem+0x1a4/0x650 [ 520.235305][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 520.235323][ C1] bpf_overflow_handler+0x1fc/0x510 [ 520.235349][ C1] __perf_event_overflow+0x447/0x630 [ 520.235369][ C1] perf_swevent_event+0x542/0x630 [ 520.235388][ C1] perf_bp_event+0x2a7/0x380 [ 520.235408][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 520.235431][ C1] notifier_call_chain+0x197/0x380 [ 520.235454][ C1] atomic_notifier_call_chain+0xda/0x180 [ 520.235477][ C1] notify_die+0x145/0x1a0 [ 520.235498][ C1] notify_debug+0x2e/0x50 [ 520.235514][ C1] noist_exc_debug+0x77/0x120 [ 520.235541][ C1] asm_exc_debug+0x33/0x40 [ 520.235559][ C1] irq event stamp: 1306 [ 520.235565][ C1] hardirqs last enabled at (1305): [] exc_debug+0xf5/0x140 [ 520.235597][ C1] hardirqs last disabled at (1306): [] exc_debug+0x73/0x140 [ 520.235637][ C1] softirqs last enabled at (1250): [] bpf_prog_load+0x1266/0x1670 [ 520.235664][ C1] softirqs last disabled at (1248): [] bpf_ksym_add+0x2d/0x340 [ 520.235690][ C1] [ 520.235690][ C1] other info that might help us debug this: [ 520.235695][ C1] Possible unsafe locking scenario: [ 520.235695][ C1] [ 520.235699][ C1] CPU0 [ 520.235703][ C1] ---- [ 520.235706][ C1] lock(&htab->lockdep_key); [ 520.235720][ C1] [ 520.235723][ C1] lock(&htab->lockdep_key); [ 520.235736][ C1] [ 520.235736][ C1] *** DEADLOCK *** [ 520.235736][ C1] [ 520.235739][ C1] no locks held by syz.2.2321/14552. [ 520.235748][ C1] [ 520.235748][ C1] stack backtrace: [ 520.235755][ C1] CPU: 1 PID: 14552 Comm: syz.2.2321 Not tainted syzkaller #0 [ 520.235774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.235786][ C1] Call Trace: [ 520.235794][ C1] <#DB> [ 520.235801][ C1] dump_stack_lvl+0x18c/0x250 [ 520.235831][ C1] ? show_regs_print_info+0x20/0x20 [ 520.235863][ C1] ? print_usage_bug+0x475/0x690 [ 520.235886][ C1] ? verify_lock_unused+0x18/0x140 [ 520.235911][ C1] lock_acquire+0x2c2/0x420 [ 520.235931][ C1] ? look_up_lock_class+0x75/0x140 [ 520.235954][ C1] ? htab_lock_bucket+0x17d/0x300 [ 520.235976][ C1] ? read_lock_is_recursive+0x20/0x20 [ 520.235998][ C1] ? lock_release+0xb5/0x8c0 [ 520.236019][ C1] ? __pte_offset_map+0x48/0x2c0 [ 520.236038][ C1] ? __pte_offset_map+0x249/0x2c0 [ 520.236062][ C1] _raw_spin_lock+0x2e/0x40 [ 520.236082][ C1] ? htab_lock_bucket+0x17d/0x300 [ 520.236102][ C1] htab_lock_bucket+0x17d/0x300 [ 520.236125][ C1] ? htab_lru_map_delete_node+0x760/0x760 [ 520.236147][ C1] ? look_up_lock_class+0x75/0x140 [ 520.236168][ C1] ? verify_lock_unused+0x18/0x140 [ 520.236191][ C1] ? jhash+0x2e8/0x740 [ 520.236213][ C1] htab_map_delete_elem+0x1a4/0x650 [ 520.236237][ C1] ? htab_map_update_elem+0x1040/0x1040 [ 520.236257][ C1] ? perf_callchain+0x220/0x220 [ 520.236281][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 520.236299][ C1] bpf_overflow_handler+0x1fc/0x510 [ 520.236326][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 520.236347][ C1] ? bpf_overflow_handler+0xde/0x510 [ 520.236374][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 520.236404][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 520.236428][ C1] __perf_event_overflow+0x447/0x630 [ 520.236454][ C1] perf_swevent_event+0x542/0x630 [ 520.236480][ C1] ? perf_tp_event+0x1450/0x1450 [ 520.236507][ C1] perf_bp_event+0x2a7/0x380 [ 520.236527][ C1] ? look_up_lock_class+0x75/0x140 [ 520.236550][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 520.236572][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.236597][ C1] ? lock_release+0xb5/0x8c0 [ 520.236642][ C1] ? lock_acquire+0x2c2/0x420 [ 520.236671][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 520.236696][ C1] notifier_call_chain+0x197/0x380 [ 520.236721][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 520.236746][ C1] atomic_notifier_call_chain+0xda/0x180 [ 520.236772][ C1] notify_die+0x145/0x1a0 [ 520.236798][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 520.236828][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.236854][ C1] notify_debug+0x2e/0x50 [ 520.236873][ C1] exc_debug+0xde/0x140 [ 520.236903][ C1] asm_exc_debug+0x1e/0x40 [ 520.236923][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 520.236954][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 520.236971][ C1] RSP: 0018:ffffc900051bfd50 EFLAGS: 00050202 [ 520.236988][ C1] RAX: ffffffff84295f01 RBX: 0000000000000050 RCX: 000000000000000c [ 520.237002][ C1] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffffc900051bfe04 [ 520.237016][ C1] RBP: ffffc900051bfee8 R08: ffffc900051bfe0f R09: 1ffff92000a37fc1 [ 520.237030][ C1] R10: dffffc0000000000 R11: fffff52000a37fc2 R12: 0000200000000310 [ 520.237045][ C1] R13: 0000000000000050 R14: ffffc900051bfdc0 R15: 00002000000002c0 [ 520.237063][ C1] ? rcuref_put_slowpath+0x131/0x150 [ 520.237093][ C1] [ 520.237099][ C1] [ 520.237105][ C1] _copy_from_user+0x8b/0xe0 [ 520.237130][ C1] __sys_bpf+0x23e/0x890 [ 520.237152][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 520.237181][ C1] ? lock_chain_count+0x20/0x20 [ 520.237208][ C1] __x64_sys_bpf+0x7c/0x90 [ 520.237228][ C1] do_syscall_64+0x55/0xa0 [ 520.237255][ C1] ? clear_bhb_loop+0x40/0x90 [ 520.237277][ C1] ? clear_bhb_loop+0x40/0x90 [ 520.237299][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.237320][ C1] RIP: 0033:0x7f0a7059bf79 [ 520.237336][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.237353][ C1] RSP: 002b:00007f0a71511028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.237373][ C1] RAX: ffffffffffffffda RBX: 00007f0a70815fa0 RCX: 00007f0a7059bf79 [ 520.237388][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 0000000000000000 [ 520.237401][ C1] RBP: 00007f0a706327e0 R08: 0000000000000000 R09: 0000000000000000 [ 520.237413][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.237424][ C1] R13: 00007f0a70816038 R14: 00007f0a70815fa0 R15: 00007ffc0d68d7c8 [ 520.237447][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 521.837792][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.958651][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.122667][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.253891][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.359497][T14552] caif:caif_disconnect_client(): nothing to disconnect [ 523.422805][ T1142] bond0: (slave wlan1): Releasing backup interface [ 523.439227][ T1142] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode [ 523.543560][ T1142] veth0_to_team: left allmulticast mode [ 523.556722][ T1142] veth0_to_team: left promiscuous mode [ 523.562488][ T1142] Ÿë: port 1(veth0_to_team) entered disabled state [ 523.596091][ T1142] hsr_slave_0: left promiscuous mode [ 523.608784][ T1142] hsr_slave_1: left promiscuous mode [ 523.630189][ T1142] veth1_vlan: left promiscuous mode [ 523.635511][ T1142] veth0_vlan: left promiscuous mode [ 523.865718][ T1142] geneve1 (unregistering): left promiscuous mode [ 523.872283][ T1142] geneve1 (unregistering): left allmulticast mode [ 523.881815][ T1142] team0 (unregistering): Port device geneve1 removed [ 524.032916][ T1142] team_slave_1 (unregistering): left promiscuous mode [ 524.042266][ T1142] team_slave_1 (unregistering): left allmulticast mode [ 524.050025][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 524.114525][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.123921][ T1142] bond_slave_1 (unregistering): left promiscuous mode [ 524.257550][ T1142] bond0 (unregistering): Released all slaves [ 524.598869][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.680705][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.724233][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.794740][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.925434][ T1142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.003592][ T1142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.054009][ T1142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.120266][ T1142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.230682][ T1142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.284321][ T1142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.360462][ T1142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.414102][ T1142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.991801][ T1142] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode [ 527.000210][ T1142] mac80211_hwsim hwsim9 wlan1 (unregistering): left allmulticast mode [ 527.009847][ T1142] `: Port device wlan1 removed [ 527.205532][ T1142] hsr_slave_0: left promiscuous mode [ 527.211634][ T1142] hsr_slave_1: left promiscuous mode [ 527.217705][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.225152][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.233050][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.241381][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.250067][ T1142] bridge_slave_1: left allmulticast mode [ 527.255744][ T1142] bridge_slave_1: left promiscuous mode [ 527.261563][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.270675][ T1142] bridge_slave_0: left allmulticast mode [ 527.276340][ T1142] bridge_slave_0: left promiscuous mode [ 527.282375][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.294242][ T1142] hsr_slave_0: left promiscuous mode [ 527.300415][ T1142] hsr_slave_1: left promiscuous mode [ 527.306386][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.314625][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.322428][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.329913][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.339437][ T1142] bridge_slave_1: left allmulticast mode [ 527.345095][ T1142] bridge_slave_1: left promiscuous mode [ 527.350974][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.359544][ T1142] bridge_slave_0: left allmulticast mode [ 527.365205][ T1142] bridge_slave_0: left promiscuous mode [ 527.371239][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.384292][ T1142] hsr_slave_0: left promiscuous mode [ 527.394816][ T1142] veth1_macvtap: left promiscuous mode [ 527.401075][ T1142] veth0_macvtap: left promiscuous mode [ 527.406772][ T1142] veth1_vlan: left promiscuous mode [ 527.412078][ T1142] veth0_vlan: left promiscuous mode [ 527.418531][ T1142] veth1_macvtap: left promiscuous mode [ 527.424054][ T1142] veth0_macvtap: left promiscuous mode [ 527.429753][ T1142] veth1_vlan: left promiscuous mode [ 527.435070][ T1142] veth0_vlan: left promiscuous mode [ 527.800469][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 527.818238][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 527.851470][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.879885][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.960620][ T1142] bond0 (unregistering): Released all slaves [ 528.064992][ T1142] team0 (unregistering): Port device macvlan0 removed [ 528.170057][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 528.202504][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 528.231064][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.263507][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.353321][ T1142] bond0 (unregistering): Released all slaves [ 530.143916][ T1142] geneve1 (unregistering): left promiscuous mode [ 530.150532][ T1142] geneve1 (unregistering): left allmulticast mode [ 530.157820][ T1142] ` (unregistering): Port device geneve1 removed [ 530.184244][ T1142] bond0 (unregistering): (slave geneve0): Releasing backup interface