last executing test programs: 3.977245844s ago: executing program 1 (id=4485): perf_event_open(&(0x7f00000018c0)={0x2, 0x80, 0xee, 0xb, 0x0, 0x0, 0x0, 0x6, 0x801ac, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0x6}, 0x105000, 0x14, 0x0, 0x4, 0x0, 0x1, 0x4002, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x9082400, &(0x7f0000000080)="e84ab92bc30d0ffb922b19bcc0a4902f8d1aa4ba3f5df31a471a4f6ab793c42ff89b03e33409968c6ed94fea3285d68c400c0ad08667142c5ac5e4b4e32c109c7097c6e8a1bdec62211233edb516cad224e0bbd65417b35953de0477555a95cd6044000321a25b850eb74a225f6384274bc332b50061443391ad655cfc7152688cd4146a3835e3452c40bb", 0x8b, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000011c0)={r1, r0, 0x0, 0x3, &(0x7f0000001200)='++\x00'}, 0x30) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000001300)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001380)={0x5, 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000001480)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000014c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000001540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000015c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001640)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xc, 0x10, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001880)="7638300c000000000000e9000000", 0x0, 0xfeff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002ec0)={0x6, 0x3, &(0x7f0000002f80)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000002fc0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003000)={r7, 0x1f4, 0xd28, 0x0, &(0x7f0000003080)="ff412f66b083dcc1010b3efc88ca", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 3.7274651s ago: executing program 3 (id=4488): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="1b0000001a007f", 0x7}, {&(0x7f0000000500)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000005c0), 0x2}, 0x10c002, 0x100000000ac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x2d, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r1, &(0x7f0000000780)}, 0x20) socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f00000007c0), 0x98) sendmsg$kcm(r3, &(0x7f0000000800)={&(0x7f0000000840)=@in={0x2, 0x4e21, @loopback}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)='\r', 0x34000}], 0x1}, 0x40) close(r0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x2, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000001a80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="e6034720f389efcffc3794dfaed4b1b5ece9"], 0x9) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 3.669205896s ago: executing program 0 (id=4489): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x2000000000000216, &(0x7f0000000980)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x2, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xc, &(0x7f0000000d80)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000ec0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002002002100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) 2.692065036s ago: executing program 0 (id=4493): r0 = gettid() (async, rerun: 32) r1 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1b}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xffffffffffffb9b2}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200480, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000fd57ecc2c318fd6e69c55f7c23e69a5c0d1df09206d9bf970458c8aa8e0b6b0e9ddf881eea14367aee5c280f4c07a2995369d62809f28383a759b81e285eb83f2ad678eba3ffdf6a06f2795d17fade1a048df787fb94"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x3, 0x101}], 'H'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7472e9"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000e40)=""/4096, 0x44, 0x1000, 0x1}, 0x20) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000cc0)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r5, 0xffff0002, 0xe, 0x0, &(0x7f0000000d80)="2b206d074843b397737ea49da2aa", 0x0, 0xeffc, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) openat$cgroup_freezer_state(r4, &(0x7f0000002b00), 0x2, 0x0) (async, rerun: 32) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000280)={0x3, 0x80, 0x9, 0x7, 0x2, 0x2, 0x0, 0x8, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000240)}, 0x24, 0x0, 0x5964, 0x0, 0x2, 0x2, 0x4, 0x0, 0x6, 0x0, 0x9}, r4, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xfe, 0x9, 0x19, 0xa7, 0x0, 0xd, 0x86413, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0x9fe}, 0x200, 0x8000000000000000, 0xfffffeb5, 0x5, 0x3ff, 0x3, 0x7, 0x0, 0x100, 0x0, 0x9}, r0, 0x1, r6, 0x1) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70200000200000085000000860000008500000008000000bf91000000000000b7020000000000008500000085000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f", 0x15}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 2.593580165s ago: executing program 3 (id=4495): socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, &(0x7f0000000080), 0xcf) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) close(r0) 2.582392827s ago: executing program 1 (id=4496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000d00)='syzkaller\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r0, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000dc0)="76389e14050000007583ddd08906a5", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.477189638s ago: executing program 2 (id=4497): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000200)=r0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0), 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="fa4e000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e5450000120091ef"], 0xfe33) 2.474923567s ago: executing program 4 (id=4498): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x15, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000280)={'vxcan1\x00'}) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x23, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0x4040) openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r10, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000500)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40}, @exit], &(0x7f0000000540)='GPL\x00', 0x2, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 2.35390435s ago: executing program 3 (id=4499): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x109a93, 0xac5d, 0x0, 0x1, 0xc0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc0089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x8, 0x7c5}, 0x0, 0x2, 0xfffffffe, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x14, &(0x7f0000001b40), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001940)=r3, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b00)={{r4}, &(0x7f0000001a80), &(0x7f0000001ac0)='%+9llu \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x860, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x3, r0, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000003000000000000000200000d0000000010000000040000000400000002000000020000000009000000000000000000000000000905000000000000000100000d000000000b00000005000000005f00"], &(0x7f0000000900)=""/4096, 0x63, 0x1000, 0x1, 0x2, 0x10000}, 0x28) 2.050659771s ago: executing program 2 (id=4500): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async, rerun: 32) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000001540)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x2}, 0x360, 0x0, 0xc2ba, 0x3, 0x4000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000015c0)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001700)=""/257, 0x101}, {&(0x7f0000001840)=""/171, 0xab}, {&(0x7f0000001900)=""/165, 0xa5}, {&(0x7f00000019c0)=""/4042, 0xfca}, {&(0x7f00000029c0)=""/4109, 0x100d}, {&(0x7f0000003a00)=""/138, 0x8a}, {&(0x7f0000003ac0)=""/224, 0xe0}, {&(0x7f0000003bc0)=""/166, 0xa6}, {&(0x7f0000003c80)=""/97, 0x61}, {&(0x7f0000003d00)=""/113, 0x71}], 0xa}, 0x0) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000003d80)={0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003e00)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) (async, rerun: 64) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/4073, 0xfe9}, {&(0x7f0000001300)=""/165, 0xa5}], 0x2}, 0x20000000) gettid() r2 = socket$kcm(0x2b, 0x1, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000004140)='syz1\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_pressure(r4, &(0x7f0000004180)='cpu.pressure\x00', 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000004000)={0x0, 0x21, &(0x7f0000004040)=[{&(0x7f0000004080)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000003e80)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x13, &(0x7f0000003f80)=r7, 0x4) sendmsg$kcm(r2, &(0x7f0000003fc0)={0x0, 0x0, 0x0}, 0x2000c854) (async) perf_event_open$cgroup(&(0x7f00000014c0)={0x1, 0x80, 0x2, 0x2, 0xff, 0x4, 0x0, 0x7fffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x305, 0x0, @perf_bp={&(0x7f0000001480), 0x6}, 0x200, 0x0, 0x7fffffff, 0x5, 0x6, 0xb, 0x7fff, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000041c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004240)={r8, 0xe0, &(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000043c0)=[0x0, 0x0, 0x0], &(0x7f0000004400), 0x0, 0xa5, &(0x7f0000004440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004480), &(0x7f00000044c0), 0x8, 0x14, 0x8, 0x8, &(0x7f0000004500)}}, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000004540)={r8, 0x4, 0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async) perf_event_open(&(0x7f00000045c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r9) 1.997154787s ago: executing program 1 (id=4501): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7f, 0x7, 0x9, 0x0, 0x100, 0x208d0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x8, 0x14ed10b8}, 0x8000, 0x5, 0x1, 0x9, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffffff9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r0, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000ac0)=[{}], 0x8, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40), 0x0, 0xef, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0xfffffffffffffdbc, 0xef, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1e00000005000000090000000e00000000c00400", @ANYRES32=r7, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1f, 0xe, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES32=r10], &(0x7f0000001180)='syzkaller\x00', 0x4, 0x5f, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(r4, &(0x7f00000011c0)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x2d, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000ff01000000010000ecefffff1811000019d377bbd6b0431e8a769ecf6cd251b959c16e83f2c546e4fd5d010bad8e190dc464c06b5e78245ec5e04316a598c67fc4fa2992e8d4b177135aaedf6f80d0f043a6cfc0e0e906bfc7c1c3a3032bbe6defee5738bcc71d264a9283727cad0457ce8d7f6ca4fb614ea180193320f5ad3560e5c97420211316646efcae2f28b793a2637ee4cc791dfd364d48bd7eedc4e6a2f8048cdbfb0da3baf6d173e48d7414e684f5308cd589b7b8489f72b17b", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES16, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x6, 0x3e, &(0x7f00000009c0)=""/62, 0x41100, 0x9, '\x00', r8, @cgroup_sock_addr, r4, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xa, 0x7, 0x3ff}, 0x10, r11, r2, 0x4, &(0x7f0000001200)=[r12], &(0x7f0000001240)=[{0x0, 0x4, 0x4, 0x6}, {0x3, 0x3, 0x1, 0x6}, {0x3, 0x2, 0x7}, {0x0, 0x3, 0x10}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="00000000feffffff9500000000000000850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x8, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.804352926s ago: executing program 4 (id=4502): r0 = socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="b6442a237dd094059d96070e1df6f0933f9ab25937", 0x15}], 0x1}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x252, &(0x7f0000001e00)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002080)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x1}]}, {0x0, [0x61, 0x5f, 0x3e]}}, &(0x7f0000000e00)=""/151, 0x29, 0x97, 0x1}, 0x20) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x3, &(0x7f0000000ec0), 0x98) setsockopt$sock_attach_bpf(r5, 0x84, 0x7d, &(0x7f0000000f00)=r6, 0x8) perf_event_open(&(0x7f0000000f40)={0x2, 0x80, 0xed, 0x0, 0x0, 0xfc, 0x0, 0x100000000, 0x2a609, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000fc0), 0x6}, 0x104101, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001080)}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000010c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000001100)={'veth0_to_batadv\x00', @local}) ioctl$SIOCSIFHWADDR(r8, 0x8b2b, &(0x7f0000001140)={'wlan1\x00', @random="0100"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000002100)) 1.626656864s ago: executing program 0 (id=4503): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1e, 0x2000000000000216, &(0x7f0000000980)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x7, 0xc, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x2, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1, 0xc, &(0x7f0000000d80)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r4, 0x0, 0xe, 0x0, &(0x7f0000000ec0)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000640), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002002002100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) 1.349211393s ago: executing program 2 (id=4504): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', r1, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r1}, &(0x7f0000000080), &(0x7f0000001400)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}}}], 0x20}, 0x0) 1.290730629s ago: executing program 3 (id=4505): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000025c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ccd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4a, &(0x7f0000000400), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0x70, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.271947591s ago: executing program 4 (id=4506): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x4, 0x4031}, 0x50) socketpair(0x1e, 0x4, 0x6, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000b56f5082d81f75ab2b435ebfa7c37185b5b476a8cd5193f75ccd4b38d0dece04bb2e708bf456c39a7344c644c3fd957a338bf2a4", 0x54}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) 1.053148613s ago: executing program 4 (id=4507): socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b30, &(0x7f0000000540)={'wlan1\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000040000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\"\x00'/28], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000340)='\x00', 0x0}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0xe3, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x801c581f, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000003080)={&(0x7f0000000d40)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x7}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000dc0)="526dda", 0x3}, {&(0x7f0000000e00)="03f91c17a6cf20be74d259b6fed36e", 0xf}, {&(0x7f0000000e40)="0e2aba07f8dff3", 0x7}, {&(0x7f0000000e80)="889429902abcef8d0b5f1ccd80d88efaf3b4805ccd6c5d28f17745d08512087fd44b8f3c600b85497246d68ab1f3df462f728bda89529fde045c9be09495e2db57c133e26a0c3fcfae53098fa9ed789fbc80bfaf3264727f563eaa98b5bef4f1a12cc03c3471c8625fa0613b951ce758af49563a68417a96d9f1ca84b69ee7f036f906062bd1f2f810c24db080fd7e76d1edf217a77af6920d93b4f92fd3a6e8255e9ffd25404745474e07599228b8cbf25bedf537b63c86a02f19cc40c9d2fdf6b1db7cd33777463a0b1dee9103fdad2557", 0xd2}, {&(0x7f0000000f80)="7be9ed8da57944818701f19f4c23a1d7be68f813615e95a6fc0a1fc8fce88f171ce9f633779878ae142d7580c35ee3ca4470ba1b390597948e46d753c114cc11e5579acb24de81ca4c24672b9b27b911b52ecd514d588a1d02339d90e4eeb7fffc7ad8738c056c623579f719018e3d21c9777f7b0d6e0e80fa8b4b5501d661d16cd93f87e5453e8defdba062a7441ca4e1a7af924112c63f1d6db47d7d61f58803cd790d7783918f9b4f95fbda44d4050d2f0df5b7be8d38aae919067f", 0xbd}, {&(0x7f0000001040)="b0956554bfe74210c9eb974d9c64933a9e3b039f8652ba4e53cd97e64e39da8803c8dbb00e8d9d55ec405cc47a368b1e752cd2f12b99", 0x36}], 0x6, &(0x7f0000002bc0)=[{0x100, 0x3a, 0xffff, "0bc1bb694b7fae5b139ac5ce3d45279020c3c54170070e784c779b2e155028740d966352b55e4469c2d6ff2b40b4aa4ee25f15a1dcce053a3408f2296632854d6dc44590c71c2f87838cec32009baa8a92956a73dc6f20cae371296954be90ccd1c58d70700d39a7f3f2b11c1321a7934a793ebbec77ca88dc70452ff3328774ec623986cd13df7e92011ec1fae59fa3b3c6171beace55e303128802099826d81197d8489c41000db9c2000e4d40c0e40234846fe27e0787b5cd27a4eb346a909853221b8640db3961f419767f43b95e4f912f8968a8180c4c97f8ad1d9241491f087842456ec3a78b6d4c5065277b"}, {0x30, 0x0, 0xfffffffe, "b49fcd990c05c4bbb04f5cceac51af03b24de203c5432e8a9f8b"}, {0xd0, 0x0, 0x7, "614ad9dc8a4f976b299665ad7571b8e3735c9e2fcd9fbe1b1ea7ba315ff98d3cb1e0e4c41a2329e89ed380e0b6083f696fa03ea23bfec7423dec739a504007d6208d4023cf141d6b657bbc446bbb2f9162681fee6278c2978f380922370a0f9b134798400bf98e6c306c3a296ba7b4b5ea0f6b8d0b81f0805e20d5f34ba4e6755cc5097e257e123b8215697d9c14c8b7cf5be57f622e9a0be52d25efc4b9be7be6c0ccc550646afd66fc8096c4d6969f246741d89f194dad66dc41b1"}, {0xf0, 0xff, 0x0, "810b2acb4f5c29f1789f5cb0d3540f5e25e5f7c2eb259c14711aca739fffa3dabe09d23fcaeaefb9adfda601bd8249e8fa45e7b3d03910e8fd78681a0316ccb054aad12db9d133ad5950bf00d12c96d8a364030fe49e88fe7480be246b2ccd238bfe78e221f0bd7e6fb90fa30b7d8200df439e9b7fa1f2c6d572d5ac904963f76813c2ec488735160f451c471e60e794558e7373f309bb06e945e28add2d85c5cb77f6d4a2ccf837354f4fbe957ba0219a6b3b36a66f315ed01ae86f5cd8515112b79c8da7587f38d6e71006509c1490f2eeaba3df4ceec57e1c756027"}, {0xe8, 0x108, 0xd, "d29c8e53173f8f20567531845c060a058ad1acdb2e3bd99f1bc1465bd3b3b9f55bd755abdbc5b4f86bd980ae536eb2f381388388e4ebe7a6c227f7cfa5e79d22be5a8a57a1342849a188d9c77fb7175e9831109255d56b038186c3ec322d2a5e7dbb227853a8fc39bd52ea3a05682c5b77e30149f0350f1ae9d2c7b6700cd54fdaa83a36b54f8760d0ee1efdd6908a177bbfd35ebccddecf8c944d9f31eed5ca9bb6043730d42231492f308cbb424ad37090f524a8b07fff7f24d921697b74e95ca280baaacd43e1e91fb00502c68673e7303382af9e"}, {0xd0, 0xff, 0x7ff, "261198d7199350a41028f899870ef674512a1fb031fc576a68e74b081e57e085954e892f07872f4323400c23f111e91934cf5f10cdfb51c3b05af003babff09a3d39e7af2b59fe3b973aa6789a2f5120e1d3d15ad7ef7b8143fd4b683669c3dc1e02ea1385f38bf04de6945fa618097e2750a8069e26b09e08708c554eb683ff72e9316e23196a5dc77588668f1d1485e421153029076488a24664f6e1cbb827b755584f5bf511acbeec53847def194d4839d98f0e913310b808ed"}], 0x4a8}, 0x40085) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000000c0)='&\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="d40100004000000018000000000000000000000000000000950000000000000038722c013653e84c584fdd38a1990000dfe83640d72226cbc0c89b926a"], &(0x7f0000000940)='GPL\x00', 0x5, 0x9c, &(0x7f0000000980)=""/156, 0x0, 0x6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x3, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000) perf_event_open(&(0x7f0000001100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000001200)={&(0x7f0000001240)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000001300), 0x42) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0xc, 0x0, 0x0) 1.031455725s ago: executing program 3 (id=4508): bpf$MAP_CREATE(0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB="0a00000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000bd00000003000000000000000000000000000000000000c95726075a0ea4613760036d1e6a5d7b93bee71b6c42a21fab41ea53df43d71c7aadf294b5b8218f3ff5361dba497776f95706bf0d8de9d700ba6720ffcb92113bae5f518aa9e7188fd1ff156af90fb2b92561bc9b2170df9b5501840c1e2cdd025a2282b6a7d1951e431bb958495e02f2c6b264df9675533c228cc3a884ac8e41c1c9cdabfc0266af578b2b14b29b21639fab3dcbe3de00891239aa41cd7a24cf3cafee"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0x2000000000000216, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x7, 0xc, &(0x7f0000000fc0)=ANY=[], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000002dc0)={0x1, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001c00), 0x8, 0x10, &(0x7f0000001c40), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x81, 0x9}, 0x803, 0x4000, 0x0, 0x3, 0x40000000000, 0x2, 0x0, 0x0, 0x20000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0800100200a5b0afc347661a8d", @ANYBLOB="0852e995e38d299e083796b383b67df30ea392a1191dbaf89ee05af41a0f3914958c66fba6bc5b1725ae1ccbb22ca69a089be00c06ee2749a7a6703617cf7aace94c119f90373cfb6dd2634b9316a248f2ae270adae717261205ae23802bc0879e3718e8d8d2932f5647df53f4b5248fb3f0584a82732ba45491694abc8d8d065b3482067abbcc3838d03d8b84f8d63ecb146ec0a15734136ee860013eff", @ANYRES64=r2, @ANYRESDEC=r3, @ANYRESDEC, @ANYBLOB="e21270168e8daa542d0fd7a782d451414e35403664e1ed63bc2e4516feaf", @ANYRES32=0x0], 0x128}, 0x0) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) socket$kcm(0xa, 0x5, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r8, 0x81000600, 0x12, 0x0, &(0x7f0000000a80)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d40)={r5, 0x0, 0x51, 0xf, &(0x7f0000000d00)="5e590ab96d12a10c027a91d30e404ed3038a69db9aabbe9086306b00d946f9f906aa8cd2bdfdf649e58751729fa5118c0a0edc1d3c9f20b8aa02f28cb475955f4efdf07517dd8f314a2527f13f20d0c2fd", &(0x7f0000000d80)=""/15, 0x7, 0x0, 0xa6, 0x1000, &(0x7f0000001c80)="8f223eb99aa30f026e8800630cd47acfc888c841f32128f3d1805e878e89334419ec257a2517c08009a00ba9bd43108ef543dd9f08185b26b5ef09603fef5eabe95a3066f4f2fad8755b6fa569478b540c7a2f6eb2105ac6ab81e40828487cd56d0309c2e9f6ef6e18e97fa8c116875c2376c768867d506215af0c0c929938fd218260319cabc47ad55ccaec4953c4426b9bb7bf9a7c24a0748b8832e0e308e264b79cbf4ac4", &(0x7f0000001d40)="50962971ca0e59494bf213dee6e7fa86b7a06147d298614a4175d7eb353cee3c27496e06f659b3527f6a210fd8e2acacd8f8fd815a7e6c45339fc6b0955cf77200c9c9bfc1e198a6106af3886df18f928e359787cf2a801b0b4e5ae4578a647eb5c31f3f83e29672414fe454a33eef0f747628acb37bea05df5842eedc6e3a9262b89b82fb5b978fac02c8c317c6e88be38722cfd048bfb2756e9e26a650740e8ec29d9095373dffde1054f6a8e25322f8ce9a4abdd9f59fc807bc750e44ddcd253db1416118b961f1fbdf01b50b5d2fba40b3bc2fffe75e6176b380e74369b8aa472a7cfdb71a0f9198eebe46fff189ac034cc09b941378acd21ca187dfe1cfbaa286e2d4910fe7b6340ac64f54620d36e61d768a5790f31a24dd944dcfb3539474652fc5c77119be7775ed72cc35360685e6f8f77c068008f5d486b455e953c072df74fcf2993d915ef671125af5b04ba8f625a6a23d4af7d3bb51e177abfca430419a0261fe8e5b5a215d6fc165fe297453a670eee270b93a48ebfe2f10ad0c6bc00d3404ed89abf1e44dfcb98b763282704585eee84b05426116c0083c006873b96df5f739fed245309c24295f7bd2b621d00b3cc65f3d97abf805ab50dc235bdb6fc58da17d680afade9d01165d2cadcb3b74a631a6866b20f7c23514fd3a64fdf7ccbdf52b3b017eccdc0df959c10b861adba8a17540f88de1b81f744df8526d944cf0a18da71a852cfc4e8b62b3c3cbce5fa9fe12f0791d01b5be6d4b8cdfa834fee67b07ba83ab5ae4b0e4635fa107ff67c2e8f379ef1320b2eca19200f2cf39bc3ae8a237c88f50ab55ca75dcf252c37dde5751da51a8bb2ca4b34547741ac13300ec883d0ab1a138dcfe629d0677143363ab3f033346579a5efd8d47977a49ff234162dada4a20ceabdbe9a50aec1b8ba04a212971a179aaf42c8b40fb4132271d94f8b6f8cacf08509acb3500fb88977512454d2d2a882689a7143ff2f5a5b3a2ae07ae22ec4e37f5bac5534b088feaaf9381d5abf8d74cd7947816c72fc6970c36dea84f2e38beaac1f8855c33ce3f8c6f6a9ad927251c501c871b5e9c1c5118a77f8595ee35c40c426d1c929d2b6d418f699464909371d91bb19f65042ce6190aef0ed07bd20d13ed288b409cd733e544dd7e6e03939e4d688faa8a1e04b682d27a8c68ae5a20a4764e964cb36bcecfb29475546917308c24841762d526548dc60e86e517f80f8eb2ea2c64eba419c4f407ad1a9eff71ec2f92d703353ddba47c6ab77921b823cf9404122e9072c606a34958ae61fe75b7fe9b5c857fe90d25dedc801fe2b4d49fa478333720e8d464688ccc7149ac47b34c3ffb779afdea96036ea06f8b9a498c87d1899398669496126742f70deb7d48a3c63113593c93d8393e73baf8f591d74ec6fb860cb5b47f573b200a65ef41faaa2a6c3ec929c5798a42b0ca764c4f7cccee3e3d2fa7581878e517308df4e015e865c9f70162b80fbff7738f432d958737475e6ba079d218bf915b2fc73d082111278c8937689528117fdefd3bdfa097a72a9b31a5f9ac57f712721949677a95f16ea003e0ff5b6f5d5aaffa806666bcefd847e23135d053a0b787a3e6cdb67dda3ecad498e98a94cbaf8a587583af564f8f34de029dffc497f65acb9ad4a5c46294f7e2684cacafa9db11e8ff0c543f2cda8eaf49fdc86576b82d29db0f5888e5ebec4ef853e9c1eca6967e1381884516ea46738bcd6095d607a2e6c625f84719cf6804dd9889d5f8ec428c17db96583149d11d2fe5dddef962b01434a3e9be638ec13db933d349780d34ebd96d3fdbc5e02a67c7619ed8bed770db539cd6f7910be134e2e34907202707037ec5ea9ada3bb0d186ec124c9095a26c66900429ff4d0e8e31378508f768e0896886e8ca1a9784c05877f50593ab5906225830bd1fc388374df71154d67ca7604e0d73bc020d013e2e4e41ead9f1bf3f8df23f816d8f3d4b0f184edb42af870276f3e1a3a5657f66accbcfce724a1d8eec14d017e6fa1a52e2b81fd13e235f0826ba781b13f8e1aa4d361c5f441e2f7bff309878c4443d64d69e8a8e73fc9e4521ea9e0a72124fd8f21117ddc99ac0357d856db8d8eded7cb06771dd008d80c39fe9f58c4c2cfef876a39e2d1f519ba38b8d9394f48ecf50073c0abcba798293c909438d3697c5e2258e983bd5447f7e9720218c1bc157c464b1f8a2475f46fb759d295ec81a9e7a9a76795c6f621e15eefb0d8d610c4f0a0e1ac44b8b03509b61f86853effad31b43e6b7dc4418724678a98093f487d64eea1ef07f484376cf5372d4fcac5d00b8dfa60f8a39eead35552f225c21cb0403a0e75e01e24c80026c227976c9cbfadec5e2310e6c9ede4f407f15f2cb32efb7cf42f4e04e5147596e8cab7842812bbf4b8f1016e4b03da870a04f698ab4fbc2a9a9a679b9f318b0e166ec88500b276e99a6f12b45fba08512d76878493ce7e8c27da5e38c53f236b82ddcbd480ccbef19b02c09d45b591b9744ae5721430f66452353480931399bafdfcdc06e833d184dcfa28175e7a25da22191297823e5bd360e4f85e26cc29300206637766135e392c547ceaae9450d206de5432d311e7b12234b7249b1ee36f184543fd733297eefebf8bdae3b18853f4ab6cbe1b1378c4f162f30ea78034cb4b88546731eee9eb088f6af57b81ec96c296965078d91e29b29ad2fb141f12bfa3fcafd98d29d8aefb233ef9685b9e792714c79c3d7592b164aea28764d2746d52849308950f3472ec448878ba8586ab19e4acb3bcab979b65de3e7938c118cb6e35c51768cf22a11eb947f6b7833a6a321e759178e573687e88134dacdfe1779f37a0edec9a393b3914c182eaae2df4a8945c2b7625eada838826a2d336480d50f60c14f03ed5d9d6282976639ac39cc48589104ace714b6d85d157e132dc348412c033bc7fbd8ce4eec181fa3a140196ed93e2463dee54b03a3485c2bade5f616fa31702c29951fb1516bc3e4557ac3841949cda68331bbfaa8b23730cee18e82d7ec63a7945d1be75204746af69b6dd544a007cbe35350a82b3e0e9eb3936795883180a6072c5914851c92cf57e02707cd2c09e8dcaba4b4febef3e7201adffbc53c7497f39d11ce272f40e893a0f056bb3eb7609fdd651f4490cb0178acdc859af6293b83991fc6e71dd540c166bbd9407e1d7a8f93116fec76ccec7b9fc91c97b125116d1c18b8f6eed2b81d3e978fe64641ce8072d6a8729b6a7503506bf6018744e321aa3db84f661b6adcd4202479eb754bc6970644dc3b8a7fe98e9fb8d0a99d2b1b81baa803a3101e983f9bb0ba764022afbe557431786c11d95a6df52b214bf053f796770d77a3b546452aa46d1c747f936fb872f95a9cfc800459914488cc0bbed1005d7b1d9ada8e71031fab50104865ca6c6a6c347137fdf6bcd30dba023cae75199877d62754abd4014cd9b6629f22194fa587cece810548657c46a45f3367cb979d72acfa0b6c5f6496c6a6eeac2442b341fe12a844354758759c2f5ca6fe4f665ccf9c49eacbe4d645eba283bb1e1ec2cdf5985fc66bbca685d6d850bb057f45455e83fc85d30e1115965b887f3d836703e16c3cfafff267e1bf70963416af361e2ffe43c2dfb4efb6c23c52fe5dd807219fe2f32cf692b87d76ef776875d7829ac448b4bd258caf8612e737f562a2693cdcdd710e36113316bf983fe3b66350a28d5f234ff124e4b2b8e383a99efb3018e13aab07361c558a66bd1f62dc31d23a09609349354c4db2234834b41f75a95d73f930c79ed6b33023e7170c21341858838bd7137816649512311ee022f979bce0d301d539a2eafc7e49e28c3441cba1104ab323fbc9cc7ec5144ae26422c63f50a9dcc9edfae23c83294d82093f290546727c9fdfa21d9d15a3fa40fa4ef8929add3afc7e337a5e766c498ae7783348ea8867b6a793c473b1e0c12c66aa334303516a1c9fb309d6520af27c1c4f518e332255cf9bf048221f77d036117bce7baefa00bc6ebb3a89aceb78d5987d9eee3e7523b593b26bf8fb946a07fb87476e1190342f5defa9463738f9a5127b5b602bae968e4dcda01a5c0067c0558c0cc23df7d5269f5c1be539fdc7a553dbb4807ffca587db5640ce75dc08e5f9e275af7594df7dd7d4051d5bc0744f35d91dac018418c80739876da7640ac7ca77a84ad1ef9db16de50c90b65d2171d7b87087348389481a63465818f2c875fcecb3c4fcad463328555b1107921f09b46480415cea846a3af11a8e8c9372b34c76aa953ab7aa7a959b762a5717e0a8b613e76f68c232e6d17f7f5314d90b6ba4371dbb17b8096dff0c0f0b17101328f8fe47a5f0fd5dd67c0449cf7d40b617becf904fa1db678b17f365e4527c1ecf8577d89d17f8e4cca04500262c2fa696f45a4b94869e3c8f71393742d14c4f6f8641cca5f20d16083d6f053fa2c0b73628797f3dcc67a89680b4af608af3347d6f8cab3bc181bab4db8e13dd228bfc257d5bfc546272299b1a93d4b7beed447ebd7c7d39f72a51050a865b170593b6d6f29f16fa8a72924eda3b4f4706e647c12b1a1936aaf43f8ed65198c4743907bf6d08d152c1e08abf6470eeac153854a5a6ce26bd258ff67c8075087e5a3b463e7f5ec2f43a8db22241ee223e75a49f94e764ce2d2112ca2290fa31885b76f802a230d0c7436a976b88bb7bfe9cf6653fac6fd82e05cbdc0536cc8ad51f62f3784bbe3e974fccc64bd15f41ccf9cbc2c056e8d5d6c21d7a462e34917b884cbc181e7e0a727b51f562ff1ba3779275b98e0e28a3351dee55e32236ade9229279b61aba85d0f75c29b6bb4746574a943dd3867a08b26022364386c9d7ced85b2946f93d075a36c13d29701618bfc99a6194a21c493bc98527bc4d858ccf4b28f4400604ea8eca2c59aff4b4cd9350ff38c8524d0041a82000df1c7a55ac476da69d4d37dd572e7f1bdeebf137d2c23bdf5b9a2188504f66676616a53e64881e1e4e881c7e9c51040dcd518593633fce8b7c189d0bc3785356b95cc95bc9a27f6c690b90afa01dbec338089d8be7e67de8cfbb13b7054accb2b2cfcf1394f1656c622c6034d4db4cfe045b91dd91673f6ba8ddcc009b82d337013decedcd5f6c7e0e36017e108e6d9710e2a45fe99269f5732c05ee7235ad38c6e27f6fb7509ee05dc52ce3bbee275b54ef3141c5f936bb72b4615f75ce5433a6ba0417c49700acfba316c9a98dc7ad4e37ebae294af62aafbed1db1e521b8dde6e703c45ee703155efeeb1d0d9051499f685c75d1b9b987a81d2aadd9be034971ff9f46f5407366141d18bcca851b78094cbdbdf9f7cea162af9739ed8e834f76dfecf595ebe605db69776ebc2780281f9ea5cfc51cd9ddbca055675c7a30a1854ac9d98f7f5a57d1c2e9795360ba130f4ab1061b0ea40988424c659945c4c9a8aa062ff21ed3d56d88c6678e5d58c1722be7b29cc460b1331531d5964d1c87f79631037cdad7deb06a0c03b2834f679ef5f2b6271ff006573042e9f22598f280b132dbb5f8a6c97a3fdcc31dccc19c0825e7d0caeb6de8dcd9e5ae886ca2c91207a076127edaf0630f2f9af4195a00505fbd1118f59c103e378ed8cc6080edb83c8663675070f482dc8445770477e8cf911e8cfbaa8fe407d9223cebe2ee937cfa46eeaf09551b23406a3a139c596efdf66513e0491dabcdb4983ebefdf953d4a6b9ab33ac9c3e4543153a95f1611a40d86bd98f4bf520379ffd23f71ea35500785b9a825460da3", 0x2, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4040) setsockopt$sock_attach_bpf(r9, 0x110, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x3, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 638.294375ms ago: executing program 1 (id=4509): socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, &(0x7f0000000080), 0xcf) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) close(r0) 594.24017ms ago: executing program 2 (id=4510): r0 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) (async) socket$kcm(0x2, 0x922000000001, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events\x00', 0x100002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000700), 0x40010) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r3, &(0x7f0000000800), 0x40010) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x110, 0x1}], 0x10}, 0x2004fc10) (async) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x110, 0x1}], 0x10}, 0x2004fc10) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000005c0), 0xa}, 0x100c, 0x7, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000005c0), 0xa}, 0x100c, 0x7, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x2, &(0x7f0000000480)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f00000004c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x2, &(0x7f0000000480)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}, @exit], &(0x7f00000004c0)='GPL\x00'}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r4}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x11, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000d00)="b9ff03075fe9008cb89e08e09900", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000084}, 0x43) 593.40664ms ago: executing program 0 (id=4520): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000140)='./file0\x00', r1, 0x4000, r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, &(0x7f0000000640)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{r1}, &(0x7f0000000080), &(0x7f0000001400)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1}}}], 0x20}, 0x0) 573.981822ms ago: executing program 4 (id=4511): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000200)=r0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f00000003c0), 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="fa4e000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="e5450000120091ef"], 0xfe33) 389.131551ms ago: executing program 0 (id=4512): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x15, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000280)={'vxcan1\x00'}) r6 = socket$kcm(0x2, 0x5, 0x84) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x23, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0x4040) openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r10, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000500)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40}, @exit], &(0x7f0000000540)='GPL\x00', 0x2, 0x1000, &(0x7f0000000580)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) 342.908985ms ago: executing program 1 (id=4513): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f0000000040), 0x0}, 0x20) 289.215631ms ago: executing program 2 (id=4514): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="2e00000011008139504636c9024f630ccb65be0001000000000000000005fb2515b7b00812be74bda544eca14000", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x1f, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="15006a0679d999a1049bab44638900002a000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r4, @ANYRES64=r2], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = socket$kcm(0x1e, 0x4, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140)='THAWED\x00', 0x7) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000140), 0x16) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000380), 0x12) (async, rerun: 32) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r10 = openat$cgroup_int(r9, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040), 0x1) 258.527094ms ago: executing program 0 (id=4515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x109a93, 0xac5d, 0x0, 0x1, 0xc0, 0x0, 0x9}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc0089, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x8, 0x7c5}, 0x0, 0x2, 0xfffffffe, 0x5, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x14, &(0x7f0000001b40), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001940)=r3, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001b00)={{r4}, &(0x7f0000001a80), &(0x7f0000001ac0)='%+9llu \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x860, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000200), 0xa}, 0x0, 0x4, 0xfffffffe, 0x0, 0xfffffffffffffffc, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x3, r0, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001900)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000480000004800000003000000000000000200000d0000000010000000040000000400000002000000020000000009000000000000000000000000000905000000000000000100000d000000000b00000005000000005f00"], &(0x7f0000000900)=""/4096, 0x63, 0x1000, 0x1, 0x2, 0x10000}, 0x28) 203.80583ms ago: executing program 4 (id=4516): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000016c0)=""/257, 0x101}, {&(0x7f0000000000)=""/171, 0xab}, {&(0x7f00000002c0)=""/165, 0xa5}, {&(0x7f00000019c0)=""/4048, 0xfd0}, {&(0x7f0000002e00)=""/4109, 0x100d}, {&(0x7f0000000640)=""/138, 0x8a}, {&(0x7f0000000740)=""/224, 0xe0}, {&(0x7f0000001900)=""/166, 0xa6}, {&(0x7f0000000580)=""/97, 0x61}, {&(0x7f0000000180)=""/113, 0x71}], 0xa}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 149.073925ms ago: executing program 1 (id=4517): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2050, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0x18, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1d, 0x2, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd51, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x19, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r6}, 0xc) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x39c2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r3) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000040)={r9, r3}) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r9}, 0x8) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0xa) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000380)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="2dfdd8cf52ed4b87362d7fe2fd2f55f9e809bc82dece", 0x16}, {&(0x7f00000004c0)="0a55c7ecb9d28ab4aef2d6d45d0ee22c7a114aeb9c38ffdcf4173af341e0504ecf1db97a1f365bf59a06fc4e4b06f50830e0e70be05d7e5ce66756fce38f2cd2091c38634e03178168f7ae819691985be8d44ae9db843603874466b3ec09b5b93c34fab99391e2ab1f5b9c52b76830389d654f1caf03316d0d90c58b18bb1907cd79542366d2a510e0fc9699c229c29b", 0x90}], 0x2}, 0x4010) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 54.022735ms ago: executing program 3 (id=4518): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa09}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0xf, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f0000000340)="b80a000500000000", &(0x7f0000000380)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=4519): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7f, 0x7, 0x9, 0x0, 0x100, 0x208d0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x8, 0x14ed10b8}, 0x8000, 0x5, 0x1, 0x9, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xfffffffffffffff9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r4, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r0, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4e, &(0x7f0000000ac0)=[{}], 0x8, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xd3, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r9, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40), 0x0, 0xef, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0xfffffffffffffdbc, 0xef, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1e00000005000000090000000e00000000c00400", @ANYRES32=r7, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1f, 0xe, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES32=r10], &(0x7f0000001180)='syzkaller\x00', 0x4, 0x5f, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$cgroup_ro(r4, &(0x7f00000011c0)='rdma.current\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x2d, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000ff01000000010000ecefffff1811000019d377bbd6b0431e8a769ecf6cd251b959c16e83f2c546e4fd5d010bad8e190dc464c06b5e78245ec5e04316a598c67fc4fa2992e8d4b177135aaedf6f80d0f043a6cfc0e0e906bfc7c1c3a3032bbe6defee5738bcc71d264a9283727cad0457ce8d7f6ca4fb614ea180193320f5ad3560e5c97420211316646efcae2f28b793a2637ee4cc791dfd364d48bd7eedc4e6a2f8048cdbfb0da3baf6d173e48d7414e684f5308cd589b7b8489f72b17b", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400", @ANYRES16, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x6, 0x3e, &(0x7f00000009c0)=""/62, 0x41100, 0x9, '\x00', r8, @cgroup_sock_addr, r4, 0x8, &(0x7f0000000d00)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x3, 0xa, 0x7, 0x3ff}, 0x10, r11, r2, 0x4, &(0x7f0000001200)=[r12], &(0x7f0000001240)=[{0x0, 0x4, 0x4, 0x6}, {0x3, 0x3, 0x1, 0x6}, {0x3, 0x2, 0x7}, {0x0, 0x3, 0x10}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="00000000feffffff9500000000000000850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x8, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): 09.394255][T16863] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.402335][T16863] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.410541][T16863] device bridge_slave_0 entered promiscuous mode [ 609.419973][T16863] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.429214][T16863] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.437745][T16863] device bridge_slave_1 entered promiscuous mode [ 609.469372][T16863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.481737][T16863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.516824][T16863] team0: Port device team_slave_0 added [ 609.530513][T16863] team0: Port device team_slave_1 added [ 609.574159][T16863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.585034][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.621870][T16863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.644427][T16863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.659928][T16863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.693873][T16863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.081712][T16236] Bluetooth: hci4: command 0x0409 tx timeout [ 610.694092][T16863] device hsr_slave_0 entered promiscuous mode [ 610.734042][T16863] device hsr_slave_1 entered promiscuous mode [ 610.761263][T16863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.783313][T16863] Cannot create hsr debugfs directory [ 610.954547][T16898] netlink: 'syz.0.3118': attribute type 11 has an invalid length. [ 610.956639][ T8121] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.965503][T16898] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3118'. [ 611.024101][T16898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.185391][ T8121] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.373379][ T8121] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.482932][ T8121] batman_adv: batadv0: Removing interface: netdevsim0 [ 611.541682][ T8121] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.903914][ T8121] tipc: Left network mode [ 612.162183][T16236] Bluetooth: hci4: command 0x041b tx timeout [ 612.202280][T16940] netlink: 'syz.1.3127': attribute type 21 has an invalid length. [ 612.229039][T16940] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3127'. [ 612.272958][T16940] netlink: 'syz.1.3127': attribute type 4 has an invalid length. [ 612.328376][T16940] netlink: 'syz.1.3127': attribute type 5 has an invalid length. [ 612.349107][T16940] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3127'. [ 612.566461][T16957] netlink: 'syz.2.3131': attribute type 12 has an invalid length. [ 612.599662][T16957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3131'. [ 612.847535][T16967] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3134'. [ 613.095512][T16863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.200181][T16863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.224157][T16863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.475841][T16863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.500457][T16991] netlink: 'syz.1.3140': attribute type 10 has an invalid length. [ 613.526620][T16991] device veth0_vlan left promiscuous mode [ 613.583937][T16991] device veth0_vlan entered promiscuous mode [ 613.678560][T16991] team0: Device veth0_vlan failed to register rx_handler [ 614.220483][T16863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.249070][T16236] Bluetooth: hci4: command 0x040f tx timeout [ 614.282922][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.291776][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.316910][T16863] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.673852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 614.741561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.823365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 614.853008][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.884143][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.891296][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.941345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.964817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.987856][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.995049][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.129284][T17022] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3148'. [ 615.163879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 615.172078][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.208503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.237394][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 615.264928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.293120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 615.320792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 615.400260][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 615.418482][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 615.449111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 615.477709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 615.508398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 615.541653][T16863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 615.597248][ T8121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.611515][ T8121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.639932][ T8121] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 615.649200][ T8121] batman_adv: batadv0: Removing interface: virt_wifi0 [ 615.678485][ T8121] device bridge_slave_0 left promiscuous mode [ 615.705496][ T8121] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.748000][ T8121] device veth1_vlan left promiscuous mode [ 616.077245][ T8121] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 616.321552][T16236] Bluetooth: hci4: command 0x0419 tx timeout [ 616.329100][ T8121] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 616.432193][ T8121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.496371][ T8121] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 616.705043][ T8121] bond0 (unregistering): Released all slaves [ 616.818087][T17070] tap0: tun_chr_ioctl cmd 1074812118 [ 617.053305][T17078] netlink: 'syz.0.3162': attribute type 10 has an invalid length. [ 617.332083][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.339702][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 617.380147][T16863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.406102][T17094] netlink: 'syz.4.3167': attribute type 9 has an invalid length. [ 617.417502][T17097] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.3164'. [ 617.422180][T17094] netlink: 668 bytes leftover after parsing attributes in process `syz.4.3167'. [ 617.435494][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 617.441563][T17097] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 617.451238][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 617.475771][T17100] netlink: 'syz.1.3165': attribute type 2 has an invalid length. [ 617.492299][T17100] netlink: 'syz.1.3165': attribute type 8 has an invalid length. [ 617.522301][T17100] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3165'. [ 617.577477][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 617.595602][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 617.660082][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 617.708027][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 617.779080][T17104] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 617.921216][T17104] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 617.993353][T16863] device veth0_vlan entered promiscuous mode [ 618.048944][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.182035][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.193734][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.213837][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.229685][T16863] device veth1_vlan entered promiscuous mode [ 618.307497][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 618.332188][ T5211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 618.356506][T16863] device veth0_macvtap entered promiscuous mode [ 618.377035][T16863] device veth1_macvtap entered promiscuous mode [ 618.400022][T16863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.466848][T16863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.487013][T16863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.507733][T16863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.529518][T16863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.541604][T17126] netlink: 'syz.4.3175': attribute type 10 has an invalid length. [ 618.562734][T17126] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3175'. [ 618.591256][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 618.606720][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 618.617426][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 618.631644][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 618.643445][T16863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.661491][T16863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.691798][T16863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.702877][T16863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.713111][T16863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.728256][T16863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.740968][T16863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.753536][T16863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.762322][T16863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.771939][T16863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.788972][T16863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.916111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 618.949435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 619.011624][T17140] rxe_eth0 speed is unknown, defaulting to 1000 [ 619.116968][T17148] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3180'. [ 619.140538][T13352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.154151][T13352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.179299][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 619.248188][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.267827][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.304105][T13352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 619.559171][T17167] netlink: 'syz.4.3183': attribute type 4 has an invalid length. [ 619.577460][T17167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 619.636364][T17167] netlink: 'syz.4.3183': attribute type 17 has an invalid length. [ 619.656896][T17167] netlink: 'syz.4.3183': attribute type 16 has an invalid length. [ 619.669137][T17167] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3183'. [ 619.687527][T17168] netlink: 'syz.4.3183': attribute type 17 has an invalid length. [ 619.732390][T17168] netlink: 'syz.4.3183': attribute type 16 has an invalid length. [ 619.761594][T17168] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3183'. [ 619.979176][T17185] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3188'. [ 620.468417][ T4290] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.484372][ T4290] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.494797][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.509775][ T4290] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.518500][ T4290] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 620.526945][ T4290] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.571252][T17203] rxe_eth0 speed is unknown, defaulting to 1000 [ 620.816356][T17203] chnl_net:caif_netlink_parms(): no params data found [ 621.068789][T17226] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3199'. [ 621.078796][T17203] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.112400][T17203] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.152524][T17203] device bridge_slave_0 entered promiscuous mode [ 621.171613][T17203] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.200900][T17203] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.241560][T17203] device bridge_slave_1 entered promiscuous mode [ 621.367278][T17227] bond0: (slave bond_slave_0): Releasing backup interface [ 621.395994][T17227] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 621.490394][T17226] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 621.585054][T17203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.620221][T17203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.697631][T17203] team0: Port device team_slave_0 added [ 621.723675][T17203] team0: Port device team_slave_1 added [ 621.830325][T17203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.886308][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.981850][T17203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.023681][T17203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.030645][T17203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.140492][T17203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.302771][T17203] device hsr_slave_0 entered promiscuous mode [ 622.312254][T17203] device hsr_slave_1 entered promiscuous mode [ 622.354013][T17203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.381710][T17203] Cannot create hsr debugfs directory [ 622.471862][ T4400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.561496][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 622.671486][ T4400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.710532][T17272] validate_nla: 3 callbacks suppressed [ 622.710562][T17272] netlink: 'syz.1.3210': attribute type 10 has an invalid length. [ 622.908398][T17272] device wg1 entered promiscuous mode [ 622.922860][T17272] team0: Device wg1 is of different type [ 623.184661][ T4400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.364067][ T4400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.695996][ T4400] device .*! left promiscuous mode [ 623.810251][ T4400] device 0 left promiscuous mode [ 623.938867][ T4400] tipc: Left network mode [ 624.333690][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.340045][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.645440][ T4290] Bluetooth: hci2: command 0x041b tx timeout [ 624.907536][T17336] netlink: 'syz.1.3223': attribute type 21 has an invalid length. [ 624.997002][T17336] __nla_validate_parse: 2 callbacks suppressed [ 624.997018][T17336] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3223'. [ 625.034797][T17343] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3234'. [ 625.070671][T17203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 625.083580][T17343] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 625.275743][T17203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 625.297340][T17203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 625.658335][T17203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 625.944534][T17358] sctp: [Deprecated]: syz.1.3237 (pid 17358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.944534][T17358] Use struct sctp_sack_info instead [ 625.945173][T17357] netlink: 'syz.2.3227': attribute type 10 has an invalid length. [ 626.158179][T17357] team0: Device wg1 is of different type [ 626.514210][T17203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.605144][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 626.626307][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 626.652696][T17203] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.721664][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 626.795220][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 626.806386][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 626.831970][ T8121] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.839069][ T8121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.874311][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 626.896802][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 626.932030][ T8121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 626.954544][ T8121] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.961720][ T8121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.997153][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 627.052178][T17389] : renamed from caif0 [ 627.088803][T17389] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 627.131953][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 627.156214][T17389] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 627.216445][T17387] device syzkaller0 entered promiscuous mode [ 627.257726][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 627.298465][T17389] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 627.335957][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 627.351854][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 627.379934][T17389] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 627.435581][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 627.472377][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 627.502153][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 627.533262][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 627.582761][T17389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3232'. [ 627.600521][T17389] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 627.717380][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 627.733356][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 627.767032][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.792307][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 628.037542][T17203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.084958][T17203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 628.105360][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 628.122298][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 628.167304][T17417] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3238'. [ 628.213020][T17417] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 628.586435][ T4400] device hsr_slave_0 left promiscuous mode [ 628.602093][ T4400] device hsr_slave_1 left promiscuous mode [ 628.622157][ T4400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.642251][ T4400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.670356][ T4400] batman_adv: batadv0: Removing interface: virt_wifi0 [ 628.701933][ T4400] device veth1_vlan left promiscuous mode [ 628.802317][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 629.094659][ T4400] team0 (unregistering): Port device geneve1 removed [ 629.815984][ T4400] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 629.867538][ T4400] team0 (unregistering): Port device team_slave_1 removed [ 629.918252][ T4400] team0 (unregistering): Port device team_slave_0 removed [ 629.984664][ T4400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.029599][ T4400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.208996][ T4400] team0 (unregistering): Port device batadv0 removed [ 630.257441][ T4400] bond0 (unregistering): (slave team0): Releasing backup interface [ 630.289998][ T4400] bond0 (unregistering): Released all slaves [ 630.387928][T17434] device syzkaller0 entered promiscuous mode [ 630.497358][T17449] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3244'. [ 630.506855][T17454] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 630.553725][T17454] team0: Device wg1 is of different type [ 630.594924][T17458] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3247'. [ 630.609574][T17458] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.3247'. [ 630.619876][T17458] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3247'. [ 630.649386][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.677372][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 630.718761][T17203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.795086][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.820826][T17463] netlink: 'syz.2.3248': attribute type 3 has an invalid length. [ 630.822199][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.839563][T17463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3248'. [ 630.905497][T17475] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3250'. [ 630.963385][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.996730][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 631.017515][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 631.042942][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 631.093882][T17203] device veth0_vlan entered promiscuous mode [ 631.136638][T17486] netlink: 'syz.4.3254': attribute type 2 has an invalid length. [ 631.140997][T17203] device veth1_vlan entered promiscuous mode [ 631.240912][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 631.341307][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.397462][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.483186][T17486] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3254'. [ 631.493240][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.503665][T17487] netlink: 'syz.4.3254': attribute type 2 has an invalid length. [ 631.510618][T17203] device veth0_macvtap entered promiscuous mode [ 631.622939][T17203] device veth1_macvtap entered promiscuous mode [ 632.010135][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.029620][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.051780][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.076469][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.101447][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.121585][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.139760][T17203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.160724][T17505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3259'. [ 632.181647][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.221912][ T7864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.236289][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.247187][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.259649][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.276492][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.311402][T17203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.331743][T17203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.353018][T17203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.375733][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.413810][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.438388][T17203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.450812][T17203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.466857][T17203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.476084][T17203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.507365][T17515] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 632.527221][T17515] syzkaller1: linktype set to 825 [ 632.535981][T17516] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 632.701081][T13357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.721129][T13357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.749288][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.768406][T17533] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3266'. [ 632.847636][T13357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.864884][T13357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.896946][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.924180][T17540] netlink: 'syz.4.3268': attribute type 39 has an invalid length. [ 633.182453][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.189918][T17545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.208092][T17545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.216150][T17545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.271275][T17547] device syzkaller0 left promiscuous mode [ 633.275501][T17553] netlink: 'syz.3.3272': attribute type 2 has an invalid length. [ 633.450662][T17556] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3272'. [ 633.624616][T17556] netlink: 'syz.3.3272': attribute type 2 has an invalid length. [ 633.849412][T17562] netlink: 'syz.0.3277': attribute type 27 has an invalid length. [ 633.951576][T17562] netlink: 'syz.0.3277': attribute type 4 has an invalid length. [ 634.368110][T17574] device syzkaller0 entered promiscuous mode [ 634.515919][T16236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 634.541663][T16236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 634.549365][T16236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 634.565087][T16236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 634.591757][T16236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 634.601574][T16236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 634.770816][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.798448][T17588] rxe_eth0 speed is unknown, defaulting to 1000 [ 636.644483][T16236] Bluetooth: hci0: command 0x0409 tx timeout [ 636.947056][T17594] netlink: 'syz.2.3285': attribute type 39 has an invalid length. [ 637.016331][T17624] netlink: 'syz.4.3294': attribute type 21 has an invalid length. [ 637.069882][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.172680][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.256636][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.290098][T17630] netlink: 'syz.3.3305': attribute type 39 has an invalid length. [ 637.554223][T17588] chnl_net:caif_netlink_parms(): no params data found [ 637.837933][T17645] netlink: 'syz.4.3300': attribute type 2 has an invalid length. [ 637.859700][T17645] netlink: 'syz.4.3300': attribute type 8 has an invalid length. [ 637.891312][T17645] __nla_validate_parse: 3 callbacks suppressed [ 637.891344][T17645] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3300'. [ 638.460779][ T48] device .*! left promiscuous mode [ 638.542521][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.549710][T17588] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.574573][T17588] device bridge_slave_0 entered promiscuous mode [ 638.607065][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.635295][T17588] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.687646][T17588] device bridge_slave_1 entered promiscuous mode [ 638.721514][T16236] Bluetooth: hci0: command 0x041b tx timeout [ 638.738426][T17666] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3304'. [ 639.508714][T17673] netlink: 'syz.0.3307': attribute type 3 has an invalid length. [ 639.527756][T17673] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3307'. [ 640.112199][T17666] bond0: (slave dummy0): Releasing backup interface [ 640.353136][T17588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.403437][T17702] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.3313'. [ 640.562655][T17706] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3312'. [ 640.583622][T17705] netlink: 'syz.0.3312': attribute type 7 has an invalid length. [ 640.608266][T17588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.731233][T17704] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3314'. [ 640.762039][T17704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 640.795819][T17704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 640.802020][T16236] Bluetooth: hci0: command 0x040f tx timeout [ 640.867508][T17706] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3312'. [ 640.901342][T17705] netlink: 'syz.0.3312': attribute type 7 has an invalid length. [ 640.918485][T17715] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3315'. [ 640.927957][T17717] netlink: 'syz.4.3315': attribute type 10 has an invalid length. [ 640.936678][T17717] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3315'. [ 641.011891][T17706] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3312'. [ 641.030499][T17588] team0: Port device team_slave_0 added [ 641.042360][T17705] netlink: 'syz.0.3312': attribute type 7 has an invalid length. [ 641.054939][T17721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.062434][T17721] IPv6: NLM_F_CREATE should be set when creating new route [ 641.069866][T17721] IPv6: NLM_F_CREATE should be set when creating new route [ 641.077408][T17721] IPv6: NLM_F_CREATE should be set when creating new route [ 641.142899][T17588] team0: Port device team_slave_1 added [ 641.237378][T17588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.256227][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.291257][T17588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.309940][T17588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.328658][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.355964][T17588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.488225][ T48] device gretap0 left promiscuous mode [ 641.501390][ T48] Ÿë: port 1(gretap0) entered disabled state [ 641.568631][T17588] device hsr_slave_0 entered promiscuous mode [ 641.586399][T17588] device hsr_slave_1 entered promiscuous mode [ 641.619532][T17588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.638295][T17588] Cannot create hsr debugfs directory [ 642.052035][T17756] tipc: Started in network mode [ 642.056948][T17756] tipc: Node identity 9215a268, cluster identity 4711 [ 642.205712][T17756] tipc: Node number set to 2450891368 [ 642.335886][T17772] validate_nla: 2 callbacks suppressed [ 642.335903][T17772] netlink: 'syz.3.3326': attribute type 10 has an invalid length. [ 642.494670][T17772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 642.888059][T16236] Bluetooth: hci0: command 0x0419 tx timeout [ 643.129834][T17787] netlink: 'syz.0.3328': attribute type 21 has an invalid length. [ 643.151845][T17787] __nla_validate_parse: 2 callbacks suppressed [ 643.151864][T17787] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3328'. [ 643.182503][T17787] netlink: 'syz.0.3328': attribute type 4 has an invalid length. [ 643.207973][T17787] netlink: 'syz.0.3328': attribute type 5 has an invalid length. [ 643.242741][T17787] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3328'. [ 643.656363][T17805] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3333'. [ 643.686882][T17802] device bridge_slave_1 left promiscuous mode [ 643.711882][T17803] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3333'. [ 643.727226][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.783372][T17802] device bridge_slave_0 left promiscuous mode [ 643.792279][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.831927][T17803] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 643.887588][T17805] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 644.302241][ T48] bridge0: port 2(team0) entered disabled state [ 644.327992][ T48] device bridge_slave_0 left promiscuous mode [ 644.371786][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.454205][ T48] device veth1_macvtap left promiscuous mode [ 644.460336][ T48] device veth0_macvtap left promiscuous mode [ 644.467906][ T48] device veth1_vlan left promiscuous mode [ 644.765964][T17829] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 649.151089][ T48] device geneve1 left promiscuous mode [ 649.158335][ T48] team0 (unregistering): Port device geneve1 removed [ 649.243002][ T48] device macvlan1 left promiscuous mode [ 649.249187][ T48] team0 (unregistering): Port device macvlan1 removed [ 649.465267][ T48] device team_slave_1 left promiscuous mode [ 649.472830][ T48] team0 (unregistering): Port device team_slave_1 removed [ 649.507113][ T48] device team_slave_0 left promiscuous mode [ 649.514726][ T48] team0 (unregistering): Port device team_slave_0 removed [ 649.764911][T17815] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3335'. [ 649.777849][T17829] netlink: 'syz.0.3339': attribute type 29 has an invalid length. [ 649.811477][T17840] netlink: 'syz.4.3342': attribute type 21 has an invalid length. [ 649.819311][T17840] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3342'. [ 649.834315][T17840] netlink: 'syz.4.3342': attribute type 4 has an invalid length. [ 649.843458][T17840] netlink: 'syz.4.3342': attribute type 5 has an invalid length. [ 649.851189][T17840] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3342'. [ 649.918042][T17588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 649.966980][T17588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 650.001185][T17588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 650.047810][T17588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 650.098275][T17855] netlink: 131088 bytes leftover after parsing attributes in process `syz.2.3345'. [ 650.139479][T17859] netlink: 'syz.0.3348': attribute type 2 has an invalid length. [ 650.209888][T17859] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 650.250285][T17864] netlink: 'syz.3.3346': attribute type 21 has an invalid length. [ 650.291500][T17864] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3346'. [ 650.309918][T17864] netlink: 'syz.3.3346': attribute type 4 has an invalid length. [ 650.355584][T17864] netlink: 'syz.3.3346': attribute type 5 has an invalid length. [ 650.395287][T17864] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3346'. [ 650.471080][T17855] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 650.621561][T17588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.686740][T17588] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.715068][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 650.748813][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 650.788858][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 650.810690][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 650.844490][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.851646][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.133358][T17887] device sit0 entered promiscuous mode [ 651.307966][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 651.342239][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 651.381758][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.431595][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.438761][ T4400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.471737][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.495833][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.542773][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 651.576355][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 651.611175][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 651.626265][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 651.675837][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 651.711494][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 651.742523][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 651.784298][T17924] netlink: 'syz.3.3357': attribute type 21 has an invalid length. [ 651.831592][T17924] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3357'. [ 651.931139][T17924] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3357'. [ 651.958470][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 651.985261][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.012698][T17588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.881840][T17948] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3360'. [ 653.006358][T17948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.066888][T17948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.168806][T17948] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 653.212730][T17948] bond0 (unregistering): Released all slaves [ 653.249470][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 653.264175][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 653.316244][T17588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.393344][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 653.428034][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 653.460643][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 653.472916][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 653.495674][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 653.515372][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 653.535996][T17588] device veth0_vlan entered promiscuous mode [ 653.565692][T17588] device veth1_vlan entered promiscuous mode [ 653.630444][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 653.646090][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 653.658429][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 653.698605][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 653.720199][T17588] device veth0_macvtap entered promiscuous mode [ 653.735138][T17980] device wlan1 entered promiscuous mode [ 653.804867][T17588] device veth1_macvtap entered promiscuous mode [ 653.894943][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 653.935413][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.976737][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.018023][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.051269][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.090650][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.113109][T17588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.508896][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 654.520215][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 654.532913][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 654.558073][T13355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 654.611952][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.671823][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.708276][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.743153][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.754887][T17588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 654.767694][T17588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.785593][T17588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.812799][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 654.839399][T13357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 654.864913][T17588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.906705][T17588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.950153][T17588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.978972][T17588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.136457][T18011] validate_nla: 7 callbacks suppressed [ 655.136473][T18011] netlink: 'syz.2.3378': attribute type 15 has an invalid length. [ 655.160340][T18011] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3378'. [ 655.187191][T13357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.212506][T13357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.281219][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 655.311746][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.340909][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.356496][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 656.284824][T18062] netlink: 'syz.0.3392': attribute type 10 has an invalid length. [ 657.103375][T18062] team0: Port device geneve1 added [ 658.157420][T18117] netlink: 'syz.2.3406': attribute type 8 has an invalid length. [ 658.191460][T18117] netlink: 'syz.2.3406': attribute type 7 has an invalid length. [ 658.206997][T18116] tun0: tun_chr_ioctl cmd 2148553947 [ 658.221901][T18117] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.3406'. [ 658.427497][T18123] netlink: 'syz.1.3410': attribute type 10 has an invalid length. [ 658.494351][T18123] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 658.919824][T18161] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.3416'. [ 659.059255][T18161] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 659.422207][T18174] netlink: 'syz.1.3419': attribute type 2 has an invalid length. [ 659.486168][T18174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3419'. [ 659.659118][T18189] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3425'. [ 660.016997][T18200] FAULT_INJECTION: forcing a failure. [ 660.016997][T18200] name failslab, interval 1, probability 0, space 0, times 0 [ 660.086097][T18200] CPU: 0 PID: 18200 Comm: syz.2.3429 Not tainted syzkaller #0 [ 660.093610][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 660.103678][T18200] Call Trace: [ 660.106969][T18200] [ 660.109906][T18200] dump_stack_lvl+0x188/0x24e [ 660.114604][T18200] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.120781][T18200] ? show_regs_print_info+0x12/0x12 [ 660.126004][T18200] ? load_image+0x410/0x410 [ 660.130545][T18200] should_fail_ex+0x390/0x4c0 [ 660.135249][T18200] should_failslab+0x5/0x20 [ 660.139850][T18200] slab_pre_alloc_hook+0x59/0x300 [ 660.144907][T18200] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 660.150907][T18200] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 660.156650][T18200] __kmem_cache_alloc_node+0x4f/0x270 [ 660.162043][T18200] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 660.167784][T18200] __kmalloc+0xa3/0x240 [ 660.171962][T18200] tomoyo_realpath_from_path+0xe2/0x5c0 [ 660.177527][T18200] ? tomoyo_domain+0xd2/0x120 [ 660.182225][T18200] ? tomoyo_path_number_perm+0x205/0x650 [ 660.187872][T18200] tomoyo_path_number_perm+0x22f/0x650 [ 660.193351][T18200] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 660.198862][T18200] ? __fget_files+0x28/0x460 [ 660.203484][T18200] security_file_ioctl+0x6c/0xa0 [ 660.208444][T18200] __se_sys_ioctl+0x48/0x170 [ 660.213126][T18200] do_syscall_64+0x4c/0xa0 [ 660.217554][T18200] ? clear_bhb_loop+0x60/0xb0 [ 660.222240][T18200] ? clear_bhb_loop+0x60/0xb0 [ 660.226933][T18200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 660.232846][T18200] RIP: 0033:0x7fd660d9f559 [ 660.237270][T18200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.256885][T18200] RSP: 002b:00007fd661d45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.265315][T18200] RAX: ffffffffffffffda RBX: 00007fd661025fa0 RCX: 00007fd660d9f559 [ 660.273296][T18200] RDX: 00002000000001c0 RSI: 000000004008240b RDI: 0000000000000006 [ 660.281279][T18200] RBP: 00007fd661d45090 R08: 0000000000000000 R09: 0000000000000000 [ 660.289261][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.297240][T18200] R13: 00007fd661026038 R14: 00007fd661025fa0 R15: 00007ffc88f0fe88 [ 660.305237][T18200] [ 660.352582][T18200] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.575037][T18216] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.106466][T18216] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.518976][T18216] rxe_eth0 speed is unknown, defaulting to 1000 [ 661.859447][T18216] rxe_eth0 speed is unknown, defaulting to 1000 [ 662.364588][T18239] device syzkaller0 entered promiscuous mode [ 662.789741][T18261] FAULT_INJECTION: forcing a failure. [ 662.789741][T18261] name failslab, interval 1, probability 0, space 0, times 0 [ 662.830807][T18261] CPU: 1 PID: 18261 Comm: syz.3.3444 Not tainted syzkaller #0 [ 662.838297][T18261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 662.848359][T18261] Call Trace: [ 662.851644][T18261] [ 662.854578][T18261] dump_stack_lvl+0x188/0x24e [ 662.859269][T18261] ? show_regs_print_info+0x12/0x12 [ 662.864478][T18261] ? load_image+0x410/0x410 [ 662.869001][T18261] ? __might_sleep+0xd0/0xd0 [ 662.873672][T18261] ? __lock_acquire+0x7ea0/0x7ea0 [ 662.878718][T18261] should_fail_ex+0x390/0x4c0 [ 662.883415][T18261] should_failslab+0x5/0x20 [ 662.887926][T18261] slab_pre_alloc_hook+0x59/0x300 [ 662.892961][T18261] ? tomoyo_encode+0x28a/0x550 [ 662.897737][T18261] __kmem_cache_alloc_node+0x4f/0x270 [ 662.903125][T18261] ? tomoyo_encode+0x28a/0x550 [ 662.907897][T18261] __kmalloc+0xa3/0x240 [ 662.912061][T18261] tomoyo_encode+0x28a/0x550 [ 662.916666][T18261] tomoyo_realpath_from_path+0x578/0x5c0 [ 662.922312][T18261] ? tomoyo_domain+0xd2/0x120 [ 662.926997][T18261] ? tomoyo_path_number_perm+0x205/0x650 [ 662.932626][T18261] tomoyo_path_number_perm+0x22f/0x650 [ 662.938075][T18261] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 662.943525][T18261] ? common_file_perm+0x171/0x1c0 [ 662.948567][T18261] ? __fget_files+0x28/0x460 [ 662.953159][T18261] security_file_ioctl+0x6c/0xa0 [ 662.958089][T18261] __se_sys_ioctl+0x48/0x170 [ 662.962674][T18261] do_syscall_64+0x4c/0xa0 [ 662.967077][T18261] ? clear_bhb_loop+0x60/0xb0 [ 662.971741][T18261] ? clear_bhb_loop+0x60/0xb0 [ 662.976407][T18261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.982293][T18261] RIP: 0033:0x7fd04439f559 [ 662.986695][T18261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.006291][T18261] RSP: 002b:00007fd0451c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.014699][T18261] RAX: ffffffffffffffda RBX: 00007fd044625fa0 RCX: 00007fd04439f559 [ 663.022660][T18261] RDX: 00002000000001c0 RSI: 000000004008240b RDI: 0000000000000006 [ 663.030640][T18261] RBP: 00007fd0451c7090 R08: 0000000000000000 R09: 0000000000000000 [ 663.038599][T18261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.046557][T18261] R13: 00007fd044626038 R14: 00007fd044625fa0 R15: 00007ffdc16da5e8 [ 663.054529][T18261] [ 663.121648][T18261] ERROR: Out of memory at tomoyo_realpath_from_path. [ 666.431888][T18279] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3448'. [ 666.749227][T18308] IPv6: NLM_F_CREATE should be specified when creating new route [ 666.920367][T18305] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3456'. [ 666.969297][T18311] FAULT_INJECTION: forcing a failure. [ 666.969297][T18311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.001572][T18311] CPU: 1 PID: 18311 Comm: syz.0.3458 Not tainted syzkaller #0 [ 667.009068][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 667.019136][T18311] Call Trace: [ 667.022426][T18311] [ 667.025368][T18311] dump_stack_lvl+0x188/0x24e [ 667.030067][T18311] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 667.036239][T18311] ? show_regs_print_info+0x12/0x12 [ 667.041449][T18311] ? load_image+0x410/0x410 [ 667.045988][T18311] should_fail_ex+0x390/0x4c0 [ 667.050692][T18311] _copy_from_user+0x2c/0x170 [ 667.055391][T18311] perf_copy_attr+0x177/0x840 [ 667.060203][T18311] perf_ioctl+0x1f4/0x23e0 [ 667.064641][T18311] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 667.070385][T18311] ? perf_poll+0x1b0/0x1b0 [ 667.074816][T18311] ? perf_trace_preemptirq_template+0x268/0x320 [ 667.081087][T18311] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 667.087086][T18311] ? lock_chain_count+0x20/0x20 [ 667.091952][T18311] ? lock_chain_count+0x20/0x20 [ 667.096843][T18311] ? __se_sys_ioctl+0xee/0x170 [ 667.101626][T18311] ? perf_poll+0x1b0/0x1b0 [ 667.106073][T18311] __se_sys_ioctl+0xfa/0x170 [ 667.110687][T18311] do_syscall_64+0x4c/0xa0 [ 667.115113][T18311] ? clear_bhb_loop+0x60/0xb0 [ 667.119800][T18311] ? clear_bhb_loop+0x60/0xb0 [ 667.124492][T18311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.130406][T18311] RIP: 0033:0x7ff58eb9f559 [ 667.134835][T18311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.154456][T18311] RSP: 002b:00007ff58fa65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.162887][T18311] RAX: ffffffffffffffda RBX: 00007ff58ee25fa0 RCX: 00007ff58eb9f559 [ 667.170870][T18311] RDX: 00002000000001c0 RSI: 000000004008240b RDI: 0000000000000006 [ 667.178857][T18311] RBP: 00007ff58fa65090 R08: 0000000000000000 R09: 0000000000000000 [ 667.186838][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.194818][T18311] R13: 00007ff58ee26038 R14: 00007ff58ee25fa0 R15: 00007ffd18163088 [ 667.202819][T18311] [ 667.585294][T18321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.621161][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.702728][T18321] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.764119][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.801112][T18321] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.837111][T18321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.886961][T18321] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3461'. [ 667.918901][T18327] device wlan1 entered promiscuous mode [ 667.950985][T18323] rxe_eth0 speed is unknown, defaulting to 1000 [ 669.125838][T18352] netlink: 'syz.3.3470': attribute type 1 has an invalid length. [ 669.206898][T18352] netlink: 'syz.3.3470': attribute type 3 has an invalid length. [ 669.290829][T18352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3470'. [ 669.557872][T18363] : port 1(ip6gretap0) entered blocking state [ 669.571887][T18363] : port 1(ip6gretap0) entered disabled state [ 669.588691][T18363] device ip6gretap0 entered promiscuous mode [ 669.609685][T18362] FAULT_INJECTION: forcing a failure. [ 669.609685][T18362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 669.645883][T18362] CPU: 0 PID: 18362 Comm: syz.3.3473 Not tainted syzkaller #0 [ 669.652221][T18358] device ip6gretap0 left promiscuous mode [ 669.653355][T18362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 669.653389][T18362] Call Trace: [ 669.653397][T18362] [ 669.653406][T18362] dump_stack_lvl+0x188/0x24e [ 669.680006][T18362] ? show_regs_print_info+0x12/0x12 [ 669.685201][T18362] ? load_image+0x410/0x410 [ 669.689700][T18362] ? __lock_acquire+0x7ea0/0x7ea0 [ 669.694718][T18362] ? snprintf+0xed/0x140 [ 669.698957][T18362] should_fail_ex+0x390/0x4c0 [ 669.703633][T18362] _copy_to_user+0x2c/0x130 [ 669.708128][T18362] simple_read_from_buffer+0xe3/0x150 [ 669.713493][T18362] proc_fail_nth_read+0x1a6/0x220 [ 669.718509][T18362] ? proc_fault_inject_write+0x310/0x310 [ 669.724133][T18362] ? vfs_read+0x2c3/0x960 [ 669.728460][T18362] ? proc_fault_inject_write+0x310/0x310 [ 669.734082][T18362] vfs_read+0x2db/0x960 [ 669.738238][T18362] ? kernel_read+0x1e0/0x1e0 [ 669.742825][T18362] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 669.748977][T18362] ? __fdget_pos+0x2b5/0x360 [ 669.753562][T18362] ? ksys_read+0x70/0x260 [ 669.757889][T18362] ksys_read+0x14d/0x260 [ 669.762129][T18362] ? vfs_write+0x9a0/0x9a0 [ 669.766544][T18362] ? syscall_enter_from_user_mode+0x2a/0x80 [ 669.772506][T18362] do_syscall_64+0x4c/0xa0 [ 669.776909][T18362] ? clear_bhb_loop+0x60/0xb0 [ 669.781578][T18362] ? clear_bhb_loop+0x60/0xb0 [ 669.786244][T18362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.792136][T18362] RIP: 0033:0x7fd04435fd8e [ 669.796542][T18362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 669.816144][T18362] RSP: 002b:00007fd0451c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 669.824548][T18362] RAX: ffffffffffffffda RBX: 00007fd0451c76c0 RCX: 00007fd04435fd8e [ 669.832510][T18362] RDX: 000000000000000f RSI: 00007fd0451c70a0 RDI: 0000000000000007 [ 669.840471][T18362] RBP: 00007fd0451c7090 R08: 0000000000000000 R09: 0000000000000000 [ 669.848429][T18362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.856390][T18362] R13: 00007fd044626038 R14: 00007fd044625fa0 R15: 00007ffdc16da5e8 [ 669.864369][T18362] [ 669.886720][T18358] : port 1(ip6gretap0) entered disabled state [ 670.033023][T18365] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 670.339458][T18381] device wlan1 entered promiscuous mode [ 670.899419][T18394] netlink: 'syz.3.3481': attribute type 15 has an invalid length. [ 673.189666][T18430] netlink: 'syz.4.3490': attribute type 1 has an invalid length. [ 673.203313][T18430] __nla_validate_parse: 5 callbacks suppressed [ 673.203364][T18430] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3490'. [ 673.936963][T18464] netlink: 'syz.0.3503': attribute type 15 has an invalid length. [ 673.948224][T18464] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3503'. [ 674.448894][T18482] rxe_eth0 speed is unknown, defaulting to 1000 [ 674.673885][T18497] device lo entered promiscuous mode [ 676.185559][T18550] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 676.192033][T18550] syzkaller0: linktype set to 0 [ 676.308763][T18559] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 676.338290][T18550] netlink: 'syz.1.3525': attribute type 10 has an invalid length. [ 676.354530][T18561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3528'. [ 676.365489][T18550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3525'. [ 676.397209][T18550] batman_adv: batadv0: Adding interface: virt_wifi0 [ 676.407785][T18550] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.442403][T18550] batman_adv: batadv0: Interface activated: virt_wifi0 [ 676.534617][T18561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3528'. [ 676.553519][T18568] netlink: 'syz.2.3530': attribute type 10 has an invalid length. [ 676.594632][T18568] team0: Port device virt_wifi0 added [ 676.602482][T18564] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3528'. [ 677.003365][T18593] netlink: 'syz.2.3538': attribute type 12 has an invalid length. [ 677.031270][T18594] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3538'. [ 677.063822][T18593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3538'. [ 677.174650][T18605] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3539'. [ 677.174684][T18602] openvswitch: netlink: Message has 6 unknown bytes. [ 677.209271][T18595] can: request_module (can-proto-0) failed. [ 677.226636][T18605] openvswitch: netlink: Message has 6 unknown bytes. [ 678.883321][T18158] wlan1: Trigger new scan to find an IBSS to join [ 680.192537][T18602] tap0: tun_chr_ioctl cmd 1074025680 [ 680.318822][T18620] delete_channel: no stack [ 680.333680][T18620] delete_channel: no stack [ 680.582274][T18620] rxe_eth0 speed is unknown, defaulting to 1000 [ 681.739551][T18666] rxe_eth0 speed is unknown, defaulting to 1000 [ 682.325948][T18676] device syzkaller0 entered promiscuous mode [ 682.892818][ T8122] wlan1: Trigger new scan to find an IBSS to join [ 683.885054][T18160] wlan1: Creating new IBSS network, BSSID be:35:fc:ee:40:a9 [ 685.769358][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.778722][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.588035][T18737] netlink: 'syz.1.3571': attribute type 21 has an invalid length. [ 689.603561][T18737] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3571'. [ 689.616594][T18737] netlink: 'syz.1.3571': attribute type 4 has an invalid length. [ 689.624408][T18737] netlink: 'syz.1.3571': attribute type 5 has an invalid length. [ 689.633190][T18737] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3571'. [ 689.656307][T18763] rxe_eth0 speed is unknown, defaulting to 1000 [ 691.790574][T18806] netlink: 'syz.3.3589': attribute type 21 has an invalid length. [ 691.872490][T18806] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3589'. [ 691.939222][T18809] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 691.947254][T18806] netlink: 'syz.3.3589': attribute type 4 has an invalid length. [ 691.988488][T18809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3590'. [ 692.006993][T18806] netlink: 'syz.3.3589': attribute type 5 has an invalid length. [ 692.026239][T18809] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 692.055932][T18809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3590'. [ 692.079301][T18806] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3589'. [ 692.103148][T18809] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 692.118569][T18809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3590'. [ 692.169184][T18809] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 692.214819][T18809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3590'. [ 692.260937][T18809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3590'. [ 692.338202][T18809] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3590'. [ 695.585467][T18850] validate_nla: 62 callbacks suppressed [ 695.585483][T18850] netlink: 'syz.1.3601': attribute type 21 has an invalid length. [ 695.601537][T18850] __nla_validate_parse: 61 callbacks suppressed [ 695.601614][T18850] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3601'. [ 695.722304][T18850] netlink: 'syz.1.3601': attribute type 4 has an invalid length. [ 695.738678][T18850] netlink: 'syz.1.3601': attribute type 5 has an invalid length. [ 695.746949][T18850] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3601'. [ 698.436288][T18852] netlink: 'syz.0.3603': attribute type 21 has an invalid length. [ 698.451540][T18852] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3603'. [ 698.486610][T18852] netlink: 'syz.0.3603': attribute type 4 has an invalid length. [ 698.504904][T18852] netlink: 'syz.0.3603': attribute type 5 has an invalid length. [ 698.522060][T18852] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3603'. [ 698.646568][T18865] netlink: 'syz.2.3606': attribute type 10 has an invalid length. [ 699.044854][T18876] netlink: 'syz.2.3611': attribute type 9 has an invalid length. [ 699.063252][T18876] netlink: 463 bytes leftover after parsing attributes in process `syz.2.3611'. [ 699.090796][T18876] netlink: 'syz.2.3611': attribute type 10 has an invalid length. [ 699.104048][T18876] netlink: 'syz.2.3611': attribute type 19 has an invalid length. [ 699.128459][T18876] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3611'. [ 699.313845][T18887] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3614'. [ 699.677950][T18904] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3617'. [ 699.729634][T18904] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3617'. [ 703.211633][T16236] Bluetooth: hci3: command 0x0406 tx timeout [ 703.497470][T18968] validate_nla: 3 callbacks suppressed [ 703.497485][T18968] netlink: 'syz.3.3636': attribute type 21 has an invalid length. [ 703.520327][T18968] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3636'. [ 703.554416][T18968] netlink: 'syz.3.3636': attribute type 4 has an invalid length. [ 703.572964][T18968] netlink: 'syz.3.3636': attribute type 5 has an invalid length. [ 703.580855][T18968] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3636'. [ 706.421001][T18991] netlink: 'syz.1.3642': attribute type 10 has an invalid length. [ 706.443549][T18991] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3642'. [ 706.472550][T18991] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.480000][T18991] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.552869][T18991] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.560003][T18991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.568649][T18991] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.575805][T18991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.638080][T18991] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 706.658250][T18967] rxe_eth0 speed is unknown, defaulting to 1000 [ 707.100519][T19009] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3647'. [ 708.050834][T19018] netlink: 'syz.0.3650': attribute type 10 has an invalid length. [ 708.116356][T19018] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3650'. [ 708.523806][T19018] device hsr0 entered promiscuous mode [ 708.530558][T19018] bridge0: port 3(hsr0) entered blocking state [ 708.549237][T19018] bridge0: port 3(hsr0) entered disabled state [ 708.616036][T19018] bridge0: port 3(hsr0) entered blocking state [ 708.622764][T19018] bridge0: port 3(hsr0) entered forwarding state [ 709.241009][T19026] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3652'. [ 709.732329][T19026] netlink: 'syz.3.3652': attribute type 10 has an invalid length. [ 709.740708][ T4290] Bluetooth: hci1: Malformed LE Event: 0x02 [ 709.872258][T19026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3652'. [ 709.955498][T19035] netlink: 'syz.0.3653': attribute type 21 has an invalid length. [ 709.991526][T19035] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3653'. [ 710.029889][T19035] netlink: 'syz.0.3653': attribute type 4 has an invalid length. [ 710.066134][T19035] netlink: 'syz.0.3653': attribute type 5 has an invalid length. [ 710.141952][T19035] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3653'. [ 710.313410][T19044] netlink: 'syz.2.3656': attribute type 21 has an invalid length. [ 710.332660][T19044] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3656'. [ 710.548537][T19058] netlink: 'syz.1.3660': attribute type 10 has an invalid length. [ 710.556460][T19058] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3660'. [ 710.570996][T19058] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 710.641760][T19058] batman_adv: batadv0: Removing interface: virt_wifi0 [ 710.922009][T19071] netlink: 'syz.1.3665': attribute type 10 has an invalid length. [ 710.955920][T19071] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 711.208948][T19072] rxe_eth0 speed is unknown, defaulting to 1000 [ 711.448623][T19089] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3669'. [ 711.513521][T19089] netlink: 'syz.4.3669': attribute type 10 has an invalid length. [ 711.537407][T19089] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3669'. [ 712.717331][T19125] netlink: 'syz.1.3681': attribute type 10 has an invalid length. [ 712.775420][T19125] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.814179][T19125] bond0: (slave team0): Enslaving as an active interface with an up link [ 713.441939][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 713.477447][T19143] netlink: 'syz.3.3685': attribute type 10 has an invalid length. [ 713.534792][T19143] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3685'. [ 713.582626][T19143] device hsr0 entered promiscuous mode [ 713.623968][T19143] bridge0: port 3(hsr0) entered blocking state [ 713.656126][T19143] bridge0: port 3(hsr0) entered disabled state [ 713.728185][T19143] bridge0: port 3(hsr0) entered blocking state [ 713.734960][T19143] bridge0: port 3(hsr0) entered forwarding state [ 713.788636][T19151] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.3689'. [ 713.895002][T13356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 714.218357][T19162] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 714.256785][T19162] CPU: 1 PID: 19162 Comm: syz.4.3691 Not tainted syzkaller #0 [ 714.264285][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 714.274356][T19162] Call Trace: [ 714.277644][T19162] [ 714.280583][T19162] dump_stack_lvl+0x188/0x24e [ 714.285284][T19162] ? show_regs_print_info+0x12/0x12 [ 714.290498][T19162] ? load_image+0x410/0x410 [ 714.295042][T19162] sysfs_warn_dup+0x8a/0xa0 [ 714.299565][T19162] sysfs_do_create_link_sd+0xc0/0x110 [ 714.304958][T19162] device_add+0x83b/0x1050 [ 714.309412][T19162] wiphy_register+0x1d8b/0x2aa0 [ 714.314313][T19162] ? cfg80211_event_work+0x40/0x40 [ 714.319444][T19162] ? minstrel_ht_alloc+0x894/0xa20 [ 714.324580][T19162] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 714.330661][T19162] ieee80211_register_hw+0x2e33/0x3b00 [ 714.336148][T19162] ? ieee80211_register_hw+0xf01/0x3b00 [ 714.341708][T19162] ? ieee80211_register_hw+0xf01/0x3b00 [ 714.347282][T19162] ? ieee80211_tasklet_handler+0x20/0x20 [ 714.352934][T19162] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 714.358851][T19162] ? __debug_object_init+0xed/0x440 [ 714.364071][T19162] ? memset+0x1e/0x40 [ 714.368071][T19162] ? __hrtimer_init+0x189/0x270 [ 714.372938][T19162] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 714.378677][T19162] ? memcpy+0x3c/0x60 [ 714.382677][T19162] hwsim_new_radio_nl+0xab7/0xc90 [ 714.387731][T19162] genl_family_rcv_msg_doit+0x22f/0x350 [ 714.393290][T19162] ? end_current_label_crit_section+0x170/0x170 [ 714.399556][T19162] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 714.405471][T19162] ? bpf_lsm_capable+0x5/0x10 [ 714.410161][T19162] ? security_capable+0x85/0xb0 [ 714.415040][T19162] genl_rcv_msg+0x601/0x790 [ 714.419566][T19162] ? genl_bind+0x360/0x360 [ 714.423990][T19162] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 714.430354][T19162] netlink_rcv_skb+0x1ef/0x440 [ 714.435139][T19162] ? genl_bind+0x360/0x360 [ 714.439570][T19162] ? netlink_ack+0x1160/0x1160 [ 714.444365][T19162] ? down_read+0x1a8/0x2d0 [ 714.448800][T19162] genl_rcv+0x24/0x40 [ 714.452792][T19162] netlink_unicast+0x7ad/0x920 [ 714.457588][T19162] netlink_sendmsg+0x8ad/0xbd0 [ 714.462380][T19162] ? netlink_getsockopt+0x550/0x550 [ 714.467599][T19162] ? apparmor_socket_sendmsg+0x8a/0x330 [ 714.473167][T19162] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 714.478465][T19162] ? security_socket_sendmsg+0x7c/0xa0 [ 714.483940][T19162] ? netlink_getsockopt+0x550/0x550 [ 714.489165][T19162] ____sys_sendmsg+0x5ed/0x9a0 [ 714.493961][T19162] ? __sys_sendmsg_sock+0x30/0x30 [ 714.499011][T19162] ? __import_iovec+0x306/0x510 [ 714.503890][T19162] ? import_iovec+0x6f/0xa0 [ 714.508419][T19162] ___sys_sendmsg+0x2a2/0x360 [ 714.513127][T19162] ? __sys_sendmsg+0x2a0/0x2a0 [ 714.517971][T19162] __se_sys_sendmsg+0x1c3/0x2b0 [ 714.522851][T19162] ? __x64_sys_sendmsg+0x80/0x80 [ 714.527828][T19162] ? lockdep_hardirqs_on+0x94/0x140 [ 714.533045][T19162] do_syscall_64+0x4c/0xa0 [ 714.537468][T19162] ? clear_bhb_loop+0x60/0xb0 [ 714.542153][T19162] ? clear_bhb_loop+0x60/0xb0 [ 714.546842][T19162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.552750][T19162] RIP: 0033:0x7fa568f9f559 [ 714.557175][T19162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.576796][T19162] RSP: 002b:00007fa569e63028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.585228][T19162] RAX: ffffffffffffffda RBX: 00007fa569225fa0 RCX: 00007fa568f9f559 [ 714.593210][T19162] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 000000000000000a [ 714.601194][T19162] RBP: 00007fa569036b20 R08: 0000000000000000 R09: 0000000000000000 [ 714.609179][T19162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.617165][T19162] R13: 00007fa569226038 R14: 00007fa569225fa0 R15: 00007fffe23be8c8 [ 714.625169][T19162] [ 714.865984][T19171] __nla_validate_parse: 1 callbacks suppressed [ 714.866001][T19171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3693'. [ 715.186057][T19156] delete_channel: no stack [ 715.196482][T19177] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3695'. [ 715.538078][T19197] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3703'. [ 715.861853][T19213] netlink: 'syz.1.3707': attribute type 21 has an invalid length. [ 715.890166][T19213] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3707'. [ 716.006034][T19217] netlink: 'syz.2.3709': attribute type 10 has an invalid length. [ 716.020737][T19217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3709'. [ 716.279692][T19229] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3714'. [ 716.291059][T19230] netlink: 'syz.4.3713': attribute type 46 has an invalid length. [ 716.300547][T19230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3713'. [ 716.319353][T19232] netlink: 'syz.0.3715': attribute type 8 has an invalid length. [ 716.361501][T19232] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3715'. [ 716.483899][T19241] netlink: 'syz.3.3717': attribute type 11 has an invalid length. [ 716.551005][T19241] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3717'. [ 718.061814][T19266] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.3722'. [ 718.542521][T19270] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 720.398191][T19310] __nla_validate_parse: 1 callbacks suppressed [ 720.398206][T19310] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.3735'. [ 721.052944][T19324] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.3738'. [ 721.106034][T19328] netlink: 'syz.2.3740': attribute type 11 has an invalid length. [ 721.135585][T19328] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3740'. [ 721.800399][T19343] netlink: 'syz.3.3744': attribute type 25 has an invalid length. [ 721.860782][T19343] netlink: 'syz.3.3744': attribute type 3 has an invalid length. [ 721.901581][T19343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3744'. [ 721.907012][T19348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3744'. [ 721.928717][T19349] netlink: 'syz.4.3746': attribute type 2 has an invalid length. [ 721.946990][T19348] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3744'. [ 722.024354][T19354] netlink: 'syz.0.3750': attribute type 58 has an invalid length. [ 722.104479][T19354] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3750'. [ 722.116994][T19343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3744'. [ 722.327286][T19367] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3752'. [ 722.537528][T19371] FAULT_INJECTION: forcing a failure. [ 722.537528][T19371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.629075][T19371] CPU: 0 PID: 19371 Comm: syz.3.3753 Not tainted syzkaller #0 [ 722.636578][T19371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 722.646650][T19371] Call Trace: [ 722.649935][T19371] [ 722.652875][T19371] dump_stack_lvl+0x188/0x24e [ 722.657570][T19371] ? show_regs_print_info+0x12/0x12 [ 722.662789][T19371] ? load_image+0x410/0x410 [ 722.667312][T19371] ? __lock_acquire+0x7ea0/0x7ea0 [ 722.672363][T19371] should_fail_ex+0x390/0x4c0 [ 722.677057][T19371] _copy_from_user+0x2c/0x170 [ 722.681734][T19371] do_ipv6_setsockopt+0x312/0x3c30 [ 722.686850][T19371] ? sk_dst_reset+0xa0/0xa0 [ 722.691352][T19371] ? verify_lock_unused+0x140/0x140 [ 722.696569][T19371] ? mark_lock+0x94/0x320 [ 722.700906][T19371] ? __lock_acquire+0x1359/0x7ea0 [ 722.705943][T19371] ? perf_trace_lock+0xf8/0x390 [ 722.710789][T19371] ? aa_label_sk_perm+0x501/0x6b0 [ 722.715889][T19371] ? verify_lock_unused+0x140/0x140 [ 722.721087][T19371] ? aa_sk_perm+0x950/0x950 [ 722.725598][T19371] ? __might_sleep+0xd0/0xd0 [ 722.730187][T19371] ? __fget_files+0x28/0x460 [ 722.734782][T19371] ? aa_sk_perm+0x81f/0x950 [ 722.739287][T19371] ? aa_af_perm+0x340/0x340 [ 722.743785][T19371] ? __fget_files+0x3fc/0x460 [ 722.748460][T19371] ? aa_sock_opt_perm+0x74/0x100 [ 722.753395][T19371] ipv6_setsockopt+0x55/0x190 [ 722.758074][T19371] ? sock_common_recvmsg+0x190/0x190 [ 722.763359][T19371] __sys_setsockopt+0x2bf/0x3d0 [ 722.768209][T19371] __x64_sys_setsockopt+0xb1/0xc0 [ 722.773232][T19371] do_syscall_64+0x4c/0xa0 [ 722.777640][T19371] ? clear_bhb_loop+0x60/0xb0 [ 722.782307][T19371] ? clear_bhb_loop+0x60/0xb0 [ 722.786977][T19371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.792866][T19371] RIP: 0033:0x7fd04439f559 [ 722.797272][T19371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.816867][T19371] RSP: 002b:00007fd0451c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 722.825272][T19371] RAX: ffffffffffffffda RBX: 00007fd044625fa0 RCX: 00007fd04439f559 [ 722.833232][T19371] RDX: 0000000000000048 RSI: 0000000000000029 RDI: 0000000000000003 [ 722.841191][T19371] RBP: 00007fd0451c7090 R08: 0000000000000120 R09: 0000000000000000 [ 722.849153][T19371] R10: 0000200000004ac0 R11: 0000000000000246 R12: 0000000000000001 [ 722.857112][T19371] R13: 00007fd044626038 R14: 00007fd044625fa0 R15: 00007ffdc16da5e8 [ 722.865092][T19371] [ 723.137168][T19379] netlink: 'syz.1.3755': attribute type 21 has an invalid length. [ 723.233642][T19379] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3755'. [ 723.260356][T19379] netlink: 'syz.1.3755': attribute type 4 has an invalid length. [ 723.298947][T19379] netlink: 'syz.1.3755': attribute type 5 has an invalid length. [ 723.337133][T19377] netlink: 'syz.0.3756': attribute type 10 has an invalid length. [ 723.362756][T19377] bridge0: port 3(hsr0) entered disabled state [ 723.369142][T19377] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.376705][T19377] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.468401][T19377] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 723.525796][T19377] bridge0: port 3(hsr0) entered blocking state [ 723.532137][T19377] bridge0: port 3(hsr0) entered forwarding state [ 723.538740][T19377] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.545945][T19377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.553422][T19377] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.560531][T19377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.647495][T19377] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 723.740944][T19404] device wlan1 entered promiscuous mode [ 724.266949][T19423] FAULT_INJECTION: forcing a failure. [ 724.266949][T19423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.341284][T19423] CPU: 1 PID: 19423 Comm: syz.4.3770 Not tainted syzkaller #0 [ 724.348788][T19423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 724.358851][T19423] Call Trace: [ 724.362138][T19423] [ 724.365075][T19423] dump_stack_lvl+0x188/0x24e [ 724.369769][T19423] ? show_regs_print_info+0x12/0x12 [ 724.374979][T19423] ? load_image+0x410/0x410 [ 724.379504][T19423] ? __lock_acquire+0x7ea0/0x7ea0 [ 724.384541][T19423] ? snprintf+0xe5/0x140 [ 724.388780][T19423] should_fail_ex+0x390/0x4c0 [ 724.393456][T19423] _copy_to_user+0x2c/0x130 [ 724.397950][T19423] simple_read_from_buffer+0xe3/0x150 [ 724.403314][T19423] proc_fail_nth_read+0x1a6/0x220 [ 724.408336][T19423] ? proc_fault_inject_write+0x310/0x310 [ 724.413979][T19423] ? fsnotify_perm+0x248/0x550 [ 724.418737][T19423] ? proc_fault_inject_write+0x310/0x310 [ 724.424357][T19423] vfs_read+0x2db/0x960 [ 724.428513][T19423] ? kernel_read+0x1e0/0x1e0 [ 724.433098][T19423] ? __fget_files+0x28/0x460 [ 724.437682][T19423] ? __fget_files+0x3fc/0x460 [ 724.442358][T19423] ? __fdget_pos+0x2ae/0x360 [ 724.446946][T19423] ? ksys_read+0x70/0x260 [ 724.451273][T19423] ksys_read+0x14d/0x260 [ 724.455510][T19423] ? vfs_write+0x9a0/0x9a0 [ 724.459945][T19423] ? lockdep_hardirqs_on+0x94/0x140 [ 724.465140][T19423] do_syscall_64+0x4c/0xa0 [ 724.469542][T19423] ? clear_bhb_loop+0x60/0xb0 [ 724.474208][T19423] ? clear_bhb_loop+0x60/0xb0 [ 724.478873][T19423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.484764][T19423] RIP: 0033:0x7fa568f5fd8e [ 724.489169][T19423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 724.508775][T19423] RSP: 002b:00007fa569e62fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.517177][T19423] RAX: ffffffffffffffda RBX: 00007fa569e636c0 RCX: 00007fa568f5fd8e [ 724.525133][T19423] RDX: 000000000000000f RSI: 00007fa569e630a0 RDI: 0000000000000005 [ 724.533093][T19423] RBP: 00007fa569e63090 R08: 0000000000000000 R09: 0000000000000000 [ 724.541049][T19423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.549006][T19423] R13: 00007fa569226038 R14: 00007fa569225fa0 R15: 00007fffe23be8c8 [ 724.556978][T19423] [ 724.790958][T19429] netlink: 'syz.2.3771': attribute type 21 has an invalid length. [ 725.748298][T19444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.772879][T19449] __nla_validate_parse: 4 callbacks suppressed [ 725.772894][T19449] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.3776'. [ 725.809362][T19444] team0: Port device batadv0 added [ 725.848933][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3780'. [ 725.959931][T19452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3777'. [ 725.988542][T19452] openvswitch: netlink: Flow key attr not present in new flow. [ 726.066268][T19462] team0: Device wg1 is of different type [ 726.101696][T19461] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3780'. [ 726.769045][T19481] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3785'. [ 727.076508][T19495] validate_nla: 7 callbacks suppressed [ 727.076546][T19495] netlink: 'syz.2.3789': attribute type 3 has an invalid length. [ 727.117461][T19495] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.3789'. [ 727.352520][T19502] netlink: 'syz.3.3791': attribute type 29 has an invalid length. [ 727.455129][T19502] netlink: 'syz.3.3791': attribute type 29 has an invalid length. [ 727.661832][T19503] netlink: 'syz.3.3791': attribute type 29 has an invalid length. [ 727.711101][T19505] netlink: 'syz.3.3791': attribute type 29 has an invalid length. [ 727.796266][T19514] syzkaller0: tun_chr_ioctl cmd 35111 [ 727.926931][T19508] netlink: 'syz.3.3791': attribute type 29 has an invalid length. [ 730.906782][T19552] device syzkaller0 entered promiscuous mode [ 730.933429][T19552] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 731.884168][T19593] netlink: 'syz.4.3809': attribute type 4 has an invalid length. [ 731.984521][T19596] bridge0: port 3(hsr0) entered disabled state [ 731.997967][T19596] device bridge_slave_1 left promiscuous mode [ 732.005488][T19596] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.040905][T19597] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3812'. [ 732.060812][T19596] device bridge_slave_0 left promiscuous mode [ 732.074723][T19596] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.308603][T19612] netlink: 'syz.2.3816': attribute type 2 has an invalid length. [ 732.322777][T19612] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3816'. [ 733.268214][T19638] netlink: 'syz.3.3826': attribute type 9 has an invalid length. [ 733.290951][T19638] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3826'. [ 733.582055][T19655] netlink: 'syz.0.3830': attribute type 10 has an invalid length. [ 733.618520][T19655] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3830'. [ 733.662881][T19656] netlink: 'syz.0.3830': attribute type 10 has an invalid length. [ 733.921828][ T4290] Bluetooth: hci4: command 0x0406 tx timeout [ 734.192096][T19656] team0: Port device wlan1 added [ 734.206097][T19664] netlink: 'syz.2.3831': attribute type 10 has an invalid length. [ 734.248972][T19664] device vlan0 entered promiscuous mode [ 734.313504][T19664] team0: Port device vlan0 added [ 735.039747][T19694] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3841'. [ 735.076362][T19689] rxe_eth0 speed is unknown, defaulting to 1000 [ 735.362805][T19704] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.3846'. [ 735.892318][T19726] netlink: 'syz.0.3853': attribute type 7 has an invalid length. [ 735.960112][T19726] netlink: 'syz.0.3853': attribute type 30 has an invalid length. [ 736.270730][T19735] netlink: 'syz.3.3852': attribute type 13 has an invalid length. [ 736.349144][T19727] delete_channel: no stack [ 736.354035][T19707] rxe_eth0 speed is unknown, defaulting to 1000 [ 736.402355][T19742] netlink: 'syz.0.3855': attribute type 21 has an invalid length. [ 736.767111][T19753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3858'. [ 737.114930][T19759] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.189619][T19762] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.196859][T19762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.846117][T19774] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3865'. [ 739.480047][T19833] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 740.740088][T19883] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3892'. [ 740.776476][T19883] device hsr_slave_0 left promiscuous mode [ 740.798952][T19883] device hsr_slave_1 left promiscuous mode [ 741.923217][T19923] netlink: 'syz.4.3902': attribute type 3 has an invalid length. [ 741.933219][T19923] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3902'. [ 742.028741][T19926] netlink: 'syz.0.3904': attribute type 10 has an invalid length. [ 744.161495][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 744.413158][T19926] team0: Device wg1 is of different type [ 744.628762][T19930] rxe_eth0 speed is unknown, defaulting to 1000 [ 745.228920][ T5211] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.380182][T19960] bridge0: port 3(hsr0) entered disabled state [ 745.433924][T19962] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3915'. [ 745.454172][T19960] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.502071][T19960] device bridge_slave_0 left promiscuous mode [ 745.533924][T19960] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.601325][T19960] bond0: (slave bridge0): Releasing backup interface [ 745.614580][T19960] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 745.895568][T19978] netlink: 'syz.1.3920': attribute type 10 has an invalid length. [ 745.965125][T19981] netlink: 'syz.2.3922': attribute type 3 has an invalid length. [ 745.990546][T19981] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3922'. [ 746.031027][T19978] team0: Device wg1 is of different type [ 746.799558][T20005] netlink: 'syz.1.3928': attribute type 29 has an invalid length. [ 746.877541][T20005] netlink: 'syz.1.3928': attribute type 29 has an invalid length. [ 746.913577][T20011] netlink: 'syz.1.3928': attribute type 29 has an invalid length. [ 746.933968][T20016] netlink: 'syz.1.3928': attribute type 29 has an invalid length. [ 747.034779][T20014] netlink: 'syz.3.3930': attribute type 21 has an invalid length. [ 747.067878][T20014] IPv6: NLM_F_CREATE should be specified when creating new route [ 747.208858][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.215245][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.299187][T20005] tun0: tun_chr_ioctl cmd 21731 [ 747.309855][T20026] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3932'. [ 747.559066][T20028] netlink: 'syz.0.3931': attribute type 10 has an invalid length. [ 747.653065][T20028] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3931'. [ 748.245829][T20055] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3940'. [ 748.327229][T20055] bridge_slave_1: default FDB implementation only supports local addresses [ 749.596699][T20074] netlink: 'syz.1.3945': attribute type 10 has an invalid length. [ 749.642632][T20074] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3945'. [ 749.740475][T20078] netlink: 'syz.1.3945': attribute type 10 has an invalid length. [ 749.866108][T20078] device wlan1 left promiscuous mode [ 749.963448][T20078] team0: Port device wlan1 added [ 753.764379][T20110] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3954'. [ 753.897824][T20110] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3954'. [ 754.145383][T20111] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3954'. [ 756.120323][T20126] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3959'. [ 757.613886][T20142] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3962'. [ 759.521592][T16236] Bluetooth: hci0: command 0x0406 tx timeout [ 759.568279][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3968'. [ 759.671952][T20169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3968'. [ 759.698412][T20166] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3968'. [ 759.823878][T20167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3968'. [ 762.263143][T20207] rxe_eth0 speed is unknown, defaulting to 1000 [ 762.275952][T20221] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3981'. [ 762.287723][T20221] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3981'. [ 762.337226][T20220] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3981'. [ 762.842962][T20243] netlink: 'syz.4.3989': attribute type 4 has an invalid length. [ 763.213209][T20273] netlink: 'syz.4.3993': attribute type 29 has an invalid length. [ 763.253771][T20273] netlink: 'syz.4.3993': attribute type 29 has an invalid length. [ 763.262836][T20273] netlink: 'syz.4.3993': attribute type 29 has an invalid length. [ 763.271175][T20273] netlink: 'syz.4.3993': attribute type 29 has an invalid length. [ 763.280510][T20273] netlink: 'syz.4.3993': attribute type 29 has an invalid length. [ 764.531892][T20303] netlink: 'syz.2.4004': attribute type 10 has an invalid length. [ 764.561148][T20303] device vlan0 left promiscuous mode [ 764.589778][T20309] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4006'. [ 764.772664][T20323] netlink: 'syz.3.4008': attribute type 2 has an invalid length. [ 764.821814][T20323] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4008'. [ 766.089405][T20348] netlink: 'syz.3.4014': attribute type 3 has an invalid length. [ 766.105911][T20348] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4014'. [ 766.346856][T20358] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4018'. [ 766.502088][T20366] netlink: 'syz.0.4019': attribute type 21 has an invalid length. [ 766.523952][T20366] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4019'. [ 767.123690][T20372] delete_channel: no stack [ 767.636067][T20396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4027'. [ 768.110583][T20401] device syzkaller0 entered promiscuous mode [ 768.642774][T20412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4031'. [ 770.817637][T20437] netlink: 192156 bytes leftover after parsing attributes in process `syz.1.4037'. [ 770.830895][T20437] netlink: zone id is out of range [ 770.891337][T20437] netlink: 131088 bytes leftover after parsing attributes in process `syz.1.4037'. [ 772.631703][T20445] netlink: 'syz.3.4039': attribute type 10 has an invalid length. [ 772.670528][T20445] device wlan1 left promiscuous mode [ 772.710790][T20437] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 773.165767][T20459] rxe_eth0 speed is unknown, defaulting to 1000 [ 773.242324][T20475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4050'. [ 774.136375][T20504] netlink: 'syz.3.4056': attribute type 10 has an invalid length. [ 774.183538][T20504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4056'. [ 774.268962][T20504] device ipvlan1 entered promiscuous mode [ 774.337953][T20504] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 776.154233][T18152] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 776.263746][T20569] netlink: 'syz.2.4076': attribute type 10 has an invalid length. [ 776.334373][T20576] netlink: 'syz.3.4078': attribute type 3 has an invalid length. [ 776.351089][T20569] device wlan1 left promiscuous mode [ 776.376243][T20576] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4078'. [ 776.575477][T20569] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 776.615455][T20566] rxe_eth0 speed is unknown, defaulting to 1000 [ 776.617695][T20576] netlink: 'syz.3.4078': attribute type 2 has an invalid length. [ 776.640071][T20576] netlink: 'syz.3.4078': attribute type 1 has an invalid length. [ 776.898808][T20576] netlink: 199540 bytes leftover after parsing attributes in process `syz.3.4078'. [ 777.007187][T20570] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.269435][T20590] netlink: 'syz.4.4079': attribute type 1 has an invalid length. [ 777.320434][T20590] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.4079'. [ 777.674577][T20604] netlink: 'syz.3.4086': attribute type 10 has an invalid length. [ 777.695793][T20604] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4086'. [ 777.797102][T20607] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4086'. [ 777.841605][T20611] netlink: 'syz.3.4086': attribute type 10 has an invalid length. [ 778.190231][T20620] netlink: 'syz.4.4090': attribute type 3 has an invalid length. [ 778.451708][T20620] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4090'. [ 779.108942][T20642] netlink: 'syz.0.4094': attribute type 10 has an invalid length. [ 779.832238][T20642] team0: Port device wlan1 removed [ 780.094917][T20642] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 781.819313][T20689] netlink: 'syz.1.4109': attribute type 10 has an invalid length. [ 782.424419][T20689] team0: Port device wlan1 removed [ 782.565251][T20689] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 782.738539][T20698] netlink: 'syz.3.4113': attribute type 29 has an invalid length. [ 782.755921][T20698] netlink: 'syz.3.4113': attribute type 29 has an invalid length. [ 785.944160][T20766] device syzkaller0 entered promiscuous mode [ 791.149592][T20798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4141'. [ 791.378828][T20817] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4144'. [ 791.575210][T20818] rxe_eth0 speed is unknown, defaulting to 1000 [ 792.157329][T20840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4150'. [ 792.181248][T20840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4150'. [ 792.250834][T20843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4150'. [ 792.328940][T20840] netlink: 'syz.4.4150': attribute type 21 has an invalid length. [ 792.347412][T20840] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4150'. [ 792.377907][T20840] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4150'. [ 796.822982][T20879] -1Ï2y�: renamed from syzkaller0 [ 797.461815][T20897] netlink: 'syz.2.4166': attribute type 21 has an invalid length. [ 797.473571][T20897] IPv6: NLM_F_CREATE should be specified when creating new route [ 797.490386][T20897] IPv6: Can't replace route, no match found [ 797.689368][T20903] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4167'. [ 797.698628][T20903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 798.119900][T20922] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4172'. [ 798.148974][T20922] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 798.177200][T20922] CPU: 0 PID: 20922 Comm: syz.2.4172 Not tainted syzkaller #0 [ 798.184694][T20922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 798.194765][T20922] Call Trace: [ 798.198067][T20922] [ 798.201013][T20922] dump_stack_lvl+0x188/0x24e [ 798.205721][T20922] ? show_regs_print_info+0x12/0x12 [ 798.210941][T20922] ? load_image+0x410/0x410 [ 798.215477][T20922] sysfs_warn_dup+0x8a/0xa0 [ 798.220005][T20922] sysfs_do_create_link_sd+0xc0/0x110 [ 798.225415][T20922] device_add+0x83b/0x1050 [ 798.229865][T20922] wiphy_register+0x1d8b/0x2aa0 [ 798.234761][T20922] ? cfg80211_event_work+0x40/0x40 [ 798.239897][T20922] ? minstrel_ht_alloc+0x894/0xa20 [ 798.245055][T20922] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 798.251148][T20922] ieee80211_register_hw+0x2e33/0x3b00 [ 798.256644][T20922] ? ieee80211_register_hw+0xf01/0x3b00 [ 798.262214][T20922] ? ieee80211_register_hw+0xf01/0x3b00 [ 798.267799][T20922] ? ieee80211_tasklet_handler+0x20/0x20 [ 798.273460][T20922] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 798.279652][T20922] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 798.285400][T20922] ? memcpy+0x3c/0x60 [ 798.289407][T20922] hwsim_new_radio_nl+0xab7/0xc90 [ 798.294466][T20922] genl_family_rcv_msg_doit+0x22f/0x350 [ 798.300028][T20922] ? end_current_label_crit_section+0x170/0x170 [ 798.306306][T20922] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 798.312227][T20922] ? bpf_lsm_capable+0x5/0x10 [ 798.316925][T20922] ? security_capable+0x85/0xb0 [ 798.321803][T20922] genl_rcv_msg+0x601/0x790 [ 798.326335][T20922] ? genl_bind+0x360/0x360 [ 798.330782][T20922] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 798.337148][T20922] netlink_rcv_skb+0x1ef/0x440 [ 798.341939][T20922] ? genl_bind+0x360/0x360 [ 798.346372][T20922] ? netlink_ack+0x1160/0x1160 [ 798.351170][T20922] ? down_read+0x1a8/0x2d0 [ 798.355608][T20922] genl_rcv+0x24/0x40 [ 798.359603][T20922] netlink_unicast+0x7ad/0x920 [ 798.364400][T20922] netlink_sendmsg+0x8ad/0xbd0 [ 798.369202][T20922] ? netlink_getsockopt+0x550/0x550 [ 798.374430][T20922] ? apparmor_socket_sendmsg+0x8a/0x330 [ 798.380002][T20922] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 798.385311][T20922] ? security_socket_sendmsg+0x7c/0xa0 [ 798.390803][T20922] ? netlink_getsockopt+0x550/0x550 [ 798.396035][T20922] ____sys_sendmsg+0x5ed/0x9a0 [ 798.400830][T20922] ? __sys_sendmsg_sock+0x30/0x30 [ 798.405874][T20922] ? __import_iovec+0x306/0x510 [ 798.410757][T20922] ? import_iovec+0x6f/0xa0 [ 798.415300][T20922] ___sys_sendmsg+0x2a2/0x360 [ 798.420008][T20922] ? __sys_sendmsg+0x2a0/0x2a0 [ 798.424867][T20922] __se_sys_sendmsg+0x1c3/0x2b0 [ 798.429742][T20922] ? __x64_sys_sendmsg+0x80/0x80 [ 798.434734][T20922] do_syscall_64+0x4c/0xa0 [ 798.439161][T20922] ? clear_bhb_loop+0x60/0xb0 [ 798.443853][T20922] ? clear_bhb_loop+0x60/0xb0 [ 798.448549][T20922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.454466][T20922] RIP: 0033:0x7fd660d9f559 [ 798.458897][T20922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.478517][T20922] RSP: 002b:00007fd661d45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.486948][T20922] RAX: ffffffffffffffda RBX: 00007fd661025fa0 RCX: 00007fd660d9f559 [ 798.494930][T20922] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 798.502915][T20922] RBP: 00007fd660e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 798.510896][T20922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.518882][T20922] R13: 00007fd661026038 R14: 00007fd661025fa0 R15: 00007ffc88f0fe88 [ 798.526881][T20922] [ 799.233450][T20948] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.4182'. [ 799.857735][T20955] netlink: 'syz.0.4183': attribute type 21 has an invalid length. [ 799.866181][T20955] IPv6: NLM_F_CREATE should be specified when creating new route [ 799.877836][T20955] IPv6: Can't replace route, no match found [ 800.223418][T20968] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4188'. [ 800.278177][T20972] netlink: 'syz.3.4188': attribute type 46 has an invalid length. [ 800.373201][T20973] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 800.412005][T20973] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 800.431109][T20971] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 800.458428][T20971] netlink: 'syz.4.4199': attribute type 29 has an invalid length. [ 800.526796][T20971] tun0: tun_chr_ioctl cmd 21731 [ 800.677397][T20977] IPv6: Can't replace route, no match found [ 801.657767][T20979] rxe_eth0 speed is unknown, defaulting to 1000 [ 801.982799][T20999] netlink: 'syz.4.4200': attribute type 2 has an invalid length. [ 801.990575][T20999] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4200'. [ 802.117665][T21010] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4203'. [ 802.137299][T21008] netlink: 'syz.1.4202': attribute type 21 has an invalid length. [ 802.148031][T21008] IPv6: NLM_F_CREATE should be specified when creating new route [ 802.161964][T21008] IPv6: Can't replace route, no match found [ 803.221702][T21052] netlink: 'syz.2.4214': attribute type 5 has an invalid length. [ 803.573396][T21059] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4216'. [ 803.605834][T21057] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4215'. [ 803.692570][T21057] device hsr_slave_0 left promiscuous mode [ 803.712771][T21057] device hsr_slave_1 left promiscuous mode [ 803.923381][T21059] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 803.951769][T21059] CPU: 0 PID: 21059 Comm: syz.3.4216 Not tainted syzkaller #0 [ 803.959274][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 803.969343][T21059] Call Trace: [ 803.972638][T21059] [ 803.975577][T21059] dump_stack_lvl+0x188/0x24e [ 803.980269][T21059] ? show_regs_print_info+0x12/0x12 [ 803.985468][T21059] ? load_image+0x410/0x410 [ 803.989977][T21059] sysfs_warn_dup+0x8a/0xa0 [ 803.994480][T21059] sysfs_do_create_link_sd+0xc0/0x110 [ 803.999850][T21059] device_add+0x83b/0x1050 [ 804.004270][T21059] wiphy_register+0x1d8b/0x2aa0 [ 804.009134][T21059] ? cfg80211_event_work+0x40/0x40 [ 804.014246][T21059] ? minstrel_ht_alloc+0x894/0xa20 [ 804.019361][T21059] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 804.025421][T21059] ieee80211_register_hw+0x2e33/0x3b00 [ 804.030890][T21059] ? ieee80211_register_hw+0xf01/0x3b00 [ 804.036433][T21059] ? ieee80211_register_hw+0xf01/0x3b00 [ 804.041989][T21059] ? ieee80211_tasklet_handler+0x20/0x20 [ 804.047613][T21059] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 804.053503][T21059] ? __debug_object_init+0xed/0x440 [ 804.058698][T21059] ? memset+0x1e/0x40 [ 804.062672][T21059] ? __hrtimer_init+0x189/0x270 [ 804.067517][T21059] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 804.073231][T21059] ? memcpy+0x3c/0x60 [ 804.077205][T21059] hwsim_new_radio_nl+0xab7/0xc90 [ 804.082231][T21059] genl_family_rcv_msg_doit+0x22f/0x350 [ 804.087767][T21059] ? end_current_label_crit_section+0x170/0x170 [ 804.094007][T21059] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 804.099897][T21059] ? bpf_lsm_capable+0x5/0x10 [ 804.104566][T21059] ? security_capable+0x85/0xb0 [ 804.109415][T21059] genl_rcv_msg+0x601/0x790 [ 804.113920][T21059] ? genl_bind+0x360/0x360 [ 804.118325][T21059] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 804.124654][T21059] netlink_rcv_skb+0x1ef/0x440 [ 804.129412][T21059] ? genl_bind+0x360/0x360 [ 804.133822][T21059] ? netlink_ack+0x1160/0x1160 [ 804.138591][T21059] ? down_read+0x1a8/0x2d0 [ 804.143002][T21059] genl_rcv+0x24/0x40 [ 804.146972][T21059] netlink_unicast+0x7ad/0x920 [ 804.151739][T21059] netlink_sendmsg+0x8ad/0xbd0 [ 804.156501][T21059] ? netlink_getsockopt+0x550/0x550 [ 804.161694][T21059] ? apparmor_socket_sendmsg+0x8a/0x330 [ 804.167238][T21059] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 804.172512][T21059] ? security_socket_sendmsg+0x7c/0xa0 [ 804.177961][T21059] ? netlink_getsockopt+0x550/0x550 [ 804.183155][T21059] ____sys_sendmsg+0x5ed/0x9a0 [ 804.187922][T21059] ? __sys_sendmsg_sock+0x30/0x30 [ 804.192940][T21059] ? __import_iovec+0x306/0x510 [ 804.197790][T21059] ? import_iovec+0x6f/0xa0 [ 804.202291][T21059] ___sys_sendmsg+0x2a2/0x360 [ 804.206963][T21059] ? __sys_sendmsg+0x2a0/0x2a0 [ 804.211757][T21059] __se_sys_sendmsg+0x1c3/0x2b0 [ 804.216601][T21059] ? __x64_sys_sendmsg+0x80/0x80 [ 804.221543][T21059] ? lockdep_hardirqs_on+0x94/0x140 [ 804.226734][T21059] do_syscall_64+0x4c/0xa0 [ 804.231134][T21059] ? clear_bhb_loop+0x60/0xb0 [ 804.235799][T21059] ? clear_bhb_loop+0x60/0xb0 [ 804.240463][T21059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.246352][T21059] RIP: 0033:0x7fd04439f559 [ 804.250758][T21059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.270349][T21059] RSP: 002b:00007fd045185028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 804.278753][T21059] RAX: ffffffffffffffda RBX: 00007fd044626180 RCX: 00007fd04439f559 [ 804.286715][T21059] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 804.294675][T21059] RBP: 00007fd044436b20 R08: 0000000000000000 R09: 0000000000000000 [ 804.302647][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.310603][T21059] R13: 00007fd044626218 R14: 00007fd044626180 R15: 00007ffdc16da5e8 [ 804.318575][T21059] [ 804.535636][T21079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 804.543103][T21079] IPv6: NLM_F_CREATE should be set when creating new route [ 804.550643][T21079] IPv6: NLM_F_CREATE should be set when creating new route [ 804.558181][T21079] IPv6: NLM_F_CREATE should be set when creating new route [ 804.647809][T21087] netlink: 'syz.0.4223': attribute type 3 has an invalid length. [ 804.676860][T21087] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4223'. [ 804.767012][T21085] netlink: 'syz.0.4223': attribute type 3 has an invalid length. [ 804.808194][T21085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4223'. [ 805.217401][T21106] netlink: 'syz.1.4229': attribute type 10 has an invalid length. [ 805.300580][T21108] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4230'. [ 805.326508][T21108] openvswitch: netlink: Message has 6 unknown bytes. [ 805.453423][T21106] team0: Port device macvlan1 added [ 805.695365][T21115] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4232'. [ 805.722456][T21113] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4231'. [ 805.787860][T21113] netlink: zone id is out of range [ 805.830139][T21113] netlink: zone id is out of range [ 805.876119][T21113] netlink: zone id is out of range [ 806.231668][T21129] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 807.104210][T21140] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4241'. [ 807.138448][T21129] team0 (unregistering): Port device team_slave_0 removed [ 807.181644][T21129] team0 (unregistering): Port device team_slave_1 removed [ 807.209959][T21129] team0 (unregistering): Port device virt_wifi0 removed [ 807.228468][T21129] team0 (unregistering): Port device vlan0 removed [ 807.288430][T21137] netlink: 'syz.4.4240': attribute type 10 has an invalid length. [ 807.401354][T13356] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 807.436906][T21150] netlink: 'syz.1.4244': attribute type 3 has an invalid length. [ 807.443610][T21151] netlink: 'syz.1.4244': attribute type 3 has an invalid length. [ 807.458231][T21150] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4244'. [ 807.481074][T21151] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4244'. [ 807.515705][T21153] netlink: 'syz.1.4244': attribute type 3 has an invalid length. [ 808.095722][T21158] rxe_eth0 speed is unknown, defaulting to 1000 [ 808.195149][T21171] netlink: 'syz.4.4250': attribute type 10 has an invalid length. [ 808.246090][T21171] device team0 entered promiscuous mode [ 808.256485][T21171] device team_slave_0 entered promiscuous mode [ 808.276447][T21171] device team_slave_1 entered promiscuous mode [ 808.296957][T21171] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 808.577789][T21182] netlink: 'syz.4.4253': attribute type 29 has an invalid length. [ 808.620381][T21182] netlink: 'syz.4.4253': attribute type 29 has an invalid length. [ 808.694865][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.701259][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.964874][T21185] netlink: 'syz.1.4254': attribute type 10 has an invalid length. [ 809.261248][T21185] bond0: (slave team0): Releasing backup interface [ 809.408178][T21185] team0 (unregistering): Port device team_slave_0 removed [ 809.485311][T21185] team0 (unregistering): Port device team_slave_1 removed [ 809.520520][T21185] team0 (unregistering): Port device batadv0 removed [ 809.644769][T21185] team0 (unregistering): Port device macvlan1 removed [ 809.736467][T21191] rxe_eth0 speed is unknown, defaulting to 1000 [ 809.939496][T21207] __nla_validate_parse: 4 callbacks suppressed [ 809.939513][T21207] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4262'. [ 810.371841][T21224] netlink: 'syz.4.4265': attribute type 12 has an invalid length. [ 810.398950][T21225] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4265'. [ 810.409339][T21224] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4265'. [ 810.426594][T21229] delete_channel: no stack [ 810.460019][T21229] delete_channel: no stack [ 810.717638][T21223] can: request_module (can-proto-0) failed. [ 810.846707][T21229] rxe_eth0 speed is unknown, defaulting to 1000 [ 811.558550][T21253] netlink: 'syz.3.4271': attribute type 10 has an invalid length. [ 811.908491][T21253] team0 (unregistering): Port device team_slave_0 removed [ 812.017972][T21253] team0 (unregistering): Port device team_slave_1 removed [ 812.368134][T21283] netlink: 'syz.4.4278': attribute type 2 has an invalid length. [ 813.181043][T21311] IPv6: Can't replace route, no match found [ 813.615871][T21325] netlink: 'syz.4.4292': attribute type 3 has an invalid length. [ 813.661555][T21325] netlink: 188932 bytes leftover after parsing attributes in process `syz.4.4292'. [ 815.579488][T21365] rxe_eth0 speed is unknown, defaulting to 1000 [ 817.089045][T21410] netlink: 'syz.2.4318': attribute type 7 has an invalid length. [ 817.118730][T21410] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.4318'. [ 817.130310][T21411] netlink: 'syz.1.4317': attribute type 16 has an invalid length. [ 817.157464][T21411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4317'. [ 818.484445][T21444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4328'. [ 818.519830][T21441] netlink: 'syz.2.4327': attribute type 3 has an invalid length. [ 818.796291][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 818.824465][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 818.869653][T21456] tap0: linktype set to 776 [ 818.938811][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 818.958990][T21456] tap0: linktype set to 776 [ 818.960473][T21463] netlink: 'syz.2.4335': attribute type 3 has an invalid length. [ 818.988674][T21467] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 819.001579][T21463] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4335'. [ 819.021116][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 819.057037][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 819.077226][T21456] tap0: linktype set to 776 [ 819.104945][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 819.182287][T21456] tap0: linktype set to 776 [ 819.189682][T21467] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 819.220719][T21468] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 819.276705][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 819.290889][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 819.324467][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 819.356132][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 819.382720][T21456] tap0: linktype set to 776 [ 819.415334][T21467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4336'. [ 819.483808][T21468] netlink: 'syz.3.4336': attribute type 29 has an invalid length. [ 819.504133][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 819.510050][T21451] tap0: tun_chr_ioctl cmd 1074025673 [ 819.551856][T21456] tap0: tun_chr_ioctl cmd 1074025677 [ 819.825002][T21456] tap0: linktype set to 776 [ 819.895620][T21478] netlink: 'syz.0.4337': attribute type 2 has an invalid length. [ 819.921780][T21478] netlink: 'syz.0.4337': attribute type 8 has an invalid length. [ 819.939790][T21478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4337'. [ 819.987397][T21481] netlink: 'syz.0.4337': attribute type 2 has an invalid length. [ 820.019935][T21481] netlink: 'syz.0.4337': attribute type 8 has an invalid length. [ 820.120140][T21481] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4337'. [ 820.191234][T21476] netlink: 'syz.0.4337': attribute type 2 has an invalid length. [ 820.230904][T21476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4337'. [ 820.346609][T21494] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4341'. [ 821.937147][T21538] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4353'. [ 822.427859][T21563] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4362'. [ 822.773069][T21558] device gre0 entered promiscuous mode [ 822.797177][T21558] team0: Device gre0 is of different type [ 823.122103][T21560] rxe_eth0 speed is unknown, defaulting to 1000 [ 823.367967][T21578] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 825.798477][T21594] validate_nla: 10 callbacks suppressed [ 825.798520][T21594] netlink: 'syz.0.4370': attribute type 10 has an invalid length. [ 826.137637][T21620] netlink: 'syz.3.4376': attribute type 10 has an invalid length. [ 826.695800][T21633] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4378'. [ 826.808038][T21631] netlink: 'syz.0.4378': attribute type 12 has an invalid length. [ 826.900999][T21631] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4378'. [ 827.085885][T21638] can: request_module (can-proto-0) failed. [ 827.249562][T21650] netlink: 'syz.3.4383': attribute type 10 has an invalid length. [ 827.619801][T21663] netlink: 'syz.4.4385': attribute type 10 has an invalid length. [ 829.054583][T21664] rxe_eth0 speed is unknown, defaulting to 1000 [ 829.527223][T21661] netlink: 'syz.2.4386': attribute type 10 has an invalid length. [ 830.031591][T21683] netlink: 'syz.2.4390': attribute type 16 has an invalid length. [ 830.039465][T21683] netlink: 'syz.2.4390': attribute type 3 has an invalid length. [ 830.077345][T21683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4390'. [ 832.388224][T21714] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4396'. [ 832.518240][T21713] netlink: 'syz.4.4396': attribute type 12 has an invalid length. [ 832.552563][T21713] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4396'. [ 832.586620][T21714] can: request_module (can-proto-0) failed. [ 832.611013][T21718] netlink: 'syz.3.4397': attribute type 27 has an invalid length. [ 832.637674][T21718] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4397'. [ 833.183367][T21743] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4404'. [ 833.209125][T21743] bond0: (slave bond_slave_0): Releasing backup interface [ 833.243145][T21743] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 833.266088][T21746] netlink: 'syz.0.4406': attribute type 10 has an invalid length. [ 833.317435][T21746] team0: Device vxcan1 is of different type [ 834.164504][T21778] netlink: 'syz.3.4414': attribute type 12 has an invalid length. [ 834.201261][T21778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4414'. [ 834.297531][T21789] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4414'. [ 834.709816][T21778] can: request_module (can-proto-0) failed. [ 835.172661][T21802] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4420'. [ 835.211503][T21802] openvswitch: netlink: Flow key attr not present in new flow. [ 835.360413][T21802] netlink: 'syz.3.4420': attribute type 21 has an invalid length. [ 835.402084][T21802] netlink: 'syz.3.4420': attribute type 6 has an invalid length. [ 835.409869][T21802] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4420'. [ 835.542514][T21802] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4420'. [ 838.372495][T18159] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 839.814735][T21909] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 839.832867][T21909] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 839.847710][T21909] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 839.937799][T21912] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 839.959303][T21910] netlink: 'syz.2.4444': attribute type 29 has an invalid length. [ 840.417595][T21913] netlink: 'syz.1.4445': attribute type 29 has an invalid length. [ 840.438612][T21910] netlink: 'syz.2.4444': attribute type 29 has an invalid length. [ 840.857442][T21939] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4451'. [ 840.902802][T21940] netlink: 'syz.3.4452': attribute type 10 has an invalid length. [ 840.923488][T21940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.088873][T21948] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4450'. [ 841.136190][T21948] netlink: 105 bytes leftover after parsing attributes in process `syz.2.4450'. [ 841.207749][T21940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.793080][T21948] netlink: 105 bytes leftover after parsing attributes in process `syz.2.4450'. [ 843.016726][T21974] rxe_eth0 speed is unknown, defaulting to 1000 [ 844.241606][T22006] netlink: 'syz.0.4469': attribute type 23 has an invalid length. [ 845.145565][T22035] netlink: 'syz.3.4478': attribute type 27 has an invalid length. [ 845.171545][T22035] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4478'. [ 845.225610][T22035] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 846.069932][T22066] netlink: 17861 bytes leftover after parsing attributes in process `syz.0.4484'. [ 846.431765][T22074] netlink: 'syz.1.4485': attribute type 10 has an invalid length. [ 846.529812][T22074] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4485'. [ 846.669767][T22074] device hsr0 entered promiscuous mode [ 846.685482][T22074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 846.727800][T22074] bridge0: port 3(hsr0) entered blocking state [ 846.756598][T22074] bridge0: port 3(hsr0) entered disabled state [ 846.796807][T22074] bridge0: port 3(hsr0) entered blocking state [ 846.803136][T22074] bridge0: port 3(hsr0) entered forwarding state [ 847.915180][T22104] netlink: 17861 bytes leftover after parsing attributes in process `syz.2.4497'. [ 848.266767][T22113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 848.365334][T22113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 848.406756][T22112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 848.443067][T22113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 848.491808][T22114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 848.491836][T22113] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 848.532754][T22112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4500'. [ 850.261281][T22172] ================================================================== [ 850.269442][T22172] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 850.277320][T22172] Write of size 56 at addr ffff888024e17b90 by task syz.3.4518/22172 [ 850.285389][T22172] [ 850.287816][T22172] CPU: 0 PID: 22172 Comm: syz.3.4518 Not tainted syzkaller #0 [ 850.295325][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 850.305387][T22172] Call Trace: [ 850.308668][T22172] [ 850.311605][T22172] dump_stack_lvl+0x188/0x24e [ 850.316296][T22172] ? __lock_acquire+0x7ea0/0x7ea0 [ 850.321333][T22172] ? show_regs_print_info+0x12/0x12 [ 850.326533][T22172] ? load_image+0x410/0x410 [ 850.331048][T22172] ? __virt_addr_valid+0x467/0x540 [ 850.336193][T22172] ? __bpf_get_stackid+0x6c9/0x920 [ 850.341308][T22172] print_report+0xa8/0x210 [ 850.345736][T22172] kasan_report+0x10b/0x140 [ 850.350256][T22172] ? __bpf_get_stackid+0x6c9/0x920 [ 850.355379][T22172] kasan_check_range+0x235/0x290 [ 850.360327][T22172] ? __bpf_get_stackid+0x6c9/0x920 [ 850.365447][T22172] memcpy+0x3c/0x60 [ 850.369268][T22172] __bpf_get_stackid+0x6c9/0x920 [ 850.374220][T22172] bpf_get_stackid_pe+0x33f/0x400 [ 850.379263][T22172] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 850.384733][T22172] bpf_overflow_handler+0x6d1/0x790 [ 850.389947][T22172] ? bpf_overflow_handler+0xd9/0x790 [ 850.395246][T22172] ? perf_swevent_overflow+0x230/0x230 [ 850.400712][T22172] ? ct_irq_exit_irqson+0x113/0x170 [ 850.405919][T22172] ? __perf_event_account_interrupt+0x187/0x280 [ 850.412176][T22172] __perf_event_overflow+0x457/0x630 [ 850.417483][T22172] perf_swevent_event+0x315/0x570 [ 850.422522][T22172] ? perf_tp_event+0xc10/0xc10 [ 850.427314][T22172] ___perf_sw_event+0x498/0x6d0 [ 850.432181][T22172] ? ___perf_sw_event+0x184/0x6d0 [ 850.437219][T22172] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 850.443648][T22172] ? __lock_acquire+0x142d/0x7ea0 [ 850.448705][T22172] ? lock_chain_count+0x20/0x20 [ 850.453575][T22172] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 850.459564][T22172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 850.465721][T22172] ? lock_chain_count+0x20/0x20 [ 850.470583][T22172] __perf_sw_event+0x135/0x260 [ 850.475361][T22172] do_user_addr_fault+0x497/0xb20 [ 850.480401][T22172] ? lock_acquire+0x226/0x4a0 [ 850.485092][T22172] ? trace_hardirqs_off_finish+0x86/0x180 [ 850.490825][T22172] exc_page_fault+0x60/0x100 [ 850.495426][T22172] asm_exc_page_fault+0x22/0x30 [ 850.500286][T22172] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 850.506892][T22172] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 850.526505][T22172] RSP: 0018:ffffc9000d6bfd48 EFLAGS: 00050202 [ 850.532580][T22172] RAX: ffffffff8416c501 RBX: 0000000000000050 RCX: 0000000000000050 [ 850.540555][T22172] RDX: 0000000000000050 RSI: 0000000000000000 RDI: ffffc9000d6bfdc0 [ 850.548564][T22172] RBP: 0000000000000000 R08: ffffc9000d6bfe0f R09: 1ffff92001ad7fc1 [ 850.556549][T22172] R10: dffffc0000000000 R11: fffff52001ad7fc2 R12: 00007fffffffefb0 [ 850.564538][T22172] R13: 0000000000000050 R14: ffffc9000d6bfdc0 R15: 0000000000000000 [ 850.572520][T22172] ? _copy_from_user+0xa1/0x170 [ 850.577394][T22172] _copy_from_user+0xf4/0x170 [ 850.582112][T22172] __sys_bpf+0x2ea/0x780 [ 850.586458][T22172] ? bpf_link_show_fdinfo+0x380/0x380 [ 850.591852][T22172] ? lock_chain_count+0x20/0x20 [ 850.596719][T22172] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 850.602718][T22172] __x64_sys_bpf+0x78/0x90 [ 850.607146][T22172] do_syscall_64+0x4c/0xa0 [ 850.611567][T22172] ? clear_bhb_loop+0x60/0xb0 [ 850.616249][T22172] ? clear_bhb_loop+0x60/0xb0 [ 850.620931][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.626839][T22172] RIP: 0033:0x7fd04439f559 [ 850.631262][T22172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.650872][T22172] RSP: 002b:00007fd0451c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 850.659295][T22172] RAX: ffffffffffffffda RBX: 00007fd044625fa0 RCX: 00007fd04439f559 [ 850.667275][T22172] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 850.675253][T22172] RBP: 00007fd044436b20 R08: 0000000000000000 R09: 0000000000000000 [ 850.683230][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.691205][T22172] R13: 00007fd044626038 R14: 00007fd044625fa0 R15: 00007ffdc16da5e8 [ 850.699189][T22172] [ 850.702213][T22172] [ 850.704535][T22172] Allocated by task 22172: [ 850.709005][T22172] kasan_set_track+0x4b/0x70 [ 850.713602][T22172] __kasan_kmalloc+0x8e/0xa0 [ 850.718201][T22172] __kmalloc_node+0xb2/0x240 [ 850.722796][T22172] bpf_map_area_alloc+0x47/0xe0 [ 850.727651][T22172] prealloc_elems_and_freelist+0x86/0x1c0 [ 850.733376][T22172] stack_map_alloc+0x386/0x510 [ 850.738163][T22172] map_create+0x524/0xff0 [ 850.742502][T22172] __sys_bpf+0x38b/0x780 [ 850.746753][T22172] __x64_sys_bpf+0x78/0x90 [ 850.751176][T22172] do_syscall_64+0x4c/0xa0 [ 850.755601][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.761505][T22172] [ 850.763827][T22172] Last potentially related work creation: [ 850.769541][T22172] kasan_save_stack+0x3a/0x60 [ 850.774232][T22172] __kasan_record_aux_stack+0xb2/0xc0 [ 850.779606][T22172] call_rcu+0x14f/0x950 [ 850.783838][T22172] __nf_register_net_hook+0x787/0x910 [ 850.789254][T22172] nf_register_net_hook+0xae/0x190 [ 850.794373][T22172] nf_register_net_hooks+0x40/0x1a0 [ 850.799579][T22172] ebt_register_table+0xcdc/0x1050 [ 850.804742][T22172] find_inlist_lock_noload+0x16a/0x250 [ 850.810214][T22172] do_ebt_get_ctl+0x2c7/0x1d00 [ 850.814986][T22172] nf_getsockopt+0x25e/0x280 [ 850.819578][T22172] ip_getsockopt+0x19b/0x230 [ 850.824176][T22172] __sys_getsockopt+0x1b0/0x230 [ 850.829031][T22172] __x64_sys_getsockopt+0xb1/0xc0 [ 850.834062][T22172] do_syscall_64+0x4c/0xa0 [ 850.838481][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.844386][T22172] [ 850.846712][T22172] Second to last potentially related work creation: [ 850.853347][T22172] kasan_save_stack+0x3a/0x60 [ 850.858033][T22172] __kasan_record_aux_stack+0xb2/0xc0 [ 850.863419][T22172] kvfree_call_rcu+0x103/0x890 [ 850.868194][T22172] trie_update_elem+0x93a/0xd40 [ 850.873104][T22172] bpf_map_update_value+0x59d/0x670 [ 850.878311][T22172] generic_map_update_batch+0x52e/0x7f0 [ 850.883860][T22172] bpf_map_do_batch+0x475/0x5f0 [ 850.888720][T22172] __sys_bpf+0x6f7/0x780 [ 850.892971][T22172] __x64_sys_bpf+0x78/0x90 [ 850.897395][T22172] do_syscall_64+0x4c/0xa0 [ 850.901819][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.907726][T22172] [ 850.910053][T22172] The buggy address belongs to the object at ffff888024e17b80 [ 850.910053][T22172] which belongs to the cache kmalloc-cg-64 of size 64 [ 850.924220][T22172] The buggy address is located 16 bytes inside of [ 850.924220][T22172] 64-byte region [ffff888024e17b80, ffff888024e17bc0) [ 850.937326][T22172] [ 850.939650][T22172] The buggy address belongs to the physical page: [ 850.946125][T22172] page:ffffea00009385c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024e17680 pfn:0x24e17 [ 850.957578][T22172] memcg:ffff8880582f6401 [ 850.961812][T22172] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 850.969371][T22172] raw: 00fff00000000200 ffffea00017ee500 dead000000000003 ffff888018442780 [ 850.977968][T22172] raw: ffff888024e17680 000000008020001f 00000001ffffffff ffff8880582f6401 [ 850.986554][T22172] page dumped because: kasan: bad access detected [ 850.992971][T22172] page_owner tracks the page as allocated [ 850.998691][T22172] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4285, tgid 4285 (syz-executor), ts 210440046215, free_ts 209453064026 [ 851.017105][T22172] post_alloc_hook+0x173/0x1a0 [ 851.021956][T22172] get_page_from_freelist+0x206b/0x2180 [ 851.027516][T22172] __alloc_pages+0x1ec/0x4f0 [ 851.032115][T22172] alloc_slab_page+0x5d/0x180 [ 851.036807][T22172] new_slab+0x87/0x2d0 [ 851.040886][T22172] ___slab_alloc+0xbc5/0x1240 [ 851.045564][T22172] __kmem_cache_alloc_node+0x126/0x270 [ 851.051025][T22172] kmalloc_trace+0x26/0xe0 [ 851.055444][T22172] alloc_fdtable+0xca/0x2c0 [ 851.059957][T22172] dup_fd+0x743/0xa20 [ 851.063948][T22172] copy_files+0x72/0xe0 [ 851.068175][T22172] copy_process+0x180e/0x4070 [ 851.072857][T22172] kernel_clone+0x24b/0x900 [ 851.077365][T22172] __x64_sys_clone+0x1a7/0x220 [ 851.082131][T22172] do_syscall_64+0x4c/0xa0 [ 851.086550][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.092454][T22172] page last free stack trace: [ 851.097119][T22172] free_unref_page_prepare+0x8e5/0x9e0 [ 851.102587][T22172] free_unref_page+0x2e/0x3f0 [ 851.107273][T22172] ringbuf_map_free+0xc5/0x120 [ 851.112047][T22172] process_one_work+0x8ab/0x1160 [ 851.117065][T22172] worker_thread+0xaf5/0x12a0 [ 851.121748][T22172] kthread+0x29d/0x330 [ 851.125815][T22172] ret_from_fork+0x1f/0x30 [ 851.130237][T22172] [ 851.132557][T22172] Memory state around the buggy address: [ 851.138183][T22172] ffff888024e17a80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 851.146243][T22172] ffff888024e17b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 851.154304][T22172] >ffff888024e17b80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 851.162360][T22172] ^ [ 851.167727][T22172] ffff888024e17c00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 851.175788][T22172] ffff888024e17c80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 851.183851][T22172] ================================================================== [ 851.191922][T22172] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 851.199114][T22172] CPU: 0 PID: 22172 Comm: syz.3.4518 Not tainted syzkaller #0 [ 851.206571][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 851.216625][T22172] Call Trace: [ 851.219904][T22172] [ 851.222835][T22172] dump_stack_lvl+0x188/0x24e [ 851.227517][T22172] ? memcpy+0x3c/0x60 [ 851.231503][T22172] ? show_regs_print_info+0x12/0x12 [ 851.236710][T22172] ? load_image+0x410/0x410 [ 851.241226][T22172] panic+0x2d3/0x710 [ 851.245144][T22172] ? bpf_jit_dump+0xd0/0xd0 [ 851.249655][T22172] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 851.255559][T22172] ? _raw_spin_unlock+0x40/0x40 [ 851.260425][T22172] ? print_memory_metadata+0x314/0x400 [ 851.265895][T22172] check_panic_on_warn+0x80/0xa0 [ 851.270841][T22172] ? __bpf_get_stackid+0x6c9/0x920 [ 851.275959][T22172] end_report+0x66/0x110 [ 851.280211][T22172] kasan_report+0x118/0x140 [ 851.284726][T22172] ? __bpf_get_stackid+0x6c9/0x920 [ 851.289847][T22172] kasan_check_range+0x235/0x290 [ 851.294794][T22172] ? __bpf_get_stackid+0x6c9/0x920 [ 851.299911][T22172] memcpy+0x3c/0x60 [ 851.303723][T22172] __bpf_get_stackid+0x6c9/0x920 [ 851.308669][T22172] bpf_get_stackid_pe+0x33f/0x400 [ 851.313701][T22172] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 851.319172][T22172] bpf_overflow_handler+0x6d1/0x790 [ 851.324390][T22172] ? bpf_overflow_handler+0xd9/0x790 [ 851.329677][T22172] ? perf_swevent_overflow+0x230/0x230 [ 851.335142][T22172] ? ct_irq_exit_irqson+0x113/0x170 [ 851.340348][T22172] ? __perf_event_account_interrupt+0x187/0x280 [ 851.346608][T22172] __perf_event_overflow+0x457/0x630 [ 851.351911][T22172] perf_swevent_event+0x315/0x570 [ 851.356952][T22172] ? perf_tp_event+0xc10/0xc10 [ 851.361733][T22172] ___perf_sw_event+0x498/0x6d0 [ 851.366600][T22172] ? ___perf_sw_event+0x184/0x6d0 [ 851.371634][T22172] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 851.378063][T22172] ? __lock_acquire+0x142d/0x7ea0 [ 851.383112][T22172] ? lock_chain_count+0x20/0x20 [ 851.387973][T22172] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 851.393958][T22172] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 851.400120][T22172] ? lock_chain_count+0x20/0x20 [ 851.404976][T22172] __perf_sw_event+0x135/0x260 [ 851.409754][T22172] do_user_addr_fault+0x497/0xb20 [ 851.414786][T22172] ? lock_acquire+0x226/0x4a0 [ 851.419478][T22172] ? trace_hardirqs_off_finish+0x86/0x180 [ 851.425210][T22172] exc_page_fault+0x60/0x100 [ 851.429804][T22172] asm_exc_page_fault+0x22/0x30 [ 851.434655][T22172] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 851.441257][T22172] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 851.460870][T22172] RSP: 0018:ffffc9000d6bfd48 EFLAGS: 00050202 [ 851.466946][T22172] RAX: ffffffff8416c501 RBX: 0000000000000050 RCX: 0000000000000050 [ 851.474921][T22172] RDX: 0000000000000050 RSI: 0000000000000000 RDI: ffffc9000d6bfdc0 [ 851.482891][T22172] RBP: 0000000000000000 R08: ffffc9000d6bfe0f R09: 1ffff92001ad7fc1 [ 851.490865][T22172] R10: dffffc0000000000 R11: fffff52001ad7fc2 R12: 00007fffffffefb0 [ 851.498844][T22172] R13: 0000000000000050 R14: ffffc9000d6bfdc0 R15: 0000000000000000 [ 851.506824][T22172] ? _copy_from_user+0xa1/0x170 [ 851.511691][T22172] _copy_from_user+0xf4/0x170 [ 851.516376][T22172] __sys_bpf+0x2ea/0x780 [ 851.520635][T22172] ? bpf_link_show_fdinfo+0x380/0x380 [ 851.526021][T22172] ? lock_chain_count+0x20/0x20 [ 851.530878][T22172] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 851.536870][T22172] __x64_sys_bpf+0x78/0x90 [ 851.541302][T22172] do_syscall_64+0x4c/0xa0 [ 851.545720][T22172] ? clear_bhb_loop+0x60/0xb0 [ 851.550401][T22172] ? clear_bhb_loop+0x60/0xb0 [ 851.555080][T22172] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.560982][T22172] RIP: 0033:0x7fd04439f559 [ 851.565416][T22172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.585027][T22172] RSP: 002b:00007fd0451c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 851.593467][T22172] RAX: ffffffffffffffda RBX: 00007fd044625fa0 RCX: 00007fd04439f559 [ 851.601451][T22172] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 851.609425][T22172] RBP: 00007fd044436b20 R08: 0000000000000000 R09: 0000000000000000 [ 851.617400][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.625371][T22172] R13: 00007fd044626038 R14: 00007fd044625fa0 R15: 00007ffdc16da5e8 [ 851.633356][T22172] [ 851.636615][T22172] Kernel Offset: disabled [ 851.640926][T22172] Rebooting in 86400 seconds..