last executing test programs: 10.540325305s ago: executing program 3 (id=2286): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x1, 0x3, 0xffff, 0x4}}, 0x80, 0x0}, 0x4048850) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095b8fb2310cc2e1e8471f2bd4dce08dad5761a83190371fc216c77ec77fee4b0132bc596daabb57c61b6b871bdb29e681259b5710ecfc5cf1015dfe8c932aa2a7b8d1881ec1f95dbc5a1bf3f49f511edc628ce3e3a05a5eb959fee6dded48401a5211110a0f6b62aaa542c83ad359906952a68f8094d9072e05d869decea8b39c5d53743dc66e75b646dd33a321d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x100) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x801c581f, &(0x7f0000000040)=0xff57000000000600) (async) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000000c0), 0x2, 0x0) 10.365516249s ago: executing program 3 (id=2287): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb01001800000000000000780000007800000003000000000000000400000d0000000003000000040000000d000000000000000142993377b10000000100000008000000050000000000000000000003000000000100000001000000100100000300000000000008050000000d0000000000000e02000000000000000b0000000000001203000000010000000000000b0100"], &(0x7f0000000c40)=""/243, 0x93, 0xf3, 0x1, 0x4}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r2, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf0200000000000085000000cc000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0xed, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000900), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={r1, 0x58, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r9}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={r5, 0xe0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000e80)=[0x0, 0x0], &(0x7f0000000ec0)=[0x0], 0x0, 0x91, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) sendmsg$inet(r6, &(0x7f0000001300)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="c8cd7a7b873053e08b10696b88838ba35500eebeee58c50f525446889706331d3e5ad6346ccda605a7da934c6dc978994c7153eaa74d16884db8046c4c4962a53faa56076a7f1e9f62024b222d4f8a843fce72625ec532", 0x57}, {&(0x7f0000000340)="88a100e2961cc299521f3cb0b221b3e077c9614835cad4551c8c83749f09338d0e9f43d8d5b3eb03b7c4765998316aa71308587151e22344cb2882104323609aefa9f25af1f49c86c8c245db6707abc2a2d6483e742ed493f54949ea6e039189e7ad78ac1575572aa60bc12afc291f19521522f9b0181d8c6369ae5b6069b4e26c75f210c35fa5566218267f2cc3f9f51c3b1da0bb7007103eebb4e0ac99611c35a76df94b20d91b45af5960ddd940dab10b238fdcd5706a41eb85e034964feefb3c4a3386b707058fef5967925015118e739c739eab48", 0xd7}, {&(0x7f0000000540)="169b477b232f3006f8f2619a20199ef8ce705a3cb0e0a6d0d8abcbfc433756b734f1163ba7e2c7d84dc8b84a45ccf4f6702d1f067ad258d502d9b73a6034c8a511a85dc141b2ade0d036968fc1619b4b1cef63c27a52a309d1a05c8d7f82662ef5c55c7b8946537edf973d4ba9e49e4a8de7af3b03063faf405d63bedb0e7bc205ee7c0e0ce5488d05a712a6af295770181b343155e081259d29918d52", 0x9d}], 0x3, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @broadcast, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x72f43a3b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x38ceb016}}], 0xa8}, 0x40010) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x32}, 0x28) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r13, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) r15 = socket$kcm(0x10, 0x2, 0x0) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x9, 0x11, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x4c, '\x00', r7, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r14, r5, 0x5, &(0x7f0000001480)=[r11, r11, r11, r11, r11, r11, r11], &(0x7f00000014c0)=[{0x2, 0x3, 0x2, 0xb}, {0x0, 0x1, 0x7, 0x9}, {0x1, 0x3, 0x5, 0x1}, {0x4, 0x3, 0x3, 0x4}, {0x0, 0x2, 0x9, 0x3}], 0x10, 0x42585780}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r17, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r18, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023fe8000"], 0xfdef) r19 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x4, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x800}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000001680)='syzkaller\x00', 0xffffffff, 0xce, &(0x7f00000016c0)=""/206, 0x40f00, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000001800)={0x5, 0x9, 0x3bd, 0x3}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001840)=[{0x1, 0x4, 0x3, 0x8}, {0x5, 0x3, 0xa, 0x1}, {0x4, 0x2, 0xb, 0xc}, {0x4, 0x5, 0x1, 0x7}, {0x2, 0x2, 0x5, 0x1}, {0x1, 0x1, 0x1, 0x4}, {0x4, 0x1, 0x5, 0x4}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001600)={@cgroup=r18, r16, 0x4, 0xc, r5, @void, @value=r19}, 0x20) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020"], 0xfe33) sendmsg$inet(r12, &(0x7f0000000000)={0x0, 0xffffffffffffffef, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.333355415s ago: executing program 3 (id=2294): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x462, 0x1, @perf_config_ext={0x8, 0xe}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = gettid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0xb7, 0xf9, 0x0, 0x0, 0x2, 0x200, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0xc}, 0x4000, 0x40, 0x3, 0x4, 0x2, 0x6, 0x400, 0x0, 0x3, 0x0, 0xfffffffffffffff9}, r5, 0x9, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 9.020274633s ago: executing program 4 (id=2296): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/210, 0xd2}, {0x0}], 0x2}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef4310000", 0x17}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 8.882242496s ago: executing program 2 (id=2297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b008400000000000c26f60762cdf3630000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x0, 0x0}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000c0b443546e5098e2004f000000090000000200000000000008050000000d0000000000000e03000000010000000b0000000100000f030000000500000005000000faffffffadd1860c00000000000007000000000b0000000000000803000000000030305f307f034ad843731ea2d459168009007a88e820bbfa94acac440dd402045ac22f5621e89de49e03b7867c31ce44b27ec104b423a994efd133744ab0b8148060d7a8eb9e1ad4e01a7ceaafe150eb86bd5b83948344b1cde1642366616174c061"], &(0x7f00000007c0)=""/201, 0x71, 0xc9, 0x1, 0x8, 0x10000, @value=r4}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x29, 0x2, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.75182025s ago: executing program 3 (id=2298): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) (async) syz_clone(0xef220100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 8.578635724s ago: executing program 4 (id=2299): r0 = perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x2, 0xb, 0x1, 0x0, 0x0, 0x21, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000040)}, 0x2000, 0x8, 0xcbf1, 0x2, 0xffffffff7fffffff, 0x4, 0xf, 0x0, 0xdf, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000280)='\x00') r1 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f0000f299a032ef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.253342928s ago: executing program 4 (id=2302): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b008400000000000c26f60762cdf3630000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/248, 0xf8, 0x0, &(0x7f0000000600)=""/150, 0x96}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201", 0x15}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb0100180000c0b443546e5098e2004f000000090000000200000000000008050000000d0000000000000e03000000010000000b0000000100000f030000000500000005000000faffffffadd1860c00000000000007000000000b0000000000000803000000000030305f307f034ad843731ea2d459168009007a88e820bbfa94acac440dd402045ac22f5621e89de49e03b7867c31ce44b27ec104b423a994efd133744ab0b8148060d7a8eb9e1ad4e01a7ceaafe150eb86bd5b83948344b1cde1642366616174c061332bab675164c87710e839e19a202a7b11d49c1e4441f9abfc08debed0f3524217338cc153b0f5b02be6ed80d6e9f830864539746bdfd2b280acb64e43b391acdd6ef669cd93e700663feffe267537ce2203b6517750252d88c1caadb23a721f8f81473e55"], &(0x7f00000007c0)=""/201, 0x71, 0xc9, 0x1, 0x8, 0x10000, @value=r6}, 0x28) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x29, 0x2, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.441161513s ago: executing program 0 (id=2310): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/210, 0xd2}, {0x0}], 0x2}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef4310000", 0x17}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 3.060155353s ago: executing program 1 (id=2312): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000080)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x5}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r4, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/50, 0x32, 0x0, &(0x7f0000000380)=""/133, 0x85}}, 0x10) recvmsg$kcm(r5, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.956776616s ago: executing program 0 (id=2313): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f4, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 2.527995967s ago: executing program 4 (id=2314): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x38}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, r0, 0xf, 0x20, 0x0, @void, @void, @void, @value, r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d00000000000000000000008500000005", @ANYRES32=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x1, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r5) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.38941922s ago: executing program 0 (id=2315): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x37) 2.361504271s ago: executing program 3 (id=2316): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1002, 0x3}, 0x1a2d, 0x0, 0x3ff, 0x6, 0x9, 0x3, 0x8000, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfff1}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) r1 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000002c0)={'macvlan1', 0x32, 0x38}, 0xb) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400", 0x2}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000001400000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) 2.341368892s ago: executing program 1 (id=2317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)="9b277169899fe38e8371a79c89b66260db7cf70a15b5d7b4d35c0162e6f82c1bf826fcdd3d47891a0c7587447263169d97808485e206ac92c9f1689bce9a8aed768dab158a859ab88dd0aba97dc7b1bb2774b3a24369584786f6f1deee098c46061aa94ccf1b7d046576c1f12b9561238bf00c5716c4648323894998cc44e3c7986d688d214f67886f3e37c86925b1a15f4aa3b7f2ff953803d520b15000cbd12e42e2bb1039e49973dd944f1de5489a84c49fa025", 0xb5}, {&(0x7f00000000c0)="6c3b3a11be7fbd3e8ccaf60ff19e026187b83f633524093662800f06a1d09c5d2ab5db7de97806f6c77823e8ab3f297e81e308c5e5def4f5db125db7e079bd367bad79c27ac6d505978a90c05080e39147f7a3c37eb5a0a04fea763c1248d070325f20dd2e8616b7037ec40b99b0f9b5a99430241b648047a62aa82c781e7f517a0c0e0f510a045b5dcd3819209a439881fc2459e55a704199ba727b3a3831d3fca507741422fe5e94ae60a1e1820ab299caf6f425c8bc3817278b0c77171b3af5e02bca3e2a44b5937df7ed211d773049b1b086418ed2eb888071fe9df2ec6ad3c07180fc2ee3a3c2b25c59", 0xec}, {&(0x7f0000000200)="eb67fd783c10fadb39bdea414899ba705a7176d6b86734d7650dfd0cd56e491361f6e4158be31707a49de36aaadfe93b039b214d4b95ca11ee7b8ec454ce52fe73fa73f6ba3f8e325de5b53fd168cd00bfb690abe6f900fdb656602e4652376cbdab190c5f938d5797965761241204ad5f5752c3fa745e3185e48c8c79c4fa2768fda8fd5cfdf59b023d1b163880a316e5f6f21f37cd6fa0e8071c36ce5fb5b6a030203cffed608f82b05ba7deea4eee3a1471c6b3dce8bba2", 0xb9}, {&(0x7f0000000980)="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", 0x1000}], 0x4}, 0x80) 2.209107465s ago: executing program 2 (id=2318): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x12, 0x0, 0x0, 0x2}, 0x48) 2.059454448s ago: executing program 1 (id=2319): perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000000000f37e97faad46123e5ff70103900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000a000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@x25, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001b7aef72be95319d9d8c5dd53ff54b54d56a0536c09758e5dccb2469289e935d40908cc4b6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000e0bf0698f138b171b8b50000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xd, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000208da00600010000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f00000003c0), &(0x7f0000000440)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) 1.400481215s ago: executing program 0 (id=2320): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/210, 0xd2}, {0x0}], 0x2}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000100), 0x120) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 1.378203605s ago: executing program 2 (id=2321): socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0xfffffffffffffe01}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x40}, 0x94) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x2}, 0x118d01, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x4, 0x0, 0xfe, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4408, 0x401, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x5f4a}, 0x0, 0xc, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000005adba1469ea2982fe91052c44c7d00d80f21"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r5}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0100000007000000040000000c"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x19, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r4}, 0xc) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r2, 0x8, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000001c0)='cpu.weight\x00', 0x2, 0x0) 1.137551862s ago: executing program 1 (id=2322): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x92}, 0x28) 1.136618762s ago: executing program 4 (id=2323): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24020000, 0x0, @perf_bp={0x0, 0x8}, 0x8040, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24020000, 0x0, @perf_bp={0x0, 0x8}, 0x8040, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) gettid() (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) 1.106128683s ago: executing program 3 (id=2324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b008400000000000c26f60762cdf3630000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000005000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB='\x00'/12, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x200, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r2, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/248, 0xf8, 0x0, &(0x7f0000000600)=""/150, 0x96}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201", 0x15}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)=""/201, 0x71, 0xc9, 0x1, 0x8, 0x10000, @value=r6}, 0x28) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) socket$kcm(0x29, 0x2, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.081272364s ago: executing program 2 (id=2325): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704001800000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0x41) 1.051153804s ago: executing program 0 (id=2326): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="1400", 0x2}, {&(0x7f0000000200)="754c746824f025d2231c414cae4445749372a69e20d025cfd504542729dd93c1579916870c602e193de677aaa2f8674ede1cb69a971fb03f9dfaee8d2fa7c279d2c98119ccf787af439dcfb23bcd72db224e1dc4494a615eeccd04d2bad61d8c79c5318b790267745c6e5c7b7081e947481f326fd5cb2c59c5f147975e9a0c7704c4f27871b57c92dcec5e9d41bb3906f056f10b02a6aecc6b25c2c03bd870e1d8ba8d4496df54f8c9dc6656525de37761680e1ae9498294c47349520310d112c23b12d717bb1aa82412cc76d7801e60145310c147ebc9405ec0888f1e23", 0xde}, {&(0x7f0000000300)="3b4d2bc175dba39b54e871d5758c495cdfd9b4434e340e8ac0397be1a0ddf5f105c9949395909ca6bde3d085a872323ad173f77c32b61e9b26e4b26a78f1cdf9eea7d1c56530bc76a76b19364605d96ab794296ef234135cf6dae058aceae6d552a2750ffd9ba32a73d399b07352ae2ea4d697ca398ac9fadddd2118f1936075d97c22841f5408feeea78eed22b065171d12406ff683c9420762a67a15f71d4cd16ed4da1d5d1b59e793d528886c104bf183fc97ee30ac88ad67735f773e346b73c6bbb43ed6e61a16b6e15b966b813585617ba189f2111b9af30f68e106aef57d963590edbcf8a4767a879f42f937", 0xef}], 0x3}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/51}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 832.20719ms ago: executing program 2 (id=2327): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x6b}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f0000000080)=r4, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa, 0x0, 0x5}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x94) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r4, 0x20, &(0x7f00000004c0)={&(0x7f0000000340)=""/50, 0x32, 0x0, &(0x7f0000000380)=""/133, 0x85}}, 0x10) recvmsg$kcm(r5, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000180000003d030100000000009500f000000000007126000000000000bf67000000000000360602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad03000000000000720400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.343791ms ago: executing program 1 (id=2328): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b7090000ffffffb0739af0ff00000000ce09020000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.769741ms ago: executing program 4 (id=2329): socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/264, 0x108}], 0x1}, 0x40000010) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2e0a4, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff7}, 0x94) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x0, 0x9, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) 1.42822ms ago: executing program 0 (id=2330): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0xc9495724790b983a, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x37) 131.36µs ago: executing program 2 (id=2331): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x58c8, 0x4, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000200)="ba"}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYBLOB="77765299a4f98cbe21a07af6e01a5214f6303be03d872b784ec592f9c8f42e786f8aad153cbc02e8a9dc165e9f33ece3cd8e7e20dcbdbed892f35a926ec0a3cb7be10e48dab3356aafaa2d6abfa45835815f9888c6b703e4112dbc52f44b442a17b98e8e364aa17349a46bd7523cbb4609a7a8f197d4a0385e51493e7aff8e0d963b511eed8c2d0729cd9cf3532de596eb86d6fcac418d6c1caeaa87eaadb7da13aeaf93852678e2698147", @ANYRES16, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x5e, &(0x7f00000036c0)=ANY=[], 0x2128}, 0x20040804) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x5e, &(0x7f00000036c0)=ANY=[], 0x2128}, 0x20040804) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRESOCT=0x0, @ANYBLOB="7f0000017f00000a00000008000000000000", @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x40001) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRESOCT=0x0, @ANYBLOB="7f0000017f00000a00000008000000000000", @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x40001) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xfffffed1) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x3a) (async) socket$kcm(0xa, 0x2, 0x3a) recvmsg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2040) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f000801}, 0x40) perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x9, 0x80888, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x10c4da, 0x20000000000ac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, r0, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) 0s ago: executing program 1 (id=2332): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab070004000523"], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001980)={0x0, &(0x7f0000000380)=""/150, &(0x7f0000000940)="a7943296eeb8efabc03ecea4ae51d07e11786e4cd96a33255ed8da0c64c3e079e30b3561089bebea847e1ee077de7cd632a149211ab0d99ed740af0c3595bbd090ba79a71e0f53b52a9c31099527d7e25d79c2a9616ae8164493134d3f08044e1e2eb0a7a13e9c212c9ca2a4b0161208e5f655caa42df33780367583e78cfd0eb7284bcb0fd5b8ecc1ac17c34a8e304825a21d5bcda4fdaed85608b56ef3fca655ed3e7c9d7f9ce700ac55d037008725d3ab266c45151112f554c189440ef8f9a309462b886a167b828a98126676a9ba0d7ce7f1c12e0209ff0b23977f77087d5597d4097fbb11d21151559c1b792b9bceb21654b69f73eb0a44c80a7c1049b90e91a0c695e481a8732f14452e2c069dc58f4676209ada557d9340efe320ea58a78994edcd090cffa5709b1d8da1dfc8180d2d9de813de08ee987ce15a35dbe206a6ff61fd49a156d12672f3778463196100e7003a7f54925e66d504da7863f985dad39dc2a78fc57ee206bad5bd32c4418e2403bc8f64eac6911844b5c1f27b9e6bbc349d51992d7428e4c1bf236928ebb00030ebb0b7447f38fdec3288829258ec3b97c3844c2d4983277ffc623352a40962245786ea944eade05b19d6667d4f9c1f01f8709dd4172b20604cf2c0065b17b14d6ea369fcfed3e1ff73bd74c960f595743ac24e83f7d5e54b50e7948d6506c4c8758191720720e6c40d4744febe5e21f77b4077c08ae8e622ad160b3c4a60f4f084ce6fa82269d1cbb304a03559ecff19fc5390d6851e74a5e22e81cc1ec1088ab1da49376fdc482979f7650c99a6afd5ab7308ba3b9b7420557fef63b852e7ba0fb6765f1b9fdd08edd6d50aad9497d6b92a2b14d02d0a8455aaf77472f327ac07f5cded9e58ee6b7eb53615cf77f02d9ea87ae969e4728f233197241ce78dd7e476ef716d243419577af3f9e365571f3f3f65e2e0b04293140a6ae00b1b959d02ac9b90c15cd1668700b0528054b00362f3a71730f15191722cdf4c74a467c32feba71d0b8caf07ed4900772fa7e3c123268f2ba916962c8da305996b7d516319387026da008a533e4d8dea7ba48262471269911f5cf11dc5946c17a9e4ca670c8c526c144c712a30a610af45908c7d5b9a4af133bb7b37425cbeaeb241dec048ff5c90e1a8b6f31cebacd763f3cb8845c3ad5a89c47963a3a49234bfb0fa66741f5e12fe04a5f1309e39fdf558197c9e905fe98e2fe50c35f3739b9af40bb770947fa9a8111ceea43f039ffe06e1f4b614f5725d39767c0c5d7e4f23fd14d8407db06881e5c6cdc4fe149ecb1b488a2086cdc197e018ac9ebb9455faca65929e93d1c448b6b41c0c7703efbadeb8584591711973c717a624b9c5f2e0a5586d93c7de6ea84835065265a77db831d80415c9181c46ef4e6e2a5672ec2830d7ce71da6a0e64a602c9b410365d85a71414e76565baaa017f86b5729f31f3ddc8dae832a6b73effb80af42b12bbb4c9e6c2d7aa61699834acbd1df0ac6cc7f7ddfa20c49749c514baeff4b6261fa347b6198396825465c6f307dbb17912dd28bb410ad635b47b6f8986abe7a35192e0a875a6ebdfe8fbe42752083cda835eea499e4b0e3982535ffb9811d629cc87990d080b016a05c71cb6fe1d260c2261069193ceff4c654fa563ef73726a18f5d3d2c04b4937ec03f6061c4db462ccf0b2d6584196e5e86075e8068273c642e991a01fbccaa8a1f1533b0ac703eb75e3e28bc04e127f0f726232965c5acf9569d0d2f6150db047531bd85838ea8ac3644508bd7a043b86417b08a6e91e5055517f4f160ed7bc4bbfa73916d31ef042791b4416c083f626167b67068766c41f86a4e12ace9049d6a88f912a36d37787601b8c16ae7fc86cf6483b9a071e68dc13aab90120aff0405f5c414892fa4f919cf4abcf51f4bd5c54f01a3254689cf4b6608a0353736855116c8d4f1b17ff4c355c48b402f858f4346d0f57f818ec2013ea67a43995ff6c3dcf973df4cf84db0d655a550768924cad7d10d3e9c9fe70152c8fd6567b5ad629c809079406a629c8f03947e0aa5c36f1a8e737ba86b258240a2f75e8a080731845821df9f50f6036f54911b43c7350b30e41df4acba3e97cc4d641d54485dc49e8de3ef3daaaf2927ea91373c676322d1ae89d574c8955dfadd0294347c6d2665a27a7627d734b20b712edaadf9b050273c4458dd70eab21317389a8329c69ed2e228bc04c58a5c5de1275f2acfff21fde96e48fde502fb8381fa1dfc79c0e5b45b666f1790a900ceb792adb8bbe55e76225f658c958d539b1099335b6ae675ed376d0a4f49a8fd27e3b7335f92ba755c977817a2dd3b4151c1f205f6362f129e12b2c48a584b417f1e48869d0dfc581f8be8bf31bee2723c37edeec89bcf713a184eb8562dcdc98d06d99ad8c30d545b34fb4ef375738097066df32c092571a18fbef74940910426da87b832122d4d313de93f323c296fa44fd54131f413b6d690c5e0656ed04f00d57a44021a9d582add851b15df3a0c6643ff55dabb2792833363551ba187a08b60511bf283027484f60aa1b28bf5ddcc1d6ceb853818d583d7e8b49794df18dacf1c19c27410ecb20c57ee68fe1c17698d52883a2f3520ef837cece19a2b575c0f69aa61a4ddd8964eb9f8542cf5b105b02870198d77dfc2179f915480bd1f07dc7ca162cddc5e3c5dafe3669142134b4a909037fd0d437e6f4ae55f2b533cfa232cd9f27d05839657b324ab181985ed1f2053859113f21c241518543ac8b1bcf93cfd3a9e611e72dd4d9542157923d23d4c10d15e24142d3026accef848d95522569d88bb4c6c52a6ff30761b51dfbaa11e210838d60a46a51d36378ffd0fc559a04bda56befb87d3df62805c603317fe3ae209af7d39e8cb46d575787bb91ffab1fa0b9e1a3220f6bf0bb04123d84382beeb2409c486dcb6d599f2a89f65226d28b0a2ba4349b991dc857ec63c9b663edc70522048bf7a95fb9599082744020ac49eef9d4216df6958e1b586f816345e939e26dedb437b10c4e1df88def122249ac679d9dd9f1c06707d023f42c02630770fcb295cbf406519a4b8e0fd9ff46299bb50271f0b3cdca848ca5226d6cef4412943b362c9df0cb6dac54428d83d8fbce91f6aff9a147b9991ade18e63c2462c986811044e45efd79cdeeb12911789609bb38bd370bb9547d989fa39aaab47284cc3a7ddda8f056b8998c15cd0fe0327bb3f0480e5962f645ee529f23947a33868e799c7f903d68c35804e15fd49f19913a50703d86ed41a4a4af90902cf7dfdedf3211fcbc1dfee085c51555ab2db3ae0fd515705c4b5e617d62c0833a507be6aa4b66129ea8f7241e44f153d60e082ee8aef78738cffb10174c3148d87f1609f4a173fc54a32ce74834d277376957a96212943604975b2776dd566ab0e9f10100e82bf6166f4cb0801d1581d9f424a4973ec161ebb985372a2d508571d46eac3ea9557fe8ea9c999e2e5b972e6289eb2ce219c090898f50af7bb052e88560fd666874ac1a1b40cee226af086304ee78f56347f40abf5d34e2e10fe5ddbb819a888b0df41d0068aa6f4dd3723cdc8211ac9c93b7432422a1691a25749e01e66ad5c42f6ad19ab47c899addbaf2274a062f748a84ac6417bde4af971f82a86026a61c91b21089570d93293c25e35161b86994f9d6262c1106413ae210ffbd0fc4319d36b9daae1ec2d97d32bcd9d554388b153b1f8fdb9e1f29e54822d3babc29c9e0829513ec3c53679e08c248839fb6c2d545950bc094e8eb5b7156af635709eaff5b010171f1fb5100d4a9918374fc2da51cc78f3338a39de4e7cbe4c6bb2ac69cc9b80b4a72dec8aca190a51d1d5da612cac2767d78b7f10db0bedc189c6c581a9751719dd7ad493d6bc2753132c79a0441656d812211f2d653b26c6b74eb2b8b2f3bfa5b59a8c2f1ba0f2b0657379cfa7bc0c1e884f44f91ba3f6180ee164de3c830a70e91cff6aca7a84d99cf776184bdd1b18a34cf5aa1811adf55f1d18840b96fe3aadde4ab95d9a99719b11b5e64549d6c6506efac36c3e6da55d62df2e772a1c67de4aa925707f1f03238c2b47aac8f1bd1f30c1578a0c6370c5be2b22894cb5df89ef7240b441cc1ec4bf779391d08835490e102f72f35ba28627fe8d4d201b20aa019ad01b01c83621166dfff6fb84c60d26f5d11840ff90c691e4794b7ba6f875857e88f37bed9edf5a4d9be230188065a892bfaf5790fbb2612fe190f1f65a265c1ebc385e82733c1ff7eec509be8cdc44e8aa0a71bac663332afc5fa58d5b932a32f07582ca7910f0c29edec1af47f9383d613772ce49ab395e0f27a64aa5d812323ab29e9a2eb6c1bf967a359b9375f414ba6fe902ead9636dfd530d8ecf25916f50aaae51ececde635cf34c42f40dfc0c6bb7bb76419b33aa76c58729dd40f763d7fa800c35c6783ca859eb5c6e91f4ec4b7cba5f3d69c0d87e3e47d2ad04e7ca7f33392ee82138b573dac413074b583a7bb2ac7c42212f2140bec2e92da61240a3f1d12861be0cb13e2aaf92dc410e2549011b0da9326430415b84a666a22acec8fce5de44d44f43482b447960da7813c30b20b789616be845b5437eec45ac22734bc3efdaf71e9e843ae1bdffa8b511d5d19354b7e3dabffdaed510ddac8154e5f49389e206360d8cc8c898c0d5dd08716d33cf263bbd6a9f3a6f764675d5c3077a31c4902f759a8abb4f1e223157231d36905013e57c43691b815f691e4a97eb66974c26074313a213b9d5a0f034bed48bc165093b9f972640b2e1f88e9a2b280caa6bdbb504f35232c195a21c95f08f7bf0a81b273b46693b645c457b915fa6c60183fc34efd9145b496075e9fa91e280d13e7e0539ccb10ad90ec0e5961188064c2e0763e715668a8589399ca0e5acd26f7675d49d3b386847176116ea3395c8202e21255dbbeb0a4d41c5a7737248c56066a4030f71cc94e113f3405cb8c814d73f7c48d90f8a264d78b7fa55db9576977665f2e5abdba44612580143952cd7a9d985de51cab6f923ab1e0492527d26e4245073faaf58f86fc11e464465fbfd5ad2ae7079595ccf52efebef1895626f0b3d87014f572b8ca1a9347e50136b6bc9139c23ed6b0862da0e2bbdf6f4926d116dbf69324f6347910578cb33353457463a760a0e3e75e7e00adb30cbfb529adaf4071513141af87d777db45ec0a31e061f6edce6c1b0aed707c249904bcf9fd8ec6d5fa2ed3c21da188607595b3c80d2ce1b5c7886bffd4dcd0cbcf1f1c9437c9db93b1e5ddaeda462da30f078e03cdea53cee11459513c4a5b9660325b050276d97f1fdcbea22dcfa46ad61e2a581f45887dcb8734c90a7f86f5b8ac87b74911960ab7a19be4d0f7b2eda3b09cd769f092472b413d68b37126366268c9637e5430bfa0e93163b9f8a5d48c35b5f63052908afc732da9d61c0ab865a17711ca4d4341a68cf0e904e3f2588118be1364ee624a59fd3821d3aa141f99025e50ec0710776e3db09ed73a7baad02dce925f70363e576bf183be051eb55d3a4a268267c7633649d68d56e3670b103c365946f6b138caf9dcf6a069fa8c4e76c07437e2a04eb104fed320e40161cd18ba266dc0ef3b06344f0e5f77b18cac63de6fdf5dbf9baf39ec772df465ba6d81a0e73af5842be3e6090ac83467f60218ff4e0e4e9dc68348a70f9700a214ab5b9fbb1d4139277db1217338352d4413f546386b0625db199697e259f78de057d12ceb7929", &(0x7f0000001940)="dec8c1d92a8394d99cc54c666166869a5e99d637d6521c0cb0c2", 0xfffffffc, r3}, 0x38) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0xf) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)=r2}, 0x20) kernel console output (not intermixed with test programs): link: 60 bytes leftover after parsing attributes in process `syz.2.835'. [ 296.521377][ T7253] netlink: 'syz.0.844': attribute type 21 has an invalid length. [ 296.540023][ T7253] FAULT_INJECTION: forcing a failure. [ 296.540023][ T7253] name failslab, interval 1, probability 0, space 0, times 0 [ 296.571601][ T7253] CPU: 0 PID: 7253 Comm: syz.0.844 Not tainted syzkaller #0 [ 296.579057][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.589160][ T7253] Call Trace: [ 296.592473][ T7253] [ 296.595443][ T7253] dump_stack_lvl+0x188/0x24e [ 296.600176][ T7253] ? show_regs_print_info+0x12/0x12 [ 296.605427][ T7253] ? load_image+0x410/0x410 [ 296.609980][ T7253] ? __might_sleep+0xd0/0xd0 [ 296.614606][ T7253] ? __lock_acquire+0x7c40/0x7c40 [ 296.619713][ T7253] should_fail_ex+0x390/0x4c0 [ 296.624441][ T7253] should_failslab+0x5/0x20 [ 296.628979][ T7253] slab_pre_alloc_hook+0x59/0x300 [ 296.634044][ T7253] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 296.639982][ T7253] kmem_cache_alloc_node+0x5a/0x310 [ 296.645218][ T7253] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 296.651167][ T7253] ? __alloc_skb+0xf9/0x7d0 [ 296.655742][ T7253] __alloc_skb+0xf9/0x7d0 [ 296.660130][ T7253] netlink_ack+0x373/0x1160 [ 296.664687][ T7253] ? rcu_read_unlock_special+0x510/0x510 [ 296.670390][ T7253] ? netlink_dump+0xcd0/0xcd0 [ 296.675129][ T7253] netlink_rcv_skb+0x26d/0x440 [ 296.679943][ T7253] ? rtnetlink_bind+0x80/0x80 [ 296.684688][ T7253] ? netlink_ack+0x1160/0x1160 [ 296.689520][ T7253] ? __rcu_read_unlock+0x78/0xd0 [ 296.694513][ T7253] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.699768][ T7253] netlink_unicast+0x7ad/0x920 [ 296.704594][ T7253] netlink_sendmsg+0x8ad/0xbd0 [ 296.709410][ T7253] ? lockdep_hardirqs_on+0x94/0x140 [ 296.714659][ T7253] ? netlink_getsockopt+0x550/0x550 [ 296.719938][ T7253] ? security_socket_sendmsg+0x56/0xa0 [ 296.725451][ T7253] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 296.730783][ T7253] ? security_socket_sendmsg+0x7c/0xa0 [ 296.736292][ T7253] ? netlink_getsockopt+0x550/0x550 [ 296.741543][ T7253] ____sys_sendmsg+0x5ed/0x9a0 [ 296.746361][ T7253] ? __sys_sendmsg_sock+0x30/0x30 [ 296.751438][ T7253] ? __import_iovec+0x306/0x510 [ 296.756345][ T7253] ? import_iovec+0x6f/0xa0 [ 296.760917][ T7253] ___sys_sendmsg+0x2a2/0x360 [ 296.765656][ T7253] ? __sys_sendmsg+0x2a0/0x2a0 [ 296.770487][ T7253] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 296.776541][ T7253] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 296.782747][ T7253] ? lockdep_hardirqs_on+0x94/0x140 [ 296.788003][ T7253] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 296.793517][ T7253] __se_sys_sendmsg+0x1c3/0x2b0 [ 296.798419][ T7253] ? ct_nmi_exit+0x145/0x1c0 [ 296.803067][ T7253] ? __x64_sys_sendmsg+0x80/0x80 [ 296.808060][ T7253] ? lockdep_hardirqs_on+0x94/0x140 [ 296.813309][ T7253] do_syscall_64+0x4c/0xa0 [ 296.817766][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 296.822487][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 296.827206][ T7253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.833142][ T7253] RIP: 0033:0x7fce3039e0d9 [ 296.837598][ T7253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.857242][ T7253] RSP: 002b:00007fce312c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.865695][ T7253] RAX: ffffffffffffffda RBX: 00007fce30625fa0 RCX: 00007fce3039e0d9 [ 296.873704][ T7253] RDX: 0000000000000010 RSI: 0000200000000940 RDI: 0000000000000003 [ 296.881707][ T7253] RBP: 00007fce312c8090 R08: 0000000000000000 R09: 0000000000000000 [ 296.889711][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.897713][ T7253] R13: 00007fce30626038 R14: 00007fce30625fa0 R15: 00007ffe089b8fe8 [ 296.905735][ T7253] [ 297.433705][ T7267] netlink: 'syz.1.846': attribute type 21 has an invalid length. [ 297.450248][ T7267] netlink: 128 bytes leftover after parsing attributes in process `syz.1.846'. [ 297.461953][ T7267] netlink: 'syz.1.846': attribute type 5 has an invalid length. [ 297.476745][ T7267] netlink: 'syz.1.846': attribute type 6 has an invalid length. [ 297.496648][ T7267] netlink: 3 bytes leftover after parsing attributes in process `syz.1.846'. [ 297.737950][ T7276] netlink: 'syz.0.848': attribute type 21 has an invalid length. [ 297.770584][ T7281] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 298.201530][ T7288] netlink: 'syz.0.852': attribute type 21 has an invalid length. [ 298.273802][ T7283] netlink: zone id is out of range [ 298.280140][ T7283] netlink: zone id is out of range [ 298.321723][ T7288] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 298.329229][ T7283] netlink: zone id is out of range [ 298.347850][ T7283] netlink: zone id is out of range [ 298.379057][ T7283] netlink: zone id is out of range [ 298.410613][ T7283] netlink: zone id is out of range [ 298.437517][ T7283] netlink: zone id is out of range [ 298.468857][ T7283] netlink: zone id is out of range [ 298.555748][ T7283] netlink: zone id is out of range [ 298.582538][ T7283] netlink: zone id is out of range [ 299.945821][ T7318] __nla_validate_parse: 9 callbacks suppressed [ 299.945874][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.863'. [ 299.967653][ T7320] netlink: 2 bytes leftover after parsing attributes in process `syz.3.863'. [ 300.638139][ T7326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.865'. [ 300.685621][ T7326] netlink: 2 bytes leftover after parsing attributes in process `syz.2.865'. [ 300.713088][ T7324] netlink: 128 bytes leftover after parsing attributes in process `syz.3.864'. [ 300.728273][ T7324] netlink: 3 bytes leftover after parsing attributes in process `syz.3.864'. [ 300.743535][ T7324] netlink: 763 bytes leftover after parsing attributes in process `syz.3.864'. [ 300.997520][ T7340] FAULT_INJECTION: forcing a failure. [ 300.997520][ T7340] name failslab, interval 1, probability 0, space 0, times 0 [ 301.073478][ T7340] CPU: 1 PID: 7340 Comm: syz.4.869 Not tainted syzkaller #0 [ 301.080874][ T7340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.090968][ T7340] Call Trace: [ 301.094285][ T7340] [ 301.097254][ T7340] dump_stack_lvl+0x188/0x24e [ 301.101987][ T7340] ? show_regs_print_info+0x12/0x12 [ 301.107236][ T7340] ? load_image+0x410/0x410 [ 301.111791][ T7340] ? verify_lock_unused+0x140/0x140 [ 301.117049][ T7340] ? ct_nmi_exit+0x145/0x1c0 [ 301.117419][ T7332] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.868'. [ 301.121659][ T7340] should_fail_ex+0x390/0x4c0 [ 301.121693][ T7340] should_failslab+0x5/0x20 [ 301.121711][ T7340] slab_pre_alloc_hook+0x59/0x300 [ 301.121737][ T7340] kmem_cache_alloc+0x56/0x2f0 [ 301.121755][ T7340] ? skb_clone+0x1e7/0x370 [ 301.121806][ T7340] skb_clone+0x1e7/0x370 [ 301.121837][ T7340] __netlink_deliver_tap+0x3e4/0x7e0 [ 301.121877][ T7340] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.121908][ T7340] netlink_deliver_tap+0x19c/0x1b0 [ 301.121949][ T7340] netlink_sendskb+0x64/0x130 [ 301.121977][ T7340] netlink_ack+0xcd1/0x1160 [ 301.122020][ T7340] ? netlink_dump+0xcd0/0xcd0 [ 301.122046][ T7340] ? lockdep_hardirqs_on+0x94/0x140 [ 301.122067][ T7340] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 301.122100][ T7340] netlink_rcv_skb+0x26d/0x440 [ 301.122127][ T7340] ? rtnetlink_bind+0x80/0x80 [ 301.122157][ T7340] ? netlink_ack+0x1160/0x1160 [ 301.122213][ T7340] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.122247][ T7340] netlink_unicast+0x7ad/0x920 [ 301.122285][ T7340] netlink_sendmsg+0x8ad/0xbd0 [ 301.122323][ T7340] ? netlink_getsockopt+0x550/0x550 [ 301.122356][ T7340] ? apparmor_socket_sendmsg+0x8a/0x330 [ 301.122387][ T7340] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 301.122408][ T7340] ? security_socket_sendmsg+0x7c/0xa0 [ 301.122433][ T7340] ? netlink_getsockopt+0x550/0x550 [ 301.122464][ T7340] ____sys_sendmsg+0x5ed/0x9a0 [ 301.122502][ T7340] ? __sys_sendmsg_sock+0x30/0x30 [ 301.122537][ T7340] ? __import_iovec+0x306/0x510 [ 301.122573][ T7340] ? import_iovec+0x6f/0xa0 [ 301.122604][ T7340] ___sys_sendmsg+0x2a2/0x360 [ 301.122639][ T7340] ? __sys_sendmsg+0x2a0/0x2a0 [ 301.122715][ T7340] __se_sys_sendmsg+0x1c3/0x2b0 [ 301.122747][ T7340] ? __x64_sys_sendmsg+0x80/0x80 [ 301.122791][ T7340] ? syscall_enter_from_user_mode+0x2a/0x80 [ 301.122818][ T7340] do_syscall_64+0x4c/0xa0 [ 301.122843][ T7340] ? clear_bhb_loop+0x60/0xb0 [ 301.122868][ T7340] ? clear_bhb_loop+0x60/0xb0 [ 301.122895][ T7340] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.122920][ T7340] RIP: 0033:0x7fca2479e0d9 [ 301.122939][ T7340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.122956][ T7340] RSP: 002b:00007fca25688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.122979][ T7340] RAX: ffffffffffffffda RBX: 00007fca24a25fa0 RCX: 00007fca2479e0d9 [ 301.122994][ T7340] RDX: 0000000000000010 RSI: 0000200000000940 RDI: 0000000000000003 [ 301.123008][ T7340] RBP: 00007fca25688090 R08: 0000000000000000 R09: 0000000000000000 [ 301.123021][ T7340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.123038][ T7340] R13: 00007fca24a26038 R14: 00007fca24a25fa0 R15: 00007ffcdd0726d8 [ 301.123068][ T7340] [ 301.720497][ T7349] validate_nla: 9 callbacks suppressed [ 301.720533][ T7349] netlink: 'syz.2.872': attribute type 29 has an invalid length. [ 301.877524][ T7349] netlink: 'syz.2.872': attribute type 29 has an invalid length. [ 301.939028][ T7351] netlink: 'syz.2.872': attribute type 29 has an invalid length. [ 302.207055][ T7358] can: request_module (can-proto-0) failed. [ 302.262082][ T7361] netlink: 'syz.2.872': attribute type 29 has an invalid length. [ 302.761587][ T7367] netlink: 'syz.2.875': attribute type 21 has an invalid length. [ 304.235180][ T7383] netlink: 'syz.2.880': attribute type 21 has an invalid length. [ 304.291958][ T7383] netlink: 132 bytes leftover after parsing attributes in process `syz.2.880'. [ 304.347812][ T7385] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 304.369611][ T7385] netlink: 2 bytes leftover after parsing attributes in process `syz.2.880'. [ 304.990324][ T7394] netlink: 'syz.0.883': attribute type 21 has an invalid length. [ 305.035166][ T7394] FAULT_INJECTION: forcing a failure. [ 305.035166][ T7394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.137366][ T7397] netlink: 'syz.1.886': attribute type 29 has an invalid length. [ 305.168410][ T7394] CPU: 1 PID: 7394 Comm: syz.0.883 Not tainted syzkaller #0 [ 305.175792][ T7394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.185888][ T7394] Call Trace: [ 305.189201][ T7394] [ 305.192171][ T7394] dump_stack_lvl+0x188/0x24e [ 305.196906][ T7394] ? show_regs_print_info+0x12/0x12 [ 305.202181][ T7394] ? load_image+0x410/0x410 [ 305.206734][ T7394] ? __lock_acquire+0x7c40/0x7c40 [ 305.211839][ T7394] should_fail_ex+0x390/0x4c0 [ 305.216583][ T7394] _copy_from_user+0x2c/0x170 [ 305.221312][ T7394] kstrtouint_from_user+0xda/0x170 [ 305.226477][ T7394] ? kstrtol_from_user+0x190/0x190 [ 305.231653][ T7394] proc_fail_nth_write+0x8b/0x200 [ 305.236716][ T7394] ? proc_fail_nth_read+0x220/0x220 [ 305.241965][ T7394] ? common_file_perm+0x171/0x1c0 [ 305.247036][ T7394] ? proc_fail_nth_read+0x220/0x220 [ 305.252273][ T7394] vfs_write+0x2dc/0x9a0 [ 305.256570][ T7394] ? file_end_write+0x250/0x250 [ 305.261512][ T7394] ? __fget_files+0x28/0x460 [ 305.266152][ T7394] ? __fget_files+0x3fc/0x460 [ 305.266351][ T7397] netlink: 'syz.1.886': attribute type 29 has an invalid length. [ 305.270869][ T7394] ? __fdget_pos+0x2ae/0x360 [ 305.283279][ T7394] ? ksys_write+0x70/0x260 [ 305.287759][ T7394] ksys_write+0x14d/0x260 [ 305.292152][ T7394] ? __ia32_sys_read+0x80/0x80 [ 305.296979][ T7394] ? syscall_enter_from_user_mode+0x2a/0x80 [ 305.302918][ T7394] do_syscall_64+0x4c/0xa0 [ 305.307383][ T7394] ? clear_bhb_loop+0x60/0xb0 [ 305.312386][ T7394] ? clear_bhb_loop+0x60/0xb0 [ 305.317120][ T7394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.323075][ T7394] RIP: 0033:0x7fce3035e90e [ 305.327576][ T7394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.347229][ T7394] RSP: 002b:00007fce312c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.355685][ T7394] RAX: ffffffffffffffda RBX: 00007fce312c86c0 RCX: 00007fce3035e90e [ 305.363704][ T7394] RDX: 0000000000000001 RSI: 00007fce312c80a0 RDI: 000000000000000c [ 305.371761][ T7394] RBP: 00007fce312c8090 R08: 0000000000000000 R09: 0000000000000000 [ 305.379776][ T7394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.387789][ T7394] R13: 00007fce30626038 R14: 00007fce30625fa0 R15: 00007ffe089b8fe8 [ 305.395832][ T7394] [ 305.585760][ T7390] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.884'. [ 305.597331][ T7390] net_ratelimit: 22 callbacks suppressed [ 305.599518][ T7390] netlink: zone id is out of range [ 305.612797][ T7390] netlink: zone id is out of range [ 305.618844][ T7390] netlink: zone id is out of range [ 305.632625][ T7390] netlink: zone id is out of range [ 305.638874][ T7390] netlink: zone id is out of range [ 305.654162][ T7390] netlink: zone id is out of range [ 305.693395][ T7390] netlink: zone id is out of range [ 305.708282][ T7390] netlink: zone id is out of range [ 305.734793][ T7390] netlink: zone id is out of range [ 305.739974][ T7390] netlink: zone id is out of range [ 305.817133][ T7397] can: request_module (can-proto-0) failed. [ 306.461637][ T7420] netlink: 128 bytes leftover after parsing attributes in process `syz.1.895'. [ 306.511639][ T7420] netlink: 3 bytes leftover after parsing attributes in process `syz.1.895'. [ 306.535424][ T7431] netlink: 763 bytes leftover after parsing attributes in process `syz.1.895'. [ 306.621643][ T7435] netlink: 164 bytes leftover after parsing attributes in process `syz.2.897'. [ 306.804562][ T7443] validate_nla: 7 callbacks suppressed [ 306.804581][ T7443] netlink: 'syz.4.898': attribute type 3 has an invalid length. [ 306.986237][ T7443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.898'. [ 307.228704][ T7445] netlink: 763 bytes leftover after parsing attributes in process `syz.2.899'. [ 309.049044][ T7465] netlink: 'syz.4.904': attribute type 29 has an invalid length. [ 309.176413][ T7465] netlink: 'syz.4.904': attribute type 29 has an invalid length. [ 309.204887][ T7469] netlink: 'syz.4.904': attribute type 29 has an invalid length. [ 309.356959][ T7465] netlink: 'syz.4.904': attribute type 29 has an invalid length. [ 309.482641][ T7470] can: request_module (can-proto-0) failed. [ 310.092282][ T7486] netlink: 'syz.3.913': attribute type 21 has an invalid length. [ 310.133579][ T7486] netlink: 128 bytes leftover after parsing attributes in process `syz.3.913'. [ 310.186950][ T7486] netlink: 'syz.3.913': attribute type 5 has an invalid length. [ 310.224258][ T7486] netlink: 'syz.3.913': attribute type 6 has an invalid length. [ 310.232156][ T7486] netlink: 3 bytes leftover after parsing attributes in process `syz.3.913'. [ 310.298230][ T7494] netlink: 763 bytes leftover after parsing attributes in process `syz.3.913'. [ 310.371108][ T7500] netlink: 'syz.2.915': attribute type 21 has an invalid length. [ 311.116425][ T7506] netlink: 'syz.1.916': attribute type 10 has an invalid length. [ 311.124435][ T7506] netlink: 156 bytes leftover after parsing attributes in process `syz.1.916'. [ 313.242888][ T7520] netlink: 'syz.2.921': attribute type 15 has an invalid length. [ 313.269178][ T7520] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.921'. [ 313.496871][ T7523] device sit0 entered promiscuous mode [ 315.858273][ T7555] netlink: 'syz.4.931': attribute type 21 has an invalid length. [ 315.911703][ T7557] netlink: 763 bytes leftover after parsing attributes in process `syz.3.930'. [ 316.271242][ T7560] netlink: 'syz.4.932': attribute type 21 has an invalid length. [ 316.279280][ T7560] netlink: 'syz.4.932': attribute type 4 has an invalid length. [ 316.288666][ T7560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.932'. [ 317.050851][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.057297][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.224277][ T7583] netlink: 'syz.4.938': attribute type 10 has an invalid length. [ 318.284547][ T7583] device macvlan0 entered promiscuous mode [ 318.801880][ T7601] netlink: 'syz.3.943': attribute type 11 has an invalid length. [ 318.841450][ T7601] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.943'. [ 318.889447][ T7599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.594149][ T7610] netlink: 763 bytes leftover after parsing attributes in process `syz.2.944'. [ 325.063894][ T7664] netlink: 763 bytes leftover after parsing attributes in process `syz.0.959'. [ 325.410987][ T7673] netlink: 'syz.4.965': attribute type 2 has an invalid length. [ 325.419051][ T7673] netlink: 'syz.4.965': attribute type 1 has an invalid length. [ 325.467094][ T7673] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.965'. [ 326.119648][ T7691] netlink: 'syz.0.972': attribute type 29 has an invalid length. [ 326.148322][ T7695] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.973'. [ 326.166821][ T7691] netlink: 'syz.0.972': attribute type 3 has an invalid length. [ 326.190618][ T7691] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'. [ 328.648288][ T7726] netlink: 'syz.0.981': attribute type 2 has an invalid length. [ 328.728382][ T7726] netlink: 'syz.0.981': attribute type 1 has an invalid length. [ 329.310047][ T7739] netlink: 'syz.0.985': attribute type 19 has an invalid length. [ 329.401974][ T7739] netlink: 'syz.0.985': attribute type 21 has an invalid length. [ 329.410483][ T7739] netlink: 'syz.0.985': attribute type 1 has an invalid length. [ 329.485062][ T7743] netlink: 'syz.1.986': attribute type 21 has an invalid length. [ 332.247023][ T7761] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.991'. [ 332.263445][ T7761] net_ratelimit: 9 callbacks suppressed [ 332.263462][ T7761] netlink: zone id is out of range [ 332.277802][ T7761] netlink: zone id is out of range [ 332.294959][ T7761] netlink: zone id is out of range [ 332.300327][ T7761] netlink: zone id is out of range [ 332.319840][ T7761] netlink: zone id is out of range [ 332.373686][ T7761] netlink: zone id is out of range [ 332.379866][ T7761] netlink: zone id is out of range [ 332.520042][ T7761] netlink: zone id is out of range [ 332.544156][ T7761] netlink: zone id is out of range [ 332.550827][ T7761] netlink: zone id is out of range [ 333.549167][ T7794] netlink: 'syz.0.1002': attribute type 21 has an invalid length. [ 333.727435][ T7794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1002'. [ 333.815975][ T7794] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 333.867872][ T7794] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1002'. [ 334.047192][ T7797] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1003'. [ 335.974444][ T7835] netlink: 'syz.2.1010': attribute type 29 has an invalid length. [ 335.982353][ T7835] netlink: 'syz.2.1010': attribute type 3 has an invalid length. [ 336.003420][ T7835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1010'. [ 336.702785][ T7842] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1012'. [ 336.733254][ T4278] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 336.740868][ T4278] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 337.054503][ T7849] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1014'. [ 337.815330][ T7851] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1015'. [ 337.832325][ T7851] net_ratelimit: 35 callbacks suppressed [ 337.832340][ T7851] netlink: zone id is out of range [ 337.851755][ T7851] netlink: zone id is out of range [ 337.860732][ T7851] netlink: zone id is out of range [ 337.870429][ T7851] netlink: zone id is out of range [ 337.903888][ T7851] netlink: zone id is out of range [ 337.909093][ T7851] netlink: zone id is out of range [ 337.928908][ T7856] netlink: 'syz.2.1017': attribute type 21 has an invalid length. [ 337.933665][ T7851] netlink: zone id is out of range [ 337.942088][ T7851] netlink: zone id is out of range [ 337.961957][ T7856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1017'. [ 337.974704][ T7851] netlink: zone id is out of range [ 337.979879][ T7851] netlink: zone id is out of range [ 338.027003][ T7856] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 338.089794][ T7856] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1017'. [ 340.187428][ T4278] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 340.195085][ T4278] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 340.319169][ T7888] netlink: 79768 bytes leftover after parsing attributes in process `syz.2.1024'. [ 340.638191][ T7893] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1028'. [ 341.078592][ T7896] netlink: 'syz.1.1029': attribute type 4 has an invalid length. [ 341.092910][ T7896] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1029'. [ 343.509293][ T7905] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1031'. [ 343.540688][ T7905] net_ratelimit: 22 callbacks suppressed [ 343.540706][ T7905] netlink: zone id is out of range [ 343.591496][ T7905] netlink: zone id is out of range [ 343.630788][ T7905] netlink: zone id is out of range [ 343.675597][ T7905] netlink: zone id is out of range [ 343.709464][ T7905] netlink: zone id is out of range [ 343.739602][ T7905] netlink: zone id is out of range [ 343.754970][ T7905] netlink: zone id is out of range [ 343.774209][ T7905] netlink: zone id is out of range [ 343.790265][ T7905] netlink: zone id is out of range [ 343.808911][ T7905] netlink: zone id is out of range [ 345.874086][ T4278] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 345.881766][ T4278] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 347.556828][ T7967] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1048'. [ 347.641946][ T7980] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1053'. [ 348.248646][ T4278] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 348.256225][ T4278] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 348.659880][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 348.730055][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 348.790326][ T8008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 348.945618][ T8004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1062'. [ 349.120024][ T8012] net_ratelimit: 3288 callbacks suppressed [ 349.120064][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.387954][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.397537][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.406943][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.416650][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.426387][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.435855][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.445639][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.455417][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.465012][ T8012] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 349.622874][ T8016] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1065'. [ 350.727363][ T8028] netlink: 'syz.1.1069': attribute type 9 has an invalid length. [ 350.794173][ T8028] netlink: 'syz.1.1069': attribute type 8 has an invalid length. [ 350.843013][ T8028] netlink: 355 bytes leftover after parsing attributes in process `syz.1.1069'. [ 350.907204][ T4278] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 350.915263][ T4278] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 351.338398][ T8041] netlink: 'syz.0.1073': attribute type 1 has an invalid length. [ 351.376976][ T8041] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1073'. [ 351.452571][ T8045] netlink: 79768 bytes leftover after parsing attributes in process `syz.1.1074'. [ 355.367648][ T8080] device syzkaller0 entered promiscuous mode [ 357.408238][ T8083] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1089'. [ 360.834802][ T8113] netlink: 'syz.0.1095': attribute type 10 has an invalid length. [ 360.879083][ T8113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1095'. [ 361.206120][ T8121] netlink: 'syz.3.1099': attribute type 1 has an invalid length. [ 361.248586][ T8121] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1099'. [ 361.799530][ T8136] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1102'. [ 361.826546][ T8137] netlink: 'syz.4.1104': attribute type 21 has an invalid length. [ 361.866441][ T8136] net_ratelimit: 3256 callbacks suppressed [ 361.866479][ T8136] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 361.883185][ T8137] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1104'. [ 361.968488][ T8139] netlink: 'syz.4.1104': attribute type 10 has an invalid length. [ 362.002507][ T8139] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1104'. [ 362.959144][ T8156] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1108'. [ 363.034035][ T8154] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1109'. [ 363.061370][ T8154] netlink: zone id is out of range [ 363.069317][ T8154] netlink: zone id is out of range [ 363.087282][ T8154] netlink: zone id is out of range [ 363.092947][ T8154] netlink: zone id is out of range [ 363.129193][ T8154] netlink: zone id is out of range [ 363.140673][ T8154] netlink: zone id is out of range [ 363.151458][ T8154] netlink: zone id is out of range [ 363.181073][ T8154] netlink: zone id is out of range [ 363.203629][ T8154] netlink: zone id is out of range [ 363.451829][ T8159] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1110'. [ 365.804531][ T8177] netlink: 'syz.2.1116': attribute type 21 has an invalid length. [ 365.833507][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 365.867739][ T8178] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 365.883523][ T8178] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1116'. [ 366.492191][ T8180] netlink: 'syz.3.1117': attribute type 10 has an invalid length. [ 366.745040][ T8189] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.1119'. [ 368.206722][ T8206] netlink: 'syz.3.1125': attribute type 39 has an invalid length. [ 368.236503][ T8206] device macvlan0 entered promiscuous mode [ 369.217226][ T8210] device syzkaller0 entered promiscuous mode [ 370.802552][ T8215] netlink: 'syz.1.1128': attribute type 21 has an invalid length. [ 370.816820][ T8215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1128'. [ 370.828302][ T8218] netlink: 'syz.1.1128': attribute type 10 has an invalid length. [ 370.836360][ T8218] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1128'. [ 370.863956][ T8223] netlink: 'syz.3.1129': attribute type 10 has an invalid length. [ 370.881574][ T8223] device syz_tun entered promiscuous mode [ 370.915095][ T8223] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 370.937133][ T8224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1129'. [ 371.150010][ T8230] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1130'. [ 371.527834][ T8247] netlink: 'syz.0.1133': attribute type 29 has an invalid length. [ 371.682036][ T8250] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 371.719119][ T8244] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1134'. [ 371.744783][ T8251] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1135'. [ 371.748588][ T8244] net_ratelimit: 5 callbacks suppressed [ 371.748620][ T8244] netlink: zone id is out of range [ 371.760916][ T8250] netlink: 'syz.3.1136': attribute type 8 has an invalid length. [ 371.776460][ T8251] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 371.789033][ T8250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1136'. [ 371.807259][ T8247] netlink: 'syz.0.1133': attribute type 29 has an invalid length. [ 371.818749][ T8244] netlink: zone id is out of range [ 371.831720][ T8252] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 371.845221][ T8244] netlink: zone id is out of range [ 371.857347][ T8252] netlink: 'syz.3.1136': attribute type 8 has an invalid length. [ 371.860197][ T8244] netlink: zone id is out of range [ 371.876388][ T8244] netlink: zone id is out of range [ 371.882528][ T8244] netlink: zone id is out of range [ 371.897044][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1136'. [ 371.918889][ T8244] netlink: zone id is out of range [ 371.938069][ T8244] netlink: zone id is out of range [ 371.954041][ T8244] netlink: zone id is out of range [ 372.424375][ T8268] netlink: 'syz.3.1140': attribute type 10 has an invalid length. [ 372.457954][ T8268] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1140'. [ 372.605052][ T8274] netlink: 'syz.2.1141': attribute type 2 has an invalid length. [ 372.645932][ T8275] netlink: 'syz.2.1141': attribute type 2 has an invalid length. [ 373.020819][ T8274] device 0 entered promiscuous mode [ 373.117576][ T8275] device 1 entered promiscuous mode [ 373.552099][ T8281] device syzkaller0 entered promiscuous mode [ 375.746308][ T8308] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1150'. [ 375.827439][ T8314] netlink: 'syz.4.1152': attribute type 3 has an invalid length. [ 375.872527][ T8314] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1152'. [ 375.921476][ T8312] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.1151'. [ 375.979796][ T8317] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1153'. [ 375.999579][ T8312] netlink: 8192 bytes leftover after parsing attributes in process `syz.2.1151'. [ 376.179627][ T8319] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1154'. [ 377.000393][ T8335] validate_nla: 1 callbacks suppressed [ 377.000431][ T8335] netlink: 'syz.4.1160': attribute type 10 has an invalid length. [ 377.159382][ T8337] netlink: 'syz.4.1160': attribute type 21 has an invalid length. [ 377.517464][ T8349] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1164'. [ 377.563881][ T8349] net_ratelimit: 7 callbacks suppressed [ 377.563896][ T8349] netlink: zone id is out of range [ 377.614318][ T8349] netlink: zone id is out of range [ 377.664486][ T8357] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 377.691958][ T8349] netlink: del zone limit has 4 unknown bytes [ 377.711066][ T8357] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1166'. [ 377.763765][ T8357] device dummy0 entered promiscuous mode [ 377.789674][ T8357] bridge0: port 4(dummy0) entered blocking state [ 377.803459][ T8357] bridge0: port 4(dummy0) entered disabled state [ 377.814385][ T8357] bridge0: port 4(dummy0) entered blocking state [ 377.820883][ T8357] bridge0: port 4(dummy0) entered forwarding state [ 378.078810][ T8362] netlink: 'syz.2.1167': attribute type 10 has an invalid length. [ 378.110973][ T8362] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1167'. [ 378.133794][ T8366] netlink: 'syz.1.1169': attribute type 7 has an invalid length. [ 378.172610][ T8366] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.1169'. [ 378.246188][ T8369] netlink: 'syz.1.1169': attribute type 7 has an invalid length. [ 378.287690][ T8369] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.1169'. [ 378.466564][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.472987][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.651875][ T8387] netlink: 'syz.4.1172': attribute type 11 has an invalid length. [ 379.174496][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.259472][ T8403] netlink: 'syz.2.1177': attribute type 2 has an invalid length. [ 379.317092][ T8403] netlink: 'syz.2.1177': attribute type 8 has an invalid length. [ 379.400683][ T8405] netlink: zone id is out of range [ 379.417626][ T8405] netlink: zone id is out of range [ 379.554532][ T8405] netlink: del zone limit has 4 unknown bytes [ 379.915146][ T8410] netlink: 'syz.4.1180': attribute type 4 has an invalid length. [ 380.455832][ T8425] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 381.626992][ T8443] __nla_validate_parse: 5 callbacks suppressed [ 381.627042][ T8443] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1190'. [ 382.237082][ T8458] €Â0: renamed from pim6reg1 [ 382.306240][ T8460] validate_nla: 3 callbacks suppressed [ 382.306257][ T8460] netlink: 'syz.3.1195': attribute type 21 has an invalid length. [ 382.376543][ T8465] netlink: 'syz.0.1197': attribute type 10 has an invalid length. [ 382.396967][ T8465] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1197'. [ 382.702678][ T8474] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.1201'. [ 382.730742][ T8478] netlink: 'syz.0.1201': attribute type 10 has an invalid length. [ 382.825692][ T8478] batman_adv: batadv0: Adding interface: netdevsim0 [ 382.857088][ T8478] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.895289][ T8478] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 385.035991][ T8501] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 385.082201][ T8501] bridge0: port 4(netdevsim0) entered blocking state [ 385.103965][ T8501] bridge0: port 4(netdevsim0) entered disabled state [ 385.111788][ T8501] device netdevsim0 entered promiscuous mode [ 385.258324][ T8509] netlink: 'syz.4.1211': attribute type 10 has an invalid length. [ 385.313642][ T8509] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1211'. [ 385.789586][ T8525] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1216'. [ 385.867381][ T8525] netlink: zone id is out of range [ 385.881219][ T8525] netlink: zone id is out of range [ 385.890585][ T8525] netlink: del zone limit has 4 unknown bytes [ 385.916825][ T8527] netlink: 'syz.1.1217': attribute type 21 has an invalid length. [ 385.943563][ T8527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1217'. [ 386.216270][ T8539] netlink: 'syz.3.1209': attribute type 10 has an invalid length. [ 386.260242][ T8539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1209'. [ 386.304668][ T8539] device dummy0 entered promiscuous mode [ 386.311269][ T8539] bridge0: port 5(dummy0) entered blocking state [ 386.319012][ T8539] bridge0: port 5(dummy0) entered disabled state [ 386.327692][ T8539] bridge0: port 5(dummy0) entered blocking state [ 386.334202][ T8539] bridge0: port 5(dummy0) entered forwarding state [ 387.602026][ T8563] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 387.623721][ T8563] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1226'. [ 388.072881][ T8578] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1229'. [ 388.093402][ T8578] netlink: zone id is out of range [ 388.109923][ T8578] netlink: zone id is out of range [ 388.137078][ T8578] netlink: del zone limit has 4 unknown bytes [ 388.496221][ T8584] netlink: 'syz.3.1234': attribute type 3 has an invalid length. [ 388.549402][ T8584] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 388.763682][ T8585] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1235'. [ 388.774034][ T8585] netlink: zone id is out of range [ 388.782676][ T8585] netlink: zone id is out of range [ 388.804118][ T8585] netlink: zone id is out of range [ 388.812305][ T8585] netlink: zone id is out of range [ 389.052340][ T8598] device syzkaller0 entered promiscuous mode [ 389.070546][ T4949] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 389.254147][ T8600] netlink: 'syz.1.1240': attribute type 10 has an invalid length. [ 389.263121][ T8600] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1240'. [ 389.741697][ T8607] delete_channel: no stack [ 390.512742][ T8627] netlink: 'syz.4.1249': attribute type 7 has an invalid length. [ 390.806802][ T8618] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1247'. [ 391.048134][ T8618] net_ratelimit: 13 callbacks suppressed [ 391.048153][ T8618] netlink: del zone limit has 4 unknown bytes [ 391.446632][ T8634] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1251'. [ 391.475137][ T8634] netlink: zone id is out of range [ 391.490123][ T8634] netlink: zone id is out of range [ 391.579873][ T4278] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 391.718210][ T8634] netlink: del zone limit has 4 unknown bytes [ 392.350039][ T8662] device syzkaller0 entered promiscuous mode [ 393.582382][ T8685] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1267'. [ 393.593790][ T8685] netlink: zone id is out of range [ 393.604702][ T8685] netlink: zone id is out of range [ 393.609964][ T8685] netlink: zone id is out of range [ 393.618037][ T8685] netlink: zone id is out of range [ 393.627913][ T8685] netlink: zone id is out of range [ 393.643385][ T8685] netlink: zone id is out of range [ 396.663112][ T8714] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1276'. [ 398.180651][ T8729] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1280'. [ 398.215762][ T8729] net_ratelimit: 3 callbacks suppressed [ 398.215864][ T8729] netlink: zone id is out of range [ 398.307083][ T8729] netlink: zone id is out of range [ 398.419535][ T8729] netlink: del zone limit has 4 unknown bytes [ 399.269403][ T8749] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1287'. [ 399.281559][ T8749] netlink: zone id is out of range [ 399.294874][ T8749] netlink: zone id is out of range [ 399.386905][ T8749] netlink: del zone limit has 4 unknown bytes [ 401.137694][ T8767] netlink: 'syz.4.1293': attribute type 4 has an invalid length. [ 401.154700][ T8775] netlink: 'syz.4.1293': attribute type 10 has an invalid length. [ 401.162643][ T8775] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1293'. [ 401.184401][ T8772] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1296'. [ 401.194030][ T8767] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1293'. [ 401.400998][ T8778] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1295'. [ 401.439438][ T8778] netlink: zone id is out of range [ 401.446951][ T8778] netlink: zone id is out of range [ 401.452778][ T8778] netlink: zone id is out of range [ 401.458585][ T8778] netlink: zone id is out of range [ 401.519577][ T8783] netlink: 'syz.1.1298': attribute type 12 has an invalid length. [ 401.531105][ T8783] netlink: 'syz.1.1298': attribute type 15 has an invalid length. [ 402.296812][ T8809] netlink: 'syz.3.1307': attribute type 33 has an invalid length. [ 402.413114][ T8809] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1307'. [ 403.523720][ T8824] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1309'. [ 403.985174][ T8839] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1312'. [ 404.033415][ T8839] net_ratelimit: 2 callbacks suppressed [ 404.033432][ T8839] netlink: zone id is out of range [ 404.051648][ T8839] netlink: zone id is out of range [ 404.061173][ T8839] netlink: zone id is out of range [ 404.159857][ T8839] netlink: zone id is out of range [ 404.177838][ T8839] netlink: zone id is out of range [ 404.194678][ T8839] netlink: del zone limit has 4 unknown bytes [ 404.709971][ T8861] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1323'. [ 404.764422][ T8867] netlink: 'syz.4.1322': attribute type 29 has an invalid length. [ 404.803446][ T8857] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1321'. [ 404.828447][ T8867] netlink: 'syz.4.1322': attribute type 29 has an invalid length. [ 405.164641][ T8880] netlink: 'syz.1.1329': attribute type 3 has an invalid length. [ 405.209869][ T8879] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1328'. [ 405.234512][ T8880] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1329'. [ 405.245922][ T8879] netlink: zone id is out of range [ 405.252927][ T8879] netlink: zone id is out of range [ 405.296886][ T8879] netlink: zone id is out of range [ 405.322829][ T8879] netlink: zone id is out of range [ 405.911755][ T8892] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 405.928741][ T8892] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1333'. [ 406.379294][ T8892] device syzkaller0 entered promiscuous mode [ 406.578691][ T8904] netlink: 'syz.1.1338': attribute type 3 has an invalid length. [ 406.620162][ T8904] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1338'. [ 408.366716][ T8911] netlink: 'syz.1.1338': attribute type 17 has an invalid length. [ 408.703000][ T8926] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1344'. [ 409.375934][ T8949] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 409.429251][ T8949] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1351'. [ 409.682345][ T8953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1352'. [ 410.083067][ T8964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1356'. [ 411.193846][ T8964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1356'. [ 411.728619][ T8989] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1359'. [ 411.770782][ T8991] -1: renamed from syzkaller0 [ 411.775940][ T8989] net_ratelimit: 12 callbacks suppressed [ 411.775952][ T8989] netlink: zone id is out of range [ 411.787682][ T8989] netlink: zone id is out of range [ 411.793548][ T8989] netlink: zone id is out of range [ 411.819058][ T8989] netlink: zone id is out of range [ 411.849786][ T8989] netlink: zone id is out of range [ 411.876991][ T8989] netlink: zone id is out of range [ 411.892559][ T8989] netlink: zone id is out of range [ 411.920246][ T8989] netlink: zone id is out of range [ 411.940555][ T8989] netlink: zone id is out of range [ 411.976111][ T8989] netlink: del zone limit has 4 unknown bytes [ 412.859275][ T9005] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 412.911098][ T9005] device netdevsim0 left promiscuous mode [ 412.924977][ T9005] bridge0: port 4(netdevsim0) entered disabled state [ 412.950080][ T9005] team0: Port device netdevsim0 added [ 413.501524][ T9024] netlink: 'syz.0.1373': attribute type 2 has an invalid length. [ 413.589348][ T9024] netlink: 173380 bytes leftover after parsing attributes in process `syz.0.1373'. [ 413.937600][ T9031] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1378'. [ 414.589639][ T9049] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1385'. [ 414.872019][ T9055] device syzkaller0 entered promiscuous mode [ 415.124904][ T9065] netlink: 'syz.2.1391': attribute type 10 has an invalid length. [ 415.161893][ T9065] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1391'. [ 415.771997][ T9067] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1392'. [ 415.794940][ T9078] netlink: 'syz.1.1394': attribute type 2 has an invalid length. [ 415.817648][ T9078] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1394'. [ 416.088964][ T9090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1399'. [ 417.714812][ T9116] netlink: 'syz.0.1406': attribute type 10 has an invalid length. [ 417.768877][ T9116] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1406'. [ 417.789229][ T9115] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1408'. [ 417.799245][ T9115] net_ratelimit: 28 callbacks suppressed [ 417.800190][ T9115] netlink: zone id is out of range [ 417.816695][ T9115] netlink: zone id is out of range [ 417.861479][ T9115] netlink: zone id is out of range [ 417.871710][ T9115] netlink: zone id is out of range [ 417.883045][ T9115] netlink: zone id is out of range [ 417.891086][ T9115] netlink: zone id is out of range [ 417.901561][ T9115] netlink: zone id is out of range [ 417.910409][ T9115] netlink: zone id is out of range [ 417.920501][ T9115] netlink: zone id is out of range [ 417.930055][ T9115] netlink: zone id is out of range [ 419.428658][ T9147] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 419.465949][ T9147] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1420'. [ 419.978670][ T9158] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1422'. [ 420.307778][ T9164] netlink: 'syz.3.1424': attribute type 10 has an invalid length. [ 420.343727][ T9164] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1424'. [ 420.576225][ T9173] netlink: 'syz.3.1427': attribute type 2 has an invalid length. [ 420.592593][ T9173] netlink: 'syz.3.1427': attribute type 8 has an invalid length. [ 420.629647][ T9173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1427'. [ 420.680784][ T9174] netlink: 'syz.3.1427': attribute type 2 has an invalid length. [ 420.703137][ T9174] netlink: 'syz.3.1427': attribute type 8 has an invalid length. [ 420.737540][ T9178] netlink: 'syz.2.1429': attribute type 2 has an invalid length. [ 420.750440][ T9174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1427'. [ 421.161135][ T9191] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 421.183972][ T9191] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1433'. [ 421.977974][ T9200] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1434'. [ 424.713033][ T9235] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.1445'. [ 424.781513][ T9235] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.1445'. [ 424.815582][ T9235] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.1445'. [ 427.258954][ T9261] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1454'. [ 427.300316][ T9261] net_ratelimit: 14 callbacks suppressed [ 427.300402][ T9261] netlink: zone id is out of range [ 427.347830][ T9261] netlink: zone id is out of range [ 427.371010][ T9261] netlink: zone id is out of range [ 427.389060][ T9261] netlink: zone id is out of range [ 427.405698][ T9261] netlink: zone id is out of range [ 427.430842][ T9261] netlink: zone id is out of range [ 427.453460][ T9261] netlink: zone id is out of range [ 427.470369][ T9261] netlink: zone id is out of range [ 427.507442][ T9261] netlink: zone id is out of range [ 427.525032][ T9261] netlink: zone id is out of range [ 427.589517][ T9272] netlink: 'syz.0.1457': attribute type 12 has an invalid length. [ 427.623693][ T9272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1457'. [ 428.271159][ T9272] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1457'. [ 428.350502][ T9297] delete_channel: no stack [ 428.356425][ T9275] netlink: 'syz.0.1457': attribute type 10 has an invalid length. [ 428.383006][ T9278] netlink: 'syz.3.1459': attribute type 10 has an invalid length. [ 428.401835][ T9278] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1459'. [ 429.784330][ T9312] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1464'. [ 430.795015][ T9325] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1470'. [ 431.294483][ T9336] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 431.303548][ T9336] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1473'. [ 432.537975][ T9349] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1478'. [ 433.046965][ T9357] netlink: 'syz.0.1480': attribute type 13 has an invalid length. [ 433.058305][ T9357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1480'. [ 433.416132][ T9362] sctp: [Deprecated]: syz.3.1482 (pid 9362) Use of int in max_burst socket option deprecated. [ 433.416132][ T9362] Use struct sctp_assoc_value instead [ 433.839537][ T9373] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1484'. [ 434.034979][ T9375] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1484'. [ 434.053562][ T9375] bridge_slave_1: default FDB implementation only supports local addresses [ 434.695952][ T9380] netlink: 'syz.4.1486': attribute type 10 has an invalid length. [ 434.713728][ T9380] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1486'. [ 436.220993][ T9409] FAULT_INJECTION: forcing a failure. [ 436.220993][ T9409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.235751][ T9409] CPU: 1 PID: 9409 Comm: syz.3.1496 Not tainted syzkaller #0 [ 436.243216][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.253301][ T9409] Call Trace: [ 436.256609][ T9409] [ 436.259564][ T9409] dump_stack_lvl+0x188/0x24e [ 436.264417][ T9409] ? show_regs_print_info+0x12/0x12 [ 436.269663][ T9409] ? load_image+0x410/0x410 [ 436.274228][ T9409] ? __lock_acquire+0x7c40/0x7c40 [ 436.279380][ T9409] should_fail_ex+0x390/0x4c0 [ 436.284235][ T9409] _copy_from_user+0x2c/0x170 [ 436.288994][ T9409] ___sys_sendmsg+0x1c3/0x360 [ 436.293794][ T9409] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.298624][ T9409] ? __lock_acquire+0x7c40/0x7c40 [ 436.303716][ T9409] __se_sys_sendmsg+0x1c3/0x2b0 [ 436.308619][ T9409] ? __x64_sys_sendmsg+0x80/0x80 [ 436.313618][ T9409] ? syscall_enter_from_user_mode+0x2a/0x80 [ 436.319543][ T9409] do_syscall_64+0x4c/0xa0 [ 436.323990][ T9409] ? clear_bhb_loop+0x60/0xb0 [ 436.328809][ T9409] ? clear_bhb_loop+0x60/0xb0 [ 436.333534][ T9409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.339473][ T9409] RIP: 0033:0x7f592b79e0d9 [ 436.343918][ T9409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.363562][ T9409] RSP: 002b:00007f592c582028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.372114][ T9409] RAX: ffffffffffffffda RBX: 00007f592ba25fa0 RCX: 00007f592b79e0d9 [ 436.380142][ T9409] RDX: 0000000006008815 RSI: 0000200000000740 RDI: 0000000000000008 [ 436.388162][ T9409] RBP: 00007f592c582090 R08: 0000000000000000 R09: 0000000000000000 [ 436.396170][ T9409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.404177][ T9409] R13: 00007f592ba26038 R14: 00007f592ba25fa0 R15: 00007fff9d2a0378 [ 436.412186][ T9409] [ 436.437165][ T9413] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1498'. [ 437.652762][ T9426] netlink: 'syz.2.1500': attribute type 10 has an invalid length. [ 437.660751][ T9426] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1500'. [ 439.475772][ T9472] FAULT_INJECTION: forcing a failure. [ 439.475772][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.543407][ T9472] CPU: 0 PID: 9472 Comm: syz.1.1513 Not tainted syzkaller #0 [ 439.550860][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.561040][ T9472] Call Trace: [ 439.564348][ T9472] [ 439.567328][ T9472] dump_stack_lvl+0x188/0x24e [ 439.572056][ T9472] ? show_regs_print_info+0x12/0x12 [ 439.577346][ T9472] ? load_image+0x410/0x410 [ 439.581924][ T9472] ? __lock_acquire+0x7c40/0x7c40 [ 439.587031][ T9472] should_fail_ex+0x390/0x4c0 [ 439.591768][ T9472] _copy_from_user+0x2c/0x170 [ 439.596483][ T9472] __copy_msghdr+0x384/0x560 [ 439.601128][ T9472] ___sys_sendmsg+0x210/0x360 [ 439.605881][ T9472] ? __sys_sendmsg+0x2a0/0x2a0 [ 439.610713][ T9472] ? __lock_acquire+0x7c40/0x7c40 [ 439.615810][ T9472] __se_sys_sendmsg+0x1c3/0x2b0 [ 439.620728][ T9472] ? __x64_sys_sendmsg+0x80/0x80 [ 439.625765][ T9472] ? lockdep_hardirqs_on+0x94/0x140 [ 439.631013][ T9472] do_syscall_64+0x4c/0xa0 [ 439.635475][ T9472] ? clear_bhb_loop+0x60/0xb0 [ 439.640228][ T9472] ? clear_bhb_loop+0x60/0xb0 [ 439.644931][ T9472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.650852][ T9472] RIP: 0033:0x7ffa9b19e0d9 [ 439.655309][ T9472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.674946][ T9472] RSP: 002b:00007ffa9c031028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.683385][ T9472] RAX: ffffffffffffffda RBX: 00007ffa9b426180 RCX: 00007ffa9b19e0d9 [ 439.691371][ T9472] RDX: 0000000006008815 RSI: 0000200000000740 RDI: 0000000000000008 [ 439.699354][ T9472] RBP: 00007ffa9c031090 R08: 0000000000000000 R09: 0000000000000000 [ 439.707350][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.715336][ T9472] R13: 00007ffa9b426218 R14: 00007ffa9b426180 R15: 00007fffc483bf88 [ 439.723341][ T9472] [ 439.838756][ T9463] netlink: 'syz.3.1514': attribute type 10 has an invalid length. [ 439.859932][ T9463] netlink: 'syz.3.1514': attribute type 11 has an invalid length. [ 439.872761][ T9463] netlink: 5145 bytes leftover after parsing attributes in process `syz.3.1514'. [ 439.905766][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.912239][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.943574][ T9476] netlink: 'syz.0.1515': attribute type 10 has an invalid length. [ 439.972241][ T9476] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1515'. [ 440.132450][ T9483] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1517'. [ 441.720442][ T9504] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 441.782201][ T9504] team0: Port device netdevsim0 removed [ 441.810864][ T9504] batman_adv: batadv0: Adding interface: netdevsim0 [ 441.840578][ T9504] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.882139][ T9504] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 441.933186][ T9503] netlink: 'syz.1.1524': attribute type 5 has an invalid length. [ 441.951960][ T9503] netlink: 'syz.1.1524': attribute type 1 has an invalid length. [ 441.972382][ T9503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.291458][ T9516] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1525'. [ 442.929142][ T9526] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 442.975031][ T9526] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1530'. [ 443.697103][ T9537] netlink: 'syz.1.1534': attribute type 1 has an invalid length. [ 443.806008][ T9534] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1533'. [ 444.527251][ T9550] netlink: 'syz.1.1538': attribute type 10 has an invalid length. [ 444.541549][ T9550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.211528][ T9550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.325516][ T9552] ref_ctr_offset mismatch. inode: 0x64b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 445.971978][ T9559] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1543'. [ 446.100454][ T9557] netlink: 'syz.0.1542': attribute type 10 has an invalid length. [ 446.121449][ T9557] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1542'. [ 453.444522][ T9589] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1552'. [ 454.070835][ T9597] tap0: tun_chr_ioctl cmd 1074025688 [ 454.291063][ T9604] netlink: 'syz.2.1556': attribute type 10 has an invalid length. [ 454.358786][ T9604] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1556'. [ 454.639929][ T9607] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1558'. [ 454.650242][ T9607] net_ratelimit: 22 callbacks suppressed [ 454.650258][ T9607] netlink: zone id is out of range [ 454.667869][ T9607] netlink: zone id is out of range [ 454.680632][ T9607] netlink: zone id is out of range [ 454.689115][ T9607] netlink: zone id is out of range [ 454.698388][ T9607] netlink: zone id is out of range [ 454.723183][ T9607] netlink: zone id is out of range [ 454.734041][ T9614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1560'. [ 454.745987][ T9607] netlink: zone id is out of range [ 454.752182][ T9607] netlink: zone id is out of range [ 454.797320][ T9618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1560'. [ 454.810055][ T9607] netlink: zone id is out of range [ 454.825036][ T9607] netlink: zone id is out of range [ 456.993758][ T9654] netlink: 'syz.4.1571': attribute type 10 has an invalid length. [ 457.012560][ T9654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1571'. [ 457.033535][ T9654] device team0 entered promiscuous mode [ 457.049718][ T9654] device team_slave_0 entered promiscuous mode [ 457.116525][ T9654] device team_slave_1 entered promiscuous mode [ 457.252437][ T9654] bridge0: port 5(team0) entered blocking state [ 457.271499][ T9654] bridge0: port 5(team0) entered disabled state [ 457.353313][ T9654] bridge0: port 5(team0) entered blocking state [ 457.360113][ T9654] bridge0: port 5(team0) entered forwarding state [ 457.387878][ T9651] netlink: 'syz.0.1570': attribute type 10 has an invalid length. [ 457.399857][ T9651] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1570'. [ 457.748484][ T9665] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1574'. [ 458.119857][ T9675] netlink: 'syz.0.1576': attribute type 46 has an invalid length. [ 458.128881][ T9675] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1576'. [ 458.627837][ T9695] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1583'. [ 458.966784][ T9702] netlink: 'syz.4.1585': attribute type 10 has an invalid length. [ 459.267169][ T9702] team0: Device hsr_slave_0 failed to register rx_handler [ 459.577392][ T9709] netlink: 'syz.0.1586': attribute type 10 has an invalid length. [ 459.593530][ T9709] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1586'. [ 459.855457][ T9714] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1588'. [ 460.325682][ T9718] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1589'. [ 460.343054][ T9718] net_ratelimit: 28 callbacks suppressed [ 460.343071][ T9718] netlink: zone id is out of range [ 460.421323][ T9718] netlink: zone id is out of range [ 460.429203][ T9718] netlink: zone id is out of range [ 460.436562][ T9718] netlink: zone id is out of range [ 460.448008][ T9718] netlink: zone id is out of range [ 460.460064][ T9718] netlink: zone id is out of range [ 460.477004][ T9718] netlink: zone id is out of range [ 460.502014][ T9718] netlink: zone id is out of range [ 460.599859][ T9718] netlink: zone id is out of range [ 460.614361][ T9718] netlink: zone id is out of range [ 461.499048][ T9750] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1607'. [ 461.977200][ T9763] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 462.016890][ T9763] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1599'. [ 464.482488][ T9793] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1609'. [ 467.202608][ T9834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1620'. [ 467.255683][ T9832] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1621'. [ 467.310191][ T9832] net_ratelimit: 9 callbacks suppressed [ 467.310211][ T9832] netlink: zone id is out of range [ 467.368914][ T9832] netlink: zone id is out of range [ 467.417920][ T9832] netlink: zone id is out of range [ 467.438743][ T9832] netlink: zone id is out of range [ 467.462936][ T9832] netlink: zone id is out of range [ 467.487070][ T9832] netlink: zone id is out of range [ 467.534897][ T9832] netlink: zone id is out of range [ 467.571389][ T9832] netlink: zone id is out of range [ 467.604899][ T9832] netlink: zone id is out of range [ 467.654918][ T9832] netlink: zone id is out of range [ 468.107980][ T9845] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1624'. [ 468.156771][ T9852] netlink: 'syz.1.1628': attribute type 10 has an invalid length. [ 468.204584][ T9852] netlink: 'syz.1.1628': attribute type 10 has an invalid length. [ 470.545537][ T9904] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.1641'. [ 470.547653][ T9893] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1638'. [ 471.050617][ T9908] device syzkaller0 entered promiscuous mode [ 471.719084][ T9917] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1644'. [ 473.698418][ T9938] netlink: 'syz.2.1652': attribute type 29 has an invalid length. [ 473.719598][ T9938] netlink: 'syz.2.1652': attribute type 29 has an invalid length. [ 473.728972][ T9939] netlink: 'syz.2.1652': attribute type 29 has an invalid length. [ 474.872101][ T9969] netlink: 'syz.1.1664': attribute type 10 has an invalid length. [ 474.883148][ T9969] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1664'. [ 475.146976][ T9973] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1666'. [ 476.300166][ T9997] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1672'. [ 476.312500][ T9997] net_ratelimit: 24 callbacks suppressed [ 476.312518][ T9997] netlink: zone id is out of range [ 476.323915][ T9997] netlink: zone id is out of range [ 476.329608][ T9997] netlink: zone id is out of range [ 476.340402][ T9997] netlink: zone id is out of range [ 476.358100][ T9997] netlink: zone id is out of range [ 476.368368][ T9997] netlink: zone id is out of range [ 476.380904][ T9997] netlink: zone id is out of range [ 476.422221][ T9997] netlink: zone id is out of range [ 476.432361][ T9997] netlink: zone id is out of range [ 476.451000][ T9997] netlink: zone id is out of range [ 476.754271][T10005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1676'. [ 476.790708][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1676'. [ 477.218574][T10009] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 477.234098][T10009] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1677'. [ 477.612471][T10012] netlink: 'syz.0.1678': attribute type 10 has an invalid length. [ 477.641809][T10012] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1678'. [ 478.032133][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 478.063492][T10034] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1685'. [ 478.548008][T10036] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1686'. [ 478.818312][T10040] netlink: 'syz.0.1688': attribute type 10 has an invalid length. [ 478.839442][T10040] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1688'. [ 479.127296][T10057] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1692'. [ 480.366649][T10084] FAULT_INJECTION: forcing a failure. [ 480.366649][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 480.388571][T10084] CPU: 0 PID: 10084 Comm: syz.1.1700 Not tainted syzkaller #0 [ 480.396203][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.406318][T10084] Call Trace: [ 480.409638][T10084] [ 480.412616][T10084] dump_stack_lvl+0x188/0x24e [ 480.417390][T10084] ? show_regs_print_info+0x12/0x12 [ 480.422640][T10084] ? load_image+0x410/0x410 [ 480.427201][T10084] ? __might_sleep+0xd0/0xd0 [ 480.431948][T10084] ? __lock_acquire+0x7c40/0x7c40 [ 480.437024][T10084] ? aa_file_perm+0x3ea/0xf00 [ 480.441850][T10084] should_fail_ex+0x390/0x4c0 [ 480.446580][T10084] should_failslab+0x5/0x20 [ 480.451207][T10084] slab_pre_alloc_hook+0x59/0x300 [ 480.456286][T10084] ? kernfs_fop_write_iter+0x154/0x520 [ 480.461808][T10084] __kmem_cache_alloc_node+0x4f/0x270 [ 480.467223][T10084] ? kernfs_fop_write_iter+0x154/0x520 [ 480.472718][T10084] __kmalloc+0xa3/0x240 [ 480.476928][T10084] kernfs_fop_write_iter+0x154/0x520 [ 480.482258][T10084] vfs_write+0x482/0x9a0 [ 480.486649][T10084] ? file_end_write+0x250/0x250 [ 480.491538][T10084] ? __fget_files+0x3fc/0x460 [ 480.496275][T10084] ? __fdget_pos+0x2ae/0x360 [ 480.500889][T10084] ? ksys_write+0x70/0x260 [ 480.505325][T10084] ksys_write+0x14d/0x260 [ 480.509684][T10084] ? __ia32_sys_read+0x80/0x80 [ 480.514477][T10084] ? lockdep_hardirqs_on+0x94/0x140 [ 480.519708][T10084] do_syscall_64+0x4c/0xa0 [ 480.524172][T10084] ? clear_bhb_loop+0x60/0xb0 [ 480.528922][T10084] ? clear_bhb_loop+0x60/0xb0 [ 480.533638][T10084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.539561][T10084] RIP: 0033:0x7ffa9b19e0d9 [ 480.543996][T10084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.563651][T10084] RSP: 002b:00007ffa9c073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 480.572093][T10084] RAX: ffffffffffffffda RBX: 00007ffa9b425fa0 RCX: 00007ffa9b19e0d9 [ 480.580088][T10084] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 480.588089][T10084] RBP: 00007ffa9c073090 R08: 0000000000000000 R09: 0000000000000000 [ 480.596103][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.604094][T10084] R13: 00007ffa9b426038 R14: 00007ffa9b425fa0 R15: 00007fffc483bf88 [ 480.612103][T10084] [ 480.821369][T10092] netlink: 'syz.4.1702': attribute type 10 has an invalid length. [ 481.345598][T10094] net_ratelimit: 28 callbacks suppressed [ 481.345619][T10094] netlink: del zone limit has 4 unknown bytes [ 481.678670][T10105] netlink: 'syz.3.1705': attribute type 2 has an invalid length. [ 481.982777][T10105] device 0 entered promiscuous mode [ 482.340911][T10121] __nla_validate_parse: 3 callbacks suppressed [ 482.340942][T10121] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1711'. [ 482.779504][T10131] FAULT_INJECTION: forcing a failure. [ 482.779504][T10131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.828334][T10131] CPU: 1 PID: 10131 Comm: syz.4.1715 Not tainted syzkaller #0 [ 482.835891][T10131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.845992][T10131] Call Trace: [ 482.849307][T10131] [ 482.852266][T10131] dump_stack_lvl+0x188/0x24e [ 482.856992][T10131] ? show_regs_print_info+0x12/0x12 [ 482.862237][T10131] ? load_image+0x410/0x410 [ 482.866783][T10131] ? __lock_acquire+0x7c40/0x7c40 [ 482.871864][T10131] should_fail_ex+0x390/0x4c0 [ 482.876630][T10131] _copy_from_iter+0x1c0/0x1130 [ 482.881627][T10131] ? copyout_mc+0x110/0x110 [ 482.886169][T10131] ? __virt_addr_valid+0x188/0x540 [ 482.891367][T10131] ? __virt_addr_valid+0x188/0x540 [ 482.896550][T10131] ? __virt_addr_valid+0x467/0x540 [ 482.901723][T10131] ? __phys_addr_symbol+0x2b/0x70 [ 482.906792][T10131] ? __check_object_size+0x4f6/0xa70 [ 482.912105][T10131] kernfs_fop_write_iter+0x19a/0x520 [ 482.917424][T10131] vfs_write+0x482/0x9a0 [ 482.921709][T10131] ? file_end_write+0x250/0x250 [ 482.926587][T10131] ? __fget_files+0x3fc/0x460 [ 482.931293][T10131] ? __fdget_pos+0x2ae/0x360 [ 482.935909][T10131] ? ksys_write+0x70/0x260 [ 482.940359][T10131] ksys_write+0x14d/0x260 [ 482.944740][T10131] ? __ia32_sys_read+0x80/0x80 [ 482.949559][T10131] ? lockdep_hardirqs_on+0x94/0x140 [ 482.954789][T10131] do_syscall_64+0x4c/0xa0 [ 482.959233][T10131] ? clear_bhb_loop+0x60/0xb0 [ 482.963937][T10131] ? clear_bhb_loop+0x60/0xb0 [ 482.968641][T10131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.974567][T10131] RIP: 0033:0x7fca2479e0d9 [ 482.979015][T10131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.998651][T10131] RSP: 002b:00007fca25688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.007118][T10131] RAX: ffffffffffffffda RBX: 00007fca24a25fa0 RCX: 00007fca2479e0d9 [ 483.015113][T10131] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 483.023105][T10131] RBP: 00007fca25688090 R08: 0000000000000000 R09: 0000000000000000 [ 483.031105][T10131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.039099][T10131] R13: 00007fca24a26038 R14: 00007fca24a25fa0 R15: 00007ffcdd0726d8 [ 483.047108][T10131] [ 483.822039][T10147] netlink: 'syz.0.1719': attribute type 10 has an invalid length. [ 483.838165][T10147] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1719'. [ 485.443548][T10174] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1728'. [ 485.472361][T10178] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1729'. [ 485.651407][T10187] FAULT_INJECTION: forcing a failure. [ 485.651407][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 485.764576][T10187] CPU: 0 PID: 10187 Comm: syz.2.1731 Not tainted syzkaller #0 [ 485.772152][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.782252][T10187] Call Trace: [ 485.785569][T10187] [ 485.788537][T10187] dump_stack_lvl+0x188/0x24e [ 485.793286][T10187] ? show_regs_print_info+0x12/0x12 [ 485.798535][T10187] ? load_image+0x410/0x410 [ 485.803082][T10187] ? __might_sleep+0xd0/0xd0 [ 485.807727][T10187] ? __lock_acquire+0x7c40/0x7c40 [ 485.812808][T10187] should_fail_ex+0x390/0x4c0 [ 485.817524][T10187] should_failslab+0x5/0x20 [ 485.822057][T10187] slab_pre_alloc_hook+0x59/0x300 [ 485.827124][T10187] ? alloc_trial_cpuset+0x23/0x140 [ 485.832372][T10187] __kmem_cache_alloc_node+0x4f/0x270 [ 485.837810][T10187] ? alloc_trial_cpuset+0x23/0x140 [ 485.842963][T10187] __kmalloc_node_track_caller+0xa0/0x240 [ 485.848869][T10187] kmemdup+0x27/0x60 [ 485.852895][T10187] alloc_trial_cpuset+0x23/0x140 [ 485.857881][T10187] cpuset_write_resmask+0x1fa/0x1cf0 [ 485.863206][T10187] ? __mutex_trylock_common+0x15c/0x260 [ 485.868812][T10187] ? trace_raw_output_contention_end+0xd0/0xd0 [ 485.875026][T10187] ? cpuset_common_seq_show+0x230/0x230 [ 485.880628][T10187] ? cpuset_common_seq_show+0x230/0x230 [ 485.886226][T10187] cgroup_file_write+0x2c9/0x6a0 [ 485.891300][T10187] ? kernfs_fop_write_iter+0x1d8/0x520 [ 485.896810][T10187] ? cgroup_seqfile_stop+0xd0/0xd0 [ 485.901975][T10187] ? __virt_addr_valid+0x188/0x540 [ 485.907125][T10187] ? __virt_addr_valid+0x188/0x540 [ 485.912290][T10187] ? cgroup_seqfile_stop+0xd0/0xd0 [ 485.917436][T10187] kernfs_fop_write_iter+0x3a0/0x520 [ 485.922769][T10187] vfs_write+0x482/0x9a0 [ 485.927069][T10187] ? file_end_write+0x250/0x250 [ 485.931976][T10187] ? __fget_files+0x3fc/0x460 [ 485.936714][T10187] ? __fdget_pos+0x2ae/0x360 [ 485.941344][T10187] ? ksys_write+0x70/0x260 [ 485.945811][T10187] ksys_write+0x14d/0x260 [ 485.950218][T10187] ? __ia32_sys_read+0x80/0x80 [ 485.955048][T10187] ? lockdep_hardirqs_on+0x94/0x140 [ 485.960300][T10187] do_syscall_64+0x4c/0xa0 [ 485.964776][T10187] ? clear_bhb_loop+0x60/0xb0 [ 485.969503][T10187] ? clear_bhb_loop+0x60/0xb0 [ 485.974229][T10187] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.980185][T10187] RIP: 0033:0x7f703459e0d9 [ 485.984634][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.004285][T10187] RSP: 002b:00007f703551c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.012735][T10187] RAX: ffffffffffffffda RBX: 00007f7034825fa0 RCX: 00007f703459e0d9 [ 486.020755][T10187] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 486.028774][T10187] RBP: 00007f703551c090 R08: 0000000000000000 R09: 0000000000000000 [ 486.036779][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.044824][T10187] R13: 00007f7034826038 R14: 00007f7034825fa0 R15: 00007fff63910118 [ 486.052852][T10187] [ 486.636509][T10198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 486.836105][T10196] netlink: 8281 bytes leftover after parsing attributes in process `syz.0.1743'. [ 486.863106][T10198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1743'. [ 486.956391][T10194] device syzkaller0 entered promiscuous mode [ 488.874482][T10207] netlink: 'syz.4.1737': attribute type 10 has an invalid length. [ 488.882445][T10207] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1737'. [ 489.466501][T10219] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1739'. [ 489.484644][T10219] netlink: zone id is out of range [ 489.490191][T10219] netlink: zone id is out of range [ 489.501995][T10219] netlink: zone id is out of range [ 489.569498][T10219] netlink: zone id is out of range [ 489.611505][T10219] netlink: zone id is out of range [ 489.656171][T10219] netlink: zone id is out of range [ 489.688574][T10219] netlink: zone id is out of range [ 489.694964][T10219] netlink: zone id is out of range [ 489.700266][T10219] netlink: zone id is out of range [ 489.706141][T10219] netlink: zone id is out of range [ 491.121420][T10239] netlink: 'syz.2.1748': attribute type 3 has an invalid length. [ 491.140563][T10239] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1748'. [ 491.199826][T10244] netlink: 'syz.0.1750': attribute type 10 has an invalid length. [ 491.210834][T10244] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1750'. [ 491.761068][T10248] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1752'. [ 492.096266][T10250] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1753'. [ 492.456251][T10266] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 492.474487][T10266] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1758'. [ 492.519232][T10267] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 492.536573][T10267] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1758'. [ 493.049445][T10285] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1764'. [ 493.217192][T10287] netlink: 'syz.4.1765': attribute type 10 has an invalid length. [ 493.230128][T10287] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1765'. [ 493.879369][T10299] device syzkaller0 entered promiscuous mode [ 493.890123][T10302] __nla_validate_parse: 1 callbacks suppressed [ 493.890138][T10302] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1769'. [ 496.433488][T10321] pimreg: tun_chr_ioctl cmd 2147767511 [ 496.628142][T10328] netlink: 'syz.3.1778': attribute type 10 has an invalid length. [ 496.669952][T10328] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1778'. [ 496.941058][T10335] netlink: 'syz.2.1791': attribute type 10 has an invalid length. [ 496.974850][T10335] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1791'. [ 497.415156][T10343] netlink: 'syz.2.1784': attribute type 16 has an invalid length. [ 497.423200][T10343] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1784'. [ 497.482827][T10341] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1783'. [ 498.495394][T10350] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1782'. [ 498.505806][T10350] net_ratelimit: 35 callbacks suppressed [ 498.505820][T10350] netlink: zone id is out of range [ 498.524850][T10350] netlink: zone id is out of range [ 498.533256][T10350] netlink: zone id is out of range [ 498.540980][T10350] netlink: zone id is out of range [ 498.554668][T10350] netlink: zone id is out of range [ 498.565655][T10350] netlink: zone id is out of range [ 498.585898][T10350] netlink: zone id is out of range [ 498.605112][T10350] netlink: zone id is out of range [ 498.667716][T10350] netlink: zone id is out of range [ 498.684549][T10350] netlink: zone id is out of range [ 500.160144][T10394] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 500.251878][T10394] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1795'. [ 500.306749][T10403] netlink: 'syz.4.1798': attribute type 19 has an invalid length. [ 500.348949][T10403] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1798'. [ 500.378801][T10396] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1796'. [ 500.531414][T10405] netlink: 'syz.3.1800': attribute type 27 has an invalid length. [ 500.562221][T10405] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1800'. [ 500.679642][T10396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.794960][T10396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.862292][T10396] bond0 (unregistering): Released all slaves [ 500.989140][T10418] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1801'. [ 501.417678][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.424369][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.177573][T10427] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 504.585704][T10433] netlink: 'syz.4.1807': attribute type 2 has an invalid length. [ 504.623782][T10433] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1807'. [ 505.152723][T10448] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1812'. [ 505.218502][T10455] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1813'. [ 505.801661][T10467] netlink: 'syz.1.1817': attribute type 27 has an invalid length. [ 505.823737][T10467] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1817'. [ 505.907390][T10465] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1816'. [ 505.977699][T10465] net_ratelimit: 22 callbacks suppressed [ 505.977732][T10465] netlink: zone id is out of range [ 505.998209][T10465] netlink: zone id is out of range [ 506.025895][T10465] netlink: zone id is out of range [ 506.047616][T10465] netlink: zone id is out of range [ 506.053639][T10465] netlink: zone id is out of range [ 506.063137][T10465] netlink: zone id is out of range [ 506.071297][T10465] netlink: zone id is out of range [ 506.078407][T10465] netlink: zone id is out of range [ 506.084523][T10465] netlink: zone id is out of range [ 506.090150][T10465] netlink: zone id is out of range [ 506.392213][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 507.855440][T10491] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 508.028655][T10489] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1824'. [ 508.894174][T10508] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1830'. [ 509.216697][T10514] netlink: 13439 bytes leftover after parsing attributes in process `syz.1.1831'. [ 510.971575][T10552] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1843'. [ 511.022733][T10552] net_ratelimit: 35 callbacks suppressed [ 511.022754][T10552] netlink: zone id is out of range [ 511.066559][T10552] netlink: zone id is out of range [ 511.072452][T10552] netlink: zone id is out of range [ 511.111891][T10552] netlink: zone id is out of range [ 511.136355][T10551] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1842'. [ 511.146555][T10552] netlink: zone id is out of range [ 511.151912][T10552] netlink: zone id is out of range [ 511.215882][T10552] netlink: zone id is out of range [ 511.221269][T10552] netlink: zone id is out of range [ 511.298017][T10552] netlink: zone id is out of range [ 511.335076][T10552] netlink: zone id is out of range [ 511.656884][T10570] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.1847'. [ 513.134063][T10596] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1854'. [ 513.167172][T10596] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.1854'. [ 513.439455][T10600] netlink: 'syz.2.1857': attribute type 12 has an invalid length. [ 513.554015][T10600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1857'. [ 513.936791][T10608] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1859'. [ 514.049570][T10621] netlink: 'syz.2.1861': attribute type 10 has an invalid length. [ 514.334385][T10621] team0: Port device geneve1 added [ 514.649526][T10630] netlink: 'syz.1.1866': attribute type 21 has an invalid length. [ 514.664946][T10630] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1866'. [ 514.680282][T10630] netlink: 'syz.1.1866': attribute type 5 has an invalid length. [ 514.690269][T10630] netlink: 'syz.1.1866': attribute type 6 has an invalid length. [ 514.706514][T10630] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1866'. [ 514.721303][T10633] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1866'. [ 515.327872][T10637] delete_channel: no stack [ 515.332893][T10637] delete_channel: no stack [ 515.412676][T10641] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 515.452691][T10641] bridge0: port 3(hsr0) entered disabled state [ 515.459095][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.466494][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.631021][T10641] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.718237][T10641] bridge0: port 3(hsr0) entered blocking state [ 515.724694][T10641] bridge0: port 3(hsr0) entered forwarding state [ 515.731340][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.738559][T10641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.746098][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.753335][T10641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.773175][T10641] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 515.782070][T10644] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 516.522534][T10644] bridge0: port 3(hsr0) entered disabled state [ 516.529003][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.536246][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.594570][T10648] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1869'. [ 517.394979][T10659] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1875'. [ 517.414841][T10659] net_ratelimit: 28 callbacks suppressed [ 517.415698][T10659] netlink: zone id is out of range [ 517.435304][T10659] netlink: zone id is out of range [ 517.445650][T10659] netlink: zone id is out of range [ 517.453492][T10659] netlink: zone id is out of range [ 517.465418][T10659] netlink: zone id is out of range [ 517.476033][T10659] netlink: zone id is out of range [ 517.484515][T10659] netlink: zone id is out of range [ 517.497603][T10659] netlink: zone id is out of range [ 517.567672][T10659] netlink: zone id is out of range [ 517.575733][T10659] netlink: zone id is out of range [ 518.209344][T10680] netlink: 'syz.0.1881': attribute type 21 has an invalid length. [ 518.239213][T10680] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1881'. [ 518.317420][T10680] netlink: 'syz.0.1881': attribute type 5 has an invalid length. [ 518.411862][T10680] netlink: 'syz.0.1881': attribute type 6 has an invalid length. [ 518.501340][T10680] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1881'. [ 518.616626][T10682] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1881'. [ 518.704374][T10684] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1882'. [ 520.236549][T10724] netlink: 'syz.3.1894': attribute type 1 has an invalid length. [ 520.281095][T10721] device syzkaller0 entered promiscuous mode [ 520.296765][T10724] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1894'. [ 520.484496][T10717] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1891'. [ 522.622614][T10776] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1907'. [ 522.653300][T10776] net_ratelimit: 22 callbacks suppressed [ 522.653319][T10776] netlink: zone id is out of range [ 522.670101][T10776] netlink: zone id is out of range [ 522.748861][T10776] netlink: zone id is out of range [ 522.758039][T10776] netlink: zone id is out of range [ 522.771196][T10776] netlink: zone id is out of range [ 522.782389][T10776] netlink: zone id is out of range [ 522.792052][T10776] netlink: zone id is out of range [ 522.800895][T10776] netlink: zone id is out of range [ 522.808542][T10776] netlink: zone id is out of range [ 522.816021][T10776] netlink: zone id is out of range [ 524.178483][T10773] netlink: 'syz.3.1905': attribute type 21 has an invalid length. [ 524.186721][T10773] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1905'. [ 524.195918][T10773] netlink: 'syz.3.1905': attribute type 5 has an invalid length. [ 524.203745][T10773] netlink: 'syz.3.1905': attribute type 6 has an invalid length. [ 524.211496][T10773] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1905'. [ 524.220582][T10777] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1905'. [ 524.525084][T10790] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1911'. [ 524.679099][T10787] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1910'. [ 525.393156][T10795] syz.0.1913[10795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.406192][T10795] syz.0.1913[10795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.592305][T10800] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1915'. [ 526.064441][T10805] netlink: 818 bytes leftover after parsing attributes in process `syz.0.1916'. [ 526.199673][T10807] netlink: 'syz.2.1917': attribute type 10 has an invalid length. [ 526.292425][T10807] team0: Device vxcan1 is of different type [ 526.549212][T10816] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1921'. [ 526.844859][T10811] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1919'. [ 530.741974][T10852] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1926'. [ 530.802122][T10849] netlink: 'syz.4.1930': attribute type 21 has an invalid length. [ 530.819684][T10849] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1930'. [ 530.829691][T10852] net_ratelimit: 22 callbacks suppressed [ 530.829704][T10852] netlink: zone id is out of range [ 530.847351][T10849] netlink: 'syz.4.1930': attribute type 5 has an invalid length. [ 530.858441][T10849] netlink: 'syz.4.1930': attribute type 6 has an invalid length. [ 530.872048][T10852] netlink: zone id is out of range [ 530.892235][T10849] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1930'. [ 530.907693][T10852] netlink: zone id is out of range [ 530.922299][T10852] netlink: zone id is out of range [ 530.942660][T10852] netlink: zone id is out of range [ 530.991994][T10852] netlink: zone id is out of range [ 531.002753][T10856] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1930'. [ 531.028391][T10852] netlink: zone id is out of range [ 531.049610][T10852] netlink: zone id is out of range [ 531.076471][T10852] netlink: zone id is out of range [ 531.110680][T10852] netlink: zone id is out of range [ 531.795673][T10878] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1935'. [ 533.911156][T10897] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1941'. [ 534.340299][T10897] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 534.465521][T10906] netlink: 'syz.0.1941': attribute type 2 has an invalid length. [ 534.493130][T10906] netlink: 'syz.0.1941': attribute type 8 has an invalid length. [ 534.526598][T10906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1941'. [ 534.782647][T10904] netlink: 'syz.0.1941': attribute type 11 has an invalid length. [ 534.804537][T10904] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1941'. [ 534.821056][T10904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.848594][T10920] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1945'. [ 535.773230][T10929] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1949'. [ 535.906007][T10929] net_ratelimit: 41 callbacks suppressed [ 535.906029][T10929] netlink: del zone limit has 4 unknown bytes [ 537.103480][T10949] netlink: 'syz.2.1954': attribute type 39 has an invalid length. [ 537.299160][T10949] device hsr_slave_1 left promiscuous mode [ 537.414887][T10957] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1956'. [ 537.452780][T10954] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1955'. [ 537.500709][T10957] netlink: zone id is out of range [ 537.517550][T10957] netlink: zone id is out of range [ 537.597272][T10957] netlink: zone id is out of range [ 537.634686][T10957] netlink: zone id is out of range [ 537.654454][T10957] netlink: zone id is out of range [ 537.670331][T10957] netlink: zone id is out of range [ 537.680568][T10957] netlink: zone id is out of range [ 537.696339][T10957] netlink: zone id is out of range [ 537.711913][T10957] netlink: zone id is out of range [ 537.728261][T10965] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1958'. [ 538.129673][T10970] netlink: 'syz.3.1959': attribute type 16 has an invalid length. [ 538.180799][T10972] netlink: 'syz.0.1960': attribute type 2 has an invalid length. [ 538.202656][T10970] netlink: 'syz.3.1959': attribute type 3 has an invalid length. [ 538.219425][T10972] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1960'. [ 538.245608][T10970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1959'. [ 538.369524][T10974] netlink: 'syz.0.1960': attribute type 3 has an invalid length. [ 538.408373][T10974] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1960'. [ 538.645494][T10976] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1962'. [ 538.771225][T10979] netlink: 'syz.4.1961': attribute type 21 has an invalid length. [ 538.787478][T10979] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1961'. [ 538.801359][T10979] netlink: 'syz.4.1961': attribute type 5 has an invalid length. [ 538.846953][T10979] netlink: 'syz.4.1961': attribute type 6 has an invalid length. [ 538.888318][T10979] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1961'. [ 541.226238][T11032] netlink: 'syz.1.1978': attribute type 2 has an invalid length. [ 541.243407][T11032] __nla_validate_parse: 3 callbacks suppressed [ 541.243431][T11032] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1978'. [ 541.343020][T11027] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1975'. [ 541.346103][T11026] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1976'. [ 541.375024][T11027] net_ratelimit: 17 callbacks suppressed [ 541.375042][T11027] netlink: zone id is out of range [ 541.431565][T11027] netlink: zone id is out of range [ 541.447565][T11027] netlink: zone id is out of range [ 541.474921][T11035] netlink: 'syz.1.1978': attribute type 3 has an invalid length. [ 541.482801][T11027] netlink: zone id is out of range [ 541.504434][T11026] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 541.507331][T11035] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1978'. [ 541.534893][T11027] netlink: zone id is out of range [ 541.542548][T11027] netlink: zone id is out of range [ 541.590762][T11027] netlink: zone id is out of range [ 541.601101][T11026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.633235][T11027] netlink: zone id is out of range [ 541.653713][T11027] netlink: zone id is out of range [ 542.849594][T11059] netlink: 'syz.4.1985': attribute type 21 has an invalid length. [ 542.858231][T11059] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1985'. [ 542.869052][T11059] netlink: 'syz.4.1985': attribute type 5 has an invalid length. [ 542.877618][T11059] netlink: 'syz.4.1985': attribute type 6 has an invalid length. [ 542.886424][T11059] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1985'. [ 542.907446][T11059] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1985'. [ 546.085182][T11080] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1992'. [ 547.661829][T11099] netlink: 'syz.4.1999': attribute type 1 has an invalid length. [ 547.694064][T11099] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1999'. [ 547.741707][T11103] netlink: 'syz.3.2000': attribute type 10 has an invalid length. [ 547.771916][T11103] bridge0: port 5(dummy0) entered disabled state [ 547.780327][T11103] bridge0: port 4(batadv0) entered disabled state [ 547.793278][T11103] bridge0: port 3(hsr0) entered disabled state [ 547.800862][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.812197][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.071502][T11105] netlink: 'syz.0.2001': attribute type 21 has an invalid length. [ 548.091257][T11105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2001'. [ 548.134334][T11105] netlink: 'syz.0.2001': attribute type 5 has an invalid length. [ 548.142322][T11105] netlink: 'syz.0.2001': attribute type 6 has an invalid length. [ 548.171371][T11105] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2001'. [ 548.217460][T11110] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2001'. [ 548.982360][T11128] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2006'. [ 549.050394][T11128] net_ratelimit: 17 callbacks suppressed [ 549.050414][T11128] netlink: zone id is out of range [ 549.084152][T11128] netlink: zone id is out of range [ 549.142129][T11128] netlink: zone id is out of range [ 549.194370][T11128] netlink: zone id is out of range [ 549.199572][T11128] netlink: zone id is out of range [ 549.257690][T11128] netlink: zone id is out of range [ 549.263115][T11128] netlink: zone id is out of range [ 549.297507][T11128] netlink: zone id is out of range [ 549.313708][T11128] netlink: zone id is out of range [ 549.320827][T11128] netlink: zone id is out of range [ 549.725512][T11143] netlink: 'syz.1.2011': attribute type 10 has an invalid length. [ 549.777647][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.817320][T11143] device bridge_slave_1 left promiscuous mode [ 549.824776][T11143] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.218757][T11162] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2016'. [ 550.889840][T11159] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2016'. [ 551.240350][T11178] netlink: 'syz.2.2020': attribute type 21 has an invalid length. [ 551.358836][T11178] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2020'. [ 551.399258][T11178] netlink: 'syz.2.2020': attribute type 5 has an invalid length. [ 551.438571][T11178] netlink: 'syz.2.2020': attribute type 6 has an invalid length. [ 551.523424][T11178] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2020'. [ 551.546974][T11182] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2020'. [ 552.122094][T11198] netlink: 'syz.1.2026': attribute type 10 has an invalid length. [ 552.809466][T11216] __nla_validate_parse: 1 callbacks suppressed [ 552.809486][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 552.853355][T11216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 552.890078][T11219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2032'. [ 553.140905][T11216] netlink: 'syz.3.2032': attribute type 10 has an invalid length. [ 553.625438][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 553.868950][T11245] netlink: 'syz.0.2041': attribute type 2 has an invalid length. [ 553.909966][T11245] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2041'. [ 554.053670][T11240] netlink: 'syz.4.2038': attribute type 10 has an invalid length. [ 554.090023][T11251] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2042'. [ 554.163490][T11251] net_ratelimit: 16 callbacks suppressed [ 554.163510][T11251] netlink: zone id is out of range [ 554.255780][T11251] netlink: zone id is out of range [ 554.262590][T11251] netlink: zone id is out of range [ 554.283413][T11251] netlink: zone id is out of range [ 554.288635][T11251] netlink: zone id is out of range [ 554.345612][T11251] netlink: zone id is out of range [ 554.364666][T11251] netlink: zone id is out of range [ 554.383570][T11251] netlink: zone id is out of range [ 554.404616][T11251] netlink: zone id is out of range [ 554.423121][T11251] netlink: zone id is out of range [ 554.442388][T11240] device wg1 entered promiscuous mode [ 554.506824][T11240] team0: Device wg1 is of different type [ 556.826094][T11269] netlink: 'syz.4.2049': attribute type 3 has an invalid length. [ 556.849471][T11271] netlink: 'syz.2.2045': attribute type 21 has an invalid length. [ 556.935701][T11269] netlink: 'syz.4.2049': attribute type 4 has an invalid length. [ 557.012442][T11271] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2045'. [ 557.027300][T11269] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.2049'. [ 557.297123][T11271] netlink: 'syz.2.2045': attribute type 5 has an invalid length. [ 557.386035][T11271] netlink: 'syz.2.2045': attribute type 6 has an invalid length. [ 557.489370][T11271] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2045'. [ 557.624554][T11258] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2045'. [ 560.707407][T11308] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2057'. [ 562.794170][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.800678][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.258327][T11340] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2065'. [ 566.252294][T11340] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 566.778911][T11347] netlink: 'syz.0.2066': attribute type 21 has an invalid length. [ 566.952917][T11347] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2066'. [ 567.077395][T11347] netlink: 'syz.0.2066': attribute type 5 has an invalid length. [ 567.106246][T11347] netlink: 'syz.0.2066': attribute type 6 has an invalid length. [ 567.127932][T11347] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2066'. [ 567.224095][T11349] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2066'. [ 568.946503][T11368] netlink: 'syz.2.2071': attribute type 2 has an invalid length. [ 569.210194][T11368] device 0 entered promiscuous mode [ 570.843001][T11390] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2076'. [ 570.879360][T11385] netlink: 'syz.0.2075': attribute type 21 has an invalid length. [ 570.905311][T11385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2075'. [ 570.936176][T11390] net_ratelimit: 3 callbacks suppressed [ 570.936195][T11390] netlink: zone id is out of range [ 571.014524][T11390] netlink: zone id is out of range [ 571.054979][T11390] netlink: zone id is out of range [ 571.086214][T11390] netlink: zone id is out of range [ 571.123269][T11390] netlink: zone id is out of range [ 571.128553][T11390] netlink: zone id is out of range [ 571.174027][T11390] netlink: zone id is out of range [ 571.196377][T11390] netlink: zone id is out of range [ 571.234511][T11390] netlink: zone id is out of range [ 571.256130][T11390] netlink: zone id is out of range [ 572.218912][T11405] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 572.662951][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2079'. [ 573.907600][T11414] netlink: 'syz.0.2082': attribute type 21 has an invalid length. [ 573.994316][T11414] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2082'. [ 574.145837][T11414] netlink: 'syz.0.2082': attribute type 5 has an invalid length. [ 574.221893][T11414] netlink: 'syz.0.2082': attribute type 6 has an invalid length. [ 574.343539][T11414] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2082'. [ 575.568845][T11419] netlink: 'syz.2.2083': attribute type 10 has an invalid length. [ 575.723684][T11419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2083'. [ 575.862879][T11419] bridge0: port 4(veth0_vlan) entered blocking state [ 575.944533][T11419] bridge0: port 4(veth0_vlan) entered disabled state [ 576.188982][T11419] net_ratelimit: 3 callbacks suppressed [ 576.189010][T11419] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 578.347537][T11434] netlink: 'syz.1.2086': attribute type 2 has an invalid length. [ 578.624321][T11434] device 0 entered promiscuous mode [ 579.783605][T11448] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2090'. [ 579.903176][T11453] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2091'. [ 579.965624][T11453] netlink: zone id is out of range [ 579.971392][T11453] netlink: zone id is out of range [ 580.062913][T11453] netlink: zone id is out of range [ 580.173411][T11453] netlink: zone id is out of range [ 580.373492][T11453] netlink: zone id is out of range [ 580.379024][T11453] netlink: zone id is out of range [ 580.503736][T11453] netlink: zone id is out of range [ 580.508987][T11453] netlink: zone id is out of range [ 580.596030][T11453] netlink: zone id is out of range [ 582.559516][T11475] netlink: 'syz.3.2099': attribute type 21 has an invalid length. [ 582.573462][T11475] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2099'. [ 582.600002][T11475] netlink: 'syz.3.2099': attribute type 5 has an invalid length. [ 582.612069][T11475] netlink: 'syz.3.2099': attribute type 6 has an invalid length. [ 582.636235][T11475] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2099'. [ 582.813481][T11479] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2099'. [ 582.957916][T11487] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 583.003548][T11487] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2101'. [ 583.354113][T11494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2103'. [ 583.695447][T11499] netlink: 'syz.1.2106': attribute type 29 has an invalid length. [ 583.782330][T11498] netlink: 'syz.3.2104': attribute type 2 has an invalid length. [ 583.809921][T11502] netlink: 'syz.4.2105': attribute type 21 has an invalid length. [ 583.957284][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2105'. [ 584.019377][T11499] netlink: 'syz.1.2106': attribute type 29 has an invalid length. [ 584.503739][T11516] FAULT_INJECTION: forcing a failure. [ 584.503739][T11516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.682249][T11516] CPU: 0 PID: 11516 Comm: syz.4.2109 Not tainted syzkaller #0 [ 584.689803][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.699906][T11516] Call Trace: [ 584.703225][T11516] [ 584.706184][T11516] dump_stack_lvl+0x188/0x24e [ 584.710911][T11516] ? show_regs_print_info+0x12/0x12 [ 584.716152][T11516] ? load_image+0x410/0x410 [ 584.720694][T11516] ? __lock_acquire+0x7c40/0x7c40 [ 584.725772][T11516] should_fail_ex+0x390/0x4c0 [ 584.730511][T11516] _copy_from_user+0x2c/0x170 [ 584.735248][T11516] __sys_bpf+0x2ea/0x780 [ 584.739642][T11516] ? bpf_link_show_fdinfo+0x380/0x380 [ 584.745096][T11516] ? lock_chain_count+0x20/0x20 [ 584.749995][T11516] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 584.756048][T11516] __x64_sys_bpf+0x78/0x90 [ 584.760526][T11516] do_syscall_64+0x4c/0xa0 [ 584.764998][T11516] ? clear_bhb_loop+0x60/0xb0 [ 584.769732][T11516] ? clear_bhb_loop+0x60/0xb0 [ 584.774557][T11516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.780513][T11516] RIP: 0033:0x7fca2479e0d9 [ 584.784972][T11516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.804716][T11516] RSP: 002b:00007fca25688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.813199][T11516] RAX: ffffffffffffffda RBX: 00007fca24a25fa0 RCX: 00007fca2479e0d9 [ 584.821230][T11516] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 584.829245][T11516] RBP: 00007fca25688090 R08: 0000000000000000 R09: 0000000000000000 [ 584.837258][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.845271][T11516] R13: 00007fca24a26038 R14: 00007fca24a25fa0 R15: 00007ffcdd0726d8 [ 584.853299][T11516] [ 585.052643][T11498] device 1 entered promiscuous mode [ 585.768089][T11527] netlink: 'syz.1.2114': attribute type 21 has an invalid length. [ 585.819558][T11527] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2114'. [ 585.875145][T11527] netlink: 'syz.1.2114': attribute type 5 has an invalid length. [ 585.988637][T11527] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2114'. [ 586.037457][T11539] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2114'. [ 586.055606][T11544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2119'. [ 586.796161][T11556] FAULT_INJECTION: forcing a failure. [ 586.796161][T11556] name failslab, interval 1, probability 0, space 0, times 0 [ 586.877928][T11556] CPU: 0 PID: 11556 Comm: syz.4.2122 Not tainted syzkaller #0 [ 586.885475][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.895570][T11556] Call Trace: [ 586.898914][T11556] [ 586.901877][T11556] dump_stack_lvl+0x188/0x24e [ 586.906604][T11556] ? show_regs_print_info+0x12/0x12 [ 586.911888][T11556] ? load_image+0x410/0x410 [ 586.916453][T11556] ? __lock_acquire+0x7c40/0x7c40 [ 586.921527][T11556] ? perf_trace_preemptirq_template+0x268/0x320 [ 586.927900][T11556] should_fail_ex+0x390/0x4c0 [ 586.932632][T11556] should_failslab+0x5/0x20 [ 586.937174][T11556] slab_pre_alloc_hook+0x59/0x300 [ 586.942248][T11556] ? lock_chain_count+0x20/0x20 [ 586.947165][T11556] ? bpf_test_init+0x9f/0x140 [ 586.951966][T11556] __kmem_cache_alloc_node+0x4f/0x270 [ 586.957392][T11556] ? bpf_test_init+0x9f/0x140 [ 586.962152][T11556] __kmalloc+0xa3/0x240 [ 586.966368][T11556] bpf_test_init+0x9f/0x140 [ 586.970929][T11556] bpf_prog_test_run_xdp+0x488/0xf80 [ 586.976252][T11556] ? __lock_acquire+0x7c40/0x7c40 [ 586.981324][T11556] ? dev_put+0x80/0x80 [ 586.985442][T11556] ? dev_put+0x80/0x80 [ 586.989536][T11556] bpf_prog_test_run+0x31c/0x390 [ 586.994508][T11556] __sys_bpf+0x62b/0x780 [ 586.998781][T11556] ? bpf_link_show_fdinfo+0x380/0x380 [ 587.004189][T11556] ? lock_chain_count+0x20/0x20 [ 587.009057][T11556] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 587.015079][T11556] __x64_sys_bpf+0x78/0x90 [ 587.019525][T11556] do_syscall_64+0x4c/0xa0 [ 587.023981][T11556] ? clear_bhb_loop+0x60/0xb0 [ 587.028696][T11556] ? clear_bhb_loop+0x60/0xb0 [ 587.033417][T11556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.039363][T11556] RIP: 0033:0x7fca2479e0d9 [ 587.043819][T11556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.063471][T11556] RSP: 002b:00007fca25688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.071900][T11556] RAX: ffffffffffffffda RBX: 00007fca24a25fa0 RCX: 00007fca2479e0d9 [ 587.079925][T11556] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 587.087940][T11556] RBP: 00007fca25688090 R08: 0000000000000000 R09: 0000000000000000 [ 587.095938][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.103945][T11556] R13: 00007fca24a26038 R14: 00007fca24a25fa0 R15: 00007ffcdd0726d8 [ 587.111955][T11556] [ 587.541433][T11573] FAULT_INJECTION: forcing a failure. [ 587.541433][T11573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.603484][T11573] CPU: 0 PID: 11573 Comm: syz.1.2137 Not tainted syzkaller #0 [ 587.611024][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.616856][T11576] validate_nla: 4 callbacks suppressed [ 587.616966][T11576] netlink: 'syz.4.2126': attribute type 2 has an invalid length. [ 587.621093][T11573] Call Trace: [ 587.621104][T11573] [ 587.621113][T11573] dump_stack_lvl+0x188/0x24e [ 587.621152][T11573] ? show_regs_print_info+0x12/0x12 [ 587.621183][T11573] ? load_image+0x410/0x410 [ 587.621211][T11573] ? __lock_acquire+0x7c40/0x7c40 [ 587.621247][T11573] should_fail_ex+0x390/0x4c0 [ 587.621284][T11573] _copy_from_user+0x2c/0x170 [ 587.621311][T11573] bpf_test_init+0xde/0x140 [ 587.621341][T11573] bpf_prog_test_run_xdp+0x488/0xf80 [ 587.621368][T11573] ? __lock_acquire+0x7c40/0x7c40 [ 587.621411][T11573] ? dev_put+0x80/0x80 [ 587.621449][T11573] ? dev_put+0x80/0x80 [ 587.621474][T11573] bpf_prog_test_run+0x31c/0x390 [ 587.621510][T11573] __sys_bpf+0x62b/0x780 [ 587.621542][T11573] ? bpf_link_show_fdinfo+0x380/0x380 [ 587.621589][T11573] ? lock_chain_count+0x20/0x20 [ 587.621618][T11573] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 587.621659][T11573] __x64_sys_bpf+0x78/0x90 [ 587.621689][T11573] do_syscall_64+0x4c/0xa0 [ 587.621719][T11573] ? clear_bhb_loop+0x60/0xb0 [ 587.621759][T11573] ? clear_bhb_loop+0x60/0xb0 [ 587.621790][T11573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.621816][T11573] RIP: 0033:0x7ffa9b19e0d9 [ 587.621837][T11573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.621856][T11573] RSP: 002b:00007ffa9c073028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.621887][T11573] RAX: ffffffffffffffda RBX: 00007ffa9b425fa0 RCX: 00007ffa9b19e0d9 [ 587.621904][T11573] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 587.621919][T11573] RBP: 00007ffa9c073090 R08: 0000000000000000 R09: 0000000000000000 [ 587.799048][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.807038][T11573] R13: 00007ffa9b426038 R14: 00007ffa9b425fa0 R15: 00007fffc483bf88 [ 587.815045][T11573] [ 588.561332][T11576] device 0 entered promiscuous mode [ 591.435304][T11612] netlink: 'syz.3.2134': attribute type 21 has an invalid length. [ 591.473071][T11612] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2134'. [ 591.487058][T11612] netlink: 'syz.3.2134': attribute type 5 has an invalid length. [ 591.505992][T11612] netlink: 'syz.3.2134': attribute type 6 has an invalid length. [ 591.528704][T11612] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2134'. [ 591.538228][T11613] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2134'. [ 591.554769][T11619] netlink: 'syz.4.2140': attribute type 10 has an invalid length. [ 591.572980][T11619] bridge0: port 5(team0) entered disabled state [ 591.579569][T11619] bridge0: port 4(dummy0) entered disabled state [ 591.586205][T11619] bridge0: port 3(hsr0) entered disabled state [ 591.592554][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.599893][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.639171][T11619] team0: Device bridge0 is already an upper device of the team interface [ 592.110473][T11637] netlink: 'syz.4.2145': attribute type 7 has an invalid length. [ 592.128815][T11637] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2145'. [ 592.149578][T11638] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 592.192987][T11638] team0: Device wg1 is of different type [ 593.344467][T11663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2151'. [ 593.662451][T11667] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2155'. [ 593.696145][T11666] delete_channel: no stack [ 594.192387][T11669] netlink: 'syz.2.2157': attribute type 21 has an invalid length. [ 594.226515][T11669] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2157'. [ 594.257685][T11669] netlink: 'syz.2.2157': attribute type 5 has an invalid length. [ 594.268909][T11669] netlink: 'syz.2.2157': attribute type 6 has an invalid length. [ 594.280888][T11669] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2157'. [ 594.302588][T11682] netlink: 12002 bytes leftover after parsing attributes in process `syz.4.2159'. [ 594.312876][T11678] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2157'. [ 594.360050][T11682] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 594.379963][T11682] netlink: 'syz.4.2159': attribute type 3 has an invalid length. [ 594.401370][T11682] netlink: 'syz.4.2159': attribute type 4 has an invalid length. [ 595.258045][ T4278] Bluetooth: hci3: unexpected subevent 0x19 length: 150 > 28 [ 595.265834][ T4278] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 598.139043][T11719] __nla_validate_parse: 3 callbacks suppressed [ 598.139063][T11719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2170'. [ 598.157310][T11741] netlink: 'syz.0.2175': attribute type 21 has an invalid length. [ 598.175230][T11741] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2175'. [ 598.190111][T11741] netlink: 'syz.0.2175': attribute type 5 has an invalid length. [ 598.248758][T11741] netlink: 'syz.0.2175': attribute type 6 has an invalid length. [ 598.261240][T11741] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2175'. [ 598.293406][T11745] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2175'. [ 598.544896][T11760] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.2180'. [ 598.792330][T11763] netlink: 'syz.2.2182': attribute type 10 has an invalid length. [ 598.888307][T11763] device bridge_slave_1 left promiscuous mode [ 598.904176][T11763] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.938885][T11763] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 599.314975][T11779] netlink: 'syz.2.2188': attribute type 4 has an invalid length. [ 599.327644][T11779] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2188'. [ 600.092691][T11807] netlink: 'syz.2.2196': attribute type 11 has an invalid length. [ 600.203676][T11807] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2196'. [ 600.259256][T11802] : port 1(ip6gretap0) entered blocking state [ 600.336038][T11802] : port 1(ip6gretap0) entered disabled state [ 600.378505][T11802] device ip6gretap0 entered promiscuous mode [ 600.419062][T11803] device ip6gretap0 left promiscuous mode [ 600.439321][T11803] : port 1(ip6gretap0) entered disabled state [ 600.896166][T11817] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2197'. [ 601.154955][T11822] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2197'. [ 602.382408][T11817] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 603.473076][T11840] netlink: 'syz.0.2204': attribute type 21 has an invalid length. [ 603.518001][T11840] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2204'. [ 603.597007][T11840] netlink: 'syz.0.2204': attribute type 5 has an invalid length. [ 603.692108][T11840] netlink: 'syz.0.2204': attribute type 6 has an invalid length. [ 603.833676][T11840] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2204'. [ 603.881205][T11842] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2204'. [ 603.992466][T11854] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2210'. [ 604.095303][T11854] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2210'. [ 604.158705][T11855] netlink: 'syz.2.2209': attribute type 10 has an invalid length. [ 604.168529][T11855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2209'. [ 604.190074][T11855] batman_adv: batadv0: Adding interface: vlan1 [ 604.201440][T11855] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.232471][T11855] batman_adv: batadv0: Interface activated: vlan1 [ 604.316650][T11857] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2210'. [ 605.647375][T11895] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2219'. [ 607.040430][T11905] tipc: Started in network mode [ 607.065731][T11905] tipc: Node identity 9215a268, cluster identity 4711 [ 607.077030][T11905] tipc: Node number set to 2450891368 [ 607.102419][T11911] netlink: 'syz.0.2223': attribute type 1 has an invalid length. [ 607.111209][T11911] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2223'. [ 609.834182][T11928] netlink: 'syz.4.2230': attribute type 21 has an invalid length. [ 609.924288][T11928] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2230'. [ 609.982806][T11928] netlink: 'syz.4.2230': attribute type 5 has an invalid length. [ 610.013373][T11928] netlink: 'syz.4.2230': attribute type 6 has an invalid length. [ 610.022401][T11928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2230'. [ 610.123621][T11930] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2230'. [ 610.406892][T11935] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 610.515847][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2233'. [ 614.846333][T12003] netlink: 'syz.1.2253': attribute type 21 has an invalid length. [ 614.903588][T12003] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2253'. [ 614.920608][T12003] netlink: 'syz.1.2253': attribute type 5 has an invalid length. [ 614.970316][T12003] netlink: 'syz.1.2253': attribute type 6 has an invalid length. [ 614.985309][T12003] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2253'. [ 615.005858][T12009] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2253'. [ 616.247055][T12040] netlink: 'syz.1.2264': attribute type 21 has an invalid length. [ 616.282692][T12040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2264'. [ 616.429226][T12045] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2275'. [ 616.659782][T12044] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 616.733817][T12044] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2265'. [ 617.506810][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2276'. [ 617.758482][T12083] netlink: 'syz.4.2274': attribute type 21 has an invalid length. [ 617.784329][T12083] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2274'. [ 617.833602][T12083] netlink: 'syz.4.2274': attribute type 5 has an invalid length. [ 617.841952][T12083] netlink: 'syz.4.2274': attribute type 6 has an invalid length. [ 617.898165][T12083] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2274'. [ 617.952279][T12091] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2274'. [ 617.998351][T12095] netlink: 'syz.1.2279': attribute type 21 has an invalid length. [ 618.017027][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2279'. [ 618.280905][T12105] netlink: 'syz.1.2282': attribute type 27 has an invalid length. [ 618.445646][T12097] device hsr_slave_0 left promiscuous mode [ 618.658233][T12097] bridge0: port 3(hsr0) entered disabled state [ 620.147618][T12138] validate_nla: 2 callbacks suppressed [ 620.147637][T12138] netlink: 'syz.2.2290': attribute type 1 has an invalid length. [ 620.169084][T12138] __nla_validate_parse: 3 callbacks suppressed [ 620.169101][T12138] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2290'. [ 620.213080][T12134] netlink: 'syz.1.2289': attribute type 10 has an invalid length. [ 620.585816][T12142] netlink: 'syz.2.2291': attribute type 21 has an invalid length. [ 620.610065][T12142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2291'. [ 621.075065][T12154] netlink: 'syz.4.2296': attribute type 21 has an invalid length. [ 621.144183][T12154] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2296'. [ 624.226355][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.232764][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.468385][T12183] netlink: 'syz.4.2302': attribute type 21 has an invalid length. [ 624.481221][T12183] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2302'. [ 624.507334][T12183] netlink: 'syz.4.2302': attribute type 5 has an invalid length. [ 624.515682][T12183] netlink: 'syz.4.2302': attribute type 6 has an invalid length. [ 624.523775][T12183] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2302'. [ 624.552160][T12185] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2302'. [ 624.572520][T12191] bridge0: port 4(batadv0) entered blocking state [ 624.580186][T12191] bridge0: port 4(batadv0) entered disabled state [ 624.589094][T12191] device batadv0 entered promiscuous mode [ 624.596075][T12191] bridge0: port 4(batadv0) entered blocking state [ 624.602619][T12191] bridge0: port 4(batadv0) entered forwarding state [ 624.636280][ T4923] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 624.645753][ T4923] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 626.340432][T12215] netlink: 'syz.0.2308': attribute type 21 has an invalid length. [ 626.353108][T12215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2308'. [ 626.507175][T12218] netlink: 'syz.0.2310': attribute type 21 has an invalid length. [ 626.522802][T12218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2310'. [ 626.569729][T12220] netlink: 'syz.1.2311': attribute type 2 has an invalid length. [ 626.620177][T12220] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2311'. [ 628.512455][T12241] device sit0 entered promiscuous mode [ 628.677486][T12254] netlink: 'syz.0.2320': attribute type 21 has an invalid length. [ 628.704421][T12254] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2320'. [ 629.140930][T12263] netlink: 'syz.3.2324': attribute type 21 has an invalid length. [ 629.156592][T12263] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2324'. [ 629.167115][T12263] netlink: 'syz.3.2324': attribute type 5 has an invalid length. [ 629.177401][T12263] netlink: 'syz.3.2324': attribute type 6 has an invalid length. [ 629.186143][T12263] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2324'. [ 629.198160][T12275] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2324'. [ 629.978494][T12293] netlink: 'syz.2.2331': attribute type 3 has an invalid length. [ 630.006664][T12293] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2331'. [ 630.040116][T12296] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2332'. [ 630.077946][T12294] ------------[ cut here ]------------ [ 630.083569][T12294] WARNING: CPU: 0 PID: 12294 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 630.093525][T12294] Modules linked in: [ 630.097465][T12294] CPU: 0 PID: 12294 Comm: syz.2.2331 Not tainted syzkaller #0 [ 630.105003][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.115166][T12294] RIP: 0010:perf_pending_task+0x353/0x480 [ 630.120941][T12294] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 630.140780][T12294] RSP: 0018:ffffc9000c74f8e8 EFLAGS: 00010293 [ 630.147326][T12294] RAX: ffffffff81a7add3 RBX: ffff8880534e6a58 RCX: ffff888052778000 [ 630.155407][T12294] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 630.163479][T12294] RBP: ffff8880534e6820 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 630.171496][T12294] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff888052778000 [ 630.179571][T12294] R13: ffff88801e749d60 R14: 0000000000000000 R15: 1ffff1100a69cd04 [ 630.187687][T12294] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 630.196729][T12294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.203433][T12294] CR2: 0000000000000000 CR3: 000000007c58e000 CR4: 00000000003506f0 [ 630.211457][T12294] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 630.219546][T12294] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 630.227663][T12294] Call Trace: [ 630.230976][T12294] [ 630.234029][T12294] task_work_run+0x1d0/0x260 [ 630.238784][T12294] ? task_work_cancel+0x220/0x220 [ 630.243897][T12294] ? do_raw_spin_unlock+0x11d/0x230 [ 630.249452][T12294] do_exit+0x9d5/0x2570 [ 630.253837][T12294] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 630.259890][T12294] ? put_task_struct+0x80/0x80 [ 630.264765][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.270996][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.277274][T12294] ? lockdep_hardirqs_on+0x94/0x140 [ 630.282531][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.288837][T12294] do_group_exit+0x229/0x2e0 [ 630.293633][T12294] ? _raw_spin_unlock_irq+0x25/0x40 [ 630.298899][T12294] get_signal+0x1259/0x1340 [ 630.303670][T12294] ? futex_wake+0x426/0x4f0 [ 630.308316][T12294] arch_do_signal_or_restart+0xc4/0x1310 [ 630.314162][T12294] ? ktime_get+0x7b/0x270 [ 630.318618][T12294] ? ktime_get+0x7b/0x270 [ 630.322968][T12294] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 630.329319][T12294] ? do_futex+0x2e2/0x320 [ 630.333756][T12294] ? get_sigframe_size+0x10/0x10 [ 630.338768][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.345033][T12294] ? exit_to_user_mode_loop+0x3b/0x110 [ 630.350951][T12294] exit_to_user_mode_loop+0x70/0x110 [ 630.356403][T12294] exit_to_user_mode_prepare+0xee/0x180 [ 630.362022][T12294] syscall_exit_to_user_mode+0x16/0x40 [ 630.367580][T12294] do_syscall_64+0x58/0xa0 [ 630.372050][T12294] ? clear_bhb_loop+0x60/0xb0 [ 630.376892][T12294] ? clear_bhb_loop+0x60/0xb0 [ 630.381661][T12294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.387707][T12294] RIP: 0033:0x7f703459e0d9 [ 630.392173][T12294] Code: Unable to access opcode bytes at 0x7f703459e0af. [ 630.399337][T12294] RSP: 002b:00007f70354da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.407885][T12294] RAX: 0000000000000001 RBX: 00007f7034826188 RCX: 00007f703459e0d9 [ 630.415973][T12294] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f703482618c [ 630.424148][T12294] RBP: 00007f7034826180 R08: 003aabc79729628c R09: 0000000000000000 [ 630.432174][T12294] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 630.440287][T12294] R13: 00007f7034826218 R14: 00007fff63910030 R15: 00007fff63910118 [ 630.448355][T12294] [ 630.451742][T12294] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 630.459065][T12294] CPU: 0 PID: 12294 Comm: syz.2.2331 Not tainted syzkaller #0 [ 630.466582][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 630.476676][T12294] Call Trace: [ 630.479990][T12294] [ 630.482954][T12294] dump_stack_lvl+0x188/0x24e [ 630.487690][T12294] ? memcpy+0x3c/0x60 [ 630.491793][T12294] ? show_regs_print_info+0x12/0x12 [ 630.497043][T12294] ? load_image+0x410/0x410 [ 630.501623][T12294] panic+0x2d3/0x710 [ 630.505574][T12294] ? bpf_jit_dump+0xd0/0xd0 [ 630.510153][T12294] __warn+0x2f8/0x4f0 [ 630.514200][T12294] ? perf_pending_task+0x353/0x480 [ 630.519362][T12294] ? perf_pending_task+0x353/0x480 [ 630.524516][T12294] report_bug+0x2ba/0x4f0 [ 630.528921][T12294] ? perf_pending_task+0x353/0x480 [ 630.534094][T12294] handle_bug+0x3a/0x70 [ 630.538297][T12294] exc_invalid_op+0x16/0x40 [ 630.542858][T12294] asm_exc_invalid_op+0x16/0x20 [ 630.547767][T12294] RIP: 0010:perf_pending_task+0x353/0x480 [ 630.553539][T12294] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 630.573205][T12294] RSP: 0018:ffffc9000c74f8e8 EFLAGS: 00010293 [ 630.579326][T12294] RAX: ffffffff81a7add3 RBX: ffff8880534e6a58 RCX: ffff888052778000 [ 630.587347][T12294] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 630.595362][T12294] RBP: ffff8880534e6820 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 630.603375][T12294] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff888052778000 [ 630.611392][T12294] R13: ffff88801e749d60 R14: 0000000000000000 R15: 1ffff1100a69cd04 [ 630.619419][T12294] ? perf_pending_task+0x353/0x480 [ 630.624593][T12294] ? perf_pending_task+0x353/0x480 [ 630.629765][T12294] task_work_run+0x1d0/0x260 [ 630.634405][T12294] ? task_work_cancel+0x220/0x220 [ 630.639484][T12294] ? do_raw_spin_unlock+0x11d/0x230 [ 630.644735][T12294] do_exit+0x9d5/0x2570 [ 630.648939][T12294] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 630.654989][T12294] ? put_task_struct+0x80/0x80 [ 630.659795][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.666003][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.672207][T12294] ? lockdep_hardirqs_on+0x94/0x140 [ 630.677451][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.683666][T12294] do_group_exit+0x229/0x2e0 [ 630.688305][T12294] ? _raw_spin_unlock_irq+0x25/0x40 [ 630.693549][T12294] get_signal+0x1259/0x1340 [ 630.698134][T12294] ? futex_wake+0x426/0x4f0 [ 630.702701][T12294] arch_do_signal_or_restart+0xc4/0x1310 [ 630.708393][T12294] ? ktime_get+0x7b/0x270 [ 630.712763][T12294] ? ktime_get+0x7b/0x270 [ 630.717141][T12294] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 630.723436][T12294] ? do_futex+0x2e2/0x320 [ 630.727824][T12294] ? get_sigframe_size+0x10/0x10 [ 630.732824][T12294] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 630.739033][T12294] ? exit_to_user_mode_loop+0x3b/0x110 [ 630.744543][T12294] exit_to_user_mode_loop+0x70/0x110 [ 630.749887][T12294] exit_to_user_mode_prepare+0xee/0x180 [ 630.755481][T12294] syscall_exit_to_user_mode+0x16/0x40 [ 630.760988][T12294] do_syscall_64+0x58/0xa0 [ 630.765457][T12294] ? clear_bhb_loop+0x60/0xb0 [ 630.770177][T12294] ? clear_bhb_loop+0x60/0xb0 [ 630.774902][T12294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.780845][T12294] RIP: 0033:0x7f703459e0d9 [ 630.785299][T12294] Code: Unable to access opcode bytes at 0x7f703459e0af. [ 630.792360][T12294] RSP: 002b:00007f70354da0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.800825][T12294] RAX: 0000000000000001 RBX: 00007f7034826188 RCX: 00007f703459e0d9 [ 630.808843][T12294] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f703482618c [ 630.816860][T12294] RBP: 00007f7034826180 R08: 003aabc79729628c R09: 0000000000000000 [ 630.824870][T12294] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 630.832887][T12294] R13: 00007f7034826218 R14: 00007fff63910030 R15: 00007fff63910118 [ 630.840921][T12294] [ 630.844655][T12294] Kernel Offset: disabled [ 630.848993][T12294] Rebooting in 86400 seconds..