last executing test programs: 1m45.577085629s ago: executing program 2 (id=4293): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="a5955bbcdd6ca30729669c5bbcfbf210396655c3b138ed5b55f8faee081f29a8a253e268940c5321b81bdfe4f808dc625f93bcda809d316ed27ab37261a2fbfebb63e5e489f69b419d6e163ad7775e67351e6fa5d348fcec31cff33341e59de38fe04d8bbbcb68cac90a0ae9eb575beee8b36f222859b73bdf1a300968d25862d141465608cc5bccf6ef358883ac18b596575c1ad5e9e62816d730ec4d2d9ed1bf30a948e58b4e21e844db6b755589e3b8c923bf07", 0xb5}, {&(0x7f0000000240)}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x358}, 0x4000000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x2, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688a100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000002c0)={0x2, 0x80, 0x2, 0xe3, 0x95, 0x2, 0x0, 0x7, 0x84200, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf3, 0x2, @perf_config_ext={0x3, 0xfffffffffffffff9}, 0x100011, 0x1, 0x4, 0x5, 0xffffffffffffff70, 0xfffffffe, 0x2469, 0x0, 0x800, 0x0, 0x3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0x11, 0x0, &(0x7f0000000000)="ffffffff7f833e97627153c801d72069cc", 0x0, 0x304, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x8}, 0x50) 1m44.138205913s ago: executing program 2 (id=4297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141042, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x9, 0x1, 0x0, r3}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x1, 0x2, 0x0, 0xa, 0x8, 0xfffffffffffffffc, 0xfffffffffffffff0}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x34, &(0x7f0000000180)=""/52, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0xb, 0x4d, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x3, 0x1, 0xf, 0x3}, {0x4, 0x4, 0xf, 0xc}, {0x2, 0x2, 0x1, 0x2}, {0x3, 0x2, 0xf, 0x4}, {0x2, 0x4, 0xe, 0xa}, {0x4, 0x1, 0x4, 0x2}], 0x10, 0x9}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000440)=r4) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) 1m43.978359307s ago: executing program 0 (id=4299): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x39, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pi6 \x00'}, 0x20) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x1, 0x8}, 0xc) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x9d, &(0x7f0000000080)=""/157, 0x40f00, 0x1, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xa, 0x6, 0xfa29}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r2, r3, r4, r5, r6, 0xffffffffffffffff, 0x1, r7], &(0x7f0000000840)=[{0x3, 0x6, 0x1, 0x6}, {0x1, 0x1, 0x9, 0x4}, {0x2, 0x1, 0x10, 0x4}, {0x4, 0x4, 0xb}, {0x0, 0x2, 0x2, 0x1}, {0x4, 0x2, 0x1}], 0x10, 0x6}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@const={0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x3}]}]}, {0x0, [0x61]}}, &(0x7f0000000a80)=""/78, 0x3b, 0x4e, 0x0, 0x9, 0x10000}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x9, 0xa, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xac8a, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9399, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000a00)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000b40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xc, 0x7b4}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000bc0)=[r6, r6, r5, r7, r2], &(0x7f0000000c00)=[{0x2, 0x1, 0x6, 0xb}, {0x0, 0x2, 0x6, 0x4}, {0x0, 0x2, 0xe, 0xb}, {0x0, 0x2, 0xc, 0x2}, {0x5, 0x2, 0x5, 0x7}, {0x3, 0x4, 0xc, 0x8}, {0x0, 0x4, 0x3, 0x4}, {0x4, 0x3, 0x9, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d40)={r7, 0xffffffffffffffff}, 0x4) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000fc0)=@o_path={&(0x7f0000000f80)='./file0\x00', 0x0, 0x2000}, 0x18) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0\x00', 0x0, 0x10}, 0x18) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x18, 0x1b, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ad, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x74f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000e80)='GPL\x00', 0x80000001, 0x26, &(0x7f0000000ec0)=""/38, 0x40f00, 0xf5b1f852dcee908d, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000f00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x5, 0xa, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000001080)=[r6, r5, r4, r12, r13, r5, r3, r2], &(0x7f00000010c0)=[{0x2, 0x3, 0xf, 0x6}, {0x2, 0x5, 0x5, 0x2}, {0x0, 0x3, 0x5, 0x7}, {0x1, 0x3, 0x8, 0xf}, {0x5, 0x5, 0x5, 0xc}, {0x2, 0x1, 0x4, 0x3}, {0x3, 0x4, 0xe, 0x7}, {0x1, 0x2, 0xf}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001200)={0xffffffffffffffff}) r16 = gettid() r17 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002700), 0x2, 0x0) r18 = getpid() r19 = syz_clone(0x8044800, &(0x7f0000002740)="18245e8f3a44835643b0e0ca023dc8091816aa50a9a18cd9c5aef95a78157f2e8d0b48f335d294bc666994b6d8f80407c30e496cc8fd16858eb1397d1e8ea36e6750df422814b31f3233f8bcf482ac120ef8956fd13b3e66a2fe5d3d17fb76399889e0e3661b9ab0e9346882bb2737f0", 0x70, &(0x7f00000027c0), &(0x7f0000002800), &(0x7f0000002840)="b0bb609446eff0fd1fe9750c582f2690848516e58d0a42f1786fa931777d1b41cf93004d8adace0381ff6df2094503e5b58a3788280849b9f526e497bf6a9f2d432ec88ab12ed2716032c1ee7f8d729dc5dbca50f1470a11b230035388a9431a59af8ce6e66b4e426e2c09dd4c35fccf2309a4e226f4bc88f6f8c8f071060bc84690974f0a84ca4d839f0a012cbbb899950e") r20 = syz_clone(0x100000, &(0x7f0000002900)="6a09f400bbd2058eb82b402ddcc636e90af083bc2507099ae5a9d6e217da875f53bdd4ebffbd34ece31285f837d1f43043e7ce35e615bff7cb3dcd44a2894e9e660dd09488617274bab5b267a69fdbfbe8fb3f1ae8fc42507b902b86d80e0144cec3934f13a99d018aca4ddb3ecddfec388d5b4c9554bb748fbe141f20d0fb64b0b565f35f", 0x85, &(0x7f00000029c0), &(0x7f0000002a00), &(0x7f0000002a40)="eed5c6a87ba02bcb565c01b9990297db2ecfe5eb7ad874550ba1ab384cfd6bce988d7b1b0b0872ae9593a61623ef170c10") r21 = getpid() sendmsg$unix(r15, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001240)="76433c8044abfbab1eb9d95c0fdf664ea06b5855dc755fff6f014d78a6844f7a6800e797227d6becbafdf6aa9a275b7c69025a78a6cb71fcbaea4943b21f0228f9cd1310e4c959b6a2ad09e516a214de710771517763e49a4ae7c6fac5b26b1ddf92ad0e44dac520b2d8261aeeae0fe8c0798edec155feac4cecef42183d2f5fe3de7e24ba44e4b28b38", 0x8a}, {&(0x7f0000001300)="d33b18d867cede031cf9c3b5b9f01bb49af8f3a34dee62a3386a25d7a87fc78c343e69fc50034f709da94003", 0x2c}, {&(0x7f0000001340)="f07eed4a2c00700542bc7c849cd160146621c7011ab47a14b1013ef29eba122e1c96b9c36f5c03a8a64f2516c76cb58a3dc7d369fb44d9aef3247c6b08a5620781830ca589d041789903350095807fda0349410113a847c43537576fc57223a1b222ff6c73737b5ac0db8fd43e53748393bb811c542883be015e28bc8b2d4ea6886b24497cbc292ee1ebdc5a34f70d4b985c42c30d4b16b4c7db7baa8e12c2c7f4fbf7aa43df9b7a6f1fc3fc15d1a785647c617a88aabae929b4321480328f45a0482d603ec1741436161ea92d72e148a43776aeba16591b6e5c1a", 0xdb}, {&(0x7f0000001440)="b1bee74b41a18e40e32c9702b48c8781e62babbd59d2f6e58c4134ed273125c6d973df2b968fb08aa461d89eefa7840ef3fa5614e88929499d1679e4b1ba8ef2414e7328b4a5e2db19e9b49b2f18cd2220a13432b5671a4b8a62870133e65d34b0d529ab33ef54a32aa9104c6449d713f6156a4c868671681ac01402b3b44a7f79b225d5257055a7194c828dc6cc312d5884ac1f91680bfacc03ac936c9193f1295a38c83d61ab177e11d1e76f4f370a4f0e081e188e6fb1a84d76eb37a7576cab496e3fe7b90749cb5a60c2869a64686fd2a75b4998169b3578f0ce1f33fd62494e0ab4f6c9", 0xe6}, {&(0x7f0000001540)="dc6695a0ed1276dd296cfbc4976399391bdfa713d99377b69367a760707cce273de5c712bc6217cbc761fb2ab2a800925a907b9cfe744d7cabde17db3864a3f3d1", 0x41}, {&(0x7f00000015c0)}, {&(0x7f0000001600)="e1c722ef1356083f6866b6d74a3c9474510c388674cc67a86d585a5d963cf20bee6e21ae418c0cb0b91c06ad5ee4d2bd3dd43b2c2659b408ad2e9af1270b8fdcfc3d0a67152f3f58f39b46b9", 0x4c}, {&(0x7f0000001680)="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", 0x1000}], 0x8, &(0x7f0000002a80)=[@cred={{0x1c, 0x1, 0x2, {r16, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @rights={{0x24, 0x1, 0x1, [r17, 0xffffffffffffffff, r9, r14, r14]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r20, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, 0xffffffffffffffff}}}], 0x100, 0x24008005}, 0x40000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002cc0)={@fallback=r8, 0x2f, 0x1, 0x8f9, &(0x7f0000002bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000002c00)=[0x0], &(0x7f0000002c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002c80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002d00)={@fallback=r15, r10, 0x20, 0x35, r14, @void, @void, @void, @value=r0, r23}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r22, 0x40042408, r14) r24 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002d80)={r24, r22, 0x0, 0x3, &(0x7f0000002d40)='*{\x00'}, 0x30) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000030c0)={&(0x7f0000002dc0)="0136a1ab3a2b8c5febc8aac3bf54fbfe693c3bc3ed35a45e0876f28c138aee759162d07ec8dfa07034475a01edb1b623903ca596faed4b4c66c32c9d34a3844fa0fe0f1226dad26fc0005cb373ad5c61593290a67b9f9f0e99572a9340b9ee4452192d5f5bdc158d0f2e3aa769d60dbdefb9b0861b292a26232f0c2eccf296baef5586e8fc72c9952aaff85dff007bcacc0e56ed7a8ad3ccd9f5847cbc81323295101764dde103f9d4176f69ca37f5b80df9264ea29d24cff527fbce56ac0ed82e1fda0757755bdc66dab4fb3d8877b185e58a00a259ff2cfb01d3616e9fc95de6d52aba", &(0x7f0000002ec0)=""/137, &(0x7f0000002f80)="6e616314bc2e99656ffe5d", &(0x7f0000002fc0)="5805bc8590886218b8a46c634c7acd12594974ba706a41c85ed9aaf7b6dbd7c4ace834785b4cd0160a72afe95981dcba82f78dfe9c47caa7c2fff00fc3243c6ccfb1165eb1c016c8785891e73e8a62b6cb769c99fb8a321c2b706deaae3ebb8a6753bc5e25c8d37f436d93df646e5ad393f962d735804e82f1c73d29d9d755d5f11853fbec865b811df51c4fc7e4c59fcf2159ae8661dbfa34f43f86627dd636134127da09b8573dc50cb46cb85e35d451a5be43ee716e5cce389891fa9afeaf760358fe3f4031c1919b90e56fd5c098091e66", 0x3ff, r13, 0x4}, 0x38) socket$kcm(0x29, 0x1, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000003140), 0x12) 1m43.942489807s ago: executing program 3 (id=4300): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m43.698343063s ago: executing program 0 (id=4302): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="1c00000014006b030031a608299fb84210947e3d11629a41300c000a", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m43.696325833s ago: executing program 2 (id=4303): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r0, r3}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r10, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000000), &(0x7f0000000100)='%-010d \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r1) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 1m43.544725187s ago: executing program 0 (id=4305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f00}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44010) (async, rerun: 32) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000006f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)}, 0x0) 1m42.459285253s ago: executing program 3 (id=4307): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000001700)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) close(0x3) (async) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) (async) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) (async) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000000), 0x2, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000000000b70400000000000085000000c3000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9, r8}, 0xc) write$cgroup_devices(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0xb) 1m42.435291924s ago: executing program 1 (id=4308): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x88, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8450, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m42.434139213s ago: executing program 2 (id=4309): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8949, &(0x7f0000000000)={'bond0\x00', @random="f8b3d73e332c"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x3, 0x2, 0x0, 0x0, 0x16fa4911, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0xe}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x400, 0x0, 0x20000, 0x0, 0xfffffffffffffffc}, 0x0, 0x5, 0xffffffffffffffff, 0x8) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB="3eb76c"], 0x9a) 1m42.265959288s ago: executing program 0 (id=4310): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[], 0xfdef) ioctl$TUNSETTXFILTER(r9, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00fd0800aaaaaaaaaaaaaaaaaaaaaa1dbbbbabbbbbbbbbbb0900bbbb2cd36cc42c3effffffffffffbbbbbbbbbbbbffffffffffffaaaaaaaa2abba68250b78b5928a84b7ecd389183f6990cfe2786f4a71fda377e564ac96c9f9277127ad918f1dfcbe4a1dd1a76a97b471bc21998ed6a84dbc166e25b5d9e3221f01476d435b9cf29"]) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="00637175736588202b6e6574202d6e65745f636c7320000000000000000069636573202b626c6b696f202b696f202d667265657a657220"], 0x37) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r11 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_type(r11, &(0x7f0000000080), 0x9) 1m42.108937752s ago: executing program 3 (id=4311): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x2, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, &(0x7f00000000c0)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x9) (async) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) (async) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x4a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7e41}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x6b120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80004, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0x11, 0x0, 0x8}, 0x0, 0x0, r9, 0x2) (async) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r10], 0x9a) 1m42.051111822s ago: executing program 2 (id=4312): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) close(r1) gettid() perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x2, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="180000007600a921059f317a9dab00000000", 0x12}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0x4}, {0x6, 0x1, 0x0, 0x1}]}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x21, 0x44, 0xfffff00c}]}) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000140)=0x1) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 1m41.967660695s ago: executing program 1 (id=4313): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x32, &(0x7f0000000100)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4623}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6e99}}, @call={0x85, 0x0, 0x0, 0x8e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f00000002c0)='GPL\x00', 0x4, 0x57, &(0x7f0000000300)=""/87, 0x40f00, 0x1e, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r6, r7], &(0x7f0000000540)=[{0x2, 0x5, 0x9}, {0x1, 0x1, 0xf}, {0x5, 0x1, 0x6}, {0x5, 0x3, 0x1, 0x9}, {0x1, 0x3, 0x6, 0x2}, {0x2, 0x3, 0xb, 0x2}], 0x10, 0x75}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) 1m41.766168969s ago: executing program 1 (id=4314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000080850000002d000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) 1m41.74919259s ago: executing program 3 (id=4315): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)}], 0x1}, 0x0) recvmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m41.706172681s ago: executing program 1 (id=4316): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f91824fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000000)=r4, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x53}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m41.213620803s ago: executing program 0 (id=4317): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x7, 0x9}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000900), &(0x7f0000000940)=r3}, 0x20) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000027c0)={0x6, 0xf, &(0x7f00000004c0)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 1m41.189373793s ago: executing program 3 (id=4318): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01650f000000000000001001000010010000050000000000000000000000020000000400000006000013020000000800000095090000000000000800000040000000090000000d0000007e0c0000070000000700000002000000b40d00000d00000005000000000000000b00005ef7031b0009000000020000000000000b030000000f0000000000000100000000610002030800000009000085020000000d000000020000004beb0000ffff0700000003000000040000000500000008000000030000000000eb0f07000000040000000b000000f36a0a00000000e00200050000000b00000002000000ff00000009000000010000000f000000080000000000001101000000ffffffff0061303000"/291], &(0x7f0000000840)=""/255, 0x12d, 0xff, 0x1, 0x8, 0x10000, @value=r5}, 0x28) r6 = perf_event_open(&(0x7f0000000fc0)={0x6, 0x80, 0x8, 0x0, 0x0, 0x9, 0x0, 0x6, 0x76183, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x7, 0x80000001}, 0x802, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90424fc602f0009000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r8, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}, 0x8040) socket$kcm(0x29, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{r9}, &(0x7f0000001440), &(0x7f0000001480)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="180800001800"/15, @ANYRES32=r10, @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 1m41.129076045s ago: executing program 0 (id=4319): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2e129, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x0, 0xeb, 0x1, 0x0, 0x8000000000000000, 0x404a5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x2020, 0x2, 0x1, 0x3, 0x9, 0x401, 0x0, 0x0, 0x8001, 0x0, 0x1}, 0x0, 0xc, r0, 0x3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, 0xffffffffffffffff, 0x1d, 0x18}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r1, 0x0, 0x42) 1m40.470412531s ago: executing program 1 (id=4320): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000feffffff85000000c200000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x11}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m40.469038211s ago: executing program 1 (id=4321): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x88, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8450, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1m36.408559547s ago: executing program 3 (id=4322): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x985781883c6ef0dd, 0x3a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="654d03cd609b5cf204410a3d69e43dbbc4ff9e5f6bd617ccd306efbd227539741b45447b75cfa9ea4d455c7b9489aec5d710a056dab1e5be950ba7ba3c", 0x3d}], 0x1}, 0x4000040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0x4, 0xfffff008}, {0x6, 0x5, 0xe, 0x7}]}) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="b60be3b5f6a8748a910f1fc93ee6f94618b3710e40f59399d718ebe7c5986d22c2ac8079102cc42dd77bdf2a99134159d582094db6ca1602ce476440c66d03a1a3420f"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r10, &(0x7f00000003c0), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) socket$kcm(0x10, 0x2, 0x4) 1m33.989686215s ago: executing program 2 (id=4323): socket$kcm(0xa, 0x2, 0x3a) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x2, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x9210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0xf86, 0x4}, 0x64b2074d57f2de04, 0x400000, 0x0, 0x0, 0x10000000000000, 0x1c000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) 1m23.032849386s ago: executing program 32 (id=4319): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2e129, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x29, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x4, 0x0, 0xeb, 0x1, 0x0, 0x8000000000000000, 0x404a5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x2020, 0x2, 0x1, 0x3, 0x9, 0x401, 0x0, 0x0, 0x8001, 0x0, 0x1}, 0x0, 0xc, r0, 0x3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex, 0xffffffffffffffff, 0x1d, 0x18}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) recvmsg$kcm(r1, 0x0, 0x42) 1m22.548748788s ago: executing program 33 (id=4321): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x88, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f00000005c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8450, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 20.086074594s ago: executing program 34 (id=4322): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0xa, 0x985781883c6ef0dd, 0x3a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000000c0)="654d03cd609b5cf204410a3d69e43dbbc4ff9e5f6bd617ccd306efbd227539741b45447b75cfa9ea4d455c7b9489aec5d710a056dab1e5be950ba7ba3c", 0x3d}], 0x1}, 0x4000040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0x4, 0xfffff008}, {0x6, 0x5, 0xe, 0x7}]}) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="b60be3b5f6a8748a910f1fc93ee6f94618b3710e40f59399d718ebe7c5986d22c2ac8079102cc42dd77bdf2a99134159d582094db6ca1602ce476440c66d03a1a3420f"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r10, &(0x7f00000003c0), 0x0}, 0x20) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) socket$kcm(0x10, 0x2, 0x4) 0s ago: executing program 35 (id=4323): socket$kcm(0xa, 0x2, 0x3a) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x2, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x9210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000200), 0x3}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0xf86, 0x4}, 0x64b2074d57f2de04, 0x400000, 0x0, 0x0, 0x10000000000000, 0x1c000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610420000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) kernel console output (not intermixed with test programs): t mode [ 628.183564][T16588] netlink: 'syz.1.2875': attribute type 10 has an invalid length. [ 628.236469][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.256628][T16588] bridge_slave_1: left allmulticast mode [ 628.267403][T16588] bridge_slave_1: left promiscuous mode [ 628.278326][T16588] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.353864][T16588] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 628.694658][T16600] netlink: 'syz.0.2879': attribute type 10 has an invalid length. [ 629.195250][T16607] FAULT_INJECTION: forcing a failure. [ 629.195250][T16607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.292915][T16607] CPU: 0 PID: 16607 Comm: syz.1.2882 Not tainted syzkaller #0 [ 629.300424][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 629.310486][T16607] Call Trace: [ 629.313784][T16607] [ 629.316732][T16607] dump_stack_lvl+0x18c/0x250 [ 629.321439][T16607] ? show_regs_print_info+0x20/0x20 [ 629.326674][T16607] ? load_image+0x420/0x420 [ 629.331166][T16607] ? __might_fault+0xaa/0x120 [ 629.335834][T16607] ? __lock_acquire+0x7d80/0x7d80 [ 629.340849][T16607] should_fail_ex+0x394/0x4c0 [ 629.345543][T16607] _copy_from_user+0x2f/0xe0 [ 629.350158][T16607] sk_setsockopt+0x2b9/0x2b20 [ 629.354869][T16607] ? sockopt_capable+0x60/0x60 [ 629.359664][T16607] ? aa_sk_perm+0x83c/0x970 [ 629.364183][T16607] ? __fget_files+0x28/0x460 [ 629.368781][T16607] ? aa_af_perm+0x330/0x330 [ 629.373286][T16607] ? __fget_files+0x28/0x460 [ 629.377873][T16607] ? aa_sock_opt_perm+0x74/0x100 [ 629.382816][T16607] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 629.388360][T16607] ? security_socket_setsockopt+0x7e/0xa0 [ 629.394077][T16607] do_sock_setsockopt+0x11b/0x1a0 [ 629.399119][T16607] __x64_sys_setsockopt+0x182/0x200 [ 629.404318][T16607] do_syscall_64+0x55/0xb0 [ 629.408734][T16607] ? clear_bhb_loop+0x40/0x90 [ 629.413416][T16607] ? clear_bhb_loop+0x40/0x90 [ 629.418092][T16607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.423982][T16607] RIP: 0033:0x7efe2c79e159 [ 629.428392][T16607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.447992][T16607] RSP: 002b:00007efe2d63f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 629.456401][T16607] RAX: ffffffffffffffda RBX: 00007efe2ca25fa0 RCX: 00007efe2c79e159 [ 629.464368][T16607] RDX: 0000000000000042 RSI: 0000000000000001 RDI: 0000000000000004 [ 629.472334][T16607] RBP: 00007efe2d63f090 R08: 000000000000003b R09: 0000000000000000 [ 629.480298][T16607] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 629.488264][T16607] R13: 00007efe2ca26038 R14: 00007efe2ca25fa0 R15: 00007ffe723fe768 [ 629.496243][T16607] [ 629.525176][T16600] team0: Device wg1 is of different type [ 631.028784][T16642] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2893'. [ 631.041436][T16642] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2893'. [ 631.051888][T16642] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2893'. [ 631.581953][T14285] Bluetooth: hci4: command 0x0406 tx timeout [ 632.311792][T16654] netlink: 'syz.2.2896': attribute type 6 has an invalid length. [ 632.319584][T16654] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2896'. [ 633.702781][T16681] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2907'. [ 634.397455][T16693] netlink: 'syz.0.2911': attribute type 3 has an invalid length. [ 634.490701][T16693] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2911'. [ 634.586699][T16700] netlink: 'syz.1.2912': attribute type 39 has an invalid length. [ 635.982658][T16715] delete_channel: no stack [ 636.854543][T16737] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2923'. [ 636.953584][T16741] netlink: 'syz.1.2931': attribute type 2 has an invalid length. [ 636.969001][T16741] netlink: 'syz.1.2931': attribute type 1 has an invalid length. [ 636.977630][T16741] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2931'. [ 636.997550][T16741] sit0: entered allmulticast mode [ 637.633436][T16757] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2933'. [ 638.888085][T16773] syzkaller0: entered promiscuous mode [ 638.905780][T16773] syzkaller0: entered allmulticast mode [ 640.219854][T16790] netlink: 'syz.3.2943': attribute type 3 has an invalid length. [ 640.248926][T16790] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.2943'. [ 641.762367][T16798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.769812][T16798] IPv6: NLM_F_CREATE should be set when creating new route [ 641.777344][T16798] IPv6: NLM_F_CREATE should be set when creating new route [ 641.784715][T16798] IPv6: NLM_F_CREATE should be set when creating new route [ 643.357890][T16831] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2954'. [ 643.410365][T16830] netlink: 200736 bytes leftover after parsing attributes in process `syz.2.2954'. [ 643.433350][T16832] netlink: 'syz.3.2955': attribute type 4 has an invalid length. [ 643.437114][T16830] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 643.502321][T16832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2955'. [ 645.291342][T16870] netlink: 'syz.3.2965': attribute type 29 has an invalid length. [ 645.320128][T16870] netlink: 'syz.3.2965': attribute type 29 has an invalid length. [ 645.722311][T16878] delete_channel: no stack [ 645.751556][T16878] delete_channel: no stack [ 646.340242][T16882] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2968'. [ 646.389324][T16882] netlink: get zone limit has 4 unknown bytes [ 647.182877][T16903] netlink: 'syz.0.2974': attribute type 10 has an invalid length. [ 647.642897][T16913] sock: sock_timestamping_bind_phc: sock not bind to device [ 652.051556][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 654.065097][T16994] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 654.100080][T16990] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 654.118424][T16990] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 655.113701][T16996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.817000][T17004] delete_channel: no stack [ 655.984526][T17031] netlink: 'syz.1.3019': attribute type 10 has an invalid length. [ 655.997249][T17031] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3019'. [ 656.012685][T17031] ipvlan1: entered promiscuous mode [ 656.026380][T17031] ipvlan1: entered allmulticast mode [ 656.040451][T17031] veth0_vlan: entered allmulticast mode [ 656.141080][T17031] bridge0: port 1(ipvlan1) entered blocking state [ 656.150458][T17031] bridge0: port 1(ipvlan1) entered disabled state [ 656.194412][T17031] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 656.723248][T17056] netlink: 'syz.1.3025': attribute type 21 has an invalid length. [ 656.732083][T17056] netlink: 'syz.1.3025': attribute type 20 has an invalid length. [ 656.954545][ T6080] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 657.658704][T17072] netlink: 'syz.1.3030': attribute type 1 has an invalid length. [ 658.036846][T17081] netlink: 'syz.3.3032': attribute type 19 has an invalid length. [ 658.045141][T17081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3032'. [ 661.135043][T17139] netlink: 'syz.1.3050': attribute type 28 has an invalid length. [ 662.025303][T17156] netlink: 'syz.0.3056': attribute type 2 has an invalid length. [ 662.037652][T17156] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3056'. [ 664.355397][T17167] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3061'. [ 667.600381][T17225] netlink: 'syz.2.3081': attribute type 39 has an invalid length. [ 668.062293][T17246] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3086'. [ 668.102701][T17242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3086'. [ 668.901716][T17276] netlink: 'syz.2.3093': attribute type 10 has an invalid length. [ 668.916063][T17276] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3093'. [ 669.052803][T17282] C: renamed from team_slave_0 (while UP) [ 669.121173][T17282] netlink: 'syz.3.3094': attribute type 3 has an invalid length. [ 669.150210][T17282] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3094'. [ 669.479561][T17287] netlink: 'syz.1.3096': attribute type 64 has an invalid length. [ 669.516712][T17287] netlink: 'syz.1.3096': attribute type 64 has an invalid length. [ 669.881545][T17287] netlink: 'syz.1.3096': attribute type 64 has an invalid length. [ 669.897245][T17281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3095'. [ 669.922593][T17287] netlink: 'syz.1.3096': attribute type 64 has an invalid length. [ 669.941826][T17287] netlink: 'syz.1.3096': attribute type 64 has an invalid length. [ 672.080347][T17287] netlink: 'syz.1.3096': attribute type 64 has an invalid length. [ 673.013782][T17355] netlink: 'syz.3.3120': attribute type 2 has an invalid length. [ 673.033414][T17355] netlink: 'syz.3.3120': attribute type 11 has an invalid length. [ 673.072139][T17355] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3120'. [ 673.153116][T17357] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 673.159305][T17357] syzkaller1: Linktype set failed because interface is up [ 673.171671][ T23] syzkaller1: tun_net_xmit 90 [ 673.331516][T17371] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3124'. [ 673.661603][ T78] syzkaller1: tun_net_xmit 86 [ 673.891645][ T5809] syzkaller1: tun_net_xmit 90 [ 674.107695][T17381] netlink: 'syz.1.3126': attribute type 29 has an invalid length. [ 674.116146][T17381] netlink: 'syz.1.3126': attribute type 29 has an invalid length. [ 674.277825][T17392] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.3126'. [ 674.298893][T17386] netlink: 'syz.0.3127': attribute type 29 has an invalid length. [ 674.320689][T17386] netlink: 'syz.0.3127': attribute type 29 has an invalid length. [ 674.338833][T17393] netlink: 'syz.0.3127': attribute type 29 has an invalid length. [ 674.349328][T17386] netlink: 'syz.0.3127': attribute type 29 has an invalid length. [ 674.359267][T17393] netlink: 'syz.0.3127': attribute type 29 has an invalid length. [ 674.394247][T17392] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3126'. [ 674.404098][T17398] netlink: 'syz.1.3126': attribute type 10 has an invalid length. [ 674.473813][T17398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.518044][T17398] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 674.565413][T17400] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3127'. [ 674.590615][T17405] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3130'. [ 674.893302][T17413] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3133'. [ 674.914740][T17412] FAULT_INJECTION: forcing a failure. [ 674.914740][T17412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.939411][T17412] CPU: 1 PID: 17412 Comm: syz.2.3132 Not tainted syzkaller #0 [ 674.946952][T17412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.957050][T17412] Call Trace: [ 674.960372][T17412] [ 674.963348][T17412] dump_stack_lvl+0x18c/0x250 [ 674.968085][T17412] ? show_regs_print_info+0x20/0x20 [ 674.973314][T17412] ? load_image+0x420/0x420 [ 674.977854][T17412] ? __might_fault+0xaa/0x120 [ 674.982569][T17412] ? __lock_acquire+0x7d80/0x7d80 [ 674.987635][T17412] should_fail_ex+0x394/0x4c0 [ 674.992356][T17412] _copy_from_user+0x2f/0xe0 [ 674.996974][T17412] __sys_bpf+0x23e/0x890 [ 675.001256][T17412] ? bpf_link_show_fdinfo+0x390/0x390 [ 675.006707][T17412] ? lock_chain_count+0x20/0x20 [ 675.011611][T17412] __x64_sys_bpf+0x7c/0x90 [ 675.016071][T17412] do_syscall_64+0x55/0xb0 [ 675.020529][T17412] ? clear_bhb_loop+0x40/0x90 [ 675.025229][T17412] ? clear_bhb_loop+0x40/0x90 [ 675.029935][T17412] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 675.035852][T17412] RIP: 0033:0x7fa37599e159 [ 675.040315][T17412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.059958][T17412] RSP: 002b:00007fa373bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 675.068416][T17412] RAX: ffffffffffffffda RBX: 00007fa375c25fa0 RCX: 00007fa37599e159 [ 675.076441][T17412] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 675.084448][T17412] RBP: 00007fa373bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 675.092456][T17412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.100451][T17412] R13: 00007fa375c26038 R14: 00007fa375c25fa0 R15: 00007ffc5cc82378 [ 675.108512][T17412] [ 675.366563][T17416] pimreg0: entered promiscuous mode [ 675.379997][T17416] pimreg0: entered allmulticast mode [ 675.452542][T17421] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3135'. [ 675.475726][T17418] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3135'. [ 675.504061][T17421] mac80211_hwsim hwsim47 ..c: renamed from wlan1 (while UP) [ 676.185658][T17451] FAULT_INJECTION: forcing a failure. [ 676.185658][T17451] name failslab, interval 1, probability 0, space 0, times 0 [ 676.272878][T17451] CPU: 1 PID: 17451 Comm: syz.3.3145 Not tainted syzkaller #0 [ 676.280401][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 676.290479][T17451] Call Trace: [ 676.293775][T17451] [ 676.296724][T17451] dump_stack_lvl+0x18c/0x250 [ 676.301431][T17451] ? show_regs_print_info+0x20/0x20 [ 676.306654][T17451] ? load_image+0x420/0x420 [ 676.311186][T17451] ? __might_sleep+0xe0/0xe0 [ 676.315797][T17451] ? __lock_acquire+0x7d80/0x7d80 [ 676.320828][T17451] should_fail_ex+0x394/0x4c0 [ 676.325510][T17451] should_failslab+0x9/0x20 [ 676.330013][T17451] slab_pre_alloc_hook+0x59/0x300 [ 676.335040][T17451] ? vmemdup_user+0x49/0x1e0 [ 676.339631][T17451] ? vmemdup_user+0x49/0x1e0 [ 676.344218][T17451] __kmem_cache_alloc_node+0x53/0x250 [ 676.349597][T17451] ? vmemdup_user+0x49/0x1e0 [ 676.354188][T17451] __kmalloc_node+0xa6/0x240 [ 676.358780][T17451] vmemdup_user+0x49/0x1e0 [ 676.363194][T17451] map_lookup_elem+0x28a/0x7f0 [ 676.367952][T17451] ? __might_fault+0xaa/0x120 [ 676.372624][T17451] ? bpf_lsm_bpf+0x9/0x10 [ 676.376959][T17451] __sys_bpf+0x438/0x890 [ 676.381199][T17451] ? bpf_link_show_fdinfo+0x390/0x390 [ 676.386581][T17451] ? lock_chain_count+0x20/0x20 [ 676.391435][T17451] __x64_sys_bpf+0x7c/0x90 [ 676.395849][T17451] do_syscall_64+0x55/0xb0 [ 676.400262][T17451] ? clear_bhb_loop+0x40/0x90 [ 676.404936][T17451] ? clear_bhb_loop+0x40/0x90 [ 676.409624][T17451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.415517][T17451] RIP: 0033:0x7fc5f499e159 [ 676.419932][T17451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.439535][T17451] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 676.447946][T17451] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 676.455917][T17451] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 676.463899][T17451] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 676.471885][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.479954][T17451] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 676.487945][T17451] [ 676.755664][T17455] tap0: tun_chr_ioctl cmd 1074025677 [ 676.769958][T17455] tap0: linktype set to 768 [ 676.795638][T17459] tap0: tun_chr_ioctl cmd 1074025677 [ 676.802816][T17459] tap0: linktype set to 768 [ 676.811899][T17458] tap0: tun_chr_ioctl cmd 1074025673 [ 677.143614][T17474] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3152'. [ 677.454981][T17485] FAULT_INJECTION: forcing a failure. [ 677.454981][T17485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.486931][T17485] CPU: 1 PID: 17485 Comm: syz.3.3155 Not tainted syzkaller #0 [ 677.494443][T17485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 677.504515][T17485] Call Trace: [ 677.507808][T17485] [ 677.510756][T17485] dump_stack_lvl+0x18c/0x250 [ 677.515462][T17485] ? show_regs_print_info+0x20/0x20 [ 677.520681][T17485] ? load_image+0x420/0x420 [ 677.525203][T17485] ? __might_fault+0xaa/0x120 [ 677.529907][T17485] ? __lock_acquire+0x7d80/0x7d80 [ 677.534957][T17485] ? __virt_addr_valid+0x10c/0x380 [ 677.540094][T17485] should_fail_ex+0x394/0x4c0 [ 677.544799][T17485] _copy_from_user+0x2f/0xe0 [ 677.549409][T17485] vmemdup_user+0xac/0x1e0 [ 677.553865][T17485] map_lookup_elem+0x28a/0x7f0 [ 677.558649][T17485] ? __might_fault+0xaa/0x120 [ 677.563348][T17485] ? bpf_lsm_bpf+0x9/0x10 [ 677.567699][T17485] __sys_bpf+0x438/0x890 [ 677.571960][T17485] ? bpf_link_show_fdinfo+0x390/0x390 [ 677.577364][T17485] ? lock_chain_count+0x20/0x20 [ 677.582291][T17485] __x64_sys_bpf+0x7c/0x90 [ 677.586727][T17485] do_syscall_64+0x55/0xb0 [ 677.591156][T17485] ? clear_bhb_loop+0x40/0x90 [ 677.595899][T17485] ? clear_bhb_loop+0x40/0x90 [ 677.600591][T17485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.606498][T17485] RIP: 0033:0x7fc5f499e159 [ 677.610930][T17485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.630563][T17485] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 677.638994][T17485] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 677.646982][T17485] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000001 [ 677.654971][T17485] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 677.662970][T17485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.670958][T17485] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 677.678961][T17485] [ 679.322343][T17495] validate_nla: 161 callbacks suppressed [ 679.322361][T17495] netlink: 'syz.0.3156': attribute type 10 has an invalid length. [ 679.415367][T17495] __nla_validate_parse: 3 callbacks suppressed [ 679.415383][T17495] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3156'. [ 679.702192][T17513] netlink: 'syz.2.3164': attribute type 1 has an invalid length. [ 679.938303][T14285] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 681.814469][T17565] netlink: 'syz.2.3177': attribute type 29 has an invalid length. [ 681.859732][T17565] netlink: 'syz.2.3177': attribute type 29 has an invalid length. [ 681.904108][T17565] netlink: 'syz.2.3177': attribute type 29 has an invalid length. [ 681.923011][T17565] netlink: 'syz.2.3177': attribute type 29 has an invalid length. [ 682.771466][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 683.498410][T17601] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3188'. [ 683.521328][T17601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 683.584896][T17608] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3192'. [ 683.745891][T17616] : port 1(vlan0) entered blocking state [ 683.780002][T17616] : port 1(vlan0) entered disabled state [ 683.786994][T17616] vlan0: entered allmulticast mode [ 683.792280][T17616] veth0_vlan: entered allmulticast mode [ 683.799749][T17616] vlan0: entered promiscuous mode [ 685.882104][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.888543][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.984771][ T9700] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 688.216529][T17665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3205'. [ 688.449539][T17682] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3210'. [ 688.471677][T17682] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3210'. [ 688.485844][T17682] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3210'. [ 689.692989][T17702] netlink: 'syz.3.3217': attribute type 3 has an invalid length. [ 689.700903][T17702] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3217'. [ 691.369752][T17752] delete_channel: no stack [ 693.890834][T17762] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 693.900068][T17762] netlink: 'syz.1.3230': attribute type 4 has an invalid length. [ 693.912009][T17762] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3230'. [ 693.922491][T17784] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3239'. [ 693.997581][T17787] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3240'. [ 694.101364][T17787] netlink: 'syz.0.3240': attribute type 13 has an invalid length. [ 694.192816][T17796] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 694.234727][T17796] syzkaller1: linktype set to 805 [ 694.445415][T17806] netlink: 'syz.2.3246': attribute type 29 has an invalid length. [ 694.458653][T17806] netlink: 'syz.2.3246': attribute type 29 has an invalid length. [ 694.471095][T17806] netlink: 'syz.2.3246': attribute type 29 has an invalid length. [ 694.483453][T17806] netlink: 'syz.2.3246': attribute type 29 has an invalid length. [ 694.493396][T17806] netlink: 'syz.2.3246': attribute type 29 has an invalid length. [ 694.854698][T17811] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3248'. [ 694.870215][T17811] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 694.879948][T17811] CPU: 0 PID: 17811 Comm: syz.0.3248 Not tainted syzkaller #0 [ 694.887452][T17811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 694.897541][T17811] Call Trace: [ 694.900845][T17811] [ 694.903808][T17811] dump_stack_lvl+0x18c/0x250 [ 694.908537][T17811] ? show_regs_print_info+0x20/0x20 [ 694.913783][T17811] ? load_image+0x420/0x420 [ 694.918351][T17811] sysfs_warn_dup+0x8e/0xa0 [ 694.922895][T17811] sysfs_do_create_link_sd+0xc0/0x110 [ 694.928307][T17811] device_add_class_symlinks+0x1cf/0x240 [ 694.933986][T17811] device_add+0x4f9/0xc40 [ 694.938366][T17811] wiphy_register+0x1d99/0x2ac0 [ 694.943308][T17811] ? cfg80211_event_work+0x40/0x40 [ 694.948487][T17811] ? minstrel_ht_alloc+0x88a/0x990 [ 694.953660][T17811] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 694.959787][T17811] ieee80211_register_hw+0x2dd8/0x3b30 [ 694.965312][T17811] ? ieee80211_register_hw+0xf11/0x3b30 [ 694.970914][T17811] ? ieee80211_tasklet_handler+0x20/0x20 [ 694.976589][T17811] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 694.982530][T17811] ? __debug_object_init+0xec/0x450 [ 694.987781][T17811] ? __asan_memset+0x22/0x40 [ 694.992419][T17811] ? __hrtimer_init+0x189/0x270 [ 694.997316][T17811] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 695.003125][T17811] ? mac80211_hwsim_free+0x220/0x220 [ 695.008449][T17811] ? rcu_is_watching+0x15/0xb0 [ 695.013257][T17811] ? kstrndup+0xbd/0x140 [ 695.017565][T17811] hwsim_new_radio_nl+0xdad/0x1a70 [ 695.022727][T17811] ? __nla_validate+0x50/0x50 [ 695.027475][T17811] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 695.033869][T17811] ? __nla_parse+0x40/0x50 [ 695.038335][T17811] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 695.044721][T17811] genl_family_rcv_msg_doit+0x21a/0x310 [ 695.050325][T17811] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 695.056284][T17811] ? bpf_lsm_capable+0x9/0x10 [ 695.061001][T17811] ? security_capable+0x89/0xb0 [ 695.065909][T17811] genl_rcv_msg+0x611/0x7a0 [ 695.070475][T17811] ? genl_bind+0x360/0x360 [ 695.074937][T17811] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 695.081310][T17811] ? perf_trace_lock+0x303/0x3b0 [ 695.086293][T17811] ? __kasan_kmalloc_large+0x8b/0xa0 [ 695.091651][T17811] netlink_rcv_skb+0x235/0x4c0 [ 695.096460][T17811] ? genl_bind+0x360/0x360 [ 695.100924][T17811] ? netlink_ack+0x1160/0x1160 [ 695.105754][T17811] ? __lock_acquire+0x7d80/0x7d80 [ 695.110841][T17811] ? down_read+0x1ac/0x2e0 [ 695.115305][T17811] genl_rcv+0x28/0x40 [ 695.119326][T17811] netlink_unicast+0x7b1/0x930 [ 695.124142][T17811] netlink_sendmsg+0x8d0/0xbf0 [ 695.128935][T17811] ? netlink_getsockopt+0x590/0x590 [ 695.134148][T17811] ? apparmor_socket_sendmsg+0x8e/0x330 [ 695.139711][T17811] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 695.145009][T17811] ? security_socket_sendmsg+0x80/0xa0 [ 695.150482][T17811] ? netlink_getsockopt+0x590/0x590 [ 695.155702][T17811] ____sys_sendmsg+0x61b/0x980 [ 695.160494][T17811] ? __asan_memset+0x22/0x40 [ 695.165103][T17811] ? __sys_sendmsg_sock+0x30/0x30 [ 695.170136][T17811] ? __import_iovec+0x5f2/0x850 [ 695.175018][T17811] ? import_iovec+0x73/0xa0 [ 695.179547][T17811] ___sys_sendmsg+0x2a6/0x360 [ 695.184249][T17811] ? __sys_sendmsg+0x2b0/0x2b0 [ 695.189117][T17811] __se_sys_sendmsg+0x1d0/0x2c0 [ 695.193987][T17811] ? __x64_sys_sendmsg+0x80/0x80 [ 695.198965][T17811] ? lockdep_hardirqs_on+0x98/0x150 [ 695.204185][T17811] do_syscall_64+0x55/0xb0 [ 695.208608][T17811] ? clear_bhb_loop+0x40/0x90 [ 695.213294][T17811] ? clear_bhb_loop+0x40/0x90 [ 695.217985][T17811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.223889][T17811] RIP: 0033:0x7f43df99e159 [ 695.228312][T17811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.247923][T17811] RSP: 002b:00007f43e08f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.256351][T17811] RAX: ffffffffffffffda RBX: 00007f43dfc25fa0 RCX: 00007f43df99e159 [ 695.264333][T17811] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 695.272315][T17811] RBP: 00007f43dfa35024 R08: 0000000000000000 R09: 0000000000000000 [ 695.280307][T17811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.288292][T17811] R13: 00007f43dfc26038 R14: 00007f43dfc25fa0 R15: 00007ffdeac169b8 [ 695.296298][T17811] [ 695.682745][T17825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.124612][T17877] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3267'. [ 698.158087][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 698.243654][T17877] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3267'. [ 698.255364][T17885] netlink: 'syz.2.3269': attribute type 13 has an invalid length. [ 701.747616][T17905] netlink: 'syz.3.3275': attribute type 11 has an invalid length. [ 701.756031][T17905] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3275'. [ 701.778257][T17906] netlink: 'syz.3.3275': attribute type 11 has an invalid length. [ 701.809406][T17906] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3275'. [ 703.658818][T17959] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3288'. [ 703.719640][T17959] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3288'. [ 703.826095][T17963] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3291'. [ 703.881167][T17962] delete_channel: no stack [ 704.096257][T17975] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 704.103621][T17975] IPv6: NLM_F_CREATE should be set when creating new route [ 704.110918][T17975] IPv6: NLM_F_CREATE should be set when creating new route [ 704.118343][T17975] IPv6: NLM_F_CREATE should be set when creating new route [ 704.224944][T17976] netlink: 'syz.2.3293': attribute type 9 has an invalid length. [ 704.235376][T17976] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3293'. [ 704.567118][T17982] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3295'. [ 709.691832][T18064] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 710.485300][T18078] netlink: 'syz.3.3321': attribute type 2 has an invalid length. [ 710.494369][T18078] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3321'. [ 710.859686][T18089] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 710.883647][T18089] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 711.791042][T18102] netlink: 'syz.0.3329': attribute type 1 has an invalid length. [ 711.809477][T18102] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3329'. [ 711.891487][ T7303] wlan1: Trigger new scan to find an IBSS to join [ 711.986258][T18112] netlink: 'syz.3.3332': attribute type 21 has an invalid length. [ 711.999869][T18112] netlink: 'syz.3.3332': attribute type 1 has an invalid length. [ 712.087933][T18117] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 712.105969][T18118] netlink: 'syz.3.3332': attribute type 3 has an invalid length. [ 712.141503][T18118] netlink: 'syz.3.3332': attribute type 6 has an invalid length. [ 712.171105][T18118] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3332'. [ 712.202532][T18121] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.464391][T18124] netlink: 'syz.2.3334': attribute type 3 has an invalid length. [ 712.498691][T18124] netlink: 'syz.2.3334': attribute type 1 has an invalid length. [ 712.542803][T18124] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.3334'. [ 712.748852][T18127] netlink: 'syz.0.3335': attribute type 9 has an invalid length. [ 712.787844][T18127] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3335'. [ 712.940677][T18129] netlink: 'syz.1.3336': attribute type 27 has an invalid length. [ 713.017503][T18129] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3336'. [ 714.854286][ T6086] wlan1: Trigger new scan to find an IBSS to join [ 715.857289][T18143] netlink: 'syz.1.3339': attribute type 10 has an invalid length. [ 715.865443][T18143] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3339'. [ 715.875885][T18143] caif0: entered promiscuous mode [ 715.880924][T18143] caif0: entered allmulticast mode [ 715.886449][T18143] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.544100][T18174] netlink: 2759 bytes leftover after parsing attributes in process `syz.3.3350'. [ 717.903936][ T6090] wlan1: Trigger new scan to find an IBSS to join [ 717.940404][T18184] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3353'. [ 718.092469][T18182] netlink: 'syz.3.3353': attribute type 1 has an invalid length. [ 718.121814][T18182] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3353'. [ 719.499519][ T6083] wlan1: Creating new IBSS network, BSSID 42:e7:ae:6d:64:74 [ 719.523911][ T6083] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 720.639404][T18234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3365'. [ 722.066018][T18249] netlink: 'syz.3.3374': attribute type 10 has an invalid length. [ 722.090646][T18249] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3374'. [ 723.011152][T18257] netlink: 'syz.0.3375': attribute type 12 has an invalid length. [ 723.029063][T18257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3375'. [ 723.574080][T18280] delete_channel: no stack [ 723.578844][T18280] delete_channel: no stack [ 723.607882][T18282] bridge0: port 3(hsr0) entered disabled state [ 723.614307][T18282] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.621939][T18282] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.638046][T18282] bridge0: entered allmulticast mode [ 723.724455][T18283] bridge0: port 3(hsr0) entered blocking state [ 723.730840][T18283] bridge0: port 3(hsr0) entered forwarding state [ 723.737491][T18283] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.744683][T18283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.752149][T18283] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.759312][T18283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.782860][T18283] bridge0: entered promiscuous mode [ 723.827954][T18291] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3384'. [ 726.388136][T18339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3397'. [ 726.958317][T18364] netlink: 'syz.2.3404': attribute type 2 has an invalid length. [ 726.978756][T18364] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3404'. [ 727.031734][T18366] netlink: 'syz.0.3405': attribute type 9 has an invalid length. [ 727.045111][T18366] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3405'. [ 727.149770][T18372] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3407'. [ 727.181877][T18372] netlink: zone id is out of range [ 727.187041][T18372] netlink: zone id is out of range [ 727.215726][T18372] netlink: zone id is out of range [ 727.231071][T18372] netlink: zone id is out of range [ 727.236583][T18368] netlink: 'syz.0.3405': attribute type 6 has an invalid length. [ 727.244458][T18372] netlink: zone id is out of range [ 727.252658][T18372] netlink: zone id is out of range [ 727.258934][T18368] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3405'. [ 727.269551][T18372] netlink: zone id is out of range [ 727.275000][T18372] netlink: zone id is out of range [ 727.289341][T18372] netlink: zone id is out of range [ 727.294871][T18372] netlink: zone id is out of range [ 728.787864][T18393] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 728.801703][T18393] syzkaller1: linktype set to 769 [ 728.810534][T18393] netlink: 'syz.1.3412': attribute type 3 has an invalid length. [ 728.820926][T18393] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3412'. [ 729.033237][T18406] netlink: 'syz.3.3415': attribute type 2 has an invalid length. [ 729.041015][T18406] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3415'. [ 729.056524][T18403] netlink: 'syz.2.3416': attribute type 21 has an invalid length. [ 729.071835][T18403] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3416'. [ 730.323094][T18431] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.3423'. [ 730.563808][T18440] sctp: [Deprecated]: syz.2.3422 (pid 18440) Use of int in maxseg socket option. [ 730.563808][T18440] Use struct sctp_assoc_value instead [ 732.570364][T18426] netlink: 'syz.0.3423': attribute type 39 has an invalid length. [ 732.792772][T18443] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3425'. [ 735.982556][T18469] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3433'. [ 735.994155][T18469] hsr_slave_0: left promiscuous mode [ 736.009065][T18469] hsr_slave_1: left promiscuous mode [ 736.906712][T18484] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 736.914559][T18481] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3436'. [ 736.961857][T18484] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3437'. [ 736.971213][T18484] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 737.103701][T18489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3439'. [ 737.128337][T18489] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3439'. [ 737.165864][T18493] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3439'. [ 737.510545][T18499] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 737.518278][T18499] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 737.849430][T18513] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 737.863763][T18513] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3449'. [ 737.878636][T18513] netlink: 'syz.0.3449': attribute type 1 has an invalid length. [ 738.045931][T18509] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 738.054623][T18509] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3447'. [ 738.076750][T18509] bridge0: port 1(ipvlan1) entered blocking state [ 738.093697][T18509] bridge0: port 1(ipvlan1) entered disabled state [ 738.177133][T18509] net_ratelimit: 331 callbacks suppressed [ 738.177172][T18509] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 738.720363][T18522] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 738.758018][T18524] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3452'. [ 738.789854][T18522] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3453'. [ 738.831368][T18522] netlink: 'syz.2.3453': attribute type 1 has an invalid length. [ 739.060291][T18537] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 739.085638][T18537] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 739.102243][T18538] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 739.109419][T18538] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 740.220243][T18550] netlink: 'syz.3.3460': attribute type 1 has an invalid length. [ 740.243303][T18550] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3460'. [ 740.289556][T18550] netlink: 'syz.3.3460': attribute type 1 has an invalid length. [ 740.950313][T18571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3466'. [ 740.991022][T18571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3466'. [ 741.069299][T18571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3466'. [ 741.101150][T18577] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3469'. [ 741.111014][T18571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3466'. [ 741.272508][T18580] : port 1(vlan0) entered blocking state [ 741.279253][T18580] : port 1(vlan0) entered disabled state [ 741.311623][T18580] vlan0: entered allmulticast mode [ 741.316797][T18580] veth0_vlan: entered allmulticast mode [ 741.376894][T18580] vlan0: entered promiscuous mode [ 742.861626][T18621] netlink: 'syz.2.3482': attribute type 10 has an invalid length. [ 743.022787][T18625] delete_channel: no stack [ 743.092543][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.139870][T18621] bridge_slave_1: left allmulticast mode [ 743.182483][T18621] bridge_slave_1: left promiscuous mode [ 743.190574][T18621] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.338509][T18621] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 743.369129][T18624] netlink: 'syz.2.3482': attribute type 7 has an invalid length. [ 743.412529][T18632] netlink: 'syz.0.3485': attribute type 5 has an invalid length. [ 743.429369][T18637] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.3486'. [ 743.614379][T18642] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.3488'. [ 745.511308][T18681] netlink: 'syz.2.3497': attribute type 49 has an invalid length. [ 745.522888][T18681] netlink: set zone limit has 8 unknown bytes [ 745.682016][T18684] netlink: 'syz.3.3498': attribute type 21 has an invalid length. [ 745.724472][T18685] netlink: 'syz.3.3498': attribute type 21 has an invalid length. [ 746.126324][T18698] netlink: 'syz.1.3501': attribute type 21 has an invalid length. [ 746.155254][T18698] netlink: 'syz.1.3501': attribute type 4 has an invalid length. [ 746.163107][T18698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3501'. [ 746.394115][T18704] netlink: 'syz.3.3502': attribute type 13 has an invalid length. [ 746.402421][T18704] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3502'. [ 746.849516][T18704] erspan0: refused to change device tx_queue_len [ 747.182371][T18716] netlink: 'syz.2.3504': attribute type 10 has an invalid length. [ 747.200366][T18716] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3504'. [ 747.270635][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.280792][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.269704][T18716] vlan0 (unregistering): left allmulticast mode [ 748.279167][T18716] veth0_vlan: left allmulticast mode [ 748.288082][T18716] vlan0 (unregistering): left promiscuous mode [ 748.308882][T18716] : port 1(vlan0) entered disabled state [ 748.765333][T18741] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 748.779422][T18741] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3511'. [ 751.070211][T18779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.104348][T18779] netlink: 'syz.1.3522': attribute type 9 has an invalid length. [ 751.116736][T18779] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3522'. [ 751.446254][T18781] netlink: 'syz.1.3522': attribute type 9 has an invalid length. [ 751.466235][T18781] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3522'. [ 751.617484][T18785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3523'. [ 752.372825][ T6088] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 754.270162][T18818] netlink: 'syz.2.3535': attribute type 21 has an invalid length. [ 754.280949][T18818] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3535'. [ 755.804884][T18862] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3547'. [ 756.417167][T18885] netlink: 178104 bytes leftover after parsing attributes in process `syz.1.3551'. [ 756.913699][T18889] netlink: 'syz.2.3553': attribute type 1 has an invalid length. [ 756.951343][T18889] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3553'. [ 757.333806][T18899] netlink: 'syz.2.3556': attribute type 39 has an invalid length. [ 758.491403][T18903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3556'. [ 758.533405][T18904] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3556'. [ 758.661952][T18912] netlink: 'syz.3.3559': attribute type 10 has an invalid length. [ 759.760610][T18931] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3563'. [ 759.778725][T18931] netlink: zone id is out of range [ 759.784447][T18931] netlink: zone id is out of range [ 759.789743][T18931] netlink: zone id is out of range [ 759.808017][T18931] netlink: zone id is out of range [ 759.815981][T18931] netlink: zone id is out of range [ 759.835518][T18925] netlink: 'syz.2.3563': attribute type 1 has an invalid length. [ 759.848514][T18931] netlink: zone id is out of range [ 759.854508][T18925] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3563'. [ 759.869298][T18931] netlink: zone id is out of range [ 759.875031][T18931] netlink: zone id is out of range [ 759.880364][T18925] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3563'. [ 759.894478][T18931] netlink: zone id is out of range [ 759.899948][T18931] netlink: zone id is out of range [ 761.203915][T18953] netlink: 'syz.2.3573': attribute type 10 has an invalid length. [ 761.220420][T18953] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3573'. [ 761.253254][T18959] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3574'. [ 761.460559][T18963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3575'. [ 761.535718][T18969] netlink: 'syz.2.3577': attribute type 28 has an invalid length. [ 761.549036][T18969] netlink: 'syz.2.3577': attribute type 3 has an invalid length. [ 761.577507][T18969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3577'. [ 761.630272][T18963] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 761.653595][T18963] CPU: 1 PID: 18963 Comm: syz.1.3575 Not tainted syzkaller #0 [ 761.661091][T18963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.671156][T18963] Call Trace: [ 761.674444][T18963] [ 761.677384][T18963] dump_stack_lvl+0x18c/0x250 [ 761.682085][T18963] ? show_regs_print_info+0x20/0x20 [ 761.687298][T18963] ? load_image+0x420/0x420 [ 761.691834][T18963] sysfs_warn_dup+0x8e/0xa0 [ 761.696363][T18963] sysfs_do_create_link_sd+0xc0/0x110 [ 761.701752][T18963] device_add_class_symlinks+0x1cf/0x240 [ 761.707411][T18963] device_add+0x4f9/0xc40 [ 761.711756][T18963] wiphy_register+0x1d99/0x2ac0 [ 761.716643][T18963] ? cfg80211_event_work+0x40/0x40 [ 761.721773][T18963] ? minstrel_ht_alloc+0x88a/0x990 [ 761.726910][T18963] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 761.733001][T18963] ieee80211_register_hw+0x2dd8/0x3b30 [ 761.738492][T18963] ? ieee80211_register_hw+0xf11/0x3b30 [ 761.744066][T18963] ? ieee80211_tasklet_handler+0x20/0x20 [ 761.749711][T18963] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 761.755620][T18963] ? __debug_object_init+0xec/0x450 [ 761.760836][T18963] ? __asan_memset+0x22/0x40 [ 761.765443][T18963] ? __hrtimer_init+0x189/0x270 [ 761.770313][T18963] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 761.776083][T18963] ? mac80211_hwsim_free+0x220/0x220 [ 761.781379][T18963] ? rcu_is_watching+0x15/0xb0 [ 761.786160][T18963] ? kstrndup+0xbd/0x140 [ 761.790435][T18963] hwsim_new_radio_nl+0xdad/0x1a70 [ 761.795570][T18963] ? __nla_validate+0x50/0x50 [ 761.800283][T18963] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 761.806643][T18963] ? __nla_parse+0x40/0x50 [ 761.811081][T18963] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 761.817431][T18963] genl_family_rcv_msg_doit+0x21a/0x310 [ 761.823009][T18963] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 761.828930][T18963] ? bpf_lsm_capable+0x9/0x10 [ 761.833631][T18963] ? security_capable+0x89/0xb0 [ 761.838505][T18963] genl_rcv_msg+0x611/0x7a0 [ 761.843032][T18963] ? genl_bind+0x360/0x360 [ 761.847464][T18963] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 761.853809][T18963] ? perf_trace_preemptirq_template+0x269/0x330 [ 761.860071][T18963] ? irqentry_enter+0x37/0x50 [ 761.864777][T18963] netlink_rcv_skb+0x235/0x4c0 [ 761.869555][T18963] ? genl_bind+0x360/0x360 [ 761.873991][T18963] ? netlink_ack+0x1160/0x1160 [ 761.878794][T18963] ? __lock_acquire+0x7d80/0x7d80 [ 761.883867][T18963] ? netlink_deliver_tap+0x108/0x1b0 [ 761.889182][T18963] ? down_read+0x1ac/0x2e0 [ 761.893619][T18963] genl_rcv+0x28/0x40 [ 761.897618][T18963] netlink_unicast+0x7b1/0x930 [ 761.902411][T18963] netlink_sendmsg+0x8d0/0xbf0 [ 761.907201][T18963] ? netlink_getsockopt+0x590/0x590 [ 761.912418][T18963] ? apparmor_socket_sendmsg+0x8e/0x330 [ 761.917984][T18963] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 761.923285][T18963] ? security_socket_sendmsg+0x80/0xa0 [ 761.928762][T18963] ? netlink_getsockopt+0x590/0x590 [ 761.933992][T18963] ____sys_sendmsg+0x61b/0x980 [ 761.938783][T18963] ? __asan_memset+0x22/0x40 [ 761.943418][T18963] ? __sys_sendmsg_sock+0x30/0x30 [ 761.948452][T18963] ? __import_iovec+0x5f2/0x850 [ 761.953335][T18963] ? import_iovec+0x73/0xa0 [ 761.957864][T18963] ___sys_sendmsg+0x2a6/0x360 [ 761.962564][T18963] ? __sys_sendmsg+0x2b0/0x2b0 [ 761.967405][T18963] __se_sys_sendmsg+0x1d0/0x2c0 [ 761.972272][T18963] ? __x64_sys_sendmsg+0x80/0x80 [ 761.977244][T18963] ? syscall_enter_from_user_mode+0x2e/0x80 [ 761.983162][T18963] do_syscall_64+0x55/0xb0 [ 761.987594][T18963] ? clear_bhb_loop+0x40/0x90 [ 761.992287][T18963] ? clear_bhb_loop+0x40/0x90 [ 761.996986][T18963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.002904][T18963] RIP: 0033:0x7efe2c79e159 [ 762.007336][T18963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.026956][T18963] RSP: 002b:00007efe2d61e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.035391][T18963] RAX: ffffffffffffffda RBX: 00007efe2ca26090 RCX: 00007efe2c79e159 [ 762.043376][T18963] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 762.051357][T18963] RBP: 00007efe2c835024 R08: 0000000000000000 R09: 0000000000000000 [ 762.059341][T18963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.067324][T18963] R13: 00007efe2ca26128 R14: 00007efe2ca26090 R15: 00007ffe723fe768 [ 762.075335][T18963] [ 762.157441][T18970] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.3577'. [ 762.167059][T18970] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.3577'. [ 762.200451][T18966] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3575'. [ 762.304386][T18966] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 762.334782][T18966] CPU: 1 PID: 18966 Comm: syz.1.3575 Not tainted syzkaller #0 [ 762.342282][T18966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 762.352348][T18966] Call Trace: [ 762.355638][T18966] [ 762.358578][T18966] dump_stack_lvl+0x18c/0x250 [ 762.363278][T18966] ? show_regs_print_info+0x20/0x20 [ 762.368492][T18966] ? load_image+0x420/0x420 [ 762.373026][T18966] sysfs_warn_dup+0x8e/0xa0 [ 762.377543][T18966] sysfs_do_create_link_sd+0xc0/0x110 [ 762.382929][T18966] device_add_class_symlinks+0x1cf/0x240 [ 762.388581][T18966] device_add+0x4f9/0xc40 [ 762.392928][T18966] wiphy_register+0x1d99/0x2ac0 [ 762.397823][T18966] ? cfg80211_event_work+0x40/0x40 [ 762.402948][T18966] ? minstrel_ht_alloc+0x88a/0x990 [ 762.408082][T18966] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 762.414173][T18966] ieee80211_register_hw+0x2dd8/0x3b30 [ 762.419666][T18966] ? ieee80211_register_hw+0xf11/0x3b30 [ 762.425244][T18966] ? ieee80211_tasklet_handler+0x20/0x20 [ 762.430887][T18966] ? lockdep_hardirqs_on+0x98/0x150 [ 762.436106][T18966] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 762.442279][T18966] ? __asan_memset+0x22/0x40 [ 762.446890][T18966] ? __hrtimer_init+0x189/0x270 [ 762.451760][T18966] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 762.457524][T18966] ? mac80211_hwsim_free+0x220/0x220 [ 762.462819][T18966] ? rcu_is_watching+0x15/0xb0 [ 762.467600][T18966] ? kstrndup+0xbd/0x140 [ 762.471871][T18966] hwsim_new_radio_nl+0xdad/0x1a70 [ 762.477002][T18966] ? __nla_validate+0x50/0x50 [ 762.481713][T18966] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 762.488075][T18966] ? __nla_parse+0x40/0x50 [ 762.492517][T18966] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 762.498871][T18966] genl_family_rcv_msg_doit+0x21a/0x310 [ 762.504443][T18966] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 762.510364][T18966] ? bpf_lsm_capable+0x9/0x10 [ 762.515056][T18966] ? security_capable+0x89/0xb0 [ 762.519932][T18966] genl_rcv_msg+0x611/0x7a0 [ 762.524456][T18966] ? genl_bind+0x360/0x360 [ 762.528880][T18966] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 762.534876][T18966] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 762.541224][T18966] ? ref_tracker_free+0x686/0x830 [ 762.546275][T18966] netlink_rcv_skb+0x235/0x4c0 [ 762.551053][T18966] ? genl_bind+0x360/0x360 [ 762.555481][T18966] ? netlink_ack+0x1160/0x1160 [ 762.560273][T18966] ? __lock_acquire+0x7d80/0x7d80 [ 762.565321][T18966] ? down_read+0x1ac/0x2e0 [ 762.569762][T18966] genl_rcv+0x28/0x40 [ 762.573764][T18966] netlink_unicast+0x7b1/0x930 [ 762.578550][T18966] netlink_sendmsg+0x8d0/0xbf0 [ 762.583337][T18966] ? netlink_getsockopt+0x590/0x590 [ 762.588554][T18966] ? apparmor_socket_sendmsg+0x8e/0x330 [ 762.594117][T18966] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 762.599414][T18966] ? security_socket_sendmsg+0x80/0xa0 [ 762.604884][T18966] ? netlink_getsockopt+0x590/0x590 [ 762.610092][T18966] ____sys_sendmsg+0x61b/0x980 [ 762.614882][T18966] ? __asan_memset+0x22/0x40 [ 762.619493][T18966] ? __sys_sendmsg_sock+0x30/0x30 [ 762.624529][T18966] ? __import_iovec+0x5f2/0x850 [ 762.629412][T18966] ? import_iovec+0x73/0xa0 [ 762.633939][T18966] ___sys_sendmsg+0x2a6/0x360 [ 762.638637][T18966] ? __sys_sendmsg+0x2b0/0x2b0 [ 762.643473][T18966] __se_sys_sendmsg+0x1d0/0x2c0 [ 762.648342][T18966] ? __x64_sys_sendmsg+0x80/0x80 [ 762.653311][T18966] ? lockdep_hardirqs_on+0x98/0x150 [ 762.658527][T18966] do_syscall_64+0x55/0xb0 [ 762.662956][T18966] ? clear_bhb_loop+0x40/0x90 [ 762.667647][T18966] ? clear_bhb_loop+0x40/0x90 [ 762.672348][T18966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.678258][T18966] RIP: 0033:0x7efe2c79e159 [ 762.682685][T18966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.702309][T18966] RSP: 002b:00007efe2d5fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.710738][T18966] RAX: ffffffffffffffda RBX: 00007efe2ca26180 RCX: 00007efe2c79e159 [ 762.718728][T18966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 762.726717][T18966] RBP: 00007efe2c835024 R08: 0000000000000000 R09: 0000000000000000 [ 762.734701][T18966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.742696][T18966] R13: 00007efe2ca26218 R14: 00007efe2ca26180 R15: 00007ffe723fe768 [ 762.750710][T18966] [ 763.312382][T18999] netlink: 'syz.3.3584': attribute type 29 has an invalid length. [ 763.334988][T18999] netlink: 'syz.3.3584': attribute type 29 has an invalid length. [ 763.684244][T19011] netlink: 'syz.3.3588': attribute type 2 has an invalid length. [ 763.707457][T19011] netlink: 'syz.3.3588': attribute type 1 has an invalid length. [ 763.766840][T19012] delete_channel: no stack [ 765.360893][T19041] syzkaller0: entered promiscuous mode [ 765.378828][T19041] syzkaller0: entered allmulticast mode [ 765.982753][T19048] __nla_validate_parse: 4 callbacks suppressed [ 765.982768][T19048] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3607'. [ 767.550393][T19058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3601'. [ 767.613901][T19070] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3604'. [ 767.648277][T19070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3604'. [ 768.026574][T19076] netlink: 'syz.2.3606': attribute type 21 has an invalid length. [ 768.035492][T19076] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3606'. [ 768.097020][T19081] bridge0: port 2(hsr0) entered disabled state [ 768.103536][T19081] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.142713][T19081] bridge0: entered allmulticast mode [ 768.383020][ T7303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 768.422079][T19084] bridge0: port 2(hsr0) entered blocking state [ 768.428450][T19084] bridge0: port 2(hsr0) entered forwarding state [ 768.435193][T19084] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.442423][T19084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.459375][T19084] bridge0: entered promiscuous mode [ 768.620138][T19082] syzkaller0: entered promiscuous mode [ 768.633698][T19082] syzkaller0: entered allmulticast mode [ 771.717083][T19130] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3615'. [ 771.759862][T19132] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3616'. [ 771.772590][T19128] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3615'. [ 771.976799][T19133] sit0: entered allmulticast mode [ 774.594474][T19184] netlink: 'syz.2.3632': attribute type 3 has an invalid length. [ 774.612144][T19184] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3632'. [ 774.650184][T19192] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.3635'. [ 779.653553][T19238] netlink: 'syz.0.3649': attribute type 21 has an invalid length. [ 779.665027][T19236] netlink: 'syz.1.3650': attribute type 4 has an invalid length. [ 779.674797][T19236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 779.888247][T19250] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3652'. [ 780.059280][T19253] netlink: 'syz.0.3654': attribute type 29 has an invalid length. [ 780.082383][T19254] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3653'. [ 780.097403][T19253] netlink: 'syz.0.3654': attribute type 29 has an invalid length. [ 780.147408][T19263] netlink: 'syz.0.3654': attribute type 29 has an invalid length. [ 780.159714][T19262] netlink: 'syz.0.3654': attribute type 29 has an invalid length. [ 780.181963][T19257] netlink: 'syz.0.3654': attribute type 29 has an invalid length. [ 780.547876][T19282] netlink: 'syz.0.3660': attribute type 21 has an invalid length. [ 780.597509][T19282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3660'. [ 781.363490][T19287] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3662'. [ 782.486672][T19300] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 782.495237][T19300] syzkaller1: linktype set to 769 [ 783.164563][T19318] netlink: 'syz.3.3671': attribute type 15 has an invalid length. [ 783.176075][T19318] netlink: 'syz.3.3671': attribute type 7 has an invalid length. [ 783.767367][T19326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3671'. [ 783.797479][T19330] net_ratelimit: 376 callbacks suppressed [ 783.797497][T19330] wlan0: mtu greater than device maximum [ 783.957875][T19330] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3674'. [ 784.620824][T19361] netlink: 539 bytes leftover after parsing attributes in process `syz.0.3684'. [ 785.519007][T19376] syzkaller0: entered promiscuous mode [ 785.538423][T19376] syzkaller0: entered allmulticast mode [ 788.040334][T14285] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 789.405987][T19399] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3695'. [ 789.700460][T19409] validate_nla: 1 callbacks suppressed [ 789.700476][T19409] netlink: 'syz.2.3698': attribute type 29 has an invalid length. [ 789.726870][T19409] netlink: 'syz.2.3698': attribute type 29 has an invalid length. [ 789.736230][T19409] netlink: 'syz.2.3698': attribute type 29 has an invalid length. [ 789.745231][T19409] netlink: 'syz.2.3698': attribute type 29 has an invalid length. [ 790.155597][T19421] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.3703'. [ 790.397841][T19429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3705'. [ 790.408744][T19429] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3705'. [ 790.527740][T19437] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3707'. [ 790.541550][T19437] netlink: get zone limit has 4 unknown bytes [ 790.829328][T19448] netlink: 'syz.3.3711': attribute type 9 has an invalid length. [ 790.838842][T19448] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.3711'. [ 791.022264][T19455] mac80211_hwsim hwsim51 .3c: renamed from wlan1 [ 791.354710][T19463] netlink: 'syz.0.3714': attribute type 21 has an invalid length. [ 791.550947][T19474] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3717'. [ 792.140851][T19488] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3722'. [ 792.173642][T19488] netlink: 'syz.3.3722': attribute type 28 has an invalid length. [ 792.191290][T19488] netlink: 'syz.3.3722': attribute type 29 has an invalid length. [ 792.199136][T19488] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3722'. [ 793.584746][T19501] netlink: 'syz.0.3726': attribute type 9 has an invalid length. [ 793.644068][T19501] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3726'. [ 793.835125][T19503] netlink: 'syz.3.3727': attribute type 21 has an invalid length. [ 796.203904][T19536] __nla_validate_parse: 1 callbacks suppressed [ 796.203920][T19536] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.3735'. [ 797.194764][T19563] FAULT_INJECTION: forcing a failure. [ 797.194764][T19563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.231359][T19563] CPU: 0 PID: 19563 Comm: syz.3.3744 Not tainted syzkaller #0 [ 797.238870][T19563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.248946][T19563] Call Trace: [ 797.252243][T19563] [ 797.255188][T19563] dump_stack_lvl+0x18c/0x250 [ 797.259890][T19563] ? show_regs_print_info+0x20/0x20 [ 797.265113][T19563] ? load_image+0x420/0x420 [ 797.269641][T19563] ? __might_fault+0xaa/0x120 [ 797.274332][T19563] ? __lock_acquire+0x7d80/0x7d80 [ 797.279374][T19563] should_fail_ex+0x394/0x4c0 [ 797.284077][T19563] _copy_from_user+0x2f/0xe0 [ 797.288691][T19563] __sys_bpf+0x23e/0x890 [ 797.292956][T19563] ? bpf_link_show_fdinfo+0x390/0x390 [ 797.298357][T19563] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 797.304538][T19563] __x64_sys_bpf+0x7c/0x90 [ 797.308962][T19563] do_syscall_64+0x55/0xb0 [ 797.313376][T19563] ? clear_bhb_loop+0x40/0x90 [ 797.318052][T19563] ? clear_bhb_loop+0x40/0x90 [ 797.322724][T19563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.328607][T19563] RIP: 0033:0x7fc5f499e159 [ 797.333024][T19563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.352629][T19563] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.361037][T19563] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 797.369000][T19563] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 797.376962][T19563] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 797.384925][T19563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.392885][T19563] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 797.400858][T19563] [ 797.986170][T19573] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3746'. [ 798.577688][T19582] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 799.582174][T19599] FAULT_INJECTION: forcing a failure. [ 799.582174][T19599] name failslab, interval 1, probability 0, space 0, times 0 [ 799.607228][T19599] CPU: 0 PID: 19599 Comm: syz.3.3754 Not tainted syzkaller #0 [ 799.614737][T19599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 799.624809][T19599] Call Trace: [ 799.628101][T19599] [ 799.631047][T19599] dump_stack_lvl+0x18c/0x250 [ 799.635750][T19599] ? show_regs_print_info+0x20/0x20 [ 799.640948][T19599] ? load_image+0x420/0x420 [ 799.645449][T19599] ? __lock_acquire+0x7d80/0x7d80 [ 799.650469][T19599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 799.656465][T19599] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 799.663671][T19599] should_fail_ex+0x394/0x4c0 [ 799.668697][T19599] should_failslab+0x9/0x20 [ 799.673199][T19599] slab_pre_alloc_hook+0x59/0x300 [ 799.678221][T19599] ? bpf_test_init+0x9f/0x140 [ 799.682895][T19599] ? bpf_test_init+0x9f/0x140 [ 799.687566][T19599] __kmem_cache_alloc_node+0x53/0x250 [ 799.692939][T19599] ? bpf_test_init+0x9f/0x140 [ 799.697611][T19599] __kmalloc+0xa7/0x240 [ 799.701767][T19599] bpf_test_init+0x9f/0x140 [ 799.706267][T19599] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 799.711639][T19599] ? __lock_acquire+0x7d80/0x7d80 [ 799.716673][T19599] ? dev_put+0x80/0x80 [ 799.720745][T19599] ? dev_put+0x80/0x80 [ 799.724808][T19599] bpf_prog_test_run+0x31f/0x390 [ 799.729742][T19599] __sys_bpf+0x49d/0x890 [ 799.733985][T19599] ? bpf_link_show_fdinfo+0x390/0x390 [ 799.739363][T19599] ? lock_chain_count+0x20/0x20 [ 799.744208][T19599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 799.750186][T19599] __x64_sys_bpf+0x7c/0x90 [ 799.754599][T19599] do_syscall_64+0x55/0xb0 [ 799.759008][T19599] ? clear_bhb_loop+0x40/0x90 [ 799.763693][T19599] ? clear_bhb_loop+0x40/0x90 [ 799.768384][T19599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.774292][T19599] RIP: 0033:0x7fc5f499e159 [ 799.778720][T19599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.798324][T19599] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 799.806731][T19599] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 799.814700][T19599] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 799.822664][T19599] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 799.830628][T19599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.838607][T19599] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 799.846593][T19599] [ 800.379530][ T6080] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 801.107996][T19620] validate_nla: 1 callbacks suppressed [ 801.108015][T19620] netlink: 'syz.2.3758': attribute type 3 has an invalid length. [ 801.134071][T19620] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3758'. [ 801.271109][T19620] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3758'. [ 801.294309][T19620] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 801.311599][T19626] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3759'. [ 801.401576][T19626] netlink: 'syz.1.3759': attribute type 13 has an invalid length. [ 801.425748][T19626] netlink: 'syz.1.3759': attribute type 10 has an invalid length. [ 801.550170][T19626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.605186][T19626] team0: Port device bond0 added [ 802.187185][T19645] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3762'. [ 803.097063][T19659] FAULT_INJECTION: forcing a failure. [ 803.097063][T19659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 803.125458][T19659] CPU: 1 PID: 19659 Comm: syz.3.3766 Not tainted syzkaller #0 [ 803.132959][T19659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.143027][T19659] Call Trace: [ 803.146321][T19659] [ 803.149269][T19659] dump_stack_lvl+0x18c/0x250 [ 803.153975][T19659] ? show_regs_print_info+0x20/0x20 [ 803.159195][T19659] ? load_image+0x420/0x420 [ 803.163721][T19659] ? __lock_acquire+0x7d80/0x7d80 [ 803.168772][T19659] should_fail_ex+0x394/0x4c0 [ 803.173476][T19659] _copy_from_user+0x2f/0xe0 [ 803.178084][T19659] bpf_test_init+0xde/0x140 [ 803.182610][T19659] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 803.187994][T19659] ? __lock_acquire+0x7d80/0x7d80 [ 803.193047][T19659] ? dev_put+0x80/0x80 [ 803.197144][T19659] ? dev_put+0x80/0x80 [ 803.201227][T19659] bpf_prog_test_run+0x31f/0x390 [ 803.206175][T19659] __sys_bpf+0x49d/0x890 [ 803.210416][T19659] ? bpf_link_show_fdinfo+0x390/0x390 [ 803.215795][T19659] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 803.221958][T19659] __x64_sys_bpf+0x7c/0x90 [ 803.226371][T19659] do_syscall_64+0x55/0xb0 [ 803.230784][T19659] ? clear_bhb_loop+0x40/0x90 [ 803.235457][T19659] ? clear_bhb_loop+0x40/0x90 [ 803.240131][T19659] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.246018][T19659] RIP: 0033:0x7fc5f499e159 [ 803.250426][T19659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.270026][T19659] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.278434][T19659] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 803.286402][T19659] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 803.294364][T19659] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 803.302327][T19659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.310292][T19659] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 803.318266][T19659] [ 804.318012][T19673] netlink: 'syz.2.3769': attribute type 1 has an invalid length. [ 804.371997][T19673] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3769'. [ 804.770728][T19679] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3772'. [ 806.066803][T19702] netlink: 'syz.1.3779': attribute type 10 has an invalid length. [ 806.086794][T19702] macvlan0: entered promiscuous mode [ 806.119368][T19702] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 806.533434][T19718] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3783'. [ 807.466923][T19742] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3788'. [ 807.559253][T19742] netlink: get zone limit has 4 unknown bytes [ 808.587669][T19751] netlink: 'syz.3.3792': attribute type 1 has an invalid length. [ 808.629683][T19751] netlink: 'syz.3.3792': attribute type 2 has an invalid length. [ 808.657955][T19751] netlink: 'syz.3.3792': attribute type 2 has an invalid length. [ 808.671140][T19751] netlink: 'syz.3.3792': attribute type 3 has an invalid length. [ 808.696157][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.698846][T19751] netlink: 'syz.3.3792': attribute type 4 has an invalid length. [ 808.710852][T19751] netlink: 'syz.3.3792': attribute type 5 has an invalid length. [ 808.715821][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.730437][T19751] netlink: 'syz.3.3792': attribute type 6 has an invalid length. [ 808.761538][T19751] netlink: 'syz.3.3792': attribute type 7 has an invalid length. [ 808.781541][T19751] netlink: 'syz.3.3792': attribute type 9 has an invalid length. [ 808.789326][T19751] netlink: 'syz.3.3792': attribute type 10 has an invalid length. [ 808.854653][T19751] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.3792'. [ 810.097482][T19779] netlink: 164880 bytes leftover after parsing attributes in process `syz.3.3800'. [ 812.210275][T19798] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3805'. [ 812.229961][T19798] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 812.254369][T14285] Bluetooth: hci0: ISO packet for unknown connection handle 1854 [ 812.335937][T19803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3807'. [ 812.346057][T19803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3807'. [ 812.357532][T19803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3807'. [ 812.367435][T19803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3807'. [ 813.595587][T19830] validate_nla: 2 callbacks suppressed [ 813.595670][T19830] netlink: 'syz.1.3814': attribute type 64 has an invalid length. [ 813.713904][T19835] netlink: 'syz.3.3815': attribute type 27 has an invalid length. [ 813.719457][T19836] netlink: 'syz.3.3815': attribute type 10 has an invalid length. [ 813.750930][T19835] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3815'. [ 814.552740][T19836] team0 (unregistering): Port device C removed [ 814.635167][T19836] team0 (unregistering): Port device team_slave_1 removed [ 814.864055][T19847] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3818'. [ 815.932791][T19883] netlink: 'syz.0.3825': attribute type 10 has an invalid length. [ 816.384905][T19883] team0: Port device netdevsim0 added [ 816.430455][T19889] netlink: 'syz.0.3825': attribute type 10 has an invalid length. [ 816.652956][T19889] team0: Port device netdevsim0 removed [ 816.684320][T19897] netlink: 'syz.2.3827': attribute type 21 has an invalid length. [ 816.721660][T19897] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3827'. [ 816.751564][T19897] netlink: 'syz.2.3827': attribute type 4 has an invalid length. [ 816.774190][T19897] netlink: 'syz.2.3827': attribute type 5 has an invalid length. [ 816.801363][T19897] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3827'. [ 817.117176][T19915] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3834'. [ 817.195466][T19915] netlink: 'syz.2.3834': attribute type 29 has an invalid length. [ 817.217720][T19915] netlink: 'syz.2.3834': attribute type 29 has an invalid length. [ 817.325235][T19921] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3834'. [ 818.007035][T19925] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3835'. [ 819.141013][T19946] FAULT_INJECTION: forcing a failure. [ 819.141013][T19946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.161402][T19946] CPU: 0 PID: 19946 Comm: syz.3.3843 Not tainted syzkaller #0 [ 819.168885][T19946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 819.178933][T19946] Call Trace: [ 819.182205][T19946] [ 819.185128][T19946] dump_stack_lvl+0x18c/0x250 [ 819.189804][T19946] ? show_regs_print_info+0x20/0x20 [ 819.195000][T19946] ? load_image+0x420/0x420 [ 819.199501][T19946] ? __might_fault+0xaa/0x120 [ 819.204170][T19946] ? __lock_acquire+0x7d80/0x7d80 [ 819.209190][T19946] should_fail_ex+0x394/0x4c0 [ 819.213865][T19946] _copy_from_user+0x2f/0xe0 [ 819.218449][T19946] ___sys_sendmsg+0x1c7/0x360 [ 819.223120][T19946] ? lockdep_hardirqs_on+0x98/0x150 [ 819.228317][T19946] ? __sys_sendmsg+0x2b0/0x2b0 [ 819.233090][T19946] ? __lock_acquire+0x7d80/0x7d80 [ 819.238126][T19946] __se_sys_sendmsg+0x1d0/0x2c0 [ 819.242977][T19946] ? __x64_sys_sendmsg+0x80/0x80 [ 819.247921][T19946] ? syscall_enter_from_user_mode+0x2e/0x80 [ 819.253815][T19946] do_syscall_64+0x55/0xb0 [ 819.258227][T19946] ? clear_bhb_loop+0x40/0x90 [ 819.262900][T19946] ? clear_bhb_loop+0x40/0x90 [ 819.267570][T19946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.273453][T19946] RIP: 0033:0x7fc5f499e159 [ 819.277861][T19946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.297456][T19946] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 819.305864][T19946] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 819.313827][T19946] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 819.321789][T19946] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 819.329751][T19946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.337710][T19946] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 819.345683][T19946] [ 819.664844][T19960] validate_nla: 5 callbacks suppressed [ 819.664861][T19960] netlink: 'syz.0.3846': attribute type 10 has an invalid length. [ 820.954091][T19964] netlink: 'syz.3.3847': attribute type 21 has an invalid length. [ 820.962384][T19964] netlink: 'syz.3.3847': attribute type 1 has an invalid length. [ 821.428908][T19991] FAULT_INJECTION: forcing a failure. [ 821.428908][T19991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.463481][T19991] CPU: 1 PID: 19991 Comm: syz.2.3856 Not tainted syzkaller #0 [ 821.470990][T19991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 821.481061][T19991] Call Trace: [ 821.484357][T19991] [ 821.487298][T19991] dump_stack_lvl+0x18c/0x250 [ 821.491997][T19991] ? show_regs_print_info+0x20/0x20 [ 821.497216][T19991] ? load_image+0x420/0x420 [ 821.501738][T19991] ? __lock_acquire+0x7d80/0x7d80 [ 821.506785][T19991] should_fail_ex+0x394/0x4c0 [ 821.511487][T19991] _copy_from_user+0x2f/0xe0 [ 821.516099][T19991] __copy_msghdr+0x388/0x560 [ 821.520710][T19991] ___sys_sendmsg+0x214/0x360 [ 821.525405][T19991] ? get_pid_task+0x20/0x1e0 [ 821.530018][T19991] ? __sys_sendmsg+0x2b0/0x2b0 [ 821.534813][T19991] ? __lock_acquire+0x7d80/0x7d80 [ 821.539879][T19991] __se_sys_sendmsg+0x1d0/0x2c0 [ 821.544750][T19991] ? __x64_sys_sendmsg+0x80/0x80 [ 821.549721][T19991] ? lockdep_hardirqs_on+0x98/0x150 [ 821.555287][T19991] do_syscall_64+0x55/0xb0 [ 821.559706][T19991] ? clear_bhb_loop+0x40/0x90 [ 821.564384][T19991] ? clear_bhb_loop+0x40/0x90 [ 821.569084][T19991] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.575076][T19991] RIP: 0033:0x7fa37599e159 [ 821.579486][T19991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.599083][T19991] RSP: 002b:00007fa373bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.607490][T19991] RAX: ffffffffffffffda RBX: 00007fa375c25fa0 RCX: 00007fa37599e159 [ 821.615460][T19991] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 821.623422][T19991] RBP: 00007fa373bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 821.631386][T19991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.639348][T19991] R13: 00007fa375c26038 R14: 00007fa375c25fa0 R15: 00007ffc5cc82378 [ 821.647322][T19991] [ 821.733328][T19993] netlink: 'syz.1.3857': attribute type 39 has an invalid length. [ 821.955689][T20004] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 822.345252][T20020] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3864'. [ 822.369397][T20020] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3864'. [ 822.903561][T20029] FAULT_INJECTION: forcing a failure. [ 822.903561][T20029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 822.930420][T20029] CPU: 0 PID: 20029 Comm: syz.2.3868 Not tainted syzkaller #0 [ 822.937919][T20029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 822.947989][T20029] Call Trace: [ 822.951276][T20029] [ 822.954222][T20029] dump_stack_lvl+0x18c/0x250 [ 822.958919][T20029] ? show_regs_print_info+0x20/0x20 [ 822.964130][T20029] ? load_image+0x420/0x420 [ 822.968629][T20029] ? __might_fault+0xaa/0x120 [ 822.973300][T20029] ? __lock_acquire+0x7d80/0x7d80 [ 822.978325][T20029] should_fail_ex+0x394/0x4c0 [ 822.983004][T20029] _copy_from_iter+0x1cd/0x1290 [ 822.987855][T20029] ? copyout_mc+0x70/0x70 [ 822.992181][T20029] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 822.998164][T20029] ? lock_chain_count+0x20/0x20 [ 823.003010][T20029] ? __check_object_size+0x8a/0xa40 [ 823.008207][T20029] ? ping_common_sendmsg+0x97/0x2a0 [ 823.013405][T20029] ping_common_sendmsg+0xbc/0x2a0 [ 823.018426][T20029] ping_v6_sendmsg+0x1fd/0x1130 [ 823.023280][T20029] ? ping_v6_pre_connect+0x30/0x30 [ 823.028383][T20029] ? perf_trace_preemptirq_template+0xac/0x330 [ 823.034541][T20029] ? inet_sendmsg+0x10d/0x2a0 [ 823.039222][T20029] ? __local_bh_enable_ip+0x13a/0x1c0 [ 823.044589][T20029] ? lockdep_hardirqs_on+0x98/0x150 [ 823.049785][T20029] ? _local_bh_enable+0xa0/0xa0 [ 823.054629][T20029] ? do_raw_spin_unlock+0x121/0x230 [ 823.059842][T20029] ? inet_sendmsg+0x10d/0x2a0 [ 823.064530][T20029] ? inet_sendmsg+0x10d/0x2a0 [ 823.069218][T20029] ? inet_send_prepare+0x250/0x250 [ 823.074330][T20029] ____sys_sendmsg+0x61b/0x980 [ 823.079100][T20029] ? __asan_memset+0x22/0x40 [ 823.083693][T20029] ? __sys_sendmsg_sock+0x30/0x30 [ 823.088715][T20029] ? __import_iovec+0x5f2/0x850 [ 823.093569][T20029] ? import_iovec+0x73/0xa0 [ 823.098071][T20029] ___sys_sendmsg+0x2a6/0x360 [ 823.102740][T20029] ? get_pid_task+0x20/0x1e0 [ 823.107329][T20029] ? __sys_sendmsg+0x2b0/0x2b0 [ 823.112100][T20029] ? __lock_acquire+0x7d80/0x7d80 [ 823.117136][T20029] __se_sys_sendmsg+0x1d0/0x2c0 [ 823.121982][T20029] ? __x64_sys_sendmsg+0x80/0x80 [ 823.126924][T20029] ? lockdep_hardirqs_on+0x98/0x150 [ 823.132124][T20029] do_syscall_64+0x55/0xb0 [ 823.136536][T20029] ? clear_bhb_loop+0x40/0x90 [ 823.141208][T20029] ? clear_bhb_loop+0x40/0x90 [ 823.145886][T20029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 823.151777][T20029] RIP: 0033:0x7fa37599e159 [ 823.156191][T20029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.175789][T20029] RSP: 002b:00007fa373bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.184198][T20029] RAX: ffffffffffffffda RBX: 00007fa375c25fa0 RCX: 00007fa37599e159 [ 823.192166][T20029] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 823.200134][T20029] RBP: 00007fa373bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 823.208095][T20029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.216058][T20029] R13: 00007fa375c26038 R14: 00007fa375c25fa0 R15: 00007ffc5cc82378 [ 823.224032][T20029] [ 823.705983][T20049] netlink: 'syz.2.3872': attribute type 4 has an invalid length. [ 823.714109][T20049] netlink: 'syz.2.3872': attribute type 7 has an invalid length. [ 824.447085][T20061] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 824.484633][T20065] FAULT_INJECTION: forcing a failure. [ 824.484633][T20065] name failslab, interval 1, probability 0, space 0, times 0 [ 824.491163][T20061] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 824.507624][T20065] CPU: 1 PID: 20065 Comm: syz.3.3879 Not tainted syzkaller #0 [ 824.515123][T20065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 824.525194][T20065] Call Trace: [ 824.528484][T20065] [ 824.531429][T20065] dump_stack_lvl+0x18c/0x250 [ 824.536136][T20065] ? show_regs_print_info+0x20/0x20 [ 824.541367][T20065] ? load_image+0x420/0x420 [ 824.545891][T20065] ? __might_sleep+0xe0/0xe0 [ 824.548738][T20061] team0: Port device netdevsim0 added [ 824.550487][T20065] ? __lock_acquire+0x7d80/0x7d80 [ 824.560859][T20065] ? __lock_acquire+0x1262/0x7d80 [ 824.565872][T20065] should_fail_ex+0x394/0x4c0 [ 824.570541][T20065] should_failslab+0x9/0x20 [ 824.575031][T20065] slab_pre_alloc_hook+0x59/0x300 [ 824.580049][T20065] kmem_cache_alloc_node+0x5e/0x310 [ 824.585236][T20065] ? __alloc_skb+0x103/0x2c0 [ 824.589813][T20065] __alloc_skb+0x103/0x2c0 [ 824.594217][T20065] alloc_skb_with_frags+0xcd/0x7a0 [ 824.599315][T20065] ? mark_lock+0x94/0x320 [ 824.603019][T20063] netlink: 'syz.1.3878': attribute type 10 has an invalid length. [ 824.603640][T20065] sock_alloc_send_pskb+0x883/0x9a0 [ 824.603677][T20065] ? lock_chain_count+0x20/0x20 [ 824.603708][T20065] ? sock_kzfree_s+0x50/0x50 [ 824.626125][T20065] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 824.632304][T20065] ? inet6_sk+0xe0/0xe0 [ 824.636485][T20065] __ip6_append_data+0x2b18/0x3d40 [ 824.641618][T20065] ? inet6_sk+0xe0/0xe0 [ 824.645764][T20065] ? ip6_mtu+0x7d/0x3f0 [ 824.649899][T20065] ? ip6_setup_cork+0xff0/0xff0 [ 824.654741][T20065] ip6_append_data+0x1b0/0x350 [ 824.659496][T20065] ? inet6_sk+0xe0/0xe0 [ 824.663639][T20065] ping_v6_sendmsg+0xd6d/0x1130 [ 824.668476][T20065] ? ping_v6_pre_connect+0x30/0x30 [ 824.673574][T20065] ? perf_trace_preemptirq_template+0xac/0x330 [ 824.679806][T20065] ? inet_sendmsg+0x10d/0x2a0 [ 824.684484][T20065] ? __local_bh_enable_ip+0x13a/0x1c0 [ 824.689864][T20065] ? lockdep_hardirqs_on+0x98/0x150 [ 824.695058][T20065] ? _local_bh_enable+0xa0/0xa0 [ 824.699894][T20065] ? do_raw_spin_unlock+0x121/0x230 [ 824.705084][T20065] ? inet_sendmsg+0x10d/0x2a0 [ 824.709760][T20065] ? inet_sendmsg+0x10d/0x2a0 [ 824.714425][T20065] ? inet_send_prepare+0x250/0x250 [ 824.719524][T20065] ____sys_sendmsg+0x61b/0x980 [ 824.724286][T20065] ? __asan_memset+0x22/0x40 [ 824.728862][T20065] ? __sys_sendmsg_sock+0x30/0x30 [ 824.733876][T20065] ? __import_iovec+0x5f2/0x850 [ 824.738739][T20065] ? import_iovec+0x73/0xa0 [ 824.743232][T20065] ___sys_sendmsg+0x2a6/0x360 [ 824.747897][T20065] ? __sys_sendmsg+0x2b0/0x2b0 [ 824.752657][T20065] ? __lock_acquire+0x7d80/0x7d80 [ 824.757683][T20065] __se_sys_sendmsg+0x1d0/0x2c0 [ 824.762523][T20065] ? __x64_sys_sendmsg+0x80/0x80 [ 824.767471][T20065] ? lockdep_hardirqs_on+0x98/0x150 [ 824.772685][T20065] do_syscall_64+0x55/0xb0 [ 824.777116][T20065] ? clear_bhb_loop+0x40/0x90 [ 824.781799][T20065] ? clear_bhb_loop+0x40/0x90 [ 824.786462][T20065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.792340][T20065] RIP: 0033:0x7fc5f499e159 [ 824.796740][T20065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.816337][T20065] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.824749][T20065] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 824.832716][T20065] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 824.840672][T20065] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 824.848627][T20065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.856594][T20065] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 824.864562][T20065] [ 824.998534][T20063] team0 (unregistering): Port device team_slave_0 removed [ 825.064383][T20063] team0 (unregistering): Port device team_slave_1 removed [ 825.128013][T20063] team0 (unregistering): Port device bond0 removed [ 825.190641][T20066] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 825.199746][T20066] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 825.228742][T20066] team0: Port device netdevsim0 removed [ 825.236427][T20074] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3882'. [ 825.252352][T20066] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 825.998670][T20099] Q6`Ҙ: renamed from lo (while UP) [ 826.842008][T20110] netlink: 'syz.1.3890': attribute type 21 has an invalid length. [ 826.853240][T20110] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3890'. [ 830.585186][T20127] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3896'. [ 831.969715][T20156] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 832.083297][T20150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3906'. [ 832.217516][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.372043][ T6075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 832.392176][T20150] bridge_slave_0 (unregistering): left allmulticast mode [ 832.400042][T20150] bridge_slave_0 (unregistering): left promiscuous mode [ 832.431829][T20150] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.762742][T20197] IPv6: NLM_F_CREATE should be specified when creating new route [ 833.785489][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3920'. [ 833.978691][T20208] netlink: 'syz.0.3923': attribute type 41 has an invalid length. [ 834.011730][T20208] netlink: 'syz.0.3923': attribute type 41 has an invalid length. [ 836.431472][T20231] netlink: 'syz.1.3932': attribute type 21 has an invalid length. [ 836.439400][T20231] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3932'. [ 838.685564][T20279] netlink: 'syz.3.3949': attribute type 10 has an invalid length. [ 842.560280][T20353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3966'. [ 842.782487][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3967'. [ 842.866342][T20354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3967'. [ 843.449324][T20377] netlink: 'syz.2.3976': attribute type 29 has an invalid length. [ 843.846965][T20363] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 843.865872][T20363] syzkaller0: entered promiscuous mode [ 843.881884][T20363] syzkaller0: entered allmulticast mode [ 843.889236][T20367] netlink: 'syz.0.3971': attribute type 10 has an invalid length. [ 843.903422][T20367] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 843.921456][T20373] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3975'. [ 843.942942][T20377] netlink: 'syz.2.3976': attribute type 29 has an invalid length. [ 844.031395][T20378] syzkaller0: entered promiscuous mode [ 844.037094][T20378] syzkaller0: entered allmulticast mode [ 848.338801][T20395] syzkaller0: entered promiscuous mode [ 848.344712][T20395] syzkaller0: entered allmulticast mode [ 848.360570][T20413] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.3982'. [ 848.548666][T20420] netlink: 15163 bytes leftover after parsing attributes in process `syz.2.3985'. [ 849.989908][T20442] netlink: 'syz.3.3992': attribute type 4 has an invalid length. [ 850.264218][T20452] netlink: 'syz.0.3994': attribute type 29 has an invalid length. [ 850.272645][T20452] netlink: 'syz.0.3994': attribute type 29 has an invalid length. [ 850.280919][T20454] netlink: 'syz.0.3994': attribute type 29 has an invalid length. [ 850.606506][T20464] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3998'. [ 851.805588][T20484] netlink: 'syz.3.4003': attribute type 5 has an invalid length. [ 856.860070][T20538] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4016'. [ 856.887050][T20538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 856.906492][T20538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 856.930279][T20538] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 856.985630][T20538] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 857.054223][T20538] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 857.085801][T20538] bond0 (unregistering): Released all slaves [ 857.418734][T20554] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4021'. [ 857.500017][T20554] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4021'. [ 860.215571][T20579] netlink: 'syz.3.4028': attribute type 10 has an invalid length. [ 860.225309][T20579] macvlan0: left promiscuous mode [ 860.239854][T20579] bond0: (slave macvlan0): Releasing backup interface [ 860.315205][T20584] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4029'. [ 860.364796][T20584] delete_channel: no stack [ 860.619251][T20597] mac80211_hwsim hwsim55 wlan1: entered promiscuous mode [ 860.626856][T20597] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 860.726730][T20597] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4033'. [ 861.679325][T20624] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4040'. [ 861.873331][T20624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.962631][T20624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.033528][T20624] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 862.062752][T20624] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 862.100543][T20624] bond0 (unregistering): Released all slaves [ 862.735935][T20648] mac80211_hwsim hwsim62 wlan1: entered promiscuous mode [ 862.755751][T20648] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode [ 862.958414][T20648] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4047'. [ 864.392763][ T7305] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 864.612741][T20682] syzkaller0: entered promiscuous mode [ 864.663342][T20682] syzkaller0: entered allmulticast mode [ 866.103232][T20692] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.4060'. [ 866.751087][T20713] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4062'. [ 866.987264][T20722] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4066'. [ 867.080249][T20720] netlink: 'syz.1.4066': attribute type 1 has an invalid length. [ 867.095342][T20720] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4066'. [ 867.844293][T20733] netlink: 'syz.2.4069': attribute type 10 has an invalid length. [ 868.385758][T20733] bridge0: port 3(hsr0) entered disabled state [ 868.393626][T20733] bridge0: left promiscuous mode [ 868.399705][T20733] bridge0: left allmulticast mode [ 868.418062][T20733] bridge0: port 3(hsr0) entered blocking state [ 868.424480][T20733] bridge0: port 3(hsr0) entered forwarding state [ 868.442867][T20733] bridge0: entered allmulticast mode [ 868.448882][T20733] team0: Port device bridge0 added [ 868.459089][T20742] netlink: 'syz.1.4071': attribute type 10 has an invalid length. [ 868.520737][T20748] FAULT_INJECTION: forcing a failure. [ 868.520737][T20748] name failslab, interval 1, probability 0, space 0, times 0 [ 868.539920][T20748] CPU: 1 PID: 20748 Comm: syz.0.4073 Not tainted syzkaller #0 [ 868.547412][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 868.557479][T20748] Call Trace: [ 868.560771][T20748] [ 868.563712][T20748] dump_stack_lvl+0x18c/0x250 [ 868.568410][T20748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.574587][T20748] ? show_regs_print_info+0x20/0x20 [ 868.579807][T20748] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 868.586001][T20748] should_fail_ex+0x394/0x4c0 [ 868.590705][T20748] should_failslab+0x9/0x20 [ 868.595234][T20748] slab_pre_alloc_hook+0x59/0x300 [ 868.600282][T20748] ? __alloc_skb+0x138/0x2c0 [ 868.604886][T20748] kmem_cache_alloc_node+0x5e/0x310 [ 868.610123][T20748] ? __alloc_skb+0x103/0x2c0 [ 868.614709][T20748] __alloc_skb+0x103/0x2c0 [ 868.619117][T20748] __ip6_append_data+0x2be0/0x3d40 [ 868.624235][T20748] ? inet6_sk+0xe0/0xe0 [ 868.628380][T20748] ? ip6_setup_cork+0xff0/0xff0 [ 868.633228][T20748] ip6_append_data+0x1b0/0x350 [ 868.637983][T20748] ? inet6_sk+0xe0/0xe0 [ 868.642138][T20748] ping_v6_sendmsg+0xd6d/0x1130 [ 868.647021][T20748] ? ping_v6_pre_connect+0x30/0x30 [ 868.652166][T20748] ? inet_sendmsg+0x10d/0x2a0 [ 868.656865][T20748] ? __local_bh_enable_ip+0x13a/0x1c0 [ 868.662253][T20748] ? lockdep_hardirqs_on+0x98/0x150 [ 868.667463][T20748] ? _local_bh_enable+0xa0/0xa0 [ 868.672302][T20748] ? do_raw_spin_unlock+0x121/0x230 [ 868.677487][T20748] ? inet_sendmsg+0x10d/0x2a0 [ 868.682152][T20748] ? inet_sendmsg+0x10d/0x2a0 [ 868.686815][T20748] ? inet_send_prepare+0x250/0x250 [ 868.691933][T20748] ____sys_sendmsg+0x61b/0x980 [ 868.696685][T20748] ? __asan_memset+0x22/0x40 [ 868.701269][T20748] ? __sys_sendmsg_sock+0x30/0x30 [ 868.706277][T20748] ? __import_iovec+0x5f2/0x850 [ 868.711157][T20748] ? import_iovec+0x73/0xa0 [ 868.715679][T20748] ___sys_sendmsg+0x2a6/0x360 [ 868.720363][T20748] ? __sys_sendmsg+0x2b0/0x2b0 [ 868.725139][T20748] ? __lock_acquire+0x7d80/0x7d80 [ 868.730180][T20748] __se_sys_sendmsg+0x1d0/0x2c0 [ 868.735027][T20748] ? __x64_sys_sendmsg+0x80/0x80 [ 868.739969][T20748] ? lockdep_hardirqs_on+0x98/0x150 [ 868.745166][T20748] do_syscall_64+0x55/0xb0 [ 868.749578][T20748] ? clear_bhb_loop+0x40/0x90 [ 868.754248][T20748] ? clear_bhb_loop+0x40/0x90 [ 868.758917][T20748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.764804][T20748] RIP: 0033:0x7f43df99e159 [ 868.769222][T20748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.788818][T20748] RSP: 002b:00007f43e08f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.797227][T20748] RAX: ffffffffffffffda RBX: 00007f43dfc25fa0 RCX: 00007f43df99e159 [ 868.805193][T20748] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 868.813159][T20748] RBP: 00007f43e08f6090 R08: 0000000000000000 R09: 0000000000000000 [ 868.821120][T20748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.829079][T20748] R13: 00007f43dfc26038 R14: 00007f43dfc25fa0 R15: 00007ffdeac169b8 [ 868.837055][T20748] [ 869.116298][T20764] netlink: 'syz.3.4080': attribute type 10 has an invalid length. [ 869.131307][T20764] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4080'. [ 870.140666][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.147171][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.243596][T20801] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4088'. [ 870.419961][T20809] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 870.444100][T20812] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 870.501630][T20815] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 870.511698][T20819] netlink: 'syz.0.4092': attribute type 21 has an invalid length. [ 870.527098][T20816] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4091'. [ 870.549429][T20816] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 870.850915][T20826] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4094'. [ 871.012646][T20833] FAULT_INJECTION: forcing a failure. [ 871.012646][T20833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 871.031793][T20833] CPU: 0 PID: 20833 Comm: syz.2.4096 Not tainted syzkaller #0 [ 871.039292][T20833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 871.049367][T20833] Call Trace: [ 871.052663][T20833] [ 871.055612][T20833] dump_stack_lvl+0x18c/0x250 [ 871.060324][T20833] ? show_regs_print_info+0x20/0x20 [ 871.065576][T20833] ? load_image+0x420/0x420 [ 871.070107][T20833] ? __might_fault+0xaa/0x120 [ 871.074807][T20833] ? __lock_acquire+0x7d80/0x7d80 [ 871.079852][T20833] ? __virt_addr_valid+0x10c/0x380 [ 871.084989][T20833] should_fail_ex+0x394/0x4c0 [ 871.089695][T20833] _copy_from_user+0x2f/0xe0 [ 871.094309][T20833] csum_and_copy_from_iter+0x1f3/0x1480 [ 871.099888][T20833] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 871.105534][T20833] ? __alloc_skb+0x138/0x2c0 [ 871.110129][T20833] ? rcu_is_watching+0x15/0xb0 [ 871.114899][T20833] ? __alloc_skb+0x138/0x2c0 [ 871.119486][T20833] ? __kmalloc_node_track_caller+0xe2/0x230 [ 871.125394][T20833] ping_getfrag+0x6d/0x280 [ 871.129813][T20833] ? skb_put+0x112/0x210 [ 871.134059][T20833] __ip6_append_data+0x3049/0x3d40 [ 871.139199][T20833] ? inet6_sk+0xe0/0xe0 [ 871.143369][T20833] ? ip6_setup_cork+0xff0/0xff0 [ 871.148241][T20833] ip6_append_data+0x1b0/0x350 [ 871.153018][T20833] ? inet6_sk+0xe0/0xe0 [ 871.157195][T20833] ping_v6_sendmsg+0xd6d/0x1130 [ 871.162060][T20833] ? ping_v6_pre_connect+0x30/0x30 [ 871.167182][T20833] ? inet_sendmsg+0x10d/0x2a0 [ 871.171865][T20833] ? __local_bh_enable_ip+0x13a/0x1c0 [ 871.177234][T20833] ? lockdep_hardirqs_on+0x98/0x150 [ 871.182440][T20833] ? _local_bh_enable+0xa0/0xa0 [ 871.187291][T20833] ? do_raw_spin_unlock+0x121/0x230 [ 871.192491][T20833] ? inet_sendmsg+0x10d/0x2a0 [ 871.197173][T20833] ? inet_sendmsg+0x10d/0x2a0 [ 871.201866][T20833] ? inet_send_prepare+0x250/0x250 [ 871.206980][T20833] ____sys_sendmsg+0x61b/0x980 [ 871.211751][T20833] ? __asan_memset+0x22/0x40 [ 871.216347][T20833] ? __sys_sendmsg_sock+0x30/0x30 [ 871.221364][T20833] ? __import_iovec+0x5f2/0x850 [ 871.226224][T20833] ? import_iovec+0x73/0xa0 [ 871.230726][T20833] ___sys_sendmsg+0x2a6/0x360 [ 871.235406][T20833] ? __sys_sendmsg+0x2b0/0x2b0 [ 871.240187][T20833] ? __lock_acquire+0x7d80/0x7d80 [ 871.245234][T20833] __se_sys_sendmsg+0x1d0/0x2c0 [ 871.250088][T20833] ? __x64_sys_sendmsg+0x80/0x80 [ 871.255037][T20833] ? lockdep_hardirqs_on+0x98/0x150 [ 871.260241][T20833] do_syscall_64+0x55/0xb0 [ 871.264654][T20833] ? clear_bhb_loop+0x40/0x90 [ 871.269329][T20833] ? clear_bhb_loop+0x40/0x90 [ 871.274004][T20833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.279897][T20833] RIP: 0033:0x7fa37599e159 [ 871.284310][T20833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 871.303911][T20833] RSP: 002b:00007fa373bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 871.312337][T20833] RAX: ffffffffffffffda RBX: 00007fa375c25fa0 RCX: 00007fa37599e159 [ 871.320304][T20833] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 871.328276][T20833] RBP: 00007fa373bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 871.336246][T20833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 871.344211][T20833] R13: 00007fa375c26038 R14: 00007fa375c25fa0 R15: 00007ffc5cc82378 [ 871.352194][T20833] [ 872.052260][T20852] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4100'. [ 872.089613][T20852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 872.110846][T20853] netlink: 'syz.3.4101': attribute type 10 has an invalid length. [ 872.122984][T20853] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4101'. [ 872.186478][T20845] netlink: 'syz.3.4101': attribute type 39 has an invalid length. [ 872.419336][T20859] netlink: 'syz.2.4104': attribute type 21 has an invalid length. [ 872.435689][T20866] FAULT_INJECTION: forcing a failure. [ 872.435689][T20866] name failslab, interval 1, probability 0, space 0, times 0 [ 872.448532][T20859] netlink: 'syz.2.4104': attribute type 20 has an invalid length. [ 872.481669][T20866] CPU: 0 PID: 20866 Comm: syz.3.4106 Not tainted syzkaller #0 [ 872.489165][T20866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 872.499215][T20866] Call Trace: [ 872.502486][T20866] [ 872.505414][T20866] dump_stack_lvl+0x18c/0x250 [ 872.510088][T20866] ? show_regs_print_info+0x20/0x20 [ 872.515278][T20866] ? load_image+0x420/0x420 [ 872.519772][T20866] ? __might_sleep+0xe0/0xe0 [ 872.524356][T20866] ? __lock_acquire+0x7d80/0x7d80 [ 872.529375][T20866] should_fail_ex+0x394/0x4c0 [ 872.534051][T20866] should_failslab+0x9/0x20 [ 872.538549][T20866] slab_pre_alloc_hook+0x59/0x300 [ 872.543569][T20866] ? __alloc_skb+0x138/0x2c0 [ 872.548153][T20866] kmem_cache_alloc_node+0x5e/0x310 [ 872.553345][T20866] ? __alloc_skb+0x103/0x2c0 [ 872.557930][T20866] __alloc_skb+0x103/0x2c0 [ 872.562344][T20866] __ip6_append_data+0x2be0/0x3d40 [ 872.567474][T20866] ? inet6_sk+0xe0/0xe0 [ 872.571634][T20866] ? ip6_setup_cork+0xff0/0xff0 [ 872.576489][T20866] ip6_append_data+0x1b0/0x350 [ 872.581261][T20866] ? inet6_sk+0xe0/0xe0 [ 872.585415][T20866] ping_v6_sendmsg+0xd6d/0x1130 [ 872.590266][T20866] ? ping_v6_pre_connect+0x30/0x30 [ 872.595370][T20866] ? perf_trace_preemptirq_template+0xac/0x330 [ 872.601529][T20866] ? inet_sendmsg+0x10d/0x2a0 [ 872.606204][T20866] ? __local_bh_enable_ip+0x13a/0x1c0 [ 872.611574][T20866] ? lockdep_hardirqs_on+0x98/0x150 [ 872.616781][T20866] ? _local_bh_enable+0xa0/0xa0 [ 872.621626][T20866] ? do_raw_spin_unlock+0x121/0x230 [ 872.626819][T20866] ? inet_sendmsg+0x10d/0x2a0 [ 872.631492][T20866] ? inet_sendmsg+0x10d/0x2a0 [ 872.636165][T20866] ? inet_send_prepare+0x250/0x250 [ 872.641278][T20866] ____sys_sendmsg+0x61b/0x980 [ 872.646042][T20866] ? __asan_memset+0x22/0x40 [ 872.650628][T20866] ? __sys_sendmsg_sock+0x30/0x30 [ 872.655641][T20866] ? __import_iovec+0x5f2/0x850 [ 872.660497][T20866] ? import_iovec+0x73/0xa0 [ 872.664997][T20866] ___sys_sendmsg+0x2a6/0x360 [ 872.669675][T20866] ? __sys_sendmsg+0x2b0/0x2b0 [ 872.674445][T20866] ? ktime_get+0x7f/0x280 [ 872.678785][T20866] __se_sys_sendmsg+0x1d0/0x2c0 [ 872.683642][T20866] ? __x64_sys_sendmsg+0x80/0x80 [ 872.688586][T20866] ? lockdep_hardirqs_on+0x98/0x150 [ 872.693782][T20866] do_syscall_64+0x55/0xb0 [ 872.698191][T20866] ? clear_bhb_loop+0x40/0x90 [ 872.702859][T20866] ? clear_bhb_loop+0x40/0x90 [ 872.707532][T20866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 872.713417][T20866] RIP: 0033:0x7fc5f499e159 [ 872.717828][T20866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.737425][T20866] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.745831][T20866] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 872.753792][T20866] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 872.761751][T20866] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 872.769711][T20866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.777673][T20866] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 872.785649][T20866] [ 872.959523][T20868] sit0: entered allmulticast mode [ 873.178101][T20869] sit0: entered promiscuous mode [ 874.364146][T20891] netlink: 31631 bytes leftover after parsing attributes in process `syz.3.4114'. [ 874.444678][T20891] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4114'. [ 874.480304][T20891] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4114'. [ 875.388285][T20924] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4125'. [ 875.985550][T20935] FAULT_INJECTION: forcing a failure. [ 875.985550][T20935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.008885][T20935] CPU: 0 PID: 20935 Comm: syz.3.4127 Not tainted syzkaller #0 [ 876.016380][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.026438][T20935] Call Trace: [ 876.029724][T20935] [ 876.032658][T20935] dump_stack_lvl+0x18c/0x250 [ 876.037343][T20935] ? show_regs_print_info+0x20/0x20 [ 876.042544][T20935] ? load_image+0x420/0x420 [ 876.047084][T20935] ? __might_fault+0xaa/0x120 [ 876.051773][T20935] ? __lock_acquire+0x7d80/0x7d80 [ 876.056799][T20935] ? __virt_addr_valid+0x10c/0x380 [ 876.061917][T20935] should_fail_ex+0x394/0x4c0 [ 876.066607][T20935] _copy_from_user+0x2f/0xe0 [ 876.071205][T20935] csum_and_copy_from_iter+0x1f3/0x1480 [ 876.076778][T20935] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 876.082418][T20935] ? __alloc_skb+0x138/0x2c0 [ 876.087008][T20935] ? rcu_is_watching+0x15/0xb0 [ 876.091775][T20935] ? __alloc_skb+0x138/0x2c0 [ 876.096356][T20935] ? __kmalloc_node_track_caller+0xe2/0x230 [ 876.102262][T20935] ping_getfrag+0x6d/0x280 [ 876.106682][T20935] ? skb_put+0x112/0x210 [ 876.110926][T20935] __ip6_append_data+0x3049/0x3d40 [ 876.116067][T20935] ? inet6_sk+0xe0/0xe0 [ 876.120237][T20935] ? ip6_setup_cork+0xff0/0xff0 [ 876.125100][T20935] ip6_append_data+0x1b0/0x350 [ 876.129873][T20935] ? inet6_sk+0xe0/0xe0 [ 876.134037][T20935] ping_v6_sendmsg+0xd6d/0x1130 [ 876.138898][T20935] ? ping_v6_pre_connect+0x30/0x30 [ 876.144021][T20935] ? inet_sendmsg+0x10d/0x2a0 [ 876.148697][T20935] ? __local_bh_enable_ip+0x13a/0x1c0 [ 876.154069][T20935] ? lockdep_hardirqs_on+0x98/0x150 [ 876.159270][T20935] ? _local_bh_enable+0xa0/0xa0 [ 876.164117][T20935] ? do_raw_spin_unlock+0x121/0x230 [ 876.169320][T20935] ? inet_sendmsg+0x10d/0x2a0 [ 876.173999][T20935] ? inet_sendmsg+0x10d/0x2a0 [ 876.178673][T20935] ? inet_send_prepare+0x250/0x250 [ 876.183784][T20935] ____sys_sendmsg+0x61b/0x980 [ 876.188550][T20935] ? __asan_memset+0x22/0x40 [ 876.193145][T20935] ? __sys_sendmsg_sock+0x30/0x30 [ 876.198162][T20935] ? __import_iovec+0x5f2/0x850 [ 876.203020][T20935] ? import_iovec+0x73/0xa0 [ 876.207525][T20935] ___sys_sendmsg+0x2a6/0x360 [ 876.212204][T20935] ? __sys_sendmsg+0x2b0/0x2b0 [ 876.216985][T20935] ? __lock_acquire+0x7d80/0x7d80 [ 876.222029][T20935] __se_sys_sendmsg+0x1d0/0x2c0 [ 876.226882][T20935] ? __x64_sys_sendmsg+0x80/0x80 [ 876.231832][T20935] ? lockdep_hardirqs_on+0x98/0x150 [ 876.237033][T20935] do_syscall_64+0x55/0xb0 [ 876.241446][T20935] ? clear_bhb_loop+0x40/0x90 [ 876.246134][T20935] ? clear_bhb_loop+0x40/0x90 [ 876.250807][T20935] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.256694][T20935] RIP: 0033:0x7fc5f499e159 [ 876.261107][T20935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.280712][T20935] RSP: 002b:00007fc5f578f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.289122][T20935] RAX: ffffffffffffffda RBX: 00007fc5f4c25fa0 RCX: 00007fc5f499e159 [ 876.297093][T20935] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 876.305060][T20935] RBP: 00007fc5f578f090 R08: 0000000000000000 R09: 0000000000000000 [ 876.313023][T20935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.320986][T20935] R13: 00007fc5f4c26038 R14: 00007fc5f4c25fa0 R15: 00007ffd7f536418 [ 876.328970][T20935] [ 876.420548][T20942] netlink: 'syz.0.4130': attribute type 21 has an invalid length. [ 876.433681][T20943] netlink: 'syz.0.4130': attribute type 21 has an invalid length. [ 876.575011][T20948] netlink: 'syz.0.4132': attribute type 29 has an invalid length. [ 876.601140][T20948] netlink: 'syz.0.4132': attribute type 29 has an invalid length. [ 876.917068][T20952] C: renamed from team_slave_0 [ 876.959488][T20952] netlink: 'syz.1.4133': attribute type 3 has an invalid length. [ 876.969807][T20952] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4133'. [ 877.518283][T20982] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.4142'. [ 877.856133][T20982] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4142'. [ 877.868589][T20995] netlink: 'syz.1.4145': attribute type 10 has an invalid length. [ 877.877783][T20995] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.4145'. [ 878.201021][T21001] netlink: 'syz.2.4147': attribute type 12 has an invalid length. [ 878.287422][T21001] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.4147'. [ 878.494515][T21008] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.4148'. [ 881.422332][T21016] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4149'. [ 881.586916][T21028] netlink: 'syz.1.4153': attribute type 10 has an invalid length. [ 881.622958][T21026] netlink: 'syz.2.4152': attribute type 6 has an invalid length. [ 881.640133][T21026] netlink: 212812 bytes leftover after parsing attributes in process `syz.2.4152'. [ 881.814778][T21038] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 881.934819][T21043] netlink: 'syz.3.4158': attribute type 29 has an invalid length. [ 881.943627][T21043] netlink: 'syz.3.4158': attribute type 29 has an invalid length. [ 881.986134][T21042] netlink: 'syz.0.4159': attribute type 9 has an invalid length. [ 882.007634][T21044] netlink: 'syz.3.4158': attribute type 29 has an invalid length. [ 882.021676][T21042] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4159'. [ 882.051592][T21043] netlink: 'syz.3.4158': attribute type 29 has an invalid length. [ 882.075025][T21043] netlink: 'syz.3.4158': attribute type 10 has an invalid length. [ 882.086775][T21043] veth0_vlan: entered allmulticast mode [ 883.750164][T21043] netlink: 'syz.3.4158': attribute type 29 has an invalid length. [ 883.775579][T21044] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4158'. [ 884.298965][T21083] hsr0: left allmulticast mode [ 884.327587][T21083] hsr_slave_0: left allmulticast mode [ 884.341491][T21083] hsr_slave_1: left allmulticast mode [ 884.351560][T21083] bridge0: port 2(hsr0) entered disabled state [ 884.384710][T21083] bridge_slave_0: left allmulticast mode [ 884.390431][T21083] bridge_slave_0: left promiscuous mode [ 884.421560][T21083] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.593496][T21086] : port 1(gretap0) entered blocking state [ 884.610255][T21086] : port 1(gretap0) entered disabled state [ 884.620397][T21086] gretap0: entered allmulticast mode [ 884.641604][T21086] gretap0: entered promiscuous mode [ 884.839370][T21102] netlink: 'syz.3.4174': attribute type 33 has an invalid length. [ 884.885034][T21102] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4174'. [ 885.107312][T21107] netdevsim netdevsim0 : renamed from netdevsim0 [ 885.780725][T14285] Bluetooth: hci1: ISO packet for unknown connection handle 54 [ 885.793379][T14285] Bluetooth: hci1: ISO packet for unknown connection handle 54 [ 885.857021][T21122] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 885.898467][T21122] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4178'. [ 885.911488][T21121] netlink: 'syz.2.4177': attribute type 12 has an invalid length. [ 885.919562][T21121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4177'. [ 886.009570][T21121] netlink: 'syz.2.4177': attribute type 4 has an invalid length. [ 887.086466][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4184'. [ 887.327996][T21148] netlink: 'syz.0.4187': attribute type 1 has an invalid length. [ 887.346043][T21148] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4187'. [ 887.599178][T21154] netlink: 'syz.3.4188': attribute type 6 has an invalid length. [ 887.633378][T21154] netlink: 212812 bytes leftover after parsing attributes in process `syz.3.4188'. [ 887.922080][T21168] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4191'. [ 887.951451][T21168] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 890.429224][T21195] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.4200'. [ 890.585320][T21203] netlink: 'syz.1.4201': attribute type 6 has an invalid length. [ 890.613858][T21203] netlink: 212812 bytes leftover after parsing attributes in process `syz.1.4201'. [ 890.900071][T21195] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4200'. [ 891.078998][T21216] netlink: 'syz.3.4204': attribute type 10 has an invalid length. [ 891.441829][T14285] Bluetooth: hci2: ISO packet for unknown connection handle 16 [ 892.786582][T21242] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4212'. [ 892.993489][T21242] team0: Port device team_slave_0 removed [ 893.010496][T21242] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 893.842255][T21267] netlink: 'syz.0.4219': attribute type 10 has an invalid length. [ 893.860517][T21267] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4219'. [ 893.876381][T21267] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 894.764956][T21303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.795286][T21303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.011069][T21303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 895.039912][T21303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.200992][T21315] netlink: 'syz.0.4225': attribute type 4 has an invalid length. [ 895.646758][T21332] netlink: 'syz.3.4234': attribute type 4 has an invalid length. [ 895.679255][T21332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4234'. [ 895.939501][T21328] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.4231'. [ 896.117818][T21328] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4231'. [ 896.386105][ T6087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 897.128278][T21352] 0: renamed from pim6reg1 [ 897.638378][T21370] netlink: 'syz.1.4242': attribute type 21 has an invalid length. [ 897.655019][T21370] netlink: 'syz.1.4242': attribute type 1 has an invalid length. [ 897.745770][T21370] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4242'. [ 897.782466][T21372] netlink: 'syz.1.4242': attribute type 21 has an invalid length. [ 898.117836][T21377] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 898.126558][T21377] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 898.136940][T21377] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 898.147323][T21377] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 898.158236][T21377] netlink: 'syz.1.4245': attribute type 29 has an invalid length. [ 898.381028][T21390] netlink: 'syz.1.4247': attribute type 10 has an invalid length. [ 898.405647][T21390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4247'. [ 898.431673][T21390] bridge0: port 1(ipvlan1) entered blocking state [ 898.449709][T21390] bridge0: port 1(ipvlan1) entered disabled state [ 898.460884][T21393] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4249'. [ 898.477589][T21390] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 899.397621][T21409] veth1_to_bond: entered allmulticast mode [ 899.700549][T21425] netlink: 142240 bytes leftover after parsing attributes in process `syz.3.4253'. [ 899.774585][T21430] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4256'. [ 899.872270][T21425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4253'. [ 899.877757][T21430] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4256'. [ 902.709006][T21466] delete_channel: no stack [ 903.721291][T21472] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4270'. [ 903.875503][T21480] mac80211_hwsim hwsim55 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 905.901578][ T7305] wlan1: Trigger new scan to find an IBSS to join [ 906.377128][T21533] syzkaller0: entered promiscuous mode [ 906.456761][T21533] syzkaller0: entered allmulticast mode [ 907.001009][T21559] pim6reg1: entered promiscuous mode [ 907.006518][T21559] pim6reg1: entered allmulticast mode [ 908.114261][T21567] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4297'. [ 908.169430][T21567] syzkaller0: entered promiscuous mode [ 908.181437][T21567] syzkaller0: entered allmulticast mode [ 908.199848][T21567] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 908.383571][T21577] netlink: 'syz.1.4301': attribute type 2 has an invalid length. [ 908.411511][T21577] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4301'. [ 908.420790][T21577] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 909.443513][T21590] sit0: left promiscuous mode [ 909.557517][T21596] sit0: entered promiscuous mode [ 909.613921][T21602] netlink: 'syz.1.4306': attribute type 12 has an invalid length. [ 909.623962][T21602] netlink: 'syz.1.4306': attribute type 15 has an invalid length. [ 909.637624][T21603] netlink: 'syz.1.4306': attribute type 12 has an invalid length. [ 909.646150][T21603] netlink: 'syz.1.4306': attribute type 15 has an invalid length. [ 909.891634][ T6082] wlan1: Trigger new scan to find an IBSS to join [ 909.958059][T21616] netlink: 184920 bytes leftover after parsing attributes in process `syz.0.4310'. [ 909.980290][T21616] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 910.256272][T21633] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4313'. [ 910.265832][T21633] netlink: 'syz.1.4313': attribute type 1 has an invalid length. [ 910.275521][T21633] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.4313'. [ 910.288833][T21632] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4313'. [ 910.298653][T21632] netlink: 'syz.1.4313': attribute type 1 has an invalid length. [ 910.306943][T21632] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.4313'. [ 910.520490][T21639] netlink: 'syz.1.4316': attribute type 6 has an invalid length. [ 910.530615][T21639] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4316'. [ 911.202212][T21647] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4318'. [ 915.539228][ T7296] wlan1: Trigger new scan to find an IBSS to join [ 929.853696][T21683] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 929.868949][T21683] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 929.877580][T21683] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.887151][T21683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.895946][T21683] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.903399][T21683] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 929.913235][T21683] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.920955][T21683] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 929.929080][T21683] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 929.937444][T21683] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 929.945256][T21683] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.961628][T21683] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 931.541420][T21685] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 931.550784][T21685] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 931.561159][T21685] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 931.570778][T21685] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 931.582651][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.588951][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.598772][T21685] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 931.606357][T21685] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 932.051523][ T5781] Bluetooth: hci5: command tx timeout [ 932.057430][ T5781] Bluetooth: hci3: command tx timeout [ 933.600568][T21685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 933.612583][T21685] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 933.620325][T21685] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 933.634048][T21685] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 933.643101][T21685] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 933.650407][T21685] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 933.658643][T21684] Bluetooth: hci6: command tx timeout [ 934.131476][ T5781] Bluetooth: hci5: command tx timeout [ 934.136983][T21685] Bluetooth: hci3: command tx timeout [ 935.731406][T21685] Bluetooth: hci7: command tx timeout [ 935.737335][T21685] Bluetooth: hci6: command tx timeout [ 936.211394][ T5781] Bluetooth: hci5: command tx timeout [ 936.217437][T21685] Bluetooth: hci3: command tx timeout [ 937.811395][ T5781] Bluetooth: hci7: command tx timeout [ 937.816889][T21685] Bluetooth: hci6: command tx timeout [ 938.291379][T21685] Bluetooth: hci3: command tx timeout [ 938.296810][T21685] Bluetooth: hci5: command tx timeout [ 939.891416][ T5781] Bluetooth: hci7: command tx timeout [ 939.897322][T21685] Bluetooth: hci6: command tx timeout [ 954.459894][T21685] Bluetooth: hci7: command tx timeout [ 990.341853][ T5781] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 990.350676][ T5781] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 990.361449][ T5781] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 990.369439][ T5781] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 990.379678][ T5781] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 990.387052][ T5781] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 990.434188][T21685] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 990.443710][T21685] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 990.451988][T21685] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 990.460506][T21685] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 990.468511][T21685] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 990.476153][T21685] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 992.088123][ T5781] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 992.099789][ T5781] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 992.108043][ T5781] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 992.116320][ T5781] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 992.124887][ T5781] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 992.132444][ T5781] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 992.451459][T21685] Bluetooth: hci8: command tx timeout [ 992.531560][T21685] Bluetooth: hci9: command tx timeout [ 993.018284][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.024681][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.126658][ T5781] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 994.135976][ T5781] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 994.146532][ T5781] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 994.155305][ T5781] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 994.170659][ T5781] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 994.178201][ T5781] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 994.211428][ T5781] Bluetooth: hci10: command tx timeout [ 994.531358][ T5781] Bluetooth: hci8: command tx timeout [ 994.611358][ T5781] Bluetooth: hci9: command tx timeout [ 996.212593][ T5781] Bluetooth: hci11: command tx timeout [ 996.291333][ T5781] Bluetooth: hci10: command tx timeout [ 996.611893][ T5781] Bluetooth: hci8: command tx timeout [ 996.691421][ T5781] Bluetooth: hci9: command tx timeout [ 998.291331][ T5781] Bluetooth: hci11: command tx timeout [ 998.371475][ T5781] Bluetooth: hci10: command tx timeout [ 998.692059][ T5781] Bluetooth: hci8: command tx timeout [ 998.771369][ T5781] Bluetooth: hci9: command tx timeout [ 1000.371312][ T5781] Bluetooth: hci11: command tx timeout [ 1000.451447][ T5781] Bluetooth: hci10: command tx timeout [ 1002.451439][ T5781] Bluetooth: hci11: command tx timeout [ 1023.351239][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1023.358033][ C0] rcu: 0-....: (9526 ticks this GP) idle=9ef4/1/0x4000000000000000 softirq=82445/82447 fqs=2655 [ 1023.369494][ C0] rcu: hardirqs softirqs csw/system [ 1023.375904][ C0] rcu: number: 1098408 0 0 [ 1023.382303][ C0] rcu: cputime: 11254 27491 33 ==> 38780(ms) [ 1023.390092][ C0] rcu: (t=10504 jiffies g=103149 q=1933 ncpus=2) [ 1023.396499][ C0] CPU: 0 PID: 21646 Comm: syz.0.4319 Not tainted syzkaller #0 [ 1023.403945][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1023.413987][ C0] RIP: 0010:check_preemption_disabled+0x37/0x110 [ 1023.420315][ C0] Code: 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 5d 08 74 75 65 8b 0d 52 08 74 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 <48> 3b 4c 24 08 0f 85 c4 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d c3 [ 1023.439911][ C0] RSP: 0018:ffffc90000005f68 EFLAGS: 00000206 [ 1023.445971][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 14f4c7b63906d500 [ 1023.453934][ C0] RDX: 0000000000000000 RSI: ffffffff8b1d3340 RDI: ffffffff8b1d3300 [ 1023.461897][ C0] RBP: ffffc900000060d0 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 1023.469859][ C0] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: 1ffff92000000c04 [ 1023.477823][ C0] R13: ffffffff8d131da0 R14: 0000000000000000 R15: dffffc0000000000 [ 1023.485783][ C0] FS: 00007f43e08f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1023.494701][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1023.501273][ C0] CR2: 00007fd10f8e3f6c CR3: 000000002f490000 CR4: 00000000003506f0 [ 1023.509235][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1023.517197][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1023.525159][ C0] Call Trace: [ 1023.528430][ C0] [ 1023.531272][ C0] rcu_is_watching+0x15/0xb0 [ 1023.535860][ C0] lock_acquire+0xc6/0x420 [ 1023.540265][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1023.546415][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1023.552565][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1023.557936][ C0] ? __sanitizer_cov_trace_switch+0x2e/0xe0 [ 1023.563826][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.569884][ C0] is_bpf_text_address+0x47/0x2a0 [ 1023.574900][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 1023.580089][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 1023.585280][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.591339][ C0] kernel_text_address+0xa0/0xd0 [ 1023.596274][ C0] __kernel_text_address+0xd/0x30 [ 1023.601292][ C0] unwind_get_return_address+0x5d/0xc0 [ 1023.606739][ C0] ? stack_trace_save+0x100/0x100 [ 1023.611755][ C0] arch_stack_walk+0x11d/0x190 [ 1023.616518][ C0] stack_trace_save+0xaa/0x100 [ 1023.621274][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1023.626377][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1023.631570][ C0] ? sched_clock_cpu+0x75/0x430 [ 1023.636415][ C0] ? read_tsc+0x9/0x20 [ 1023.640475][ C0] ? ktime_get+0x24b/0x280 [ 1023.644887][ C0] kasan_set_track+0x4e/0x70 [ 1023.649468][ C0] ? kasan_set_track+0x4e/0x70 [ 1023.654220][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1023.659232][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 1023.664509][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 1023.669525][ C0] ? skb_clone+0x1eb/0x370 [ 1023.673929][ C0] ? dev_queue_xmit_nit+0x23f/0xba0 [ 1023.679118][ C0] ? dev_hard_start_xmit+0x150/0x790 [ 1023.684395][ C0] ? sch_direct_xmit+0x251/0x4a0 [ 1023.689324][ C0] ? __dev_queue_xmit+0x162a/0x3640 [ 1023.694513][ C0] ? ip_finish_output2+0xd97/0x1260 [ 1023.699701][ C0] ? ip_output+0x2a5/0x3a0 [ 1023.704106][ C0] ? __ip_queue_xmit+0x1056/0x1960 [ 1023.709205][ C0] ? __tcp_transmit_skb+0x1dd6/0x3470 [ 1023.714568][ C0] ? tcp_rcv_established+0xb22/0x1d70 [ 1023.719934][ C0] ? tcp_v4_do_rcv+0x6d3/0xba0 [ 1023.724683][ C0] ? tcp_v4_rcv+0x2358/0x2a60 [ 1023.729346][ C0] ? ip_protocol_deliver_rcu+0x20a/0x3f0 [ 1023.734972][ C0] ? ip_local_deliver_finish+0x2c3/0x510 [ 1023.740600][ C0] ? NF_HOOK+0x32d/0x3b0 [ 1023.744834][ C0] ? ip_sublist_rcv+0xa36/0xd60 [ 1023.749671][ C0] ? ip_list_rcv+0x3ed/0x440 [ 1023.754247][ C0] ? __netif_receive_skb_list_core+0x2d9/0x770 [ 1023.760390][ C0] ? netif_receive_skb_list_internal+0x943/0xca0 [ 1023.766710][ C0] ? napi_gro_receive+0x553/0xaf0 [ 1023.771724][ C0] ? receive_buf+0x20ab/0x3660 [ 1023.776474][ C0] ? virtnet_poll+0x69e/0x1300 [ 1023.781228][ C0] ? __napi_poll+0xbb/0x460 [ 1023.785729][ C0] ? net_rx_action+0x65f/0xcc0 [ 1023.790486][ C0] ? handle_softirqs+0x27d/0x820 [ 1023.795410][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1023.800162][ C0] ? irq_exit_rcu+0x9/0x20 [ 1023.804567][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1023.810391][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1023.816549][ C0] ? finish_task_switch+0x267/0x8f0 [ 1023.821748][ C0] ? __schedule+0x15b6/0x4660 [ 1023.826419][ C0] ? preempt_schedule_irq+0xbf/0x150 [ 1023.831701][ C0] ? irqentry_exit+0x67/0x70 [ 1023.836299][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1023.842452][ C0] ? smp_call_function_single+0x41f/0x5a0 [ 1023.848168][ C0] ? perf_install_in_context+0x5bb/0x920 [ 1023.853793][ C0] ? __se_sys_perf_event_open+0x1841/0x1c60 [ 1023.859676][ C0] ? do_syscall_64+0x55/0xb0 [ 1023.864258][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.870332][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1023.875182][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 1023.880293][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 1023.885141][ C0] ? skb_clone+0x1eb/0x370 [ 1023.889556][ C0] skb_clone+0x1eb/0x370 [ 1023.893787][ C0] ? dev_queue_xmit_nit+0x227/0xba0 [ 1023.898983][ C0] dev_queue_xmit_nit+0x23f/0xba0 [ 1023.904003][ C0] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1023.909114][ C0] dev_hard_start_xmit+0x150/0x790 [ 1023.914232][ C0] sch_direct_xmit+0x251/0x4a0 [ 1023.918991][ C0] ? do_raw_spin_lock+0x2b0/0x2b0 [ 1023.924009][ C0] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 1023.929991][ C0] __dev_queue_xmit+0x162a/0x3640 [ 1023.935012][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1023.940208][ C0] ? __dev_queue_xmit+0x275/0x3640 [ 1023.945316][ C0] ? read_seqbegin+0x184/0x250 [ 1023.950079][ C0] ? read_seqbegin+0x1b6/0x250 [ 1023.954837][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1023.960113][ C0] ? __asan_memcpy+0x40/0x70 [ 1023.964701][ C0] ? eth_header+0x11b/0x200 [ 1023.969199][ C0] ? llc_sysctl_exit+0x70/0x70 [ 1023.973952][ C0] ? neigh_resolve_output+0x5f5/0x710 [ 1023.979333][ C0] ? ip_finish_output2+0x45a/0x1260 [ 1023.984524][ C0] ip_finish_output2+0xd97/0x1260 [ 1023.989536][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1023.995681][ C0] ? ip_finish_output2+0x45a/0x1260 [ 1024.000871][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.007019][ C0] ? ip_fragment+0x210/0x210 [ 1024.011599][ C0] ? ip_skb_dst_mtu+0x586/0x9c0 [ 1024.016443][ C0] ? ip_finish_output+0x3ec/0x4c0 [ 1024.021461][ C0] ip_output+0x2a5/0x3a0 [ 1024.025694][ C0] ? ip_output+0x5a/0x3a0 [ 1024.030015][ C0] ? __ip_queue_xmit+0x5d/0x1960 [ 1024.034943][ C0] __ip_queue_xmit+0x1056/0x1960 [ 1024.039904][ C0] ? __ip_queue_xmit+0x5d/0x1960 [ 1024.044835][ C0] __tcp_transmit_skb+0x1dd6/0x3470 [ 1024.050046][ C0] ? __tcp_send_ack+0x5f0/0x5f0 [ 1024.054918][ C0] ? __tcp_send_ack+0x299/0x5f0 [ 1024.059781][ C0] tcp_rcv_established+0xb22/0x1d70 [ 1024.064982][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 1024.070029][ C0] ? tcp_check_space+0xa80/0xa80 [ 1024.074979][ C0] ? rt_is_expired+0x1c/0x2d0 [ 1024.079660][ C0] ? rt_is_expired+0x250/0x2d0 [ 1024.084426][ C0] tcp_v4_do_rcv+0x6d3/0xba0 [ 1024.089018][ C0] tcp_v4_rcv+0x2358/0x2a60 [ 1024.093524][ C0] ? tcp_v4_rcv+0x10d1/0x2a60 [ 1024.098217][ C0] ? tcp_filter+0x90/0x90 [ 1024.102541][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1024.107914][ C0] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 1024.113364][ C0] ? ip_local_deliver_finish+0x1c2/0x510 [ 1024.118988][ C0] ip_local_deliver_finish+0x2c3/0x510 [ 1024.124444][ C0] NF_HOOK+0x32d/0x3b0 [ 1024.128502][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1024.133697][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1024.137931][ C0] ? NF_HOOK+0x9f/0x3b0 [ 1024.142078][ C0] ? ip_local_deliver+0x180/0x180 [ 1024.147094][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1024.151328][ C0] ? ip_local_deliver+0xb4/0x180 [ 1024.156254][ C0] ? ip_local_deliver+0x10b/0x180 [ 1024.161267][ C0] ip_sublist_rcv+0xa36/0xd60 [ 1024.165943][ C0] ? ip_list_rcv+0x440/0x440 [ 1024.170525][ C0] ? ip_rcv_core+0xd80/0xd80 [ 1024.175104][ C0] ? ip_rcv_core+0x898/0xd80 [ 1024.179688][ C0] ip_list_rcv+0x3ed/0x440 [ 1024.184099][ C0] ? ip_rcv_finish+0x250/0x250 [ 1024.188851][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1024.194825][ C0] ? ip_rcv_finish+0x250/0x250 [ 1024.199582][ C0] __netif_receive_skb_list_core+0x2d9/0x770 [ 1024.205559][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1024.210756][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 1024.215339][ C0] ? netif_receive_skb_list_internal+0x934/0xca0 [ 1024.221665][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 1024.227815][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 1024.234137][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1024.239685][ C0] ? __list_add_valid_or_report+0xc/0xf0 [ 1024.245312][ C0] napi_gro_receive+0x553/0xaf0 [ 1024.250157][ C0] receive_buf+0x20ab/0x3660 [ 1024.254753][ C0] ? virtnet_poll_tx+0x530/0x530 [ 1024.259692][ C0] virtnet_poll+0x69e/0x1300 [ 1024.264279][ C0] ? refill_work+0x220/0x220 [ 1024.268864][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.275011][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1024.280209][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.286359][ C0] __napi_poll+0xbb/0x460 [ 1024.290682][ C0] net_rx_action+0x65f/0xcc0 [ 1024.295283][ C0] ? net_tx_action+0x950/0x950 [ 1024.300046][ C0] ? detach_timer+0x2b0/0x2b0 [ 1024.304727][ C0] handle_softirqs+0x27d/0x820 [ 1024.309480][ C0] ? read_tsc+0x9/0x20 [ 1024.313542][ C0] ? ktime_get+0x24b/0x280 [ 1024.317954][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1024.322712][ C0] ? do_softirq+0x1a0/0x1a0 [ 1024.327207][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1024.332398][ C0] __irq_exit_rcu+0xd3/0x190 [ 1024.336980][ C0] ? irq_exit_rcu+0x20/0x20 [ 1024.341479][ C0] irq_exit_rcu+0x9/0x20 [ 1024.345714][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1024.351343][ C0] [ 1024.354263][ C0] [ 1024.357185][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.363156][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 1024.368956][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1024.388554][ C0] RSP: 0018:ffffc9000c96f700 EFLAGS: 00000286 [ 1024.394613][ C0] RAX: 14f4c7b63906d500 RBX: 0000000000000000 RCX: 14f4c7b63906d500 [ 1024.402577][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 1024.410538][ C0] RBP: ffffc9000c96f750 R08: ffffffff911ef5ff R09: 1ffffffff223debf [ 1024.418498][ C0] R10: dffffc0000000000 R11: fffffbfff223dec0 R12: ffff8880825c1e00 [ 1024.426461][ C0] R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 [ 1024.434442][ C0] __schedule+0x15b6/0x4660 [ 1024.438952][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1024.446147][ C0] ? lock_chain_count+0x20/0x20 [ 1024.450993][ C0] ? asan.module_dtor+0x20/0x20 [ 1024.455839][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1024.461046][ C0] preempt_schedule_irq+0xbf/0x150 [ 1024.466151][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1024.471874][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1024.477673][ C0] irqentry_exit+0x67/0x70 [ 1024.482083][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.488054][ C0] RIP: 0010:smp_call_function_single+0x41f/0x5a0 [ 1024.494373][ C0] Code: 16 0b 00 44 8b 24 24 bf 01 00 00 00 e8 6a 8d e0 ff 65 8b 1d 8b 5b 87 7e 31 ff 89 de e8 9a 19 0b 00 85 db 74 69 e8 e1 15 0b 00 <43> c7 44 2e 04 f8 f8 f8 f8 48 c7 44 24 20 0e 36 e0 45 4b c7 04 2e [ 1024.513968][ C0] RSP: 0018:ffffc9000c96fae0 EFLAGS: 00000246 [ 1024.520029][ C0] RAX: ffffffff817c5cf8 RBX: 0000000000000000 RCX: 0000000000080000 [ 1024.527994][ C0] RDX: ffffc9000cef1000 RSI: 000000000001de46 RDI: 000000000001de47 [ 1024.535959][ C0] RBP: ffffc9000c96fbd0 R08: ffffffff911ef5ff R09: 1ffffffff223debf [ 1024.543921][ C0] R10: dffffc0000000000 R11: fffffbfff223dec0 R12: 0000000000000000 [ 1024.551880][ C0] R13: dffffc0000000000 R14: 1ffff9200192df60 R15: 1ffff9200192df60 [ 1024.559847][ C0] ? smp_call_function_single+0x488/0x5a0 [ 1024.565574][ C0] ? event_function+0x300/0x300 [ 1024.570416][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1024.576561][ C0] ? event_function+0x300/0x300 [ 1024.581416][ C0] perf_install_in_context+0x5bb/0x920 [ 1024.586873][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1024.592842][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 1024.598036][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1024.604189][ C0] ? __se_sys_perf_event_open+0x112b/0x1c60 [ 1024.610072][ C0] ? perf_event__header_size+0x165/0x220 [ 1024.615700][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 1024.621420][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1024.627052][ C0] ? lock_chain_count+0x20/0x20 [ 1024.631894][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1024.637871][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1024.643063][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1024.648690][ C0] do_syscall_64+0x55/0xb0 [ 1024.653096][ C0] ? clear_bhb_loop+0x40/0x90 [ 1024.657767][ C0] ? clear_bhb_loop+0x40/0x90 [ 1024.662436][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.668318][ C0] RIP: 0033:0x7f43df99e159 [ 1024.672724][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.692319][ C0] RSP: 002b:00007f43e08f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1024.700724][ C0] RAX: ffffffffffffffda RBX: 00007f43dfc25fa0 RCX: 00007f43df99e159 [ 1024.708684][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1024.716646][ C0] RBP: 00007f43dfa35024 R08: 0000000000000002 R09: 0000000000000000 [ 1024.724606][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1024.732566][ C0] R13: 00007f43dfc26038 R14: 00007f43dfc25fa0 R15: 00007ffdeac169b8 [ 1024.740541][ C0]