last executing test programs: 18.887848796s ago: executing program 1 (id=2982): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x21, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) (async) r5 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e25, @rand_addr=0x64010102}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x4, 0x1, 0x0, 0xfffffffffffffef4, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x7, 0x8, 0x3, 0x8, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x36, &(0x7f00000000c0)=""/54, 0x0, 0x28, '\x00', r7, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x9, &(0x7f0000000400)=[r1, r1, r8, r3, r1], &(0x7f0000000440)=[{0x3, 0x2, 0xe, 0x1}, {0x0, 0x4, 0x0, 0x7}, {0x1, 0x2, 0xa, 0x3}, {0x3, 0x2, 0xe}, {0x3, 0x3, 0xb, 0x9}, {0x1, 0x1, 0x1, 0x2}, {0x1, 0x3, 0x2, 0x5}, {0x5, 0x2, 0x4, 0xc}, {0x0, 0x4, 0x5, 0xa}], 0x10, 0xfffffff7}, 0x94) 18.609212763s ago: executing program 1 (id=2984): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7aa6625ae275d36303de193d8c8f32e33235b9ff743266774f53b320660de3a14dabfc031e6cc3f5ff781cd7e2185a663f084fb81da5ac7fcd622aa9045363b4"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, 0x0, &(0x7f0000000700)=r4}, 0x20) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000400)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xd7, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x87, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r7, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x20, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000021d7b84a0000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0x10, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r7, r7, 0x1, r7, r12, r7], &(0x7f0000000900)=[{0x1, 0x3, 0x6, 0x7}, {0x2, 0x1, 0xb, 0x1}, {0x5, 0x4, 0x5, 0x7}, {0x0, 0x5, 0xb, 0x5}, {0x1, 0x3, 0x5, 0x4}, {0x5, 0x2, 0xa, 0x9}, {0x0, 0x3, 0xa, 0x8}], 0x10, 0xfff}, 0x94) (async, rerun: 64) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=r11, 0x4) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_ext={0x1c, 0x28, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000001000000e5adc2afb84fa538181100683cdfdb95af6ee06d30e100", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000022a30600f0ffffff186000000500000000000000de000000852000000400000018000000020000000000000001000000850000003b000000182a0000", @ANYRES32=r12, @ANYBLOB="0000000003000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000018470000fbffffff00000000000000008510000007000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000b80)='syzkaller\x00', 0x3, 0x1a, &(0x7f0000000bc0)=""/26, 0x40f00, 0x60, '\x00', r10, 0x0, r13, 0x8, &(0x7f0000000c40)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1785e, r8, 0x2, 0x0, &(0x7f0000000c80)=[{0x3, 0x3, 0x3, 0x602ebc7b64610e38}, {0x0, 0x2, 0x6, 0xa}], 0x10, 0x10}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) (async) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x8, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r16, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x15, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000003000000000000000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000186800000e00000000000000f8ffffff18130000", @ANYRES32=r6, @ANYBLOB="000000000000831c4944ca466248397800"/28, @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x400, 0xf, &(0x7f0000000440)=""/15, 0x0, 0x4, '\x00', r10, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0xb, 0x0, 0x5}, 0x10, r14, r1, 0x0, &(0x7f0000000700)=[r15, r0, r16], 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016", 0x33}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x3, 0xffff}}, 0x80, 0x0}, 0x40448c5) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) 18.394869458s ago: executing program 1 (id=2986): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x2, &(0x7f0000000040)='^\x00', 0x0}, 0x30) recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000000200)=""/93, 0x5d}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/66, 0x42}], 0x4, &(0x7f00000003c0)=""/183, 0xb7}, 0x102) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%pS \x00'}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x408600, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'geneve0\x00', 0x10}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000600)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000640)=0xff) r4 = openat$cgroup_ro(r1, &(0x7f0000000680)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000700)={r6}) openat$cgroup_int(r1, &(0x7f0000000740)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x4004c1, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000800)={'syzkaller1\x00'}) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r9, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000880)="9f3c94e9db3dde3b1b725926f76cef497f369dff18c2743bf1fc5e36ab47f9423454c4327a90150f7cdcba4c2322778a8cda62018faf70265a30f69b4e0c1fb67ff3193f194e00e878a7cbbf659685f381c22bd9465785f66b06ac3434cc79d7626c3fa8301ca877495dd03cbdac8cc0f87e5e6db852425e99bb730a9b75c8fcaecb6bc07ac109c2a8759d2a8f2244a65ffc592e76dc9fcb5c3d6846fbdc84311682cfedf0dc25c95c0f97fdbdcc19d687f6352afc27cd8eb86e2ddd799aaf0ae1ba1cd3407ed7a7e7bfcbdc3232f923cf573ff856a618e7", 0xd8}, {&(0x7f0000000980)="2b5b56606a2b84c4baec718d49c6b492a5fc444686b0de399049c3acc2b97a9285dbd6ebb53ce20a3e56a577e9aed9268bb23ee37e92b9aba0b2fd9d36f5837684d32af8234d81e22fc31bc7b4f63f7b3087a310d09534a63a4a247cc536cbbc466c54395b1b8911fd6dd8f966f6daa10b01c2b3e01d5ed3b6ac9f104b45c8323c656ad87fdd9f79fb4ed9319b0460c132f18b4bd48e0a063bf6cdd9d8e14bd49cfc6303a2b86c88d3e91d", 0xab}, {&(0x7f0000000a40)="23409655ab7c38a6dcaa916c62734f28faeae8fe7674baae1d5558f595d18d873d2874363ad27658c184c6c6", 0x2c}, {&(0x7f0000000a80)="fc325172e742376d881b9adf8409ecb64f58fbb71d798b62c2ea7dfde2d458fbd6bc3f23e132c7d834ea06890f93e563022961dd9a4c2d5dfd6eccf3a3ddaee84389b95448c8bc161e74b0d15918832812816fd43f3f3589e006b88530fe245dddd70bc61a1de82154227db761fb73819ca3cc9dce7abb62aa3e3f2479b5a7ccf74545129e130e323283e71ccf510420e3dbc3ba13ff143e1383fe76c1cf8eba7ace989adfac9a521db147aef38adb2cbd9eee29a855b4", 0xb7}], 0x4, &(0x7f0000000b80)=[{0xe0, 0x115, 0x559, "7f28523d81cc0cdd56b59b98f8bf74ee907d1b6d17835a43068422bf8fa37562fb2bc01cc3e06d4aecf6f4b94f7e8369f57ddaf79caf7b8b3d9433715d40b01135e39869b4e26f520714cd6f0e1f74022febe6885232c7678672c262972ce676392e2dabf8bfec96017174e7ce4625d827d58d187c65ae5e42a16a705cb91e7e43dfcd5cbccfc8a70af7db867620619f430d539eadf927a73c96405fe96eee4a1644fcd9f80308a50c1da8b43ef81341b878931bd35e79e2c13348cf27f42ee5e7e66ff92b9607fe6d8189eb42"}, {0xd0, 0x6, 0x8000, "9b76609f91ffb451211dc2541b39b93d93a15a4bd9c22a2d0cc952faab91c0d0b03323c254a17901d999aa62ae86780b6212931e108abc62b4cf8d88a648d1142271e2044df9cf0a198f19dbf07cc13ae1262ec15257568059fe77c862f0b88fb428301fba57034795f7d64675e1168f9d556663e88b84a040ead36082bc473352e9696b722317bb9b73ba726fde1b93a9b359b842a81e1c16d8bf185a333bbffc5b5ce644bbe087442be50e12363ce57fcadea6968c95d60563942297"}, {0x70, 0x107, 0x80000001, "a73322b6e6def69591f77c62fa510c01c1fabccc5c047cc95ccc9670c0ec75a27f1c2b6643dce5ea94256974218ce256b3629c0944ef42f63add330b13fbb732c13d6e4864a3273f0a4aa0dec6889557d9a3f253409696149f677468c2e47f"}, {0x108, 0x103, 0x70000000, "3d0f03234019be241755527051a72431311ebceee69bec5cdaaa69b5efe52cf6036137e28e1805daab7f373b087ac10d6dedaa7332a1ad6b533e1d762ea352d9756eafbac2358a94098b04aef234c3e04eb50badf37d6ba06c6013fccfebe129e061b394d7098b3eccb3e5a0b66842fd2da5a349dc339b9f86a51f32b3b5abda6aaeb15d613bc795899e74d019f1271f57a8c2786f6e187792e9949471ad586de2bc87ba0ee7fa65ea1e6c50b9f8282363d834803aadb9b9a8625d75f0b02b13bb48e7c202bbfc81d9c5857e505bf0df87f2656cb0b26f3265b14fe61d7db1fe95aa57080bd16e3695efa03a679ef3b98f"}, {0x98, 0x17, 0x8, "aa7a5c126b5dde2cd9e046a444a4c52022f7ea933945542c16c2d3f93cea7a16caddcd5afacbcdd7ee67042c5084bdf5b7b35900506d201464bccadd63c59ad0981ab73c849c58fc130fcdaa5166a67bee7089536d97381b829766c08552d36b0a18bf7d800512e83e74356eb1ef2e22af6bcd23f0e47bbb8dedc6c7e42994548325fd4853fbfe90"}], 0x3c0}, 0x8000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f80)={r4, r1, 0x4, r4}, 0x10) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000fc0)={'veth0\x00', 0xc00}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000001000)=0xfffffffc) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001040)={r1}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@fallback=r8, r10, 0xe, 0xc, 0x0, @void, @value=r4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@map=r11, 0xd25427f94d940f1c, 0x1, 0x0, &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001140)=[0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r10, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0], 0x0, 0xbf, &(0x7f0000001340)=[{}], 0x8, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0x69, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001240)={@ifindex=r13, r4, 0x2d, 0x28, 0xffffffffffffffff, @void, @void, @void, @value=r2, r12}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x76, 0x2}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x5f, 0x5f, 0x5f]}}, &(0x7f00000015c0)=""/4096, 0x3d, 0x1000, 0x1, 0x0, 0x10000, @value=r5}, 0x28) 18.122515875s ago: executing program 1 (id=2989): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x80) socket$kcm(0x10, 0x2, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={&(0x7f0000000140), 0x6e, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f0000000400)=""/228, 0xe4}], 0x4}, 0x40000000) (async) r1 = syz_clone(0x10000, &(0x7f0000000640)="b09a47b96ab588c0e9323d61bfa97d0a6ec8a4206120296e2cf3bdf865914893434ca038b32ba7709a8c8abcf461bff36671ef5549b5c78d9e7e56979527c46e2e4212787b77d1ae79a8d42dd90369de184f6c2ada7c6864a7cfc1afac980f25acae76b58e64c74e46452db81516a757e57e6aa593cefc61e09d5dcd93bf185328a4098b69ad8c821697e287edbc30c2c818ae38f7ef34e8db", 0x99, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)="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") perf_event_open(&(0x7f00000005c0)={0x3, 0x80, 0xd6, 0x3, 0xe3, 0x9, 0x0, 0x80000001, 0x40008, 0x994e9ed433f813fb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xd, 0x4, @perf_bp={&(0x7f0000000580), 0xd}, 0x71c375200145bcc, 0x4, 0xc6, 0x0, 0xfc81, 0x9, 0x18ec, 0x0, 0xe9c, 0x0, 0x438}, r1, 0x10, r0, 0x0) 17.863674601s ago: executing program 1 (id=2991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)=r1) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth1_vlan\x00', 0x400}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x310) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x40, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_subtree(r2, &(0x7f0000000380), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)={[{0x2d, 'cpuacct'}, {0x2b, 'freezer'}, {0x3b, 'blkio'}, {0x2b, 'cpuacct'}, {0x2b, 'rlimit'}]}, 0x2a) sendmsg$unix(r3, &(0x7f0000000540)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000480)="ba383728d8a8737ae6e3a830bb4e9f48f7d7a515e339b8191cffa625239f", 0x1e}], 0x1, &(0x7f0000000500)}, 0x40000) write$cgroup_devices(r3, &(0x7f0000000580)={'a', ' *:* ', 'm\x00'}, 0x8) recvmsg$kcm(r3, &(0x7f0000000780)={&(0x7f00000005c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/52, 0x34}, {&(0x7f0000000680)=""/109, 0x6d}], 0x2, &(0x7f0000000740)=""/1, 0x1}, 0x100) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000800)='syz1\x00', 0x1ff) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={r2, 0x20, &(0x7f0000000c40)={&(0x7f0000000b00)=""/11, 0xb, 0x0, &(0x7f0000000b40)=""/210, 0xd2}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x9, 0x15, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0xec, 0x4, 0x6, 0x7, 0x2da}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000900)='GPL\x00', 0xdf3, 0xfb, &(0x7f0000000940)=""/251, 0x41000, 0x40, '\x00', r6, @fallback=0x1e, r9, 0x8, &(0x7f0000000a80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x7, 0xb, 0x36}, 0x10, r10, r3, 0x6, &(0x7f0000000cc0)=[r3, r3, r2], &(0x7f0000000d00)=[{0x0, 0x4, 0x7, 0x5}, {0x1, 0x1, 0xf, 0xb}, {0x5, 0x5, 0xf, 0x5}, {0x1, 0x2, 0xd, 0x2}, {0x1, 0x2, 0xc, 0x8}, {0x0, 0x5, 0xb, 0x5}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001080)={&(0x7f0000000e40)="f6dbafc7f8a26bf456ed15ccff102cf5159ece5406fa8eb329ea5f7c35c2f3449a638ec5aab3c9df54c91f1f2a234f49792de81bc65c65f57bbf723235fbe5d59061254bae68e75d5db2a130bba82036fecf4682be622577f180d7ba72557c187f03ba396f52df7f092f497d53f2f3ca8c8ad737e4c9edec8b0c7331a9925336e565f9eb0b544f", &(0x7f0000000f00)=""/139, &(0x7f0000000fc0)="42d4a715dd59e6d58782ba628f2eab090465f27611dd201f359aae9070bc8be9fc1c114832c4809f5853feda40d238062adb7a72726740e42cd0c4c281", &(0x7f0000001000)="64f38170064249d735c580c35fa7744a60cc3ca99639381964c2fade772e8643e47cc5adb86114e767cd251a9160f917cb8739a7dd634ea50b0785b6eeb2b74dfe6c52cd41a6ee127744babf", 0x0, r2}, 0x38) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000010c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r12 = socket$kcm(0x29, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@fallback=r12, 0x35, 0x1, 0x88d, &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNSETFILTEREBPF(r13, 0x800454e1, &(0x7f0000001240)=r3) close(r7) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00', 0x0, 0x18}, 0x18) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x4, 0x1a, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x518, 0x0, 0x0, 0x0, 0xf871}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001400)='syzkaller\x00', 0x8001, 0xae, &(0x7f0000001440)=""/174, 0x41000, 0x4a, '\x00', r1, @fallback=0x20, r3, 0x8, &(0x7f0000001500)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0xd, 0x77c15fea, 0x8}, 0x10, 0xffffffffffffffff, r11, 0x1, &(0x7f0000001580)=[r13, r13, r0], &(0x7f00000015c0)=[{0x3, 0x1, 0xe, 0x4}], 0x10, 0xffff8001}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000016c0)={@cgroup=r13, r14, 0x16, 0x2, r15, @void, @value, @void, @void, r4}, 0x20) 16.935809464s ago: executing program 1 (id=2993): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}, {&(0x7f0000000340)="78cafb73fc02010700000000ef02258f2e440a", 0x13}], 0x2}, 0x40088c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000001cbb7d37ecfc6adfb55e61c7d9700b70300000000000085000000f2000000b7020000000000469e52df1d261ddc8bcdcb"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x16}]}, &(0x7f0000000040)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x57, 0xa}, 0x218, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x326684230b85cfdc) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x1f4, 0x16, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057", 0x0, 0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000100)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x45, 0x0, &(0x7f0000000200)="c1dfb080cd21d308098ee688f95711745a2221c349aae674bc8100f40dd7e8aa641b66434cc63fec336caaa131e089f010dd191f61e8ca278da19b6dc42bef2f070969faa0", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 8.141879761s ago: executing program 0 (id=3047): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x0, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0xffffe6a3, 0x0, 0x400004, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r2, 0x8) (async) write$cgroup_int(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xb3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf8}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000100)=ANY=[@ANYRESOCT=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f0000000680), &(0x7f0000000700)=r6}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000a000000000000000300000018110000582464b6f08c6d7c29", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000635540000400000018230000", @ANYRES32=0x1, @ANYRESOCT=r7], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xe, 0x2, 0xcbb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x9}, {0x0, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x901a}, 0x94) (async) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r8, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000400)) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) r9 = socket$kcm(0x29, 0x2, 0x0) close(r9) (async) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) 7.457910418s ago: executing program 0 (id=3051): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x14000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t||') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd8d2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.932189571s ago: executing program 4 (id=3064): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xbdb, 0x0, 0x1, 0x3, '\x00', r1, r2, 0x2, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0xba, 0x4, 0x3, 0x1000, r0, 0xd9ca, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x7}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r4}, 0xc) 4.815968485s ago: executing program 4 (id=3065): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="8500002148d487e8516e5e52007d00000095000000000000004b4091e14f19c9c083f380a172a0db6402ffb3fb47"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x80) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000009000000000000000000000000000000000400000000006780e7456187d608c4a664157beafec540260d88f2f495983f689bb8b934e2ae9ede585d25ef9c1f899dfa648af5111a24c1c9382cc82167f40315f0934244985770eeab588449ed6377ea53944bc3117ff681c1469edc5c5f35dff94afc27e19659df80ce5e449e68a98b72f652a05a0b6f8625b08ad163b06d1faf"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) (async) socket$kcm(0x2, 0x2, 0x73) (async, rerun: 32) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) (rerun: 32) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) 4.243791999s ago: executing program 0 (id=3068): ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149acf90a6c4014dea2b763389f77301ea8574d112625300906f480c36f41f82f84991800c37863de349f7"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x29, 0x0, &(0x7f0000000180)="6046320319a1928345e9bc03cc9b9df77521ccad02603f3c2d5b362b0f00d8105d7d72651685e8b62a", 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb59171e3664ffcfc, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000500030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0201000902000000e4a17c4ec80500c9", 0x10}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000001200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x4, 0x0, 0x0) (async) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x7, 0x7, 0x40000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3b1db823}, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2a, 0x2, 0x0) (async) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x35, 0x0, 0x0) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r12, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) 4.046863134s ago: executing program 4 (id=3069): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) close(r3) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x8) r9 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="1802000009000000000000000000000085000000410000001811000038558d603d1f9cb702c11927c60735ad47244b38cf49e62b5b5e553ddb66ff241cb26c20f090c581c975e7f780861d5f534eed18df81613d9ae624101ddfca7f84e4e7bee1f2f40322b7123a338a16a1b36b2d71464a08b9cf1070e8cb", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001001000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r11, &(0x7f0000000a40)={&(0x7f0000000140)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000900)=[{&(0x7f00000004c0)="9c204ccf", 0x4}], 0x1}, 0x8000001) sendmsg$inet(r11, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, 0x0, 0x67699ee7, 0x0, 0x0, 0xc3000, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x1}, {0x2}], 0x10, 0x3}, 0x94) sendmsg$inet(r11, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1}, 0x0) 3.856300148s ago: executing program 0 (id=3070): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b0000000000ff00000000000000ac1414aa000086dd"], 0xcfa4) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e96, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000003c0)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b590111080a97b960ace1cd8816", 0x20}], 0x1, 0x0, 0x34}, 0x4008001) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) write$cgroup_devices(r1, &(0x7f0000000000)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000100)=@raw=[@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0xb7, &(0x7f00000001c0)=""/183, 0x82200, 0x40, '\x00', r5, 0x0, r1, 0x8, &(0x7f00000004c0)={0x2, 0x5}, 0x8}, 0x94) 3.362581089s ago: executing program 2 (id=3073): r0 = socket$kcm(0x10, 0x2, 0x10) socketpair(0x2b, 0x1, 0x4, &(0x7f00000000c0)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x67, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000f1ffffff8407000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6396f9000a740300051700d1bd00000000000057650000000000", 0x27}], 0x1, 0x0, 0x0, 0x74000000}, 0x20008001) 3.355698279s ago: executing program 3 (id=3074): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe46, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8000000000001, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000003280)=ANY=[], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa421, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r0}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000240)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000a80)=ANY=[@ANYBLOB="18090000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095001d00000000004796b8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r4, &(0x7f0000000540), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x0, 0x80000}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.123911345s ago: executing program 2 (id=3075): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="5500000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870", 0x55}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df034affffffffffff0000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) 3.101700375s ago: executing program 3 (id=3076): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000240000000000000000000000070000004014"], 0x48}, 0x200040c4) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000040), &(0x7f00000000c0)=""/130}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000a40)=@in6={0xa, 0x4e23, 0x4411, @local, 0x4}, 0x80, 0x0}, 0x40814) 2.957796218s ago: executing program 4 (id=3077): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f00000000c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)="aabcbc0b17f4360f7bf25ca7217645c0f3a281706c3a23c40b6905d48b82d2b01c82c8b3ae1776245cdcab1e9774a8b307ea7069325efb492859927c308dcfdc5660f7a5d6fbd038abf5a33b57b088696c57f94d651be9b9728a21f66a278df2e1e95aacf710c548d781f46c0b04a587", 0x70}, {&(0x7f0000000200)="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", 0xf00}, {0x0}], 0x3, &(0x7f0000001340)=[{0xe8, 0x115, 0x9, "3b4e64be995839d4c1991da1b2b35a7f976e11e258a3a1d6a8960eb6fdae642a2a94b06576cbedb410014498f0ed3675d63b540cc13532d45221470de4215a2ff6c3aeff7903a840ec0261dfbb669eb0e00295757ecb7080fd2363e092d2144e996f24dbf47ae99cf6177f7dfb17fe9582cb2019d0090841dbf3cb3ab7954f76b073ff48466a299736b16a3f6d9592ea9d655ed94ebb73b8253f299f2b6cf00ff6d6eaa79cfb5b706c90e36de4a22ff49d08bf636f02ab4f3dd3d4c06a80c83a3308f546638994ddbf833cb51376ce18316f5fb750c0"}, {0x78, 0x10d, 0x1, "f176c4155bf7e8aa3cc857f43f394a4e155e16d22164a10b51edb0fe3afe46399109937fb2b4a39a206b3ce03b34c4cc2b54e1ad3ab8f47f80544ac3a21a7479464fcc3b43e83ee044b41adbc22517ca4056d80553aa4982e3305718445b1a2e0d"}], 0x160}, 0x4000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, 0x0) (async) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b, 0x8010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @jmp={0x5, 0x0, 0x2, 0x1, 0x2, 0xc, 0x1}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r7}, 0x38) (async) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="8900", 0x2}, {&(0x7f0000000640)="25b2", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x20004040) (async) close(0x3) (async) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r10, 0x0, 0x200002, 0x0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r7, 0x0, &(0x7f00000002c0)=""/187}, 0x20) recvmsg$kcm(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/72, 0x48}], 0x1, &(0x7f00000015c0)=""/130, 0x82}, 0x12063) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) perf_event_open$cgroup(&(0x7f0000001100)={0x2, 0x80, 0xb, 0x74, 0xfd, 0x3, 0x0, 0x3, 0x40, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x19dc0000, 0x0, @perf_config_ext={0x4, 0x1}, 0x105020, 0x8001, 0xd, 0x1, 0x7, 0x100, 0x4, 0x0, 0x6ce2, 0x0, 0x5}, r10, 0x10, r5, 0x1) (async) socket$kcm(0x10, 0x2, 0x10) close(0x3) 2.893141929s ago: executing program 2 (id=3078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth1_to_bridge\x00', @random="a81c0eb4c7d9"}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ipvlan0\x00', 0x100}) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000140)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}]}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='\x00') (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x29, 0xd6, &(0x7f00000001c0)="c8b038b36aeb74f7eab4b8d1aad2f2a9aae7504def8bf683c7ac95245c84a54e2c26fd9c1a8e58bcce", &(0x7f0000000200)=""/214, 0x3, 0x0, 0x29, 0xa3, &(0x7f0000000300)="01e4627520f31cd7d2520fdf06e2899a1e317ad90195633ff093448940cf37ac12082ac803bbaf45fa", &(0x7f0000000340)="6d5a8df84397b9877ffbc8c06e52497d29d327d6898849200bc1f9ea3b58365395b72384875f32883371d0a004bfa00d5e9b8620891292587a8f5ea0ccaf62b3e611f2f60b0c09e951f056884ba29c7e09b06398a553cdb2d587068890297b5fd5a69f80960ff1a21b129b7cedde17be3d071913230e683ee67f6306c8b3f1f8bf8db0dee292a04e661006f0b0f956bd053824ab2a12d1f3380e02a5d9ab2e0c4d4488", 0x0, 0x0, 0x4}, 0x50) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x12, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 64) r4 = openat$cgroup(r1, &(0x7f0000000600)='syz0\x00', 0x200002, 0x0) (rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup=r4, r1, 0x18, 0x0, 0x0, @void, @value=r1, @void, @void, r3}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000640)='*\x00') (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x4, 0x7, 0x4000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0xc}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x1b, &(0x7f0000000680)=@raw=[@generic={0x5, 0x5, 0x8, 0x5, 0xb}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000780)='syzkaller\x00', 0x3, 0xa4, &(0x7f00000007c0)=""/164, 0x40f00, 0x4, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000940)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0xc, 0x2c24d5b8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r2, r6, r2, r1, r2, r2], &(0x7f0000000a80)=[{0x5, 0x1, 0x9, 0x4}, {0x1, 0x5, 0x6, 0x3}], 0x10, 0x4}, 0x94) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000b80)) (async, rerun: 64) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0)={r1}, 0x8) (async, rerun: 64) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000c00)={'bond0\x00'}) (async, rerun: 64) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c40), 0x4) (rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000c80)={r8, r9, 0x0, r7}, 0x10) (async) r10 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) close(r10) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000cc0)=r5) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r6, 0x0, 0x0, 0x80, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0]}, 0x40) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000e40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x0, 0xde, 0x54, &(0x7f0000000e80)="84b613dc7cfc2ccfca1838e1f5ba22a7de5ae78602f5aeb0acb4835d0af5a44591894bd86eaa6042a87bd1f9ed19df9b71fb1437177544ce50d9fa5dba291ef325b7f618de88313cae4695ae26defbd85aa4e978005aef6a755c77c04edb4bc31a96a8876bf200f3e70087a04f265eeabb3590c0ccf52168dd843a922bf3e020eda9397c16bcb6fd8f7c9ea5e81c4e71e02c013dd944ee051840cb15d48994ca2452c2cb54d0f31c596de5b5ec3044013ad9e0646db27a38a92cf2be068e1f1a27f973865a372044600ee995e0863c67101d987edf0230a371ac37a2151c", &(0x7f0000000f80)=""/84, 0xc, 0x0, 0xcf, 0xb0, &(0x7f0000001000)="6b8922d7f549ec91a361be30b4f4cd7d4ac3a07b6e3a9fc3ed7044e0c8fc2dd36c72a1d460d1241710198dd3c6df79bd81f3b9ac066390b793de9b7de5b3b6ab8e6d7a2bd8ad1aa453543088f6b30b836c06167ccc681cef218eda8d0a761ce4f276cba3686b8c4660f03f98843c3d5ed331b5e180375725e9bdc91cdecd3ef5f576a3e85bee67100afbb1bc92dca0a466d181043963ff2ad805378da2772a5597f59b320af747a5d1815296b4f397da5335f33af146408f91d31731a703c7741efae4ca373e69a277d6e78637e68f", &(0x7f0000001100)="324604364e0d199a01b41bac5840ad6b0c1e4cb39d250ac75d5e4874af6c8b43df7ac211a05def6badab0a36dd3594c4f0d868d727b641af9e35e7c82b1f356d7b57d59e6256d4fe45532f3d85faa822674ac765c38e0094a025fe0c7c71da448aae793d37c392194ae82f84df8c1489ef91ca6a0314c0dad93e43f94b59e4ab42579b9d84552c63ebd4aa6489b9910e7469f72d6e1e952abacf82d570138513107781ec229f22dced6c674e547640c8", 0x8, 0x0, 0x7}, 0x50) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001240)={'netpci0\x00', @remote}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001280)={r11, r2}) (async, rerun: 32) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x2400, 0x4) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r8}, &(0x7f00000012c0), &(0x7f0000001300)=r7}, 0x20) 2.790337892s ago: executing program 3 (id=3079): socket$kcm(0x10, 0x5, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x61, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x889e, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000200, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x2000) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="1c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040844) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1410c0, 0x0) 2.779335702s ago: executing program 4 (id=3080): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffff, @multicast1}, 0x1, 0x3, 0xffff, 0x4}}, 0x80, 0x0}, 0x4048850) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x4, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x21) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x6}, 0x2000) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd28, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="39000000140081ae10003c0005000183110042702fdf236f1f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582b647d", 0x39}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random=' \x00'}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848340000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x19ffffff}, 0x48) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 2.592033057s ago: executing program 3 (id=3081): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x86) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x1b) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x28, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1001a8, 0x0, 0x0, 0x4, 0x0, 0x8, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="720ac9ff00210000711071000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000fcffffff000000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffca8, 0x0, &(0x7f0000000040), 0x3, 0x0, 0x40}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000300)="d2ff03076003008cb89e08f086ddeff9be34b6dae4a93a276032b785807d48097d74bddc47527f7f0851ee059c08006e1068ea961d36", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000000c0)=0x1) (async) socket$kcm(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0xe0, 0x7fff, @local, 0x48, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="b2", 0x1}], 0x1}, 0x30008041) 683.245853ms ago: executing program 2 (id=3082): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x902, 0x0, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 667.992884ms ago: executing program 0 (id=3083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1bb922e3ffffd595825e2dc089bc"], 0x48) socketpair(0x25, 0x1, 0x4, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB="0000000000000000080000000000000000000000db772c508573a643cce16749272eefa18a3ab20de461e8c3443db572bb7631d3d03d4c3c80b3fb779101db62db1d4b45f7723efd9f8a40ad260c13930df72f55e1fa7c6d7d7edb29c702f2919a5c9f917549fad6f9037f21a22b69919493d687b903b3dfcb9eafc194875123295918ad6d1c0895bc9aaf522332bd3c8591b0f89be2eeb228def8e5ae1a33", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) (async) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 475.958169ms ago: executing program 4 (id=3084): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x0, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42711, 0x0, 0x400004, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r2, 0x8) write$cgroup_int(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000a000000000000000300000018110000582464b6f08c6d7c29", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000635540000400000018230000", @ANYRES32=0x1, @ANYBLOB="00000000fcffffff95000000000000008520000001000000183300000500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x8000, 0x3b, &(0x7f0000000200)=""/59, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0xb, 0x2, 0xcbb}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x9}, {0x0, 0x5, 0xd, 0xb}, {0x4, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x9, 0x2}], 0x10, 0x901a}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="3e971d"], 0x9a) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="ff0700"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0300000005000000000000000200"/24, @ANYRES32=r6, @ANYBLOB], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) close(r8) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e000a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1967f6f94007134cff6d26efb8000a0ffa290457f01895416277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d25ccca95c9757c01deeb12c0e440f57d6cf23b1900360db7e5167fda40fad956d809d5e12a9ecbee5de6ccd40dd6e4edef3d93452a92950b0000000000000023f9a941000000000000000000007d59ef7e1359485303f720a1ed469c778f", 0xd8}], 0x1}, 0x804) 475.407959ms ago: executing program 3 (id=3085): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe46, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8000000000001, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000003280)=ANY=[], 0x38}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0xa421, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x5, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x37}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000280)={r0}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000240)=0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000a80)=ANY=[@ANYBLOB="18090000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095001d00000000004796b8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(r4, &(0x7f0000000540), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x46, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x61}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4, 0x10006}]}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 414.72042ms ago: executing program 0 (id=3086): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000"], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a1, &(0x7f0000000080)) 393.044671ms ago: executing program 2 (id=3087): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x1000, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 61.942428ms ago: executing program 3 (id=3088): close(0xffffffffffffffff) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffdf7, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x8ba, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x5, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000740)=r1}, 0x22) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b40)={@fallback=r6, 0x1e, 0x1, 0x100, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0]}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) 0s ago: executing program 2 (id=3089): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x28, 0x0, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x0, 0x100}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 96.268066][ T7453] netlink: 'syz.4.856': attribute type 3 has an invalid length. [ 296.359205][ T7453] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.856'. [ 297.627979][ T7504] netlink: 'syz.4.859': attribute type 10 has an invalid length. [ 297.761750][ T7502] netlink: 'syz.3.861': attribute type 3 has an invalid length. [ 297.855350][ T7502] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.861'. [ 301.168688][ T7520] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 302.456985][ T7542] netlink: 15918 bytes leftover after parsing attributes in process `syz.4.871'. [ 302.644012][ T7551] device syzkaller0 entered promiscuous mode [ 302.735576][ T7551] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 303.299691][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.878'. [ 303.341869][ T7581] netlink: 'syz.3.881': attribute type 21 has an invalid length. [ 303.355935][ T7582] netlink: 'syz.1.879': attribute type 3 has an invalid length. [ 303.393647][ T7582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.879'. [ 303.532089][ T7579] netlink: 'syz.0.882': attribute type 3 has an invalid length. [ 303.568964][ T7579] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.882'. [ 303.766558][ T7595] netlink: 'syz.3.886': attribute type 27 has an invalid length. [ 303.802746][ T7595] netlink: 'syz.3.886': attribute type 3 has an invalid length. [ 303.811217][ T7595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.886'. [ 304.569780][ T7617] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.598052][ T7617] netlink: 1 bytes leftover after parsing attributes in process `syz.4.891'. [ 304.878719][ T7623] netlink: 830 bytes leftover after parsing attributes in process `syz.2.893'. [ 305.837411][ T7648] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.901'. [ 305.906878][ T7656] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.903'. [ 306.878656][ T7683] netlink: 'syz.4.912': attribute type 3 has an invalid length. [ 306.888016][ T7683] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 306.898970][ T7683] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.912'. [ 307.729409][ T7716] netlink: 'syz.1.923': attribute type 21 has an invalid length. [ 307.739096][ T7716] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.972577][ T7724] netlink: 'syz.3.924': attribute type 29 has an invalid length. [ 308.226109][ T7724] netlink: 'syz.3.924': attribute type 29 has an invalid length. [ 310.581392][ T7733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.928'. [ 310.626303][ T7732] netlink: 128 bytes leftover after parsing attributes in process `syz.1.928'. [ 310.654068][ T7732] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 310.822991][ T7732] netlink: 128 bytes leftover after parsing attributes in process `syz.1.928'. [ 310.861422][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 310.904858][ T7732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.745614][ T7771] netlink: 'syz.4.940': attribute type 29 has an invalid length. [ 311.820411][ T7771] netlink: 'syz.4.940': attribute type 29 has an invalid length. [ 311.842707][ T7774] netlink: 'syz.4.940': attribute type 29 has an invalid length. [ 311.925146][ T7771] netlink: 'syz.4.940': attribute type 29 has an invalid length. [ 311.939664][ T7776] netlink: 763 bytes leftover after parsing attributes in process `syz.2.939'. [ 312.002173][ T7771] netlink: 'syz.4.940': attribute type 29 has an invalid length. [ 313.777399][ T7823] netlink: 'syz.0.954': attribute type 29 has an invalid length. [ 313.842136][ T7825] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 313.860823][ T7823] netlink: 'syz.0.954': attribute type 29 has an invalid length. [ 313.876798][ T7816] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.952'. [ 314.051589][ T7819] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.953'. [ 314.675703][ T7848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.960'. [ 314.725696][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.897222][ T7848] device bridge_slave_0 left promiscuous mode [ 314.920660][ T7848] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.264700][ T7862] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.965'. [ 315.408552][ T7864] tun0: tun_chr_ioctl cmd 1074812117 [ 317.594748][ T7909] device syzkaller0 entered promiscuous mode [ 321.897925][ T7976] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.996'. [ 322.153648][ T7987] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 322.302198][ T7990] netlink: 'syz.4.999': attribute type 3 has an invalid length. [ 322.321660][ T7990] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.999'. [ 322.371810][ T7987] device veth0_vlan left promiscuous mode [ 322.411324][ T7987] device veth0_vlan entered promiscuous mode [ 322.486853][ T7987] team0: Device veth0_vlan failed to register rx_handler [ 323.304329][ T7996] device syzkaller0 entered promiscuous mode [ 323.689003][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.695421][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.820645][ T8032] delete_channel: no stack [ 326.307570][ T8011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1006'. [ 326.317289][ T8020] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1009'. [ 326.332599][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.340759][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.753643][ T8048] netlink: 'syz.2.1018': attribute type 29 has an invalid length. [ 326.785597][ T8048] netlink: 'syz.2.1018': attribute type 29 has an invalid length. [ 326.907232][ T8052] pimreg: tun_chr_ioctl cmd 2147767511 [ 327.046378][ T8048] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1018'. [ 328.830659][ T8069] netlink: 'syz.4.1024': attribute type 21 has an invalid length. [ 328.903057][ T8069] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1024'. [ 330.294365][ T8102] device syzkaller0 entered promiscuous mode [ 331.929081][ T8114] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1037'. [ 331.942497][ T8117] netlink: 'syz.4.1038': attribute type 23 has an invalid length. [ 333.180021][ T8159] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 333.981463][ T8175] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 334.025476][ T8175] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1054'. [ 334.906637][ T8211] netlink: 'syz.2.1065': attribute type 21 has an invalid length. [ 334.957191][ T8211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1065'. [ 334.990441][ T8211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1065'. [ 335.055034][ T8213] netlink: 'syz.3.1063': attribute type 1 has an invalid length. [ 335.127143][ T8213] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1063'. [ 337.437063][ T8280] device syzkaller0 entered promiscuous mode [ 337.566876][ T8288] netlink: 'syz.3.1082': attribute type 2 has an invalid length. [ 338.137976][ T8287] device syzkaller0 entered promiscuous mode [ 338.204924][ T8298] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 338.230266][ T8298] syzkaller0: linktype set to 8 [ 340.206761][ T8316] netlink: 'syz.2.1089': attribute type 10 has an invalid length. [ 340.215042][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1089'. [ 340.228607][ T8336] netlink: 'syz.0.1093': attribute type 6 has an invalid length. [ 340.254130][ T8336] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1093'. [ 340.702964][ T8345] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1106'. [ 340.756563][ T8345] netlink: zone id is out of range [ 340.780509][ T8345] netlink: zone id is out of range [ 340.785854][ T8345] netlink: zone id is out of range [ 340.831254][ T8345] netlink: zone id is out of range [ 340.848598][ T8354] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1099'. [ 340.868526][ T8345] netlink: zone id is out of range [ 340.946719][ T8345] netlink: del zone limit has 4 unknown bytes [ 341.052850][ T8352] netlink: 'syz.2.1098': attribute type 3 has an invalid length. [ 341.079528][ T8352] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1098'. [ 341.216418][ T8366] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1102'. [ 341.432333][ T8376] netlink: 'syz.3.1107': attribute type 4 has an invalid length. [ 341.434337][ T8377] netlink: 'syz.4.1108': attribute type 20 has an invalid length. [ 341.465250][ T8376] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1107'. [ 341.553206][ T8382] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1108'. [ 341.575661][ T8382] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1108'. [ 341.601535][ T8377] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1108'. [ 342.644453][ T8404] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 342.656245][ T8404] dvmrp1: ignored: set checksum disabled [ 342.821838][ T8408] device wlan1 entered promiscuous mode [ 342.904220][ T8408] netlink: 'syz.4.1117': attribute type 3 has an invalid length. [ 344.079677][ T8451] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 344.088599][ T8451] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 344.104042][ T8451] netlink: 'syz.3.1130': attribute type 29 has an invalid length. [ 344.583534][ T8463] netlink: 'syz.1.1134': attribute type 3 has an invalid length. [ 345.539749][ T8500] netlink: 'syz.4.1145': attribute type 29 has an invalid length. [ 345.633985][ T8500] netlink: 'syz.4.1145': attribute type 29 has an invalid length. [ 346.762183][ T8528] netlink: 'syz.4.1153': attribute type 4 has an invalid length. [ 346.813736][ T8537] __nla_validate_parse: 2 callbacks suppressed [ 346.813753][ T8537] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1154'. [ 346.829549][ T8528] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1153'. [ 347.073253][ T8546] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1155'. [ 347.228074][ T8546] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 348.222682][ T8591] netlink: 'syz.0.1167': attribute type 3 has an invalid length. [ 348.253872][ T8591] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1167'. [ 348.685481][ T8643] netlink: 'syz.4.1174': attribute type 29 has an invalid length. [ 348.732071][ T8643] netlink: 'syz.4.1174': attribute type 29 has an invalid length. [ 348.801512][ T8650] netlink: 'syz.4.1174': attribute type 29 has an invalid length. [ 349.928423][ T8699] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1189'. [ 349.978327][ T8700] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1188'. [ 350.766368][ T8724] netlink: 'syz.2.1194': attribute type 29 has an invalid length. [ 350.792392][ T8724] netlink: 'syz.2.1194': attribute type 29 has an invalid length. [ 351.688041][ T8772] netlink: 'syz.4.1204': attribute type 10 has an invalid length. [ 351.773809][ T8772] device geneve0 entered promiscuous mode [ 351.865021][ T8772] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 352.172688][ T8790] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1209'. [ 352.477741][ T8800] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.1212'. [ 352.547448][ T8798] netlink: 198388 bytes leftover after parsing attributes in process `syz.3.1212'. [ 352.868887][ T8811] device sit0 entered promiscuous mode [ 353.381343][ T8830] netlink: 'syz.4.1221': attribute type 11 has an invalid length. [ 353.403550][ T8836] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 353.411136][ T8836] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 353.440769][ T8830] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1221'. [ 353.575465][ T8847] tipc: Started in network mode [ 353.597955][ T8847] tipc: Node identity 9215a268, cluster identity 4711 [ 353.606691][ T8847] tipc: Node number set to 2450891368 [ 353.632511][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.646865][ T8847] netlink: 'syz.0.1225': attribute type 2 has an invalid length. [ 353.654901][ T8847] netlink: 'syz.0.1225': attribute type 8 has an invalid length. [ 353.664738][ T8847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1225'. [ 354.001322][ T8866] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1229'. [ 355.134451][ T8870] device syzkaller0 entered promiscuous mode [ 357.847339][ T8879] netlink: 'syz.1.1233': attribute type 19 has an invalid length. [ 358.344536][ T8911] device syzkaller0 entered promiscuous mode [ 358.838059][ T8925] netlink: 'syz.3.1249': attribute type 21 has an invalid length. [ 358.920890][ T8925] netlink: 'syz.3.1249': attribute type 3 has an invalid length. [ 358.929032][ T8925] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1249'. [ 359.323663][ T8937] netlink: 'syz.1.1252': attribute type 29 has an invalid length. [ 359.447687][ T8937] netlink: 'syz.1.1252': attribute type 29 has an invalid length. [ 359.963289][ T8942] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1254'. [ 360.615029][ T8968] netlink: 'syz.0.1261': attribute type 3 has an invalid length. [ 360.719384][ T8968] netlink: 'syz.0.1261': attribute type 8 has an invalid length. [ 360.774477][ T8968] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1261'. [ 361.085086][ T8984] netlink: 'syz.3.1262': attribute type 3 has an invalid length. [ 361.129205][ T8984] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1262'. [ 361.908161][ T8996] netlink: 'syz.4.1267': attribute type 2 has an invalid length. [ 363.325112][ T8996] device 0 entered promiscuous mode [ 363.358093][ T9007] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1269'. [ 364.550350][ T9020] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1275'. [ 364.585035][ T9019] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1273'. [ 364.598867][ T9021] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1275'. [ 365.385045][ T9037] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1277'. [ 365.488848][ T9041] netlink: 'syz.1.1280': attribute type 2 has an invalid length. [ 365.577894][ T9047] netlink: 'syz.3.1281': attribute type 21 has an invalid length. [ 365.599943][ T9047] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.640502][ T9047] IPv6: Can't replace route, no match found [ 366.888415][ T9085] netlink: 'syz.3.1291': attribute type 22 has an invalid length. [ 366.930640][ T9085] netlink: 14526 bytes leftover after parsing attributes in process `syz.3.1291'. [ 369.290822][ T9110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1299'. [ 369.328904][ T9110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.846114][ T9156] netlink: 'syz.0.1310': attribute type 27 has an invalid length. [ 370.878246][ T9164] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1312'. [ 370.891776][ T9156] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1310'. [ 371.135426][ T9171] netlink: 'syz.2.1313': attribute type 15 has an invalid length. [ 371.553790][ T9191] netlink: 'syz.1.1320': attribute type 11 has an invalid length. [ 371.564000][ T9191] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1320'. [ 371.573924][ T9193] netlink: 'syz.2.1319': attribute type 13 has an invalid length. [ 371.583579][ T9192] netlink: 'syz.1.1320': attribute type 11 has an invalid length. [ 371.600086][ T9193] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1319'. [ 371.621288][ T9192] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1320'. [ 371.648597][ T9193] erspan0: refused to change device tx_queue_len [ 371.695195][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.441172][ T9226] netlink: 'syz.2.1330': attribute type 10 has an invalid length. [ 372.513659][ T9226] device netdevsim0 entered promiscuous mode [ 372.543766][ T9226] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 372.945092][ T9246] netlink: 'syz.1.1336': attribute type 17 has an invalid length. [ 372.967936][ T9246] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1336'. [ 373.008508][ T49] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 373.371679][ T9259] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1342'. [ 373.395721][ T9260] netlink: 'syz.0.1338': attribute type 4 has an invalid length. [ 373.413382][ T9259] bridge_slave_1: default FDB implementation only supports local addresses [ 373.426797][ T9260] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1338'. [ 374.417359][ T9289] tap0: tun_chr_ioctl cmd 1074025675 [ 374.467559][ T9289] tap0: persist disabled [ 374.586524][ T9295] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 374.621222][ T9295] netlink: 'syz.3.1349': attribute type 29 has an invalid length. [ 375.793042][ T9325] netlink: 'syz.1.1358': attribute type 10 has an invalid length. [ 376.588204][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1366'. [ 377.622141][ T9364] netlink: 'syz.4.1370': attribute type 2 has an invalid length. [ 377.653528][ T9364] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1370'. [ 377.736275][ T9366] netlink: 'syz.1.1371': attribute type 3 has an invalid length. [ 377.775135][ T9366] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1371'. [ 378.091772][ T9377] netlink: 'syz.2.1373': attribute type 6 has an invalid length. [ 378.130006][ T9377] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1373'. [ 378.178739][ T9382] netlink: 'syz.4.1375': attribute type 10 has an invalid length. [ 378.403048][ T9382] team0: Port device bridge0 added [ 378.698973][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 378.712212][ T9392] netlink: 'syz.0.1376': attribute type 4 has an invalid length. [ 378.734111][ T9392] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1376'. [ 379.999578][ T9429] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 380.066401][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.077688][ T9429] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.195645][ T9429] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.204171][ T9429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.214285][ T9429] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.222059][ T9429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.274182][ T9429] team0: Port device bridge0 added [ 380.284906][ T9442] netlink: 'syz.2.1390': attribute type 3 has an invalid length. [ 380.347852][ T9442] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1390'. [ 381.035001][ T9466] netlink: 'syz.4.1398': attribute type 10 has an invalid length. [ 381.324456][ T9466] team0: Port device bridge0 removed [ 381.344938][ T9466] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 381.675151][ T9487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1402'. [ 381.946848][ T9494] netlink: 26863 bytes leftover after parsing attributes in process `syz.4.1406'. [ 385.180531][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.186888][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.241905][ T9519] netlink: 'syz.1.1414': attribute type 29 has an invalid length. [ 385.284353][ T9519] netlink: 'syz.1.1414': attribute type 29 has an invalid length. [ 385.370596][ T9519] netlink: 'syz.1.1414': attribute type 29 has an invalid length. [ 385.607439][ T9548] netlink: 'syz.1.1421': attribute type 10 has an invalid length. [ 385.626778][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1421'. [ 385.697937][ T9550] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1422'. [ 385.698235][ T9548] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 385.803669][ T9552] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1421'. [ 386.230123][ T9566] netlink: 'syz.4.1428': attribute type 21 has an invalid length. [ 386.402378][ T9566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1428'. [ 386.421843][ T9565] netlink: 'syz.1.1427': attribute type 2 has an invalid length. [ 386.437182][ T9565] netlink: 'syz.1.1427': attribute type 8 has an invalid length. [ 386.445497][ T9565] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1427'. [ 386.875142][ T9583] netlink: 'syz.1.1432': attribute type 12 has an invalid length. [ 386.930319][ T9583] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1432'. [ 387.719122][ T9597] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1434'. [ 389.750044][ T9583] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1432'. [ 389.806658][ T9594] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 389.819683][ T9594] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1432'. [ 389.864315][ T9595] netlink: 'syz.3.1433': attribute type 10 has an invalid length. [ 389.884575][ T9595] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.891873][ T9595] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.007862][ T9595] team0: Port device bridge0 removed [ 390.023219][ T9595] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.030441][ T9595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.038095][ T9595] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.045291][ T9595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.072092][ T9595] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 390.120648][ T9605] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1436'. [ 390.381710][ T9617] validate_nla: 1 callbacks suppressed [ 390.381727][ T9617] netlink: 'syz.0.1438': attribute type 21 has an invalid length. [ 390.422224][ T9622] netlink: 'syz.3.1440': attribute type 21 has an invalid length. [ 390.954341][ T9632] netlink: 'syz.3.1444': attribute type 10 has an invalid length. [ 391.398667][ T9632] team0: Port device geneve1 added [ 391.712970][ T9646] netlink: 'syz.4.1447': attribute type 3 has an invalid length. [ 391.734695][ T9646] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1447'. [ 392.383411][ T9658] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 392.591853][ T9665] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1452'. [ 394.726403][ T9658] team0: Port device bridge0 removed [ 394.736556][ T9658] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.743796][ T9658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.751306][ T9658] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.758448][ T9658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.770571][ T9658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 395.786320][ T9685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1458'. [ 396.073732][ T9685] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1458'. [ 396.224370][ T9697] netlink: 'syz.2.1459': attribute type 2 has an invalid length. [ 396.283715][ T9697] netlink: 'syz.2.1459': attribute type 8 has an invalid length. [ 396.338385][ T9697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1459'. [ 396.365360][ T9711] netlink: 'syz.1.1464': attribute type 2 has an invalid length. [ 396.390574][ T9711] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 396.417622][ T9699] netlink: 'syz.2.1459': attribute type 2 has an invalid length. [ 396.452936][ T9699] netlink: 'syz.2.1459': attribute type 8 has an invalid length. [ 396.522584][ T9699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1459'. [ 396.687081][ T9716] tun0: tun_chr_ioctl cmd 1074812117 [ 397.726840][ T9726] netlink: 'syz.4.1466': attribute type 11 has an invalid length. [ 397.780382][ T9726] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1466'. [ 398.389242][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.396801][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.422338][ T9726] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1466'. [ 398.445248][ T9725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.485482][ T9726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.498167][ T9733] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1466'. [ 398.530174][ T9730] netlink: 'syz.4.1466': attribute type 10 has an invalid length. [ 398.616165][ T9730] team0: Device wg1 is of different type [ 399.065230][ T9743] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.1470'. [ 399.107057][ T9743] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.1470'. [ 399.160493][ T9743] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.1470'. [ 399.274972][ T49] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 399.357364][ T9761] netlink: 'syz.1.1475': attribute type 2 has an invalid length. [ 399.378574][ T9761] device 0 entered promiscuous mode [ 399.446778][ T9758] netlink: 134268 bytes leftover after parsing attributes in process `syz.0.1483'. [ 399.578040][ T9758] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 402.363966][ T9762] netlink: 'syz.0.1483': attribute type 5 has an invalid length. [ 402.389851][ T9762] netlink: 'syz.0.1483': attribute type 1 has an invalid length. [ 402.397694][ T9762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.444896][ T9773] netlink: 'syz.4.1478': attribute type 10 has an invalid length. [ 402.453895][ T9773] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1478'. [ 402.609968][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'. [ 402.667649][ T9792] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1481'. [ 403.186838][ T9805] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 403.204495][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.212193][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.240084][ T9805] __nla_validate_parse: 1 callbacks suppressed [ 403.240100][ T9805] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1486'. [ 404.276731][ T9820] device sit0 entered promiscuous mode [ 405.884587][ T9863] bridge0: port 3(hsr0) entered disabled state [ 405.891371][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.899262][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.043288][ T9863] device bridge0 left promiscuous mode [ 406.821417][ T9879] sctp: [Deprecated]: syz.0.1515 (pid 9879) Use of int in maxseg socket option. [ 406.821417][ T9879] Use struct sctp_assoc_value instead [ 407.092173][ T9890] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 407.171413][ T9890] pim6reg0: linktype set to 780 [ 410.153623][ T9924] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1520'. [ 410.204889][ T9930] netlink: 'syz.0.1521': attribute type 25 has an invalid length. [ 410.215200][ T9930] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 410.376470][ T9937] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 410.405455][ T9937] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 411.245746][ T9937] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 411.269384][ T9945] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1523'. [ 411.280671][ T9948] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 411.314369][ T9948] bond0: (slave bridge0): Releasing backup interface [ 411.369823][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.377508][ T9948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.386544][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.394226][ T9948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.549140][ T9948] team0: Port device bridge0 added [ 411.786045][ T9966] netlink: 'syz.3.1531': attribute type 10 has an invalid length. [ 412.880966][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.889015][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.187469][ T9966] bond0: (slave bridge0): Releasing backup interface [ 413.238525][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.246159][ T9966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.255160][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.262782][ T9966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.306126][ T9966] team0: Port device bridge0 added [ 413.365493][ T9987] netlink: 'syz.4.1537': attribute type 10 has an invalid length. [ 413.411630][ T9987] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1537'. [ 413.617513][ T49] Bluetooth: hci0: ISO packet for unknown connection handle 3372 [ 413.964469][ T9998] bond0: (slave bridge0): Releasing backup interface [ 414.139280][T10012] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1546'. [ 414.202805][T10013] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1546'. [ 414.667454][T10040] netlink: 'syz.4.1555': attribute type 29 has an invalid length. [ 414.692119][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 414.702314][T10039] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 414.714857][T10039] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1554'. [ 414.749451][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 414.773656][T10039] device wlan1 left promiscuous mode [ 414.853790][T10039] team0: Port device wlan1 added [ 415.226129][T10073] validate_nla: 2 callbacks suppressed [ 415.226145][T10073] netlink: 'syz.1.1565': attribute type 29 has an invalid length. [ 415.251142][T10073] netlink: 'syz.1.1565': attribute type 29 has an invalid length. [ 415.270403][T10076] netlink: 'syz.1.1565': attribute type 29 has an invalid length. [ 415.377058][T10073] netlink: 'syz.1.1565': attribute type 29 has an invalid length. [ 415.387289][T10076] netlink: 'syz.1.1565': attribute type 29 has an invalid length. [ 416.798426][T10134] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 416.837108][T10134] netlink: 'syz.0.1582': attribute type 2 has an invalid length. [ 416.864858][T10134] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1582'. [ 416.938468][T10132] -1: renamed from syzkaller0 [ 416.978717][T10135] netlink: 'syz.0.1582': attribute type 2 has an invalid length. [ 417.005979][T10135] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 417.915756][T10162] : port 1(ip6gretap0) entered blocking state [ 417.984332][T10162] : port 1(ip6gretap0) entered disabled state [ 418.005721][T10162] device ip6gretap0 entered promiscuous mode [ 418.108279][T10168] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1590'. [ 418.522709][T10187] netlink: 'syz.4.1596': attribute type 39 has an invalid length. [ 418.950088][T10190] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1596'. [ 419.146964][T10211] device wlan1 entered promiscuous mode [ 424.415805][T10244] validate_nla: 2 callbacks suppressed [ 424.415820][T10244] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 424.431758][T10244] device macvlan0 entered promiscuous mode [ 424.447177][T10244] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 424.523840][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1617'. [ 425.004880][T10281] device syzkaller0 entered promiscuous mode [ 425.213506][T10293] device bridge_slave_1 left promiscuous mode [ 425.265981][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.332457][T10293] device bridge_slave_0 left promiscuous mode [ 425.352060][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.447118][T10293] bond0: (slave bridge0): Releasing backup interface [ 426.627757][T10327] netlink: 'syz.3.1636': attribute type 11 has an invalid length. [ 426.656262][T10327] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1636'. [ 426.708270][T10327] netlink: 'syz.3.1636': attribute type 10 has an invalid length. [ 426.764488][T10338] netlink: 'syz.0.1639': attribute type 2 has an invalid length. [ 426.783298][T10327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 427.765199][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.818679][T10359] netlink: 'syz.2.1644': attribute type 7 has an invalid length. [ 429.843868][T10361] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1646'. [ 429.924028][T10364] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1647'. [ 431.422700][T10398] netlink: 35943 bytes leftover after parsing attributes in process `syz.2.1656'. [ 432.113853][T10421] netlink: 'syz.4.1661': attribute type 22 has an invalid length. [ 432.136317][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1661'. [ 432.154292][T10428] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 432.218480][T10428] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 432.241475][T10434] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 432.304344][T10434] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 432.334170][T10428] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 432.454201][T10434] device lo entered promiscuous mode [ 432.470107][T10434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 434.467638][T10456] netlink: 'syz.4.1669': attribute type 4 has an invalid length. [ 434.500019][T10456] netlink: 'syz.4.1669': attribute type 8 has an invalid length. [ 434.553589][T10456] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.1669'. [ 434.621420][T10450] netlink: 'syz.2.1668': attribute type 2 has an invalid length. [ 434.653929][T10456] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1669'. [ 434.976734][T10467] validate_nla: 1 callbacks suppressed [ 434.976748][T10467] netlink: 'syz.1.1671': attribute type 8 has an invalid length. [ 435.292923][T10484] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1675'. [ 435.736903][T10501] device pim6reg1 entered promiscuous mode [ 435.801425][T10497] netlink: 'syz.2.1676': attribute type 15 has an invalid length. [ 435.935729][T10497] netlink: 'syz.2.1676': attribute type 7 has an invalid length. [ 436.365520][T10517] sctp: [Deprecated]: syz.2.1684 (pid 10517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.365520][T10517] Use struct sctp_sack_info instead [ 436.509536][T10531] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1687'. [ 436.837883][T10543] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1691'. [ 437.046979][T10543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.108519][T10543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.191753][T10543] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 437.251569][T10543] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 437.317236][T10543] bond0 (unregistering): Released all slaves [ 437.381369][T10550] netlink: 'syz.1.1693': attribute type 27 has an invalid length. [ 437.389410][T10550] netlink: 'syz.1.1693': attribute type 4 has an invalid length. [ 437.432809][T10550] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1693'. [ 437.823585][T10589] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1702'. [ 437.976592][T10596] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 438.391581][T10608] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1709'. [ 438.435918][T10608] openvswitch: netlink: Message has 6 unknown bytes. [ 439.114525][T10629] device sit0 entered promiscuous mode [ 439.719728][T10652] netlink: 'syz.1.1721': attribute type 1 has an invalid length. [ 439.753334][T10652] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1721'. [ 440.445422][T10663] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1725'. [ 440.454711][T10666] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1727'. [ 440.871431][T10684] netlink: 'syz.3.1729': attribute type 3 has an invalid length. [ 440.880653][T10685] raw_sendmsg: syz.0.1733 forgot to set AF_INET. Fix it! [ 440.892381][T10685] netlink: 'syz.0.1733': attribute type 21 has an invalid length. [ 440.903629][T10684] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1729'. [ 440.930052][T10685] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1733'. [ 440.939161][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1733'. [ 440.961773][T10682] delete_channel: no stack [ 441.315821][T10697] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1737'. [ 441.669244][T10699] can: request_module (can-proto-0) failed. [ 441.764380][T10710] tap0: tun_chr_ioctl cmd 1074025677 [ 441.799957][T10710] tap0: linktype set to 1 [ 441.809665][T10712] netlink: 'syz.2.1741': attribute type 4 has an invalid length. [ 441.891362][T10712] netlink: 'syz.2.1741': attribute type 8 has an invalid length. [ 441.950276][T10712] netlink: 109560 bytes leftover after parsing attributes in process `syz.2.1741'. [ 442.055079][T10714] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1741'. [ 442.288025][T10728] netlink: 'syz.1.1744': attribute type 21 has an invalid length. [ 442.312811][T10728] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1744'. [ 442.347855][T10714] netlink: 'syz.2.1741': attribute type 17 has an invalid length. [ 443.374539][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1751'. [ 443.414290][T10746] tc_dump_action: action bad kind [ 443.983061][T10771] netlink: 'syz.4.1758': attribute type 10 has an invalid length. [ 444.006405][T10771] device wlan1 left promiscuous mode [ 444.414883][T10783] netlink: 'syz.4.1761': attribute type 3 has an invalid length. [ 444.525227][T10785] netlink: 'syz.3.1763': attribute type 4 has an invalid length. [ 444.555960][T10785] netlink: 'syz.3.1763': attribute type 8 has an invalid length. [ 444.769965][T10779] can: request_module (can-proto-4) failed. [ 446.561841][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.568273][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.960329][T10841] __nla_validate_parse: 3 callbacks suppressed [ 449.960349][T10841] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1775'. [ 450.095477][T10841] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 450.556217][T10859] validate_nla: 1 callbacks suppressed [ 450.556233][T10859] netlink: 'syz.4.1783': attribute type 29 has an invalid length. [ 450.587375][T10859] netlink: 'syz.4.1783': attribute type 29 has an invalid length. [ 450.649579][T10864] netlink: 'syz.4.1783': attribute type 29 has an invalid length. [ 450.845315][T10880] device lo entered promiscuous mode [ 450.897100][T10880] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 450.949373][T10884] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1790'. [ 451.270711][T10896] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1795'. [ 451.310629][T10894] netlink: 'syz.2.1793': attribute type 2 has an invalid length. [ 451.329037][T10894] netlink: 'syz.2.1793': attribute type 8 has an invalid length. [ 451.357659][T10894] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1793'. [ 452.943581][T10966] netlink: 'syz.2.1814': attribute type 7 has an invalid length. [ 453.934669][T10994] netlink: 'syz.0.1823': attribute type 3 has an invalid length. [ 453.949409][T10997] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1825'. [ 453.967263][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.967829][T10992] netlink: 'syz.1.1822': attribute type 3 has an invalid length. [ 453.977982][T10994] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 454.001423][T10998] netlink: 'syz.0.1823': attribute type 3 has an invalid length. [ 454.009337][T10998] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1823'. [ 454.022338][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.034187][T11000] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1822'. [ 454.043796][T10994] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1823'. [ 454.048541][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.087187][T10992] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1822'. [ 454.099149][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.128014][T10997] device batadv_slave_1 entered promiscuous mode [ 455.975234][T11033] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1833'. [ 456.012115][T11033] C: renamed from team_slave_0 [ 456.244227][T11047] netlink: 192156 bytes leftover after parsing attributes in process `syz.1.1834'. [ 456.284129][T11049] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1837'. [ 456.397051][T11056] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1839'. [ 456.440709][T11047] netlink: zone id is out of range [ 456.445158][T11055] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 456.446071][T11047] netlink: zone id is out of range [ 456.493030][T11056] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 456.540112][T11056] CPU: 0 PID: 11056 Comm: syz.0.1839 Not tainted syzkaller #0 [ 456.547671][T11056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.557800][T11056] Call Trace: [ 456.561151][T11056] [ 456.564155][T11056] dump_stack_lvl+0x188/0x24e [ 456.568997][T11056] ? show_regs_print_info+0x12/0x12 [ 456.574276][T11056] ? load_image+0x410/0x410 [ 456.578954][T11056] sysfs_warn_dup+0x8a/0xa0 [ 456.583569][T11056] sysfs_do_create_link_sd+0xc0/0x110 [ 456.589039][T11056] device_add+0x83b/0x1050 [ 456.593642][T11056] wiphy_register+0x1d8b/0x2aa0 [ 456.598755][T11056] ? cfg80211_event_work+0x40/0x40 [ 456.603952][T11056] ? minstrel_ht_alloc+0x894/0xa20 [ 456.609259][T11056] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 456.615466][T11056] ieee80211_register_hw+0x2d48/0x39f0 [ 456.621126][T11056] ? ieee80211_register_hw+0xee1/0x39f0 [ 456.626748][T11056] ? ieee80211_register_hw+0xee1/0x39f0 [ 456.632420][T11056] ? ieee80211_tasklet_handler+0x20/0x20 [ 456.638132][T11056] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 456.644170][T11056] ? __debug_object_init+0xed/0x440 [ 456.649572][T11056] ? memset+0x1e/0x40 [ 456.653699][T11056] ? __hrtimer_init+0x189/0x270 [ 456.658694][T11056] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 456.664616][T11056] ? memcpy+0x3c/0x60 [ 456.668716][T11056] hwsim_new_radio_nl+0xab7/0xc90 [ 456.673900][T11056] genl_family_rcv_msg_doit+0x22f/0x350 [ 456.679561][T11056] ? end_current_label_crit_section+0x170/0x170 [ 456.685963][T11056] ? trace_call_bpf+0xbf/0x6b0 [ 456.690892][T11056] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 456.696961][T11056] ? bpf_lsm_capable+0x5/0x10 [ 456.701782][T11056] ? security_capable+0x85/0xb0 [ 456.706836][T11056] genl_rcv_msg+0x601/0x790 [ 456.711484][T11056] ? genl_bind+0x360/0x360 [ 456.715979][T11056] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 456.722476][T11056] netlink_rcv_skb+0x1ef/0x440 [ 456.727394][T11056] ? genl_bind+0x360/0x360 [ 456.731913][T11056] ? netlink_ack+0x1160/0x1160 [ 456.736822][T11056] ? down_read+0x1a8/0x2d0 [ 456.741337][T11056] genl_rcv+0x24/0x40 [ 456.745398][T11056] netlink_unicast+0x7ad/0x920 [ 456.750324][T11056] netlink_sendmsg+0x8ad/0xbd0 [ 456.755207][T11056] ? netlink_getsockopt+0x550/0x550 [ 456.760493][T11056] ? apparmor_socket_sendmsg+0x8a/0x330 [ 456.766139][T11056] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 456.771503][T11056] ? security_socket_sendmsg+0x7c/0xa0 [ 456.777088][T11056] ? netlink_getsockopt+0x550/0x550 [ 456.782412][T11056] ____sys_sendmsg+0x5ed/0x9a0 [ 456.787370][T11056] ? __sys_sendmsg_sock+0x30/0x30 [ 456.792479][T11056] ? __import_iovec+0x306/0x510 [ 456.797508][T11056] ? import_iovec+0x6f/0xa0 [ 456.802125][T11056] ___sys_sendmsg+0x2a2/0x360 [ 456.806929][T11056] ? __sys_sendmsg+0x2a0/0x2a0 [ 456.812015][T11056] __se_sys_sendmsg+0x1c3/0x2b0 [ 456.816984][T11056] ? __x64_sys_sendmsg+0x80/0x80 [ 456.822106][T11056] ? lockdep_hardirqs_on+0x94/0x140 [ 456.827410][T11056] do_syscall_64+0x4c/0xa0 [ 456.831915][T11056] ? clear_bhb_loop+0x60/0xb0 [ 456.836733][T11056] ? clear_bhb_loop+0x60/0xb0 [ 456.841513][T11056] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.847491][T11056] RIP: 0033:0x7fb8eff9e0d9 [ 456.851994][T11056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.871677][T11056] RSP: 002b:00007fb8f0ebb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.880181][T11056] RAX: ffffffffffffffda RBX: 00007fb8f0225fa0 RCX: 00007fb8eff9e0d9 [ 456.888240][T11056] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 456.896285][T11056] RBP: 00007fb8f0035024 R08: 0000000000000000 R09: 0000000000000000 [ 456.904328][T11056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.912376][T11056] R13: 00007fb8f0226038 R14: 00007fb8f0225fa0 R15: 00007fff053770a8 [ 456.920506][T11056] [ 456.955672][T11047] netlink: zone id is out of range [ 456.991448][T11047] netlink: zone id is out of range [ 457.006261][T11047] netlink: zone id is out of range [ 457.113113][T11047] netlink: zone id is out of range [ 457.882476][T11085] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1846'. [ 458.166424][T11073] device syzkaller0 entered promiscuous mode [ 458.204648][T11080] validate_nla: 4 callbacks suppressed [ 458.204665][T11080] netlink: 'syz.4.1846': attribute type 27 has an invalid length. [ 458.232014][ T4285] syzkaller0: tun_net_xmit 48 [ 458.430440][T11097] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1848'. [ 458.449645][T11085] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 458.918224][ T49] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 459.135723][T11115] syz.3.1853[11115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.959917][ T49] Bluetooth: hci1: command 0x2016 tx timeout [ 461.241453][T11129] netlink: 'syz.0.1858': attribute type 3 has an invalid length. [ 461.250819][T11129] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 461.259034][T11129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1858'. [ 461.375365][T11120] netlink: 'syz.1.1854': attribute type 2 has an invalid length. [ 461.551912][T11120] device 1 entered promiscuous mode [ 463.268205][T11194] netlink: 'syz.3.1878': attribute type 17 has an invalid length. [ 463.301346][T11194] netlink: 'syz.3.1878': attribute type 16 has an invalid length. [ 463.314392][T11194] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1878'. [ 464.605134][T11220] netlink: 'syz.4.1884': attribute type 3 has an invalid length. [ 464.656731][T11220] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1884'. [ 467.478916][T11229] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 467.488382][T11244] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1890'. [ 467.499616][T11247] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1891'. [ 467.519637][T11250] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1891'. [ 467.529363][T11229] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 467.560430][T11229] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 467.706799][T11256] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1893'. [ 467.727558][T11256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.341040][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1900'. [ 469.359896][T11281] tc_dump_action: action bad kind [ 470.486782][T11322] netlink: 'syz.3.1911': attribute type 27 has an invalid length. [ 470.534789][T11322] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1911'. [ 471.600480][T11330] netlink: 'syz.4.1915': attribute type 39 has an invalid length. [ 472.134803][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1922'. [ 473.334723][T11376] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.1927'. [ 474.099917][T11379] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1928'. [ 474.277959][T11398] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1934'. [ 474.313577][T11398] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1934'. [ 474.374348][T11398] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1934'. [ 475.086019][T11435] netlink: 'syz.3.1946': attribute type 3 has an invalid length. [ 475.105478][T11432] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1945'. [ 475.142451][T11432] bridge: RTM_NEWNEIGH with invalid state 0x800 [ 475.419114][T11446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1949'. [ 476.915270][T11488] netlink: 'syz.0.1959': attribute type 2 has an invalid length. [ 476.950949][T11488] netlink: 'syz.0.1959': attribute type 4 has an invalid length. [ 476.990419][T11488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1959'. [ 478.265307][T11562] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1966'. [ 478.329060][T11562] openvswitch: netlink: Flow key attr not present in new flow. [ 478.406543][T11560] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 478.479022][T11560] team0: Port device geneve1 added [ 478.514556][T11562] netlink: 'syz.2.1966': attribute type 10 has an invalid length. [ 478.574438][T11562] device bridge_slave_1 left promiscuous mode [ 478.580997][T11562] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.593972][T11562] device bridge_slave_1 entered promiscuous mode [ 478.604643][T11562] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 478.779117][T11573] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 478.807882][T11573] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 478.818032][T11573] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 478.857255][T11573] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 478.887443][T11573] netlink: 'syz.0.1971': attribute type 29 has an invalid length. [ 479.230997][T11595] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.1977'. [ 479.263640][T11595] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 479.571043][T11612] netlink: 'syz.4.1981': attribute type 10 has an invalid length. [ 484.667403][T11673] validate_nla: 4 callbacks suppressed [ 484.667445][T11673] netlink: 'syz.1.2001': attribute type 9 has an invalid length. [ 484.739000][T11673] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.2001'. [ 485.600044][T11696] netlink: 'syz.3.2006': attribute type 2 has an invalid length. [ 485.607988][T11696] netlink: 'syz.3.2006': attribute type 4 has an invalid length. [ 485.661406][T11696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2006'. [ 486.185097][T11730] device syzkaller0 entered promiscuous mode [ 486.283048][T11732] netlink: 'syz.2.2017': attribute type 25 has an invalid length. [ 486.300880][T11732] netlink: 'syz.2.2017': attribute type 28 has an invalid length. [ 486.358688][T11732] netlink: 'syz.2.2017': attribute type 10 has an invalid length. [ 487.080727][T11753] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 487.148516][T11753] netlink: 'syz.4.2024': attribute type 4 has an invalid length. [ 487.194959][T11753] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2024'. [ 487.320571][T11760] netlink: 'syz.0.2025': attribute type 29 has an invalid length. [ 487.359512][T11760] netlink: 'syz.0.2025': attribute type 29 has an invalid length. [ 487.412758][T11760] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2025'. [ 487.500284][T11762] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2025'. [ 487.799379][T11775] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2032'. [ 488.065911][T11786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2035'. [ 488.917855][T11784] delete_channel: no stack [ 488.940012][T11784] delete_channel: no stack [ 489.357916][T11818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2043'. [ 489.393967][T11818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2043'. [ 489.627962][T11820] device syzkaller0 entered promiscuous mode [ 489.694832][T11818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2043'. [ 491.404424][T11849] validate_nla: 2 callbacks suppressed [ 491.404454][T11849] netlink: 'syz.1.2052': attribute type 3 has an invalid length. [ 491.451991][T11849] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2052'. [ 493.261163][T11852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2053'. [ 493.539260][T11873] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2057'. [ 493.985519][T11886] netlink: 'syz.3.2063': attribute type 10 has an invalid length. [ 494.032230][T11886] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2063'. [ 497.083118][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.154297][T11898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.482034][T11912] netlink: 'syz.2.2070': attribute type 3 has an invalid length. [ 497.530470][T11912] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2070'. [ 497.576350][T11914] netlink: 'syz.3.2073': attribute type 21 has an invalid length. [ 497.903361][T11923] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2075'. [ 498.103866][T11934] device sit0 left promiscuous mode [ 498.661655][T11952] netlink: 'syz.2.2082': attribute type 3 has an invalid length. [ 498.669453][T11952] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2082'. [ 498.787972][T11956] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 498.884328][T11956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.406805][T11978] FAULT_INJECTION: forcing a failure. [ 499.406805][T11978] name failslab, interval 1, probability 0, space 0, times 1 [ 499.423711][T11978] CPU: 0 PID: 11978 Comm: syz.2.2088 Not tainted syzkaller #0 [ 499.431224][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.441317][T11978] Call Trace: [ 499.444630][T11978] [ 499.447598][T11978] dump_stack_lvl+0x188/0x24e [ 499.452336][T11978] ? show_regs_print_info+0x12/0x12 [ 499.457586][T11978] ? load_image+0x410/0x410 [ 499.462184][T11978] ? __lock_acquire+0x7c40/0x7c40 [ 499.467337][T11978] should_fail_ex+0x390/0x4c0 [ 499.472177][T11978] should_failslab+0x5/0x20 [ 499.476791][T11978] slab_pre_alloc_hook+0x59/0x300 [ 499.481881][T11978] ? bpf_test_init+0x9f/0x140 [ 499.486604][T11978] __kmem_cache_alloc_node+0x4f/0x270 [ 499.492031][T11978] ? bpf_test_init+0x9f/0x140 [ 499.496752][T11978] __kmalloc+0xa3/0x240 [ 499.500955][T11978] ? __kmalloc+0xe4/0x240 [ 499.505336][T11978] bpf_test_init+0x9f/0x140 [ 499.509877][T11978] bpf_prog_test_run_xdp+0x488/0xf80 [ 499.515217][T11978] ? __lock_acquire+0x7c40/0x7c40 [ 499.520297][T11978] ? dev_put+0x80/0x80 [ 499.524416][T11978] ? dev_put+0x80/0x80 [ 499.528514][T11978] bpf_prog_test_run+0x31c/0x390 [ 499.533584][T11978] __sys_bpf+0x62b/0x780 [ 499.537873][T11978] ? bpf_link_show_fdinfo+0x380/0x380 [ 499.543311][T11978] ? lock_chain_count+0x20/0x20 [ 499.548230][T11978] __x64_sys_bpf+0x78/0x90 [ 499.552689][T11978] do_syscall_64+0x4c/0xa0 [ 499.557175][T11978] ? clear_bhb_loop+0x60/0xb0 [ 499.561935][T11978] ? clear_bhb_loop+0x60/0xb0 [ 499.566663][T11978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.572608][T11978] RIP: 0033:0x7ff276f9e0d9 [ 499.577102][T11978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.596773][T11978] RSP: 002b:00007ff277e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.605227][T11978] RAX: ffffffffffffffda RBX: 00007ff277226180 RCX: 00007ff276f9e0d9 [ 499.613239][T11978] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 499.621240][T11978] RBP: 00007ff277e95090 R08: 0000000000000000 R09: 0000000000000000 [ 499.629246][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.637244][T11978] R13: 00007ff277226218 R14: 00007ff277226180 R15: 00007fffa678fe78 [ 499.645271][T11978] [ 501.333478][T11983] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 501.698635][T11983] team0: Device wg1 is of different type [ 502.650239][T11999] device syzkaller0 entered promiscuous mode [ 502.707498][T11999] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 503.150361][T12034] sctp: [Deprecated]: syz.3.2099 (pid 12034) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.150361][T12034] Use struct sctp_sack_info instead [ 503.926052][T12069] netlink: 'syz.0.2109': attribute type 11 has an invalid length. [ 503.984941][T12069] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2109'. [ 504.016378][T12059] netlink: 'syz.2.2108': attribute type 16 has an invalid length. [ 504.030656][T12059] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2108'. [ 504.065161][T12059] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 504.101520][T12073] netlink: 'syz.1.2112': attribute type 29 has an invalid length. [ 504.187054][T12073] netlink: 'syz.1.2112': attribute type 29 has an invalid length. [ 505.315863][T12111] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 505.578888][T12116] netlink: 'syz.3.2125': attribute type 2 has an invalid length. [ 505.610795][T12116] netlink: 'syz.3.2125': attribute type 8 has an invalid length. [ 505.639454][T12116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2125'. [ 505.724291][T12121] netlink: 'syz.3.2125': attribute type 2 has an invalid length. [ 505.759940][T12121] netlink: 'syz.3.2125': attribute type 8 has an invalid length. [ 505.779956][T12121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2125'. [ 506.866551][T12173] mac80211_hwsim hwsim10 ªªªªªª: renamed from wlan0 [ 506.965737][T12168] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2140'. [ 506.991950][T12177] netlink: 'syz.0.2140': attribute type 10 has an invalid length. [ 507.009940][T12177] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2140'. [ 507.103893][T12182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2143'. [ 507.225657][T12184] netlink: 'syz.1.2144': attribute type 8 has an invalid length. [ 507.262387][T12184] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2144'. [ 507.608546][T12195] netlink: 'syz.2.2150': attribute type 9 has an invalid length. [ 507.668105][T12195] netlink: 355 bytes leftover after parsing attributes in process `syz.2.2150'. [ 508.166247][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.172757][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.306456][T12209] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2153'. [ 511.364434][T12236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2159'. [ 511.546834][T12240] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2161'. [ 512.092492][T12271] validate_nla: 1 callbacks suppressed [ 512.092508][T12271] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 512.135879][T12271] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 512.166423][T12274] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 512.366560][T12277] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 512.386908][T12277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2173'. [ 512.473917][T12277] batman_adv: batadv0: Adding interface: vlan1 [ 512.500356][T12277] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.570601][T12277] batman_adv: batadv0: Interface activated: vlan1 [ 512.623904][T12293] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2177'. [ 512.762769][T12300] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 512.832374][T12300] team0: Device wg1 is of different type [ 513.135116][T12298] netlink: 'syz.0.2180': attribute type 10 has an invalid length. [ 513.232417][T12298] team0: Device wg1 is of different type [ 513.750817][T12349] netlink: 'syz.2.2193': attribute type 9 has an invalid length. [ 513.803491][T12349] netlink: 'syz.2.2193': attribute type 21 has an invalid length. [ 513.834135][T12349] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2193'. [ 514.146948][T12363] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2195'. [ 515.959407][T12408] netlink: 63219 bytes leftover after parsing attributes in process `syz.1.2207'. [ 516.006694][T12411] netlink: 'syz.0.2209': attribute type 29 has an invalid length. [ 516.023982][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2207'. [ 516.037320][T12411] netlink: 'syz.0.2209': attribute type 29 has an invalid length. [ 516.631846][T12421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2213'. [ 516.977135][T12433] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2217'. [ 517.580059][T12453] validate_nla: 1 callbacks suppressed [ 517.580076][T12453] netlink: 'syz.1.2222': attribute type 21 has an invalid length. [ 517.633243][T12453] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2222'. [ 517.786479][T12460] device vxcan1 entered promiscuous mode [ 517.807916][T12460] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 518.679560][T12486] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2232'. [ 519.050005][T12501] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2235'. [ 519.533654][T12510] netlink: 'syz.1.2239': attribute type 11 has an invalid length. [ 519.560362][T12510] netlink: 'syz.1.2239': attribute type 11 has an invalid length. [ 519.576319][T12510] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2239'. [ 519.783955][T12517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2240'. [ 520.431715][T12533] netlink: 'syz.2.2246': attribute type 3 has an invalid length. [ 520.494270][T12533] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2246'. [ 520.754695][T12539] netlink: 'syz.3.2249': attribute type 10 has an invalid length. [ 520.819167][T12539] team0: Device vxcan1 is of different type [ 520.871917][T12543] netlink: 'syz.0.2250': attribute type 15 has an invalid length. [ 520.891021][T12543] netlink: 'syz.0.2250': attribute type 7 has an invalid length. [ 521.439315][T12569] __nla_validate_parse: 1 callbacks suppressed [ 521.439335][T12569] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2257'. [ 521.564914][T12567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2257'. [ 521.592795][T12566] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2257'. [ 521.612817][T12566] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 521.653455][T12568] netlink: 63219 bytes leftover after parsing attributes in process `syz.3.2258'. [ 521.701192][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 522.219315][T12576] netlink: 'syz.4.2259': attribute type 15 has an invalid length. [ 522.228372][T12576] netlink: 'syz.4.2259': attribute type 7 has an invalid length. [ 522.236989][T12576] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2259'. [ 522.459134][T12581] bridge0: port 3(veth1) entered blocking state [ 522.474005][T12581] bridge0: port 3(veth1) entered disabled state [ 522.568752][T12581] device veth1 entered promiscuous mode [ 522.664495][T12581] bridge0: port 3(veth1) entered blocking state [ 522.671300][T12581] bridge0: port 3(veth1) entered forwarding state [ 523.126349][T12603] netlink: 'syz.4.2266': attribute type 33 has an invalid length. [ 523.134471][T12603] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2266'. [ 523.816631][T12632] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2275'. [ 523.831648][T12630] netlink: 'syz.0.2276': attribute type 4 has an invalid length. [ 523.849411][T12630] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2276'. [ 524.526783][T12648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2281'. [ 525.008389][T12675] netlink: 'syz.1.2290': attribute type 3 has an invalid length. [ 525.047732][T12675] netlink: 'syz.1.2290': attribute type 1 has an invalid length. [ 525.081839][T12672] netlink: 'syz.0.2289': attribute type 21 has an invalid length. [ 525.100760][T12672] netlink: 'syz.0.2289': attribute type 1 has an invalid length. [ 525.463152][T12689] netlink: 'syz.0.2294': attribute type 2 has an invalid length. [ 525.480216][T12689] netlink: 'syz.0.2294': attribute type 1 has an invalid length. [ 525.605630][T12706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.223555][T12734] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 526.279589][T12734] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 526.301153][T12734] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 526.645089][T12745] __nla_validate_parse: 6 callbacks suppressed [ 526.645104][T12745] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2311'. [ 527.208304][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 527.214222][T12764] device syzkaller0 entered promiscuous mode [ 527.271767][T12762] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 531.476805][T12827] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 531.609430][T12827] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2334'. [ 531.612159][T12848] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 531.715801][T12848] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2340'. [ 531.882864][T12856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.890619][T12856] IPv6: NLM_F_CREATE should be set when creating new route [ 531.898942][T12856] IPv6: NLM_F_CREATE should be set when creating new route [ 531.954411][T12856] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 531.964795][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2342'. [ 532.225466][T12873] netlink: 'syz.3.2347': attribute type 7 has an invalid length. [ 532.269219][T12873] netlink: 'syz.3.2347': attribute type 10 has an invalid length. [ 533.004792][T12891] can: request_module (can-proto-0) failed. [ 535.833433][T12913] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2360'. [ 536.079469][T12918] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 536.088730][T12914] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2359'. [ 536.112956][T12918] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2362'. [ 536.468541][T12940] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2368'. [ 536.485970][T12940] openvswitch: netlink: Message has 6 unknown bytes. [ 537.872052][T12970] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2375'. [ 538.477143][T13008] netlink: 'syz.4.2380': attribute type 4 has an invalid length. [ 538.523276][T13008] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2380'. [ 539.439994][T13019] netlink: 'syz.0.2389': attribute type 21 has an invalid length. [ 539.447898][T13019] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2389'. [ 540.180874][T13036] device syzkaller0 entered promiscuous mode [ 540.207230][T13036] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 540.233602][T13036] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2394'. [ 540.334635][T13040] netlink: 'syz.1.2393': attribute type 10 has an invalid length. [ 540.349615][T13040] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2393'. [ 540.736639][T13043] netlink: 'syz.2.2395': attribute type 1 has an invalid length. [ 540.755160][T13043] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2395'. [ 541.671166][T13047] netlink: 'syz.0.2396': attribute type 27 has an invalid length. [ 541.843844][T13047] bond0: (slave bond_slave_0): Releasing backup interface [ 541.990011][T13066] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2399'. [ 542.925632][T13082] netlink: 'syz.2.2404': attribute type 10 has an invalid length. [ 543.471674][T13094] netlink: 'syz.4.2406': attribute type 2 has an invalid length. [ 543.517759][T13094] netlink: 'syz.4.2406': attribute type 1 has an invalid length. [ 543.558563][T13094] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2406'. [ 544.140814][T13106] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.2411'. [ 544.337530][T13111] netlink: 'syz.0.2413': attribute type 7 has an invalid length. [ 544.528246][T13112] netlink: 'syz.0.2413': attribute type 40 has an invalid length. [ 545.669228][T13119] netlink: 'syz.4.2415': attribute type 21 has an invalid length. [ 545.738736][T13119] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2415'. [ 547.275226][T13134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2420'. [ 547.685877][T13141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2423'. [ 547.740951][T13144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2423'. [ 547.858624][T13144] device hsr_slave_0 left promiscuous mode [ 547.881880][T13144] device hsr_slave_1 left promiscuous mode [ 548.065968][T13147] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2421'. [ 548.125609][T13153] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2423'. [ 548.527649][T13165] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.2427'. [ 548.647121][T13165] openvswitch: netlink: Flow actions attr not present in new flow. [ 549.408640][T13181] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 549.461589][T13181] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.558335][T13181] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.613528][T13181] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.696712][T13181] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.912161][T13181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.922640][T13181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.934557][T13181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.980754][T13181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.050576][T13181] team0: Port device geneve1 added [ 550.095189][T13197] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2437'. [ 550.144499][T13204] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2438'. [ 550.867208][T13210] device syzkaller0 entered promiscuous mode [ 551.222404][T13231] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2447'. [ 554.323126][T13237] netlink: 'syz.1.2447': attribute type 3 has an invalid length. [ 554.331223][T13237] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2447'. [ 554.341593][T13247] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 554.446398][T13257] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2454'. [ 554.609666][T13264] netlink: 'syz.0.2457': attribute type 27 has an invalid length. [ 554.630420][T13264] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2457'. [ 554.667398][T13264] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 554.714352][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 554.736195][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 554.782846][T13270] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 554.814039][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2456'. [ 557.815113][T13311] device syzkaller0 entered promiscuous mode [ 558.714367][T13346] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2466'. [ 560.241849][T13341] device batadv0 entered promiscuous mode [ 560.416852][T13358] netlink: 'syz.4.2477': attribute type 33 has an invalid length. [ 560.432959][T13358] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2477'. [ 560.507528][T13366] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2479'. [ 560.562390][T13366] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 560.607967][T13366] CPU: 0 PID: 13366 Comm: syz.3.2479 Not tainted syzkaller #0 [ 560.615477][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 560.625546][T13366] Call Trace: [ 560.628832][T13366] [ 560.631777][T13366] dump_stack_lvl+0x188/0x24e [ 560.636491][T13366] ? show_regs_print_info+0x12/0x12 [ 560.641735][T13366] ? load_image+0x410/0x410 [ 560.646304][T13366] sysfs_warn_dup+0x8a/0xa0 [ 560.650841][T13366] sysfs_do_create_link_sd+0xc0/0x110 [ 560.656231][T13366] device_add+0x83b/0x1050 [ 560.660688][T13366] wiphy_register+0x1d8b/0x2aa0 [ 560.665574][T13366] ? cfg80211_event_work+0x40/0x40 [ 560.670719][T13366] ? minstrel_ht_alloc+0x894/0xa20 [ 560.675856][T13366] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 560.681944][T13366] ieee80211_register_hw+0x2d48/0x39f0 [ 560.687439][T13366] ? ieee80211_register_hw+0xee1/0x39f0 [ 560.693018][T13366] ? ieee80211_register_hw+0xee1/0x39f0 [ 560.698593][T13366] ? ieee80211_tasklet_handler+0x20/0x20 [ 560.704238][T13366] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 560.710158][T13366] ? __debug_object_init+0xed/0x440 [ 560.715384][T13366] ? memset+0x1e/0x40 [ 560.719376][T13366] ? __hrtimer_init+0x189/0x270 [ 560.724248][T13366] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 560.730004][T13366] ? memcpy+0x3c/0x60 [ 560.734018][T13366] hwsim_new_radio_nl+0xab7/0xc90 [ 560.739081][T13366] genl_family_rcv_msg_doit+0x22f/0x350 [ 560.744646][T13366] ? end_current_label_crit_section+0x170/0x170 [ 560.750948][T13366] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 560.756869][T13366] ? bpf_lsm_capable+0x5/0x10 [ 560.761566][T13366] ? security_capable+0x85/0xb0 [ 560.766448][T13366] genl_rcv_msg+0x601/0x790 [ 560.770973][T13366] ? genl_bind+0x360/0x360 [ 560.775410][T13366] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 560.781780][T13366] netlink_rcv_skb+0x1ef/0x440 [ 560.786574][T13366] ? genl_bind+0x360/0x360 [ 560.791007][T13366] ? netlink_ack+0x1160/0x1160 [ 560.795806][T13366] ? down_read+0x1a8/0x2d0 [ 560.800231][T13366] genl_rcv+0x24/0x40 [ 560.804226][T13366] netlink_unicast+0x7ad/0x920 [ 560.809025][T13366] netlink_sendmsg+0x8ad/0xbd0 [ 560.813820][T13366] ? netlink_getsockopt+0x550/0x550 [ 560.819068][T13366] ? apparmor_socket_sendmsg+0x8a/0x330 [ 560.824639][T13366] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 560.829938][T13366] ? security_socket_sendmsg+0x7c/0xa0 [ 560.835415][T13366] ? netlink_getsockopt+0x550/0x550 [ 560.840635][T13366] ____sys_sendmsg+0x5ed/0x9a0 [ 560.845443][T13366] ? __sys_sendmsg_sock+0x30/0x30 [ 560.850496][T13366] ? __import_iovec+0x306/0x510 [ 560.855373][T13366] ? import_iovec+0x6f/0xa0 [ 560.859906][T13366] ___sys_sendmsg+0x2a2/0x360 [ 560.864627][T13366] ? __sys_sendmsg+0x2a0/0x2a0 [ 560.869446][T13366] __se_sys_sendmsg+0x1c3/0x2b0 [ 560.874325][T13366] ? ct_nmi_exit+0x145/0x1c0 [ 560.878944][T13366] ? __x64_sys_sendmsg+0x80/0x80 [ 560.883924][T13366] ? lockdep_hardirqs_on+0x94/0x140 [ 560.889148][T13366] do_syscall_64+0x4c/0xa0 [ 560.893588][T13366] ? clear_bhb_loop+0x60/0xb0 [ 560.898288][T13366] ? clear_bhb_loop+0x60/0xb0 [ 560.902983][T13366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.908895][T13366] RIP: 0033:0x7ff5a539e0d9 [ 560.913321][T13366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.933030][T13366] RSP: 002b:00007ff5a631f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.941459][T13366] RAX: ffffffffffffffda RBX: 00007ff5a5625fa0 RCX: 00007ff5a539e0d9 [ 560.949442][T13366] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 560.957423][T13366] RBP: 00007ff5a5435024 R08: 0000000000000000 R09: 0000000000000000 [ 560.965404][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.973383][T13366] R13: 00007ff5a5626038 R14: 00007ff5a5625fa0 R15: 00007ffeffc07a38 [ 560.981378][T13366] [ 563.481694][T13457] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2502'. [ 565.720692][T13482] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 565.759520][T13482] netlink: 'syz.2.2507': attribute type 8 has an invalid length. [ 565.781688][T13482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2507'. [ 565.823382][T13479] device pim6reg1 entered promiscuous mode [ 565.840709][T13484] netlink: 'syz.2.2507': attribute type 2 has an invalid length. [ 565.848689][T13484] netlink: 'syz.2.2507': attribute type 8 has an invalid length. [ 565.871745][T13484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2507'. [ 566.216147][T13504] netlink: 'syz.3.2514': attribute type 21 has an invalid length. [ 566.244815][T13504] netlink: 'syz.3.2514': attribute type 1 has an invalid length. [ 566.271606][T13504] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2514'. [ 566.315465][T13513] IPv6: Can't replace route, no match found [ 567.435906][T13536] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2522'. [ 567.490051][T13536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.586543][T13534] netlink: 'syz.4.2523': attribute type 16 has an invalid length. [ 567.598634][T13534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2523'. [ 567.733117][T13534] netlink: 'syz.4.2523': attribute type 10 has an invalid length. [ 567.763354][T13531] delete_channel: no stack [ 568.377601][T13565] sctp: [Deprecated]: syz.1.2532 (pid 13565) Use of int in max_burst socket option deprecated. [ 568.377601][T13565] Use struct sctp_assoc_value instead [ 568.633210][T13562] device syzkaller0 entered promiscuous mode [ 568.672876][T13565] device netdevsim0 entered promiscuous mode [ 568.708792][T13574] netlink: 'syz.2.2534': attribute type 3 has an invalid length. [ 568.720568][T13574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2534'. [ 569.259304][T13601] delete_channel: no stack [ 569.274747][T13601] delete_channel: no stack [ 569.443510][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.450079][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.049644][T13608] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2543'. [ 571.099840][T13609] netlink: 'syz.2.2543': attribute type 10 has an invalid length. [ 571.117462][T13609] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2543'. [ 571.212536][ T8605] tipc: Subscription rejected, illegal request [ 571.236947][T13614] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 571.292276][T13614] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 571.343127][T13614] delete_channel: no stack [ 571.347660][T13614] delete_channel: no stack [ 571.419669][T13624] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 571.483324][T13614] netlink: 'syz.3.2545': attribute type 29 has an invalid length. [ 571.988912][T13657] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2556'. [ 574.702524][T13672] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 574.727672][T13672] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2561'. [ 574.762059][T13672] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 574.904330][T13683] netlink: 'syz.1.2564': attribute type 2 has an invalid length. [ 574.929503][T13683] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2564'. [ 575.420734][T13704] netlink: 'syz.3.2570': attribute type 39 has an invalid length. [ 576.153402][T13726] netlink: 'syz.2.2574': attribute type 3 has an invalid length. [ 576.169096][T13722] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 576.172175][T13715] netlink: 'syz.2.2574': attribute type 3 has an invalid length. [ 576.191890][T13722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2576'. [ 576.241998][T13722] device team0 entered promiscuous mode [ 576.248349][T13722] device team_slave_1 entered promiscuous mode [ 576.287182][T13715] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2574'. [ 576.297174][T13722] device geneve1 entered promiscuous mode [ 576.316643][T13731] netlink: 105 bytes leftover after parsing attributes in process `syz.1.2577'. [ 576.327348][T13726] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2574'. [ 576.352789][T13730] netlink: 'syz.3.2576': attribute type 3 has an invalid length. [ 576.362786][T13722] device bridge0 entered promiscuous mode [ 576.375482][T13722] bridge0: port 3(team0) entered blocking state [ 576.383221][T13730] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2576'. [ 576.397249][T13722] bridge0: port 3(team0) entered disabled state [ 576.425301][T13722] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.441627][T13728] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 576.985098][T13743] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2580'. [ 577.064200][T13752] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2582'. [ 577.465451][T13757] netlink: 'syz.2.2583': attribute type 2 has an invalid length. [ 577.484649][T13757] netlink: 'syz.2.2583': attribute type 8 has an invalid length. [ 577.504910][T13757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2583'. [ 577.677177][T13767] netlink: 'syz.0.2586': attribute type 2 has an invalid length. [ 577.718028][T13767] netlink: 'syz.0.2586': attribute type 1 has an invalid length. [ 577.739924][T13767] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.2586'. [ 577.936364][T13775] sctp: [Deprecated]: syz.3.2588 (pid 13775) Use of int in max_burst socket option deprecated. [ 577.936364][T13775] Use struct sctp_assoc_value instead [ 578.344501][T13788] netlink: 'syz.3.2594': attribute type 1 has an invalid length. [ 578.380184][T13788] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2594'. [ 582.162769][T13810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2600'. [ 582.188144][T13810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2600'. [ 582.217327][T13812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2600'. [ 582.239572][T13810] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2600'. [ 582.397728][T13818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2602'. [ 582.465964][T13818] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2602'. [ 583.467243][T13838] netlink: 'syz.4.2607': attribute type 1 has an invalid length. [ 583.495134][T13838] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2607'. [ 583.825980][T13859] netlink: 'syz.0.2613': attribute type 10 has an invalid length. [ 583.842138][T13859] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2613'. [ 583.857106][T13856] tap0: tun_chr_ioctl cmd 1074025677 [ 583.864698][T13856] tap0: linktype set to 769 [ 584.328323][T13873] netlink: 'syz.2.2619': attribute type 10 has an invalid length. [ 584.564860][T13883] netlink: 'syz.0.2618': attribute type 3 has an invalid length. [ 584.587609][T13874] netlink: 'syz.0.2618': attribute type 3 has an invalid length. [ 584.626446][T13883] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2618'. [ 584.636655][T13874] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2618'. [ 584.714787][T13887] netlink: 'syz.3.2621': attribute type 1 has an invalid length. [ 584.768831][T13876] netlink: 'syz.1.2617': attribute type 10 has an invalid length. [ 584.782899][T13876] device team0 entered promiscuous mode [ 584.791126][T13876] device team_slave_0 entered promiscuous mode [ 584.831952][T13876] device team_slave_1 entered promiscuous mode [ 584.887841][T13896] netlink: 'syz.1.2617': attribute type 3 has an invalid length. [ 584.934385][T13876] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 584.999457][T13880] netlink: 'syz.1.2617': attribute type 10 has an invalid length. [ 585.083907][T13894] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 585.306801][T13906] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 587.764928][T13990] __nla_validate_parse: 9 callbacks suppressed [ 587.764948][T13990] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2644'. [ 587.907174][T13992] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2647'. [ 588.049007][T13999] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2648'. [ 588.742125][T14015] validate_nla: 7 callbacks suppressed [ 588.742144][T14015] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 589.481020][T14036] netlink: 'syz.2.2658': attribute type 3 has an invalid length. [ 589.489008][T14036] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2658'. [ 590.610181][T14053] netlink: 'syz.3.2665': attribute type 29 has an invalid length. [ 590.655400][T14053] netlink: 'syz.3.2665': attribute type 29 has an invalid length. [ 590.696158][T14057] netlink: 'syz.3.2665': attribute type 29 has an invalid length. [ 591.372650][T14067] netlink: 'syz.3.2668': attribute type 21 has an invalid length. [ 591.400201][T14067] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 591.551726][T14069] netlink: 'syz.3.2668': attribute type 21 has an invalid length. [ 592.508693][T14080] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2671'. [ 593.726515][T14103] netlink: 'syz.0.2677': attribute type 3 has an invalid length. [ 593.787239][T14103] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2677'. [ 593.875053][T14114] netlink: 'syz.4.2682': attribute type 1 has an invalid length. [ 594.347491][T14125] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2685'. [ 594.400299][T14125] device hsr_slave_0 left promiscuous mode [ 594.442154][T14125] device hsr_slave_1 left promiscuous mode [ 595.836486][T14177] netlink: 'syz.3.2699': attribute type 13 has an invalid length. [ 595.860064][T14177] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2699'. [ 595.898449][T14177] erspan0: refused to change device tx_queue_len [ 595.939319][T14177] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 596.277455][T14193] delete_channel: no stack [ 596.472523][T14201] netlink: 'syz.2.2705': attribute type 3 has an invalid length. [ 596.509808][T14201] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.2705'. [ 596.817130][T14218] netlink: 'syz.3.2709': attribute type 2 has an invalid length. [ 596.836463][T14218] netlink: 'syz.3.2709': attribute type 1 has an invalid length. [ 596.915924][T14218] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2709'. [ 598.056780][T14240] netlink: 'syz.0.2716': attribute type 2 has an invalid length. [ 598.082195][T14240] netlink: 'syz.0.2716': attribute type 11 has an invalid length. [ 598.099632][T14240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2716'. [ 598.126533][T14242] netlink: 'syz.2.2715': attribute type 6 has an invalid length. [ 598.147687][T14242] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.2715'. [ 598.902690][ T49] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 598.970306][T14266] netlink: 'syz.3.2720': attribute type 21 has an invalid length. [ 599.418247][T14274] netlink: 'syz.2.2726': attribute type 10 has an invalid length. [ 599.464520][T14274] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2726'. [ 599.529481][T14274] batman_adv: batadv0: Interface deactivated: vlan1 [ 599.674612][T14281] netlink: 'syz.4.2728': attribute type 3 has an invalid length. [ 599.749689][T14281] netlink: 'syz.4.2728': attribute type 1 has an invalid length. [ 599.785986][T14281] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2728'. [ 599.812450][T14283] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 599.852956][T14274] batman_adv: batadv0: Removing interface: vlan1 [ 599.928095][T14279] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2728'. [ 600.561148][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'. [ 600.713723][T14311] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.2737'. [ 601.211987][T14327] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2741'. [ 601.276940][T14327] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 601.601135][T14351] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2747'. [ 601.917346][T14369] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2755'. [ 601.938212][T14369] device vlan0 entered promiscuous mode [ 603.023993][T14420] device syzkaller0 entered promiscuous mode [ 603.047484][T14423] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2768'. [ 603.098052][T14423] netlink: 'syz.3.2768': attribute type 3 has an invalid length. [ 603.126440][T14423] netlink: 'syz.3.2768': attribute type 1 has an invalid length. [ 603.163521][T14423] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2768'. [ 603.334342][T14446] netlink: 'syz.4.2774': attribute type 10 has an invalid length. [ 603.349964][T14446] netlink: 'syz.4.2774': attribute type 19 has an invalid length. [ 603.371160][T14446] netlink: 'syz.4.2774': attribute type 21 has an invalid length. [ 604.031166][T14460] netlink: 'syz.2.2780': attribute type 16 has an invalid length. [ 604.042372][T14460] netlink: 'syz.2.2780': attribute type 3 has an invalid length. [ 605.943446][T14483] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 606.129973][T14488] __nla_validate_parse: 2 callbacks suppressed [ 606.129991][T14488] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2788'. [ 606.154490][T14488] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.2788'. [ 606.166738][T14488] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2788'. [ 606.176017][ T49] Bluetooth: hci4: ISO packet for unknown connection handle 1656 [ 606.188638][T14488] tc_dump_action: action bad kind [ 606.221856][T14494] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.2790'. [ 606.330941][T14497] netlink: 'syz.3.2791': attribute type 21 has an invalid length. [ 606.345657][T14497] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2791'. [ 606.415260][T14498] netlink: 'syz.3.2791': attribute type 2 has an invalid length. [ 606.434668][T14498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2791'. [ 607.063563][T14520] netlink: 'syz.4.2797': attribute type 41 has an invalid length. [ 608.089589][T14545] netlink: 'syz.0.2805': attribute type 3 has an invalid length. [ 608.141677][T14545] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2805'. [ 608.246856][T14552] IPv6: Can't replace route, no match found [ 608.337094][T14558] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2810'. [ 608.854392][T14576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2814'. [ 609.066892][T14581] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2815'. [ 609.241079][T14583] netlink: 'syz.2.2816': attribute type 28 has an invalid length. [ 609.256584][T14583] netlink: 'syz.2.2816': attribute type 3 has an invalid length. [ 609.847654][T14606] netlink: 'syz.2.2821': attribute type 39 has an invalid length. [ 610.013155][T14606] bond0: (slave macvlan0): Releasing backup interface [ 610.387498][T14622] openvswitch: netlink: Message has 6 unknown bytes. [ 610.413252][T14623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 610.804626][T14634] netlink: 'syz.0.2834': attribute type 5 has an invalid length. [ 610.873589][T14630] netlink: 'syz.2.2832': attribute type 11 has an invalid length. [ 610.903061][T14630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.314343][T14644] netlink: 'syz.4.2837': attribute type 10 has an invalid length. [ 611.438971][T14650] device pim6reg1 entered promiscuous mode [ 611.843075][T14656] device sit0 left promiscuous mode [ 611.928008][T14669] device wlan1 entered promiscuous mode [ 611.957305][T14672] netlink: 'syz.0.2844': attribute type 2 has an invalid length. [ 611.991583][T14672] netlink: 'syz.0.2844': attribute type 1 has an invalid length. [ 612.054865][T14672] netlink: 'syz.0.2844': attribute type 4 has an invalid length. [ 612.073641][T14672] __nla_validate_parse: 4 callbacks suppressed [ 612.073658][T14672] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.2844'. [ 612.520350][T14679] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2846'. [ 614.454851][T14719] bond0: (slave wlan1): Error: Slave device does not support XDP [ 616.174828][T14722] netlink: 'syz.3.2853': attribute type 10 has an invalid length. [ 616.203513][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.246684][T14722] device bridge_slave_1 left promiscuous mode [ 616.265520][T14722] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.293526][T14722] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 616.418152][T14745] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.2862'. [ 616.995902][T14728] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2859'. [ 617.018031][T14729] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2859'. [ 617.059621][T14741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2862'. [ 618.613829][T14825] netlink: 'syz.2.2887': attribute type 21 has an invalid length. [ 618.652682][T14825] netlink: 'syz.2.2887': attribute type 4 has an invalid length. [ 619.091042][T14840] syz.2.2892[14840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 619.485120][T14855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2896'. [ 619.906777][T14865] netlink: 'syz.1.2899': attribute type 41 has an invalid length. [ 620.116426][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.138876][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.148410][T14867] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.174283][T14867] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.185711][T14867] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 620.193472][T14867] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 620.391178][T14870] netlink: 'syz.3.2900': attribute type 10 has an invalid length. [ 620.399290][T14870] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2900'. [ 620.469421][T14870] openvswitch: netlink: Flow key attr not present in new flow. [ 620.538699][T14872] netlink: 'syz.2.2901': attribute type 29 has an invalid length. [ 620.568428][T14874] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2900'. [ 620.577883][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2900'. [ 621.011574][T14884] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2904'. [ 622.240107][T14867] Bluetooth: hci5: command 0x0409 tx timeout [ 623.565580][T14872] netlink: 'syz.2.2901': attribute type 29 has an invalid length. [ 623.824174][T14866] chnl_net:caif_netlink_parms(): no params data found [ 624.320161][T14867] Bluetooth: hci5: command 0x041b tx timeout [ 624.664592][T14912] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2910'. [ 624.690817][T14912] bridge_slave_1: default FDB implementation only supports local addresses [ 624.717089][T14911] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2910'. [ 624.728149][T14911] bridge_slave_1: default FDB implementation only supports local addresses [ 624.863814][T14866] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.875848][T14866] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.898272][T14866] device bridge_slave_0 entered promiscuous mode [ 624.906725][T14917] netlink: 'syz.0.2912': attribute type 10 has an invalid length. [ 625.136246][T14917] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 625.193345][T14866] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.213803][T14866] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.247709][T14866] device bridge_slave_1 entered promiscuous mode [ 625.277183][T14922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2914'. [ 625.397788][T14866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.448967][T14866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.578119][T14866] team0: Port device team_slave_0 added [ 625.607875][T14866] team0: Port device team_slave_1 added [ 625.668419][T14866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.709652][T14866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.776797][T14866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.816449][T14951] netlink: 'syz.3.2923': attribute type 17 has an invalid length. [ 625.827660][T14866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.835136][T14866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.869070][T14866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.885892][T14951] netlink: 'syz.3.2923': attribute type 21 has an invalid length. [ 625.894270][T14951] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2923'. [ 625.903835][T14951] netlink: 'syz.3.2923': attribute type 4 has an invalid length. [ 625.911945][T14951] netlink: 'syz.3.2923': attribute type 5 has an invalid length. [ 625.921718][T14951] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2923'. [ 626.067241][ T8603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.103069][T14866] device hsr_slave_0 entered promiscuous mode [ 626.112508][T14866] device hsr_slave_1 entered promiscuous mode [ 626.130659][T14866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.138811][T14866] Cannot create hsr debugfs directory [ 626.191669][ T8603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.341621][ T8603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.404722][T14867] Bluetooth: hci5: command 0x040f tx timeout [ 626.543999][ T8603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.777369][T14981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2932'. [ 626.861569][T14981] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2932'. [ 626.946378][T14985] netlink: 'syz.2.2932': attribute type 3 has an invalid length. [ 626.990393][T14985] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2932'. [ 627.078038][ T8603] device 0 left promiscuous mode [ 628.479835][T14867] Bluetooth: hci5: command 0x0419 tx timeout [ 628.528622][T14866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 628.695434][T14866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 628.725763][T14866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 628.765366][T15052] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2944'. [ 628.791971][T14866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 629.105899][T14866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.155562][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 629.166000][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 629.222456][T14866] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.315422][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 629.350136][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.381504][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.388644][ T8607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.404450][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 629.462681][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 629.476228][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.495209][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.502396][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.546427][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 629.560872][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 629.625435][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 629.661803][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 629.687263][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 629.719316][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 629.739662][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 629.754381][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 629.792480][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.844607][T15075] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2953'. [ 629.860074][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 629.880477][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.921107][T14866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 630.291166][T15089] netlink: 'syz.1.2956': attribute type 10 has an invalid length. [ 630.435784][T15089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.533037][T15089] device bond0 entered promiscuous mode [ 630.557652][T15089] device bond_slave_0 entered promiscuous mode [ 630.632353][T15089] device bond_slave_1 entered promiscuous mode [ 630.673807][T15089] team0: Port device bond0 added [ 630.890099][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.896472][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.556926][T15109] netlink: 'syz.0.2959': attribute type 22 has an invalid length. [ 633.564966][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 633.578133][T15119] bridge0: port 2(veth1_to_hsr) entered blocking state [ 633.587452][T15119] bridge0: port 2(veth1_to_hsr) entered disabled state [ 633.597890][T15119] device veth1_to_hsr entered promiscuous mode [ 633.607379][T15119] bridge0: port 2(veth1_to_hsr) entered blocking state [ 633.614467][T15119] bridge0: port 2(veth1_to_hsr) entered forwarding state [ 633.692824][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.750738][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.779334][ T8603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.791901][ T8603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.296750][ T8603] device veth1_vlan left promiscuous mode [ 634.608062][ T8603] team0 (unregistering): Port device geneve1 removed [ 635.072144][ T8603] team0 (unregistering): Port device team_slave_1 removed [ 637.791040][ T8603] team0 (unregistering): Port device team_slave_0 removed [ 638.165058][T14866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.178357][T15131] netlink: 'syz.2.2962': attribute type 15 has an invalid length. [ 638.186570][T15131] netlink: 'syz.2.2962': attribute type 7 has an invalid length. [ 638.200092][T15131] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2962'. [ 638.232849][T15142] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.2966'. [ 638.242683][T15142] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.2966'. [ 638.252189][T15142] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.2966'. [ 638.287199][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 638.295780][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.913206][T15187] netlink: 'syz.2.2978': attribute type 39 has an invalid length. [ 639.013212][T15187] device hsr_slave_1 left promiscuous mode [ 639.306016][T15198] netlink: 'syz.2.2980': attribute type 10 has an invalid length. [ 639.331649][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 639.352718][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 639.385586][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 639.433383][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 639.455964][T14866] device veth0_vlan entered promiscuous mode [ 639.479441][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 639.493995][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 639.529494][T14866] device veth1_vlan entered promiscuous mode [ 639.608152][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 639.621798][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 639.651139][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 639.677999][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 639.705413][T14866] device veth0_macvtap entered promiscuous mode [ 639.768014][T14866] device veth1_macvtap entered promiscuous mode [ 639.827955][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.883573][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.930028][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.971127][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.993153][T14866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.038105][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 640.060544][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 640.111841][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 640.135808][ T8606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 640.168390][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.209958][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.250230][T14866] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.279754][T14866] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.340387][T14866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 640.374958][T15229] netlink: 21187 bytes leftover after parsing attributes in process `syz.2.2988'. [ 640.404869][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.418075][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.462921][T14866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.497938][T14866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.536265][T14866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.569078][T14866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.646870][T15238] netlink: 'syz.0.2990': attribute type 39 has an invalid length. [ 640.810190][T15238] device hsr_slave_1 left promiscuous mode [ 641.340230][ T8630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.348187][ T8630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.591300][ T8621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.755306][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.860247][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.994735][ T8594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 642.153731][T15298] netlink: 'syz.3.2995': attribute type 21 has an invalid length. [ 642.231576][T15302] netlink: 'syz.0.2996': attribute type 2 has an invalid length. [ 642.251076][T15302] netlink: 'syz.0.2996': attribute type 8 has an invalid length. [ 642.299928][T15302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2996'. [ 642.357875][T15305] netlink: 'syz.4.2897': attribute type 2 has an invalid length. [ 642.385975][T15305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2897'. [ 642.646381][T15314] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.2999'. [ 642.935272][T15322] netlink: 'syz.3.3002': attribute type 3 has an invalid length. [ 642.985344][T15322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3002'. [ 643.217215][T15333] netlink: 'syz.4.3004': attribute type 29 has an invalid length. [ 643.290344][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 643.299227][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 643.307580][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 643.315898][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 643.323784][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 643.331401][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 643.334075][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.432589][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.476018][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.508393][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.538436][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.567263][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.613865][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.646149][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.677301][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.718805][T15338] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3006'. [ 643.981997][T15333] netlink: 'syz.4.3004': attribute type 29 has an invalid length. [ 644.122870][ T8610] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.334492][ T8610] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.595394][ T8610] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.865123][ T8610] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.002547][T15378] netlink: 'syz.0.3015': attribute type 39 has an invalid length. [ 645.232680][T15334] chnl_net:caif_netlink_parms(): no params data found [ 645.359826][T14867] Bluetooth: hci2: command 0x0409 tx timeout [ 645.460106][T15388] netlink: 'syz.2.3016': attribute type 25 has an invalid length. [ 645.518058][T15388] netlink: 'syz.2.3016': attribute type 29 has an invalid length. [ 645.650652][T15334] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.657836][T15334] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.666275][T15334] device bridge_slave_0 entered promiscuous mode [ 645.675843][ T8610] device 0 left promiscuous mode [ 645.724885][T15334] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.737659][T15334] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.751085][T15334] device bridge_slave_1 entered promiscuous mode [ 645.843645][ T8610] device 1 left promiscuous mode [ 645.895302][T15334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.951879][T15334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.347351][T15334] team0: Port device team_slave_0 added [ 646.368774][T15334] team0: Port device team_slave_1 added [ 646.552607][T15334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.559661][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.628170][T15334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.751951][T15334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.758990][T15334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.889905][T15334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.439910][T14867] Bluetooth: hci2: command 0x041b tx timeout [ 648.544439][T15436] netlink: 'syz.4.3027': attribute type 4 has an invalid length. [ 648.552918][T15436] __nla_validate_parse: 56 callbacks suppressed [ 648.552934][T15436] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3027'. [ 648.728085][T15334] device hsr_slave_0 entered promiscuous mode [ 648.774861][T15334] device hsr_slave_1 entered promiscuous mode [ 648.794979][T15334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.804664][T15334] Cannot create hsr debugfs directory [ 649.535059][T14867] Bluetooth: hci2: command 0x040f tx timeout [ 649.905638][T15491] device sit0 entered promiscuous mode [ 650.160996][T15509] netlink: 'syz.2.3044': attribute type 10 has an invalid length. [ 650.384344][T15509] device dummy0 entered promiscuous mode [ 650.415694][T15509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 650.858119][T15528] netlink: 'syz.4.3050': attribute type 1 has an invalid length. [ 650.917894][T15528] netlink: 'syz.4.3050': attribute type 2 has an invalid length. [ 650.945829][ T8610] team0: Port device wlan1 removed [ 650.970608][T15528] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3050'. [ 651.555516][ T8610] device hsr_slave_0 left promiscuous mode [ 651.572476][ T8610] device hsr_slave_1 left promiscuous mode [ 651.599806][T14867] Bluetooth: hci2: command 0x0419 tx timeout [ 651.628981][ T8610] device veth1_macvtap left promiscuous mode [ 651.635360][ T8610] device veth1_vlan left promiscuous mode [ 651.642069][ T8610] device veth0_vlan left promiscuous mode [ 652.254819][ T8610] device team_slave_1 left promiscuous mode [ 652.262487][ T8610] team0 (unregistering): Port device team_slave_1 removed [ 652.304351][ T8610] device team_slave_0 left promiscuous mode [ 652.311784][ T8610] team0 (unregistering): Port device team_slave_0 removed [ 652.352740][ T8610] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.365286][ T8610] device bond_slave_1 left promiscuous mode [ 652.404739][ T8610] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.414350][ T8610] device bond_slave_0 left promiscuous mode [ 652.675459][ T8610] device bond0 left promiscuous mode [ 652.682339][ T8610] team0 (unregistering): Port device bond0 removed [ 652.713520][ T8610] bond0 (unregistering): Released all slaves [ 652.807914][T15551] netlink: 'syz.2.3055': attribute type 2 has an invalid length. [ 652.819852][T15551] netlink: 'syz.2.3055': attribute type 8 has an invalid length. [ 652.827648][T15551] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3055'. [ 653.063520][T15568] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3059'. [ 653.074084][T15568] bridge_slave_1: default FDB implementation only supports local addresses [ 653.341926][T15334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 653.367089][T15334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 653.431981][T15334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 653.448325][T15334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 653.749319][T15334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.809453][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.827762][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.875693][T15334] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.924333][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.967511][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.007590][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.014900][ T8622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.027720][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.080485][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.120621][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.164681][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.171966][ T8616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.187227][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.203895][T15595] netlink: 'syz.3.3067': attribute type 3 has an invalid length. [ 654.237600][T15595] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3067'. [ 654.331473][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 654.342442][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 654.353843][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 654.370684][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.389611][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.484638][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.525330][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.560776][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.576267][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.585854][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.597272][T15334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.811252][T15610] device syzkaller0 entered promiscuous mode [ 654.845202][T15613] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3071'. [ 655.597549][T15653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3080'. [ 657.459223][T15653] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3080'. [ 657.532037][T15663] netlink: 'syz.4.3080': attribute type 10 has an invalid length. [ 657.563436][T15663] team0: Port device virt_wifi0 added [ 657.570839][T15655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3080'. [ 657.719332][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 657.732118][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 657.746715][T15334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.856764][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.910372][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 658.048070][T15334] device veth0_vlan entered promiscuous mode [ 658.074802][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 658.093326][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 658.149526][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 658.158180][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 658.190917][T15334] device veth1_vlan entered promiscuous mode [ 658.326120][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 658.387906][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 658.439469][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 658.459012][ T8628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 658.672872][T15698] netlink: 'syz.2.3089': attribute type 4 has an invalid length. [ 658.732668][T15698] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3089'. [ 661.011371][T15685] ------------[ cut here ]------------ [ 661.017002][T15685] WARNING: CPU: 0 PID: 15685 at kernel/events/core.c:6592 perf_pending_task+0x353/0x480 [ 661.027003][T15685] Modules linked in: [ 661.031022][T15685] CPU: 0 PID: 15685 Comm: syz.0.3086 Not tainted syzkaller #0 [ 661.038529][T15685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.048887][T15685] RIP: 0010:perf_pending_task+0x353/0x480 [ 661.054749][T15685] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 661.074509][T15685] RSP: 0018:ffffc9000be478e8 EFLAGS: 00010293 [ 661.080668][T15685] RAX: ffffffff81a7add3 RBX: ffff888056a20a58 RCX: ffff88802be29e00 [ 661.088694][T15685] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 661.096769][T15685] RBP: ffff888056a20820 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 661.104815][T15685] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88802be29e00 [ 661.112885][T15685] R13: ffff8880778de560 R14: 0000000000000000 R15: 1ffff1100ad44104 [ 661.120947][T15685] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 661.129963][T15685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 661.136587][T15685] CR2: 000055559155c4e8 CR3: 000000005a42a000 CR4: 00000000003506f0 [ 661.144647][T15685] DR0: 0000200000000300 DR1: 0000000000000b6e DR2: 0000000000000000 [ 661.152701][T15685] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 661.160795][T15685] Call Trace: [ 661.164125][T15685] [ 661.167135][T15685] task_work_run+0x1d0/0x260 [ 661.171958][T15685] ? task_work_cancel+0x220/0x220 [ 661.177035][T15685] ? do_raw_spin_unlock+0x11d/0x230 [ 661.182332][T15685] do_exit+0x9d5/0x2570 [ 661.186608][T15685] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 661.192700][T15685] ? put_task_struct+0x80/0x80 [ 661.197516][T15685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.203773][T15685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.210000][T15685] ? lockdep_hardirqs_on+0x94/0x140 [ 661.215237][T15685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.221489][T15685] do_group_exit+0x229/0x2e0 [ 661.226170][T15685] ? _raw_spin_unlock_irq+0x25/0x40 [ 661.231438][T15685] get_signal+0x1259/0x1340 [ 661.236018][T15685] arch_do_signal_or_restart+0xc4/0x1310 [ 661.241801][T15685] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 661.247751][T15685] ? do_futex+0x310/0x320 [ 661.252292][T15685] ? get_sigframe_size+0x10/0x10 [ 661.257292][T15685] ? exit_to_user_mode_loop+0x3b/0x110 [ 661.262937][T15685] exit_to_user_mode_loop+0x70/0x110 [ 661.268300][T15685] exit_to_user_mode_prepare+0xee/0x180 [ 661.273945][T15685] syscall_exit_to_user_mode+0x16/0x40 [ 661.279460][T15685] do_syscall_64+0x58/0xa0 [ 661.283966][T15685] ? clear_bhb_loop+0x60/0xb0 [ 661.288707][T15685] ? clear_bhb_loop+0x60/0xb0 [ 661.293468][T15685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.299404][T15685] RIP: 0033:0x7fb8eff9e0d9 [ 661.303926][T15685] Code: Unable to access opcode bytes at 0x7fb8eff9e0af. [ 661.311009][T15685] RSP: 002b:00007fb8f0ebb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 661.319486][T15685] RAX: fffffffffffffe00 RBX: 00007fb8f0225fa8 RCX: 00007fb8eff9e0d9 [ 661.327551][T15685] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8f0225fa8 [ 661.335690][T15685] RBP: 00007fb8f0225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 661.343732][T15685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.351765][T15685] R13: 00007fb8f0226038 R14: 00007fff05376fc0 R15: 00007fff053770a8 [ 661.359815][T15685] [ 661.362873][T15685] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 661.370214][T15685] CPU: 0 PID: 15685 Comm: syz.0.3086 Not tainted syzkaller #0 [ 661.377706][T15685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.387787][T15685] Call Trace: [ 661.391130][T15685] [ 661.394088][T15685] dump_stack_lvl+0x188/0x24e [ 661.398816][T15685] ? memcpy+0x3c/0x60 [ 661.402833][T15685] ? show_regs_print_info+0x12/0x12 [ 661.408066][T15685] ? load_image+0x410/0x410 [ 661.412635][T15685] panic+0x2d3/0x710 [ 661.416561][T15685] ? bpf_jit_dump+0xd0/0xd0 [ 661.421097][T15685] __warn+0x2f8/0x4f0 [ 661.425096][T15685] ? perf_pending_task+0x353/0x480 [ 661.430231][T15685] ? perf_pending_task+0x353/0x480 [ 661.435363][T15685] report_bug+0x2ba/0x4f0 [ 661.439742][T15685] ? perf_pending_task+0x353/0x480 [ 661.444882][T15685] handle_bug+0x3a/0x70 [ 661.449071][T15685] exc_invalid_op+0x16/0x40 [ 661.453621][T15685] asm_exc_invalid_op+0x16/0x20 [ 661.458489][T15685] RIP: 0010:perf_pending_task+0x353/0x480 [ 661.464258][T15685] Code: e8 d2 82 da ff 84 db 75 10 e8 69 80 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 59 80 da ff e8 ac d5 58 ff eb e9 e8 4d 80 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 661.483879][T15685] RSP: 0018:ffffc9000be478e8 EFLAGS: 00010293 [ 661.489956][T15685] RAX: ffffffff81a7add3 RBX: ffff888056a20a58 RCX: ffff88802be29e00 [ 661.497944][T15685] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 661.505927][T15685] RBP: ffff888056a20820 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 661.513915][T15685] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff88802be29e00 [ 661.521908][T15685] R13: ffff8880778de560 R14: 0000000000000000 R15: 1ffff1100ad44104 [ 661.529905][T15685] ? perf_pending_task+0x353/0x480 [ 661.535039][T15685] ? perf_pending_task+0x353/0x480 [ 661.540182][T15685] task_work_run+0x1d0/0x260 [ 661.544795][T15685] ? task_work_cancel+0x220/0x220 [ 661.549832][T15685] ? do_raw_spin_unlock+0x11d/0x230 [ 661.555051][T15685] do_exit+0x9d5/0x2570 [ 661.559231][T15685] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 661.565233][T15685] ? put_task_struct+0x80/0x80 [ 661.570017][T15685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.576196][T15685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.582364][T15685] ? lockdep_hardirqs_on+0x94/0x140 [ 661.587581][T15685] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.593762][T15685] do_group_exit+0x229/0x2e0 [ 661.598386][T15685] ? _raw_spin_unlock_irq+0x25/0x40 [ 661.603599][T15685] get_signal+0x1259/0x1340 [ 661.608154][T15685] arch_do_signal_or_restart+0xc4/0x1310 [ 661.613807][T15685] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 661.619742][T15685] ? do_futex+0x310/0x320 [ 661.624096][T15685] ? get_sigframe_size+0x10/0x10 [ 661.629113][T15685] ? exit_to_user_mode_loop+0x3b/0x110 [ 661.634600][T15685] exit_to_user_mode_loop+0x70/0x110 [ 661.639909][T15685] exit_to_user_mode_prepare+0xee/0x180 [ 661.645479][T15685] syscall_exit_to_user_mode+0x16/0x40 [ 661.650959][T15685] do_syscall_64+0x58/0xa0 [ 661.655406][T15685] ? clear_bhb_loop+0x60/0xb0 [ 661.660100][T15685] ? clear_bhb_loop+0x60/0xb0 [ 661.664791][T15685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 661.670718][T15685] RIP: 0033:0x7fb8eff9e0d9 [ 661.675151][T15685] Code: Unable to access opcode bytes at 0x7fb8eff9e0af. [ 661.682181][T15685] RSP: 002b:00007fb8f0ebb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 661.690605][T15685] RAX: fffffffffffffe00 RBX: 00007fb8f0225fa8 RCX: 00007fb8eff9e0d9 [ 661.698605][T15685] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb8f0225fa8 [ 661.706593][T15685] RBP: 00007fb8f0225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 661.714576][T15685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.722562][T15685] R13: 00007fb8f0226038 R14: 00007fff05376fc0 R15: 00007fff053770a8 [ 661.730557][T15685] [ 661.734178][T15685] Kernel Offset: disabled [ 661.738518][T15685] Rebooting in 86400 seconds..