last executing test programs: 3.969186955s ago: executing program 2 (id=2207): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b90900000a0b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xb4}], 0x10000073, 0x0, 0x42}, 0x8004) socketpair(0x1e, 0x1, 0x3, &(0x7f0000000100)) 3.751706302s ago: executing program 2 (id=2208): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0x0, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x2880, 0x4, 0x0, 0x0, 0x0, 0x40004, 0x8b04}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(0xffffffffffffffff) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) socketpair(0x10, 0x6, 0x0, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) 3.572193407s ago: executing program 3 (id=2209): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000500), 0x0}, 0x20) (async, rerun: 32) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003800)={&(0x7f00000005c0), 0x6e, &(0x7f00000036c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x100) (async, rerun: 32) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (rerun: 64) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000440)=r3) (async, rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (rerun: 64) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (async) r7 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1004, 0x6dd700000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580)) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, r7, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 3.570292347s ago: executing program 1 (id=2210): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="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", 0x1ca}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x8}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x3f}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xcb4d, '\x00', r5, r2, 0x3, 0x5, 0x2}, 0x50) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x400, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305828, &(0x7f0000000040)=0x20000) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, 0x0, 0x200040d0}, 0x4004) (async) sendmsg$tipc(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8004) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x19, 0x3, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x0, @perf_config_ext={0x6, 0x2}, 0x10c253, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.19061982s ago: executing program 1 (id=2212): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000001580)={0x5, 0x80, 0xfb, 0x6, 0x9, 0x0, 0x0, 0x6, 0x24000, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001540), 0x3}, 0x8020, 0xbed3, 0x9, 0x2, 0x80, 0x1ff, 0x200, 0x0, 0xfffffff9, 0x0, 0x2}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="100002000400000008000000080055cf6fe8b3824c97cfce2199000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0xa}, {0x10, 0x110, 0x2}], 0x20}, 0xfc40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xdc0, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20048000) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}, 0x70) setsockopt$sock_attach_bpf(r6, 0x29, 0x3b, &(0x7f0000000100)=r7, 0x120) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001b80)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x9, 0x5c4}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) sendmsg$kcm(r6, &(0x7f0000001440)={&(0x7f0000001340)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000001400)=[{&(0x7f00000013c0)="509e4852966eb811", 0x8}], 0x1}, 0x20000001) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x18, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[], 0x0, 0x66}, 0x28) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r9, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000007c0)={0xffffffffffffffff}, 0x4) 3.099323552s ago: executing program 3 (id=2213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) (async, rerun: 32) r1 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r5, 0x1}, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000b00)={&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/227, 0xe3}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000640)=""/217, 0xd9}, {&(0x7f00000007c0)=""/173, 0xad}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/170, 0xaa}], 0x6, &(0x7f0000000a00)=""/204, 0xcc}, 0x2) (async) perf_event_open(0x0, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c"], 0x0, 0x56}, 0x28) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f00000001c0)=[{&(0x7f0000000040)="c018030023000b12d25a80648c2594f90124fc60020c084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b702000000000000060000000000000072000000190000009500000000000000e2412821cf7ba8ee894fd24c02c1dbfa52f748cdbb9323d500b71e5335cdda029e6efad9c9d13ea0643f042b5e4576e0e2adec8eafa2bbc4fa9c300a2f7ed3851c43ff2d885ec6eb99d6559775922ede31ded246bdb87e36c4bd396237807f1837400098c877fbc573b60fa7209f32ff836ca21c409d8f264785849a3c505f4a12823da87f8883d359b2cb3976dc253426041658da1b2a5fc247b5d3788e2d6d391a12e46de122f3690460fec182bea67ef6989104fb75a535d4"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) (async) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, 0x0}, 0x20000089) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={r9, 0x58, &(0x7f0000000580)}, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0xc43, 0x18}, 0xc) 2.720548294s ago: executing program 3 (id=2215): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)=""/247, 0xf7}], 0x1}, 0x10140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x7, 0x0, 0x0, 0x0, 0xfffffffc}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 2.534178349s ago: executing program 1 (id=2216): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x500, 0x100000003, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb0100188e2568d3112f8deb1dfdffd27715d0f400000000000000180000000000030020"], 0x0, 0x33, 0x0, 0xffffffff, 0x2c}, 0x28) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000006a0a00ff0001000095edff1d25e7ec17ac52951a12e60fb2a876a5b400"/47], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffff55) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2008, 0x9c510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x8}, 0x0, 0x10000, 0x9e4, 0x5, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xb, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x81a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)="5c00000014006b04000000d86e6c1d000a117ea6e070d6060003910000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f61400c9f4d49346d88037e786", 0x54}, {&(0x7f0000000700)="3efb8b6afd3c7dc1", 0x8}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, 0x0, 0x0) (async) sendmsg$inet(r0, 0x0, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) 2.498889021s ago: executing program 2 (id=2217): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b8ca03076804268c989e14f0a3a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x19}, 0x29) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r7) write$cgroup_int(r7, &(0x7f0000000200)=0x700, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x61, 0x0, 0x48, 0x6}, @enum64={0x6, 0x7, 0x0, 0x13, 0x1, 0x0, [{0x1, 0x9, 0x9}, {0x7, 0x6, 0xc000000}, {0x7, 0x0, 0x1}, {0x7, 0x918, 0xf7f}, {0xb, 0x2, 0xfffffffe}, {0x4, 0x5, 0x401}, {0x6, 0x3939, 0x80}]}, @var={0xa, 0x0, 0x0, 0xe, 0x1, 0x7}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x3, 0x2}, @union={0x8, 0x3, 0x0, 0x5, 0x0, 0x4, [{0x4, 0x0, 0x4}, {0x7, 0x5, 0xffffffff}, {0x1, 0x4, 0x5}]}]}, {0x0, [0x0]}}, &(0x7f0000000580)=""/121, 0xfb, 0x79, 0x1, 0x3, 0x10000, @value=r7}, 0x28) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000004850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200000000e3008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r9, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000013c0)="b9ff03316844268cb89e14f086dd", 0x0, 0x51, 0x60000c00, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r9, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000cc0)={r7, 0x20, &(0x7f0000000c80)={&(0x7f0000000b00)=""/134, 0x86, 0x0, &(0x7f0000000bc0)=""/162, 0xa2}}, 0x10) 2.19123238s ago: executing program 0 (id=2218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x8}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x645, '\x00', 0x0, r1, 0x3, 0x1}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003d40)={r3, 0x58, &(0x7f0000003cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003ec0)={0x18, 0x2a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}, @ldst={0x2, 0x2, 0x0, 0x5, 0x0, 0x10, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xc757f52c1207d3f8}}, @call={0x85, 0x0, 0x0, 0xa6}, @alu={0x4, 0x1, 0x9, 0xa, 0x3, 0x53, 0xffffffffffffffff}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x8, 0x1000, &(0x7f0000002cc0)=""/4096, 0x41000, 0x11, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000003d80)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000003dc0)={0x1, 0x0, 0x200000, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003e00)=[0x1, r1, r1, r1, r3], &(0x7f0000003e40)=[{0x4, 0x4, 0x8, 0x6}, {0x3, 0x4, 0x7, 0xa}, {0x0, 0x5, 0x7, 0x1}, {0x0, 0x4, 0x7, 0x4}, {0x0, 0x2, 0x4, 0x2}], 0x10, 0x3ff}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) (async) r7 = socket$kcm(0x2c, 0x3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000040)=r8, 0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002900000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000008600"/32], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x1a, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x7, 0xa, 0x8, 0xffffffffffffffaa}, @generic={0x0, 0xe, 0xd, 0x5, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @generic={0x0, 0x3, 0x2, 0x2, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5a2e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x3c, &(0x7f0000000340)=""/60, 0x41100, 0x0, '\x00', r9, @fallback=0x3d, r10, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x1, 0x60, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000500)=[{0x5, 0x5, 0x9, 0x3}, {0x0, 0x1, 0x6, 0x8}, {0x3, 0x1, 0xd, 0x1}], 0x10, 0x2808ebf0}, 0x94) 2.028130276s ago: executing program 0 (id=2219): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x2000000000000216, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000180)="7114775aebe67a11a305a02aef3416d05d7998b93cbdb6e0141bb5ae47a2cae793adecf5540f67b5", &(0x7f0000000540)=""/96}, 0xfffffef5) (async) syz_clone(0xa00d00, &(0x7f0000000400)="eded928406644e7706f9f05b3ee160a26a53344223491a07762bb224274f4bcd3514cc2b0b738b8783e9c1b56644f88e15a67b6e633bed58a01bc88396691d120afc46cedfac44f259d117bcf912486a9cbd23353f59198a490762e8f1ef55ca9130806d59300f4867fcc9845001b6231e021b27f4f5cef0693877d76c99f6f0e0d5b153372bc2f84102036e4cfe42", 0x8f, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000007c0)="2c7dea2891936d5a33803e5c28c0825389d5988fd5c6b279e0448b58936613da08b4e1eb410ecdfb55c0e39f5aafc86e9d3464e9852aeea87fe69e042ae940db3d7f641186d60c52b561ab94266ac3fb800892f322ab36e1f8c6d553587bc54a016def7ce4e8df64f632c856dc1bd8a6068ba499cceb0e50b8720913636d278da8f1cf89646c4c544b7ec5d1cb934c9a57aeb40e96646f79a550b57e558cc9b5644fe6a87a493c37199664304814d76e") r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0) (async) r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a400fe00000000b7060000ffffffff2e640500000000007502faff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000026000000b70000000000002995000000000000001da5ad3548ebb63d18db6a1c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6d5b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8c18119a6926083f4a2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa387a8077927a1ad367c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f20002b35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8c367d1bfd1aea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82dc568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000000000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac6f09c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccf5e882602897a85bf8523d891080593d831d758deb4f2c7e49c6d6b35d8fd92601c8500febb0c5fe0be294bf6bbbecad444695277a9e3992a354492513b43091d161c7c7cdbbe44e8e83b4cf333238a52f214b278c6485236ea880db2f113f6381187679a4620d6149808b0af024b3b3e6ba99b4b15ca"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.857834831s ago: executing program 0 (id=2220): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b594e9a36f9e5c4eb100103fe3dc6e", 0x19}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x20000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socket$kcm(0x2c, 0x3, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), 0x0}, 0x20) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)}], 0x2}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) 1.779801204s ago: executing program 1 (id=2221): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x67, '\x00', 0x0, @fallback=0xc}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) socket$kcm(0x2c, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) socketpair(0x26, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) close(r5) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000280), &(0x7f0000000500)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.59216323s ago: executing program 3 (id=2222): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000040000000400000002"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.58129871s ago: executing program 2 (id=2223): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000002880), 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000028c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005500000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0xa7e, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x1a, 0x1f, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd535}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @ldst={0x3, 0x1, 0x0, 0xb, 0x0, 0x80, 0x10}, @alu={0x4, 0x0, 0x7, 0x0, 0x4, 0x8, 0x10}, @ldst={0x2, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x10}, @generic={0x4, 0x2, 0x0, 0x3, 0x2}]}, &(0x7f00000013c0)='GPL\x00', 0x1, 0xcb, &(0x7f0000001400)=""/203, 0x40f00, 0xa0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000002800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002840)={0x2, 0x5, 0x200, 0x909c}, 0x10, 0x0, r0, 0x4, &(0x7f0000002940)=[r1, r2, r3, r4], &(0x7f0000002980)=[{0x0, 0x3, 0x4, 0x5}, {0x0, 0x4, 0xd, 0x8}, {0x1, 0x1, 0x1, 0x2}, {0x2, 0x3, 0x9, 0x2}], 0x10, 0x7}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1}, 0x50) r7 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, 0x0, 0x0}, 0x20) sendmsg$kcm(r5, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socketpair(0xb, 0xa, 0xc986, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r9, &(0x7f0000001140)={&(0x7f0000000c40)=@pptp={0x18, 0x2, {0x1, @private=0xa010102}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000cc0)="9fde028fbd6f25a5d98e64f14e9d47e453ca5792ac007c1315791fea1908e1323d21e62de447f2ab0a99790d5f1faa9f8f7e4afc32f6ccb2b2af5459e38cd843e97b32fb7bd85da2731df4db31eb5ed8de1f42c23d2066ec89cc148a70144a7811f60445555ac065220e4c78e1004ae01c8350c61ddd2162f8feaac2fffe3cd1f18e7bfcc9f7b0d1c31fe92b004f2657e24e3394dd3052fff42e1e3ba1d679b33f46e4f13ab39279e58ae9c65d96e073a6fb711119a3491aa8893be6bed32193172c89ee5e71233037bca47e18031580e2f09211a65ebd9b673784e09b611ccb4f3f64657abfc4c97f60", 0xea}, {&(0x7f0000000dc0)="c57d5b779d0c64368c84cc00d08623f9400c1fa7911590b14ab7d618627787bab27e77ea0be6b3a6798e786365fe8d81e4c3d3", 0x33}, {&(0x7f0000000e00)="04cc21a80b6b71c299700d4eb0a95f92642d6df8dec49be6997f7a207a280bad79c7c765112e709ad5a823344043bdee7eaab972af047b7f7d7d7eebb70e5ac3c4964fdfe4b92a76e80a1441dc293edc563a6d6eb6ca66490d6ebe2c5e0aeb4638f8dcc80370740008b511128c23c7f979aa9b8bdd61174314cf49d44c8cef09a42ae2f58244f93168242cb35a8d84fe97c1825ba39fe06c17084a94d0dd9512c2c821f973c6f88f995ee171c9c3ab643d8d8280ae3587afe42e395f34dbbca07425ac97f82064713bb3831b27", 0xcd}, {&(0x7f0000000f00)="7c0e51a5eb5313cbb4c7be76a92817e01d4492b3e7c9d309fd09a492f6f9cbdcb661235fb62eedb55b0b30ede1b4e3f12fb8f19cc5d60f3290ee8d15103e985b8e1fffcbca044e0a0cdb47dec0fb5d3a47438fa1ecc1071cf896142944b320f7c988bb382093ffe0a666220ed41f464daceed05e4c3e696cce1bc4623f8165ec70c41362f45dd81490f0eb477ffe0f6bc19e2c18784f4373a82c185dbcdc55e7792fc48e7bb3c4cde4958d54fb0856c37451083dfefb56f375ff2e22b2", 0xbd}, {&(0x7f0000000fc0)="47c491cf7f4f5883a27c6fa4c55092c954f182e77db2eb584e17522bb0542d5c30a0ea83f27171bb8f989bb262583fa82e343e5443cd1eb3b034559142820f507da578ab8c273f9f13112c375a6e178af72fa0cb8a753dda294aa8311ca49928fac18dac5b7105bac8d02b38aa2382ba3b2885539772d36ccd5e20b0cfd147f4988e758c04fd5bf0cdf20a596550a2fed64ee3c94b2a5ff43ed159a3555e07c270d3c75ca1bc482a1639a333d0d5c8b0a814", 0xb2}], 0x5, &(0x7f0000001100)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x20, &(0x7f0000000a00)={&(0x7f00000008c0)=""/125, 0x7d, 0x0, &(0x7f0000000940)=""/172, 0xac}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000070000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r13}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x0, 0x8, 0x8, 0xb2c6, r6, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x8}, 0x50) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0xffffffffffffffff, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x1c, 0x1a, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x0, 0x3, 0x8, 0x2, 0x30, 0xfffffffffffffff0}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x1, 0xa, 0x9, 0x0, 0xffffffffffffffff}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcbde}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r15}}, @exit]}, &(0x7f0000000280)='GPL\x00', 0x6, 0xb2, &(0x7f00000002c0)=""/178, 0x41000, 0x20, '\x00', r8, @fallback=0x20, r11, 0x8, &(0x7f0000000840)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x5, 0x2, 0xffffdff8}, 0x10, r12, r13, 0x0, &(0x7f0000000b40)=[r15, r14], 0x0, 0x10, 0x1000}, 0x94) 1.524972242s ago: executing program 0 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f0000000340), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x84, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0xc, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xb8}, @ldst={0x2, 0x5, 0x1, 0x8, 0x3, 0xfffffffffffffff8, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x9, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @netfilter, r3, 0x8, &(0x7f0000000640)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000680)=[r0, r0], &(0x7f00000006c0)=[{0x1, 0x9, 0x9, 0x7}, {0x5, 0x5}, {0x0, 0x5, 0x4, 0x2}, {0x4, 0x4, 0xd, 0x3}], 0x10, 0xd8}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f00000003c0), 0x4) 1.318425278s ago: executing program 0 (id=2225): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0x0, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x2880, 0x4, 0x0, 0x0, 0x0, 0x40004, 0x8b04}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close(0xffffffffffffffff) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000080100000000000000400000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) socketpair(0x10, 0x6, 0x0, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) 1.318194528s ago: executing program 3 (id=2226): r0 = socket$kcm(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114}, 0x10) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f00000018c0), 0x4) (async) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xfe6b) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61c6, 0x0, 0x0, 0x0, 0x9}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7f}, @ldst={0x1, 0x0, 0x451ca24c4fd288ab, 0x4, 0x2, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x7, &(0x7f0000000140)=""/7, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x10, 0x8, 0x10001}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000580)=[{0x5, 0x5, 0x4}, {0x0, 0x4, 0x2, 0x7}, {0x3, 0x1, 0x2, 0x4}, {0x0, 0x5, 0x5, 0x4}, {0x5, 0x5, 0x5, 0x1e}, {0x4, 0x4, 0xc, 0x2}, {0x5, 0x5, 0x4}, {0x1, 0x5, 0x5, 0x4}, {0x2, 0x4, 0x9, 0x4}]}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000700)=r6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x110, 0x3, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) recvmsg(r7, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x10111) (async, rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r10 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r10) socket$kcm(0xa, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0xfffffffffffffffd, 0x0, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xf, 0x33, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010102]}, @noop, @cipso={0x86, 0x35, 0x6f292e7411a7d3e0, [{0x6, 0x5, "8e9c20"}, {0x2, 0xd, "5d7b079987a5d2b712c615"}, {0x0, 0x11, "2e0b8f051503d3a93c350c328eba91"}, {0x0, 0xc, "d37392819d0bfee7babd"}]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xfc, 0x0, 0x3, [0x3, 0x400, 0x6cb, 0x40, 0x0, 0x4]}, @noop, @ssrr={0x89, 0x13, 0xde, [@broadcast, @private=0xa010101, @multicast1, @local]}, @ssrr={0x89, 0x1f, 0x1d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x158}, 0x4041800) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e00000009000000160000000700000001000000", @ANYRES32=r10, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="0100000001000000050000000a00"/28], 0x50) (rerun: 32) 1.311842528s ago: executing program 1 (id=2227): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.041551617s ago: executing program 2 (id=2228): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x0, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 884.159042ms ago: executing program 1 (id=2229): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000001f00000071a20400000000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x400, 0x10000, 0x9e3, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, r4, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="1408000000000000b89e08dc88a8a5a186dd99732653be084ec3ac90c500b4d4bc2e787759227e6c", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x369fe48e79bbde2}, 0x4040841) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) r7 = perf_event_open$cgroup(&(0x7f0000000200)={0x1, 0x80, 0x1, 0x6, 0x7, 0x2, 0x0, 0x0, 0x1002, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x86, 0x2, @perf_config_ext={0x4, 0x6}, 0x10, 0x0, 0x3, 0x6, 0x3, 0x7, 0xf, 0x0, 0x5ebb, 0x0, 0x6}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000280)=0x80000001) r8 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, 0x0, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)='&', 0x1}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x128}, 0x0) 659.338419ms ago: executing program 2 (id=2230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x29, 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45", 0x8}], 0x1}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='pids.events\x00', 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, r6, 0x401, '\x00', 0x0, r7, 0x4, 0x2, 0x1}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8080, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xc}, 0x4a01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5d, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000004c0)=0x3a5) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x6}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 74.386627ms ago: executing program 0 (id=2231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r0}, 0x38) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000003100000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r6 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, r5, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x80000007, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x273, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xf}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 0s ago: executing program 3 (id=2232): socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x4, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0xfffd, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES64=r0, @ANYRES32=0x1, @ANYBLOB="0000000000000000008f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) socketpair(0x23, 0x5, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000340), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a, 0x0, 0x3}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x9, 0x7, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x28, 0x1, 0x0, 0x3, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xe66f}, 0xa8dd9bc04c48e821, 0x10002, 0xa, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x4000000002}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)=ANY=[], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x2022, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) kernel console output (not intermixed with test programs): syz.3.221'. [ 142.171119][ T6629] syz.0.218 (6629) used greatest stack depth: 18056 bytes left [ 142.288886][ T6643] netlink: 'syz.3.223': attribute type 3 has an invalid length. [ 142.296880][ T6643] netlink: 'syz.3.223': attribute type 1 has an invalid length. [ 142.384529][ T6641] syzkaller0: entered promiscuous mode [ 142.404017][ T6641] syzkaller0: entered allmulticast mode [ 142.709816][ T6649] __sock_release: fasync list not empty! [ 143.080479][ T6662] netlink: 'syz.1.230': attribute type 9 has an invalid length. [ 143.103218][ T6662] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.230'. [ 144.529179][ T6676] netlink: 'syz.3.236': attribute type 21 has an invalid length. [ 144.544571][ T6677] netlink: 'syz.3.236': attribute type 21 has an invalid length. [ 144.632273][ T6681] netlink: 10 bytes leftover after parsing attributes in process `syz.1.237'. [ 144.833208][ T6686] netlink: 'syz.0.239': attribute type 6 has an invalid length. [ 144.842518][ T6683] __sock_release: fasync list not empty! [ 144.858293][ T6686] netlink: 168 bytes leftover after parsing attributes in process `syz.0.239'. [ 145.481889][ T6717] netlink: 763 bytes leftover after parsing attributes in process `syz.2.249'. [ 145.643019][ T6718] __sock_release: fasync list not empty! [ 146.009481][ T6737] netlink: 10 bytes leftover after parsing attributes in process `syz.2.256'. [ 146.221535][ T6743] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 146.278140][ T6743] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 146.293915][ T6743] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 146.311567][ T6743] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 146.323099][ T6743] netlink: 'syz.0.257': attribute type 29 has an invalid length. [ 146.535045][ T6748] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.255'. [ 146.547986][ T6748] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.255'. [ 146.565786][ T6739] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.255'. [ 146.600086][ T6748] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.255'. [ 147.025632][ T6739] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 147.035695][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 147.046585][ T6739] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 147.055312][ T6739] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.082989][ T6739] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 147.456540][ T6765] syzkaller0: entered promiscuous mode [ 147.462141][ T6765] syzkaller0: entered allmulticast mode [ 150.365189][ T6759] __sock_release: fasync list not empty! [ 152.030005][ T6776] netlink: 'syz.2.267': attribute type 21 has an invalid length. [ 152.037905][ T6776] netlink: 128 bytes leftover after parsing attributes in process `syz.2.267'. [ 152.046912][ T6776] netlink: 3 bytes leftover after parsing attributes in process `syz.2.267'. [ 152.057165][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 152.071811][ T6775] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 152.098269][ T6775] netlink: 2 bytes leftover after parsing attributes in process `syz.1.266'. [ 152.107137][ T6775] hsr0: entered promiscuous mode [ 152.138028][ T6775] bridge0: port 3(hsr0) entered blocking state [ 152.167895][ T6775] bridge0: port 3(hsr0) entered disabled state [ 152.174295][ T6775] hsr0: entered allmulticast mode [ 152.206269][ T6775] hsr_slave_0: entered allmulticast mode [ 152.215941][ T6775] hsr_slave_1: entered allmulticast mode [ 152.236705][ T6775] bridge0: port 3(hsr0) entered blocking state [ 152.243123][ T6775] bridge0: port 3(hsr0) entered forwarding state [ 152.486585][ T6797] sit0: entered allmulticast mode [ 152.499072][ T6801] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 152.575586][ T6801] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 152.593519][ T6805] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 152.609331][ T6802] __sock_release: fasync list not empty! [ 152.620141][ T6798] sit0: entered promiscuous mode [ 152.680266][ T6801] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 152.698282][ T6805] netlink: 'syz.1.273': attribute type 29 has an invalid length. [ 153.757199][ T6821] netlink: 'syz.3.277': attribute type 6 has an invalid length. [ 153.775788][ T6830] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'. [ 153.785837][ T6821] netlink: 164 bytes leftover after parsing attributes in process `syz.3.277'. [ 153.815249][ T6830] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'. [ 153.838348][ T6824] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'. [ 153.908777][ T6831] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.276'. [ 157.102610][ T6837] team0: Port device team_slave_0 removed [ 157.137701][ T6824] netlink: 'syz.0.276': attribute type 10 has an invalid length. [ 157.145843][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.276'. [ 157.178878][ T6824] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 157.185992][ T6824] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.278105][ T6824] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 157.420684][ T6847] __sock_release: fasync list not empty! [ 157.681286][ T6866] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 158.132276][ T6876] syzkaller0: entered promiscuous mode [ 158.138063][ T6876] syzkaller0: entered allmulticast mode [ 158.644195][ T6890] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 158.708989][ T6890] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 158.729623][ T6890] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 159.183612][ T6901] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.295'. [ 160.579229][ T6901] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.295'. [ 160.590995][ T6906] netlink: 'syz.2.295': attribute type 10 has an invalid length. [ 160.601207][ T6906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.295'. [ 160.611873][ T6906] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 160.649493][ T6906] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.677348][ T6906] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 160.729183][ T6927] __sock_release: fasync list not empty! [ 162.739807][ T6944] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 162.747522][ T6944] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.301'. [ 162.789997][ T6950] netlink: 'syz.2.305': attribute type 10 has an invalid length. [ 162.806069][ T6950] macvlan0: entered promiscuous mode [ 162.817682][ T6950] macvlan0: entered allmulticast mode [ 162.856215][ T6950] veth1_vlan: entered allmulticast mode [ 162.920801][ T6950] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 163.186515][ T6961] netlink: 156 bytes leftover after parsing attributes in process `syz.1.307'. [ 163.522417][ T6962] __sock_release: fasync list not empty! [ 163.547318][ T6965] netlink: 'syz.3.310': attribute type 21 has an invalid length. [ 163.649261][ T6969] netlink: 128 bytes leftover after parsing attributes in process `syz.1.311'. [ 163.707574][ T6969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.771603][ T6974] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.313'. [ 163.784532][ T6974] tc_dump_action: action bad kind [ 164.263376][ T6996] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.317'. [ 165.022409][ T7005] __sock_release: fasync list not empty! [ 165.400953][ T7024] lo: entered promiscuous mode [ 165.745607][ T7032] ref_ctr_offset mismatch. inode: 0x1cd offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 165.855809][ T7030] netlink: 164 bytes leftover after parsing attributes in process `syz.2.328'. [ 166.059747][ T7039] IPv6: Can't replace route, no match found [ 166.088071][ T7037] syz.3.332 (7037) used obsolete PPPIOCDETACH ioctl [ 166.551868][ T7047] __sock_release: fasync list not empty! [ 167.752481][ T7089] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 167.784005][ T7089] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 167.797695][ T7089] netlink: 132 bytes leftover after parsing attributes in process `syz.3.347'. [ 168.143667][ T7099] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.350'. [ 170.171199][ T7095] __sock_release: fasync list not empty! [ 170.595378][ T7120] netlink: 132 bytes leftover after parsing attributes in process `syz.3.357'. [ 170.937215][ T7130] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.360'. [ 170.950415][ T7133] TCP: TCP_TX_DELAY enabled [ 171.062025][ T7133] netlink: 'syz.2.359': attribute type 3 has an invalid length. [ 171.111212][ T7133] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.359'. [ 172.171007][ T7140] __sock_release: fasync list not empty! [ 172.206692][ T7146] netlink: 'syz.1.365': attribute type 10 has an invalid length. [ 172.214545][ T7146] netlink: 40 bytes leftover after parsing attributes in process `syz.1.365'. [ 172.224018][ T7146] veth0_vlan: entered allmulticast mode [ 172.238946][ T7146] bridge0: port 4(veth0_vlan) entered blocking state [ 172.245894][ T7146] bridge0: port 4(veth0_vlan) entered disabled state [ 172.266850][ T7146] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 172.309566][ T7148] netlink: 'syz.3.364': attribute type 2 has an invalid length. [ 172.334456][ T7148] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 172.367881][ T7148] netlink: 9 bytes leftover after parsing attributes in process `syz.3.364'. [ 172.512870][ T7158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.366'. [ 172.538945][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.568906][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.677522][ T7158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.717975][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.730561][ T7158] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 172.748029][ T7158] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 172.860370][ T7160] netlink: 22 bytes leftover after parsing attributes in process `syz.1.367'. [ 173.062686][ T7166] netlink: 'syz.2.369': attribute type 12 has an invalid length. [ 173.087960][ T7166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.369'. [ 173.136612][ T7168] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 173.152050][ T7168] netlink: 'syz.1.371': attribute type 10 has an invalid length. [ 173.162410][ T7168] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.371'. [ 173.179407][ T7168] openvswitch: netlink: Message has 4 unknown bytes. [ 173.356781][ T7178] netlink: 'syz.0.375': attribute type 29 has an invalid length. [ 173.367154][ T7178] netlink: 'syz.0.375': attribute type 29 has an invalid length. [ 173.382446][ T7178] netlink: 'syz.0.375': attribute type 29 has an invalid length. [ 173.393819][ T7178] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.375'. [ 173.419476][ T7173] __sock_release: fasync list not empty! [ 173.438574][ T7178] netlink: 'syz.0.375': attribute type 29 has an invalid length. [ 173.462356][ T7178] netlink: 'syz.0.375': attribute type 29 has an invalid length. [ 173.611897][ T7181] netlink: 156 bytes leftover after parsing attributes in process `syz.3.376'. [ 173.631126][ T7181] netlink: 'syz.3.376': attribute type 28 has an invalid length. [ 173.639734][ T7181] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 173.653066][ T7181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.376'. [ 173.817144][ T7191] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.379'. [ 173.976062][ T7196] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.380'. [ 174.209345][ T7202] __sock_release: fasync list not empty! [ 174.863176][ T7217] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.389'. [ 175.085297][ T7214] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.387'. [ 175.346013][ T7224] bridge0: port 3(hsr0) entered disabled state [ 175.352683][ T7224] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.360502][ T7224] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.569768][ T7236] __sock_release: fasync list not empty! [ 178.816950][ T7244] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 178.888770][ T7248] veth1_macvtap: left promiscuous mode [ 178.894315][ T7248] macsec0: entered allmulticast mode [ 178.952366][ T7244] __nla_validate_parse: 2 callbacks suppressed [ 178.952530][ T7244] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.397'. [ 179.444562][ T7269] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.407'. [ 179.482972][ T7272] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.407'. [ 179.616681][ T7278] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.409'. [ 179.638949][ T7274] __sock_release: fasync list not empty! [ 180.328824][ T7303] __sock_release: fasync list not empty! [ 180.722412][ T7317] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.423'. [ 180.768430][ T7316] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.423'. [ 180.828041][ T7317] openvswitch: netlink: Key type 29 is not supported [ 180.842628][ T7323] validate_nla: 2 callbacks suppressed [ 180.842645][ T7323] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 180.845298][ T7316] openvswitch: netlink: Key type 29 is not supported [ 181.274051][ T7323] hsr_slave_0: left promiscuous mode [ 181.305242][ T7323] hsr_slave_1: left promiscuous mode [ 181.591449][ T7330] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.427'. [ 181.601049][ T7331] __sock_release: fasync list not empty! [ 182.179814][ T7336] netlink: 'syz.1.430': attribute type 12 has an invalid length. [ 182.209645][ T7336] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.430'. [ 182.636544][ T7356] netlink: 'syz.3.437': attribute type 12 has an invalid length. [ 182.662585][ T7356] netlink: 132 bytes leftover after parsing attributes in process `syz.3.437'. [ 182.699757][ T7350] netlink: 196 bytes leftover after parsing attributes in process `syz.2.435'. [ 182.759444][ T7358] __sock_release: fasync list not empty! [ 184.058988][ T7394] __sock_release: fasync list not empty! [ 184.136326][ T7399] netlink: 'syz.3.450': attribute type 2 has an invalid length. [ 184.159696][ T7399] netlink: 'syz.3.450': attribute type 8 has an invalid length. [ 184.167989][ T7399] __nla_validate_parse: 1 callbacks suppressed [ 184.168003][ T7399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.450'. [ 186.397237][ T7430] __sock_release: fasync list not empty! [ 187.955483][ T7452] netlink: 128 bytes leftover after parsing attributes in process `syz.0.464'. [ 187.979354][ T7452] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.499560][ T7473] __sock_release: fasync list not empty! [ 188.774832][ T7484] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.473'. [ 188.799905][ T7484] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 188.824651][ T7484] CPU: 1 PID: 7484 Comm: syz.1.473 Not tainted syzkaller #0 [ 188.832016][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 188.842138][ T7484] Call Trace: [ 188.845489][ T7484] [ 188.848471][ T7484] dump_stack_lvl+0x18c/0x250 [ 188.853243][ T7484] ? show_regs_print_info+0x20/0x20 [ 188.858513][ T7484] ? load_image+0x420/0x420 [ 188.863097][ T7484] sysfs_warn_dup+0x8e/0xa0 [ 188.867660][ T7484] sysfs_do_create_link_sd+0xc0/0x110 [ 188.873100][ T7484] device_add_class_symlinks+0x1cf/0x240 [ 188.878818][ T7484] device_add+0x4f9/0xc40 [ 188.883249][ T7484] wiphy_register+0x1d99/0x2ac0 [ 188.888221][ T7484] ? cfg80211_event_work+0x40/0x40 [ 188.893398][ T7484] ? minstrel_ht_alloc+0x88a/0x990 [ 188.898591][ T7484] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 188.904726][ T7484] ieee80211_register_hw+0x2dd8/0x3b30 [ 188.910258][ T7484] ? ieee80211_register_hw+0xfc1/0x3b30 [ 188.915871][ T7484] ? ieee80211_tasklet_handler+0x20/0x20 [ 188.921548][ T7484] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 188.927487][ T7484] ? __debug_object_init+0xec/0x450 [ 188.932741][ T7484] ? __asan_memset+0x22/0x40 [ 188.937397][ T7484] ? __hrtimer_init+0x189/0x270 [ 188.942293][ T7484] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 188.948099][ T7484] ? mac80211_hwsim_free+0x220/0x220 [ 188.953427][ T7484] ? rcu_is_watching+0x15/0xb0 [ 188.958244][ T7484] ? kstrndup+0xbd/0x140 [ 188.962538][ T7484] hwsim_new_radio_nl+0xdad/0x1a70 [ 188.967708][ T7484] ? __nla_validate+0x50/0x50 [ 188.972437][ T7484] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 188.978816][ T7484] ? __nla_parse+0x40/0x50 [ 188.983271][ T7484] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 188.989651][ T7484] genl_family_rcv_msg_doit+0x21a/0x310 [ 188.995249][ T7484] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 189.001200][ T7484] ? bpf_lsm_capable+0x9/0x10 [ 189.005945][ T7484] ? security_capable+0x89/0xb0 [ 189.010844][ T7484] genl_rcv_msg+0x611/0x7a0 [ 189.015397][ T7484] ? genl_bind+0x360/0x360 [ 189.019842][ T7484] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 189.026196][ T7484] ? perf_trace_lock+0x303/0x3b0 [ 189.031207][ T7484] netlink_rcv_skb+0x235/0x4c0 [ 189.036018][ T7484] ? genl_bind+0x360/0x360 [ 189.040475][ T7484] ? netlink_ack+0x1160/0x1160 [ 189.045289][ T7484] ? __lock_acquire+0x7d80/0x7d80 [ 189.050365][ T7484] ? down_read+0x1ac/0x2e0 [ 189.054833][ T7484] genl_rcv+0x28/0x40 [ 189.058846][ T7484] netlink_unicast+0x7b1/0x930 [ 189.063658][ T7484] netlink_sendmsg+0x8d0/0xbf0 [ 189.068481][ T7484] ? perf_trace_lock+0x303/0x3b0 [ 189.073466][ T7484] ? netlink_getsockopt+0x590/0x590 [ 189.078704][ T7484] ? aa_sock_msg_perm+0x94/0x150 [ 189.083689][ T7484] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.089010][ T7484] ? security_socket_sendmsg+0x80/0xa0 [ 189.094501][ T7484] ? netlink_getsockopt+0x590/0x590 [ 189.099739][ T7484] ____sys_sendmsg+0x61b/0x980 [ 189.104547][ T7484] ? __asan_memset+0x22/0x40 [ 189.109174][ T7484] ? __sys_sendmsg_sock+0x30/0x30 [ 189.114229][ T7484] ? __import_iovec+0x5f2/0x850 [ 189.119148][ T7484] ? import_iovec+0x73/0xa0 [ 189.123686][ T7484] ___sys_sendmsg+0x2a6/0x360 [ 189.128408][ T7484] ? __sys_sendmsg+0x2b0/0x2b0 [ 189.133295][ T7484] __se_sys_sendmsg+0x1d0/0x2c0 [ 189.138191][ T7484] ? __x64_sys_sendmsg+0x80/0x80 [ 189.143208][ T7484] ? lockdep_hardirqs_on+0x98/0x150 [ 189.148457][ T7484] do_syscall_64+0x55/0xb0 [ 189.152905][ T7484] ? clear_bhb_loop+0x40/0x90 [ 189.157624][ T7484] ? clear_bhb_loop+0x40/0x90 [ 189.162345][ T7484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.168296][ T7484] RIP: 0033:0x7f787a19ce59 [ 189.172755][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.192403][ T7484] RSP: 002b:00007f787b100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.200885][ T7484] RAX: ffffffffffffffda RBX: 00007f787a416090 RCX: 00007f787a19ce59 [ 189.209001][ T7484] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 189.217007][ T7484] RBP: 00007f787a232e6f R08: 0000000000000000 R09: 0000000000000000 [ 189.225012][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.233019][ T7484] R13: 00007f787a416128 R14: 00007f787a416090 R15: 00007ffeb05c9818 [ 189.241063][ T7484] [ 190.261003][ T7505] __sock_release: fasync list not empty! [ 190.283333][ T7502] netlink: 128 bytes leftover after parsing attributes in process `syz.3.480'. [ 190.286201][ T7508] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 190.309956][ T7508] netlink: 'syz.1.483': attribute type 3 has an invalid length. [ 190.319140][ T7502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.346700][ T7508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.483'. [ 190.375242][ T7511] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 190.398040][ T7511] netlink: 168 bytes leftover after parsing attributes in process `syz.1.483'. [ 190.696633][ T7517] __sock_release: fasync list not empty! [ 191.177978][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 191.334739][ T7532] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 191.404983][ T7532] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 191.415447][ T7532] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 191.451571][ T7532] team0: Port device wlan1 added [ 191.473967][ T7530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.183443][ T7558] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 192.203136][ T7554] __sock_release: fasync list not empty! [ 192.214621][ T7558] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 192.243912][ T7558] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.497'. [ 192.270863][ T7557] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 192.287422][ T7557] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 192.302446][ T7557] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.497'. [ 192.435353][ T7566] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.500'. [ 192.856023][ T7573] netlink: 'syz.1.504': attribute type 21 has an invalid length. [ 192.888667][ T7573] netlink: 128 bytes leftover after parsing attributes in process `syz.1.504'. [ 192.898509][ T7573] netlink: 'syz.1.504': attribute type 4 has an invalid length. [ 192.906240][ T7573] netlink: 3 bytes leftover after parsing attributes in process `syz.1.504'. [ 193.079293][ T7579] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.506'. [ 193.189574][ T7579] team0: Device wg1 is of different type [ 193.285523][ T7582] __sock_release: fasync list not empty! [ 193.312817][ T7584] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.507'. [ 193.428724][ T7581] veth0_vlan: left promiscuous mode [ 193.491859][ T7581] veth0_vlan: entered promiscuous mode [ 193.514836][ T7581] team0: Device veth0_vlan failed to register rx_handler [ 193.701897][ T7591] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 193.708886][ T7591] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 193.789423][ T7590] __sock_release: fasync list not empty! [ 193.819814][ T7587] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 193.992656][ T5779] Bluetooth: hci2: unexpected subevent 0x06 length: 150 > 10 [ 194.453633][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461048][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.905321][ T7619] tap0: tun_chr_ioctl cmd 1074025677 [ 194.922308][ T7619] tap0: linktype set to 0 [ 194.945846][ T7622] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 195.342070][ T7639] __nla_validate_parse: 3 callbacks suppressed [ 195.342088][ T7639] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.526'. [ 195.385111][ T7643] validate_nla: 3 callbacks suppressed [ 195.385126][ T7643] netlink: 'syz.1.528': attribute type 21 has an invalid length. [ 195.401444][ T7639] netlink: zone id is out of range [ 195.414640][ T7639] netlink: set zone limit has 8 unknown bytes [ 195.421831][ T7643] IPv6: NLM_F_CREATE should be specified when creating new route [ 195.434346][ T7643] IPv6: Can't replace route, no match found [ 195.446595][ T7639] netlink: 'syz.3.526': attribute type 10 has an invalid length. [ 195.458235][ T7639] netlink: 55 bytes leftover after parsing attributes in process `syz.3.526'. [ 195.483296][ T7639] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 195.735235][ T7657] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.530'. [ 195.843992][ T7639] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 196.045988][ T5779] Bluetooth: hci2: command tx timeout [ 196.571785][ T7668] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 196.594742][ T7668] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.535'. [ 197.144384][ T7687] netlink: 14 bytes leftover after parsing attributes in process `syz.2.539'. [ 197.338295][ T7689] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.540'. [ 197.816817][ T7687] team0: Port device team_slave_0 removed [ 197.905451][ T7692] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.542'. [ 197.915939][ T7692] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.542'. [ 197.929962][ T7692] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.542'. [ 198.152388][ T7703] netlink: 'syz.3.543': attribute type 9 has an invalid length. [ 198.181064][ T7703] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.543'. [ 198.381570][ T7706] netlink: 'syz.0.545': attribute type 2 has an invalid length. [ 198.400236][ T7706] netlink: 'syz.0.545': attribute type 8 has an invalid length. [ 199.985479][ T7739] syzkaller0: entered promiscuous mode [ 200.007557][ T7739] syzkaller0: entered allmulticast mode [ 200.209600][ T7748] netlink: 'syz.0.556': attribute type 2 has an invalid length. [ 202.016216][ T7748] netlink: 'syz.0.556': attribute type 4 has an invalid length. [ 202.024134][ T7748] __nla_validate_parse: 3 callbacks suppressed [ 202.024145][ T7748] netlink: 152 bytes leftover after parsing attributes in process `syz.0.556'. [ 202.072706][ T7748] .`: renamed from bond0 (while UP) [ 202.111788][ T7745] netlink: 'syz.0.556': attribute type 2 has an invalid length. [ 202.219642][ T7752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.557'. [ 202.383406][ T7754] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.559'. [ 202.405148][ T7754] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 202.900155][ T7774] netlink: 152 bytes leftover after parsing attributes in process `syz.3.567'. [ 202.929852][ T7774] tc_dump_action: action bad kind [ 203.167079][ T7781] C: renamed from team_slave_0 [ 203.263783][ T7781] netlink: 'syz.3.569': attribute type 4 has an invalid length. [ 203.293341][ T7781] netlink: 116 bytes leftover after parsing attributes in process `syz.3.569'. [ 203.360169][ T7781] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 204.390803][ T7807] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.575'. [ 204.536991][ T7811] netlink: 128 bytes leftover after parsing attributes in process `syz.3.576'. [ 204.585117][ T7811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.730079][ T7817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.737600][ T7817] IPv6: NLM_F_CREATE should be set when creating new route [ 204.745566][ T7817] IPv6: NLM_F_CREATE should be set when creating new route [ 204.753435][ T7817] IPv6: NLM_F_CREATE should be set when creating new route [ 204.953612][ T7824] netlink: 'syz.2.579': attribute type 9 has an invalid length. [ 204.974730][ T7824] netlink: 152128 bytes leftover after parsing attributes in process `syz.2.579'. [ 205.124891][ T7817] netlink: 'syz.2.579': attribute type 9 has an invalid length. [ 205.137944][ T7817] netlink: 154916 bytes leftover after parsing attributes in process `syz.2.579'. [ 205.234349][ T7837] netlink: 'syz.1.584': attribute type 22 has an invalid length. [ 205.372899][ T7837] netlink: 'syz.1.584': attribute type 15 has an invalid length. [ 205.403378][ T7837] netlink: 168 bytes leftover after parsing attributes in process `syz.1.584'. [ 206.748138][ T7821] Bluetooth: hci0: command 0x0406 tx timeout [ 206.755002][ T7821] Bluetooth: hci1: command 0x0406 tx timeout [ 206.761374][ T7821] Bluetooth: hci3: command 0x0406 tx timeout [ 206.767419][ T7821] Bluetooth: hci2: command 0x0406 tx timeout [ 206.875409][ T7886] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 206.952517][ T7886] netlink: 'syz.0.598': attribute type 10 has an invalid length. [ 207.047907][ T7886] __nla_validate_parse: 2 callbacks suppressed [ 207.047927][ T7886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'. [ 207.124697][ T7892] netlink: 'syz.1.599': attribute type 6 has an invalid length. [ 207.143915][ T7892] netlink: 168 bytes leftover after parsing attributes in process `syz.1.599'. [ 207.264407][ T7896] netlink: 'syz.2.600': attribute type 8 has an invalid length. [ 207.301131][ T7896] netlink: 'syz.2.600': attribute type 3 has an invalid length. [ 207.347726][ T7896] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.600'. [ 207.782911][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.599'. [ 207.833210][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.863341][ T7911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.197019][ T7911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.245543][ T7911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.377947][ T7943] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.613'. [ 209.470586][ T7943] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.613'. [ 209.589505][ T7956] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.614'. [ 210.612558][ T7982] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.740802][ T7983] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 210.768502][ T7983] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.623'. [ 210.819488][ T7986] netlink: 'syz.0.624': attribute type 21 has an invalid length. [ 210.837943][ T7986] netlink: 156 bytes leftover after parsing attributes in process `syz.0.624'. [ 212.423028][ T8025] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.636'. [ 213.305465][ T8046] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.643'. [ 213.512896][ T8050] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.645'. [ 213.674255][ T8054] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 214.116872][ T8068] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.784220][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.970863][ T8090] netlink: 'syz.0.657': attribute type 5 has an invalid length. [ 215.614462][ T8103] netlink: 'syz.1.662': attribute type 10 has an invalid length. [ 216.019270][ T8117] netlink: 'syz.0.666': attribute type 29 has an invalid length. [ 216.049091][ T8117] netlink: 'syz.0.666': attribute type 29 has an invalid length. [ 216.069057][ T8123] netlink: 'syz.0.666': attribute type 29 has an invalid length. [ 216.096812][ T8117] netlink: 'syz.0.666': attribute type 29 has an invalid length. [ 216.425517][ T8131] netlink: 'syz.3.670': attribute type 10 has an invalid length. [ 216.501175][ T8131] netlink: 153528 bytes leftover after parsing attributes in process `syz.3.670'. [ 216.581196][ T8131] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 216.747401][ T8135] batadv0: entered promiscuous mode [ 217.096232][ T8138] netlink: 'syz.3.672': attribute type 39 has an invalid length. [ 217.142102][ T8140] netlink: 'syz.2.673': attribute type 10 has an invalid length. [ 217.177915][ T8138] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.672'. [ 217.216836][ T8138] netlink: del zone limit has 8 unknown bytes [ 217.324599][ T8150] syzkaller0: entered promiscuous mode [ 217.335864][ T8150] syzkaller0: entered allmulticast mode [ 218.933014][ T8185] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.685'. [ 219.680650][ T8170] netlink: 830 bytes leftover after parsing attributes in process `syz.2.681'. [ 219.699137][ T8185] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.685'. [ 219.913212][ T8196] netlink: 144 bytes leftover after parsing attributes in process `syz.1.689'. [ 220.423196][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.459231][ T8194] delete_channel: no stack [ 220.644389][ T8217] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.694'. [ 220.892842][ T8223] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.696'. [ 221.207293][ T8244] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 221.601895][ T8258] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 221.755435][ T8267] netlink: 'syz.2.708': attribute type 46 has an invalid length. [ 222.358268][ T8283] netlink: 'syz.0.713': attribute type 29 has an invalid length. [ 222.475202][ T8283] netlink: 'syz.0.713': attribute type 29 has an invalid length. [ 222.556357][ T8291] netlink: 'syz.0.713': attribute type 3 has an invalid length. [ 222.556389][ T8291] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.713'. [ 222.617734][ T8288] netlink: 'syz.0.713': attribute type 29 has an invalid length. [ 223.376839][ T8312] netlink: 'syz.0.719': attribute type 29 has an invalid length. [ 223.385441][ T8312] netlink: 'syz.0.719': attribute type 29 has an invalid length. [ 223.785903][ T8333] netlink: 'syz.0.726': attribute type 2 has an invalid length. [ 223.804683][ T8333] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.726'. [ 224.062819][ T8341] syz.3.728[8341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.063072][ T8341] syz.3.728[8341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.416796][ T8348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.730'. [ 224.652878][ T8356] geneve0: entered promiscuous mode [ 224.765291][ T8356] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 225.055616][ T8377] netlink: 144 bytes leftover after parsing attributes in process `syz.1.739'. [ 225.100365][ T8377] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 225.292978][ T8387] netlink: 156 bytes leftover after parsing attributes in process `syz.1.742'. [ 225.503059][ T8390] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.743'. [ 225.581913][ T5085] Bluetooth: hci1: ISO packet for unknown connection handle 1854 [ 225.649637][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.746'. [ 225.713796][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.746'. [ 225.732508][ T8400] netlink: 60 bytes leftover after parsing attributes in process `syz.1.746'. [ 226.460599][ T8433] validate_nla: 4 callbacks suppressed [ 226.460619][ T8433] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 226.864611][ T8433] team0 (unregistering): Port device team_slave_1 removed [ 227.191553][ T8433] team0 (unregistering): Port device wlan1 removed [ 227.341971][ T8443] netlink: 'syz.3.760': attribute type 10 has an invalid length. [ 227.364355][ T8443] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.760'. [ 227.766628][ T8448] netlink: 'syz.2.761': attribute type 10 has an invalid length. [ 227.832571][ T8448] team0: Device ipvlan1 failed to register rx_handler [ 228.649675][ T8483] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 228.759537][ T8483] geneve0: entered promiscuous mode [ 229.014865][ T8483] .`: (slave geneve0): Enslaving as an active interface with an up link [ 230.139958][ T8522] syzkaller0: entered promiscuous mode [ 230.145777][ T8522] syzkaller0: entered allmulticast mode [ 231.254770][ T8544] netlink: 192188 bytes leftover after parsing attributes in process `syz.0.786'. [ 231.333404][ T8544] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 234.654265][ T8588] netlink: 'syz.3.800': attribute type 21 has an invalid length. [ 234.695915][ T8588] netlink: 128 bytes leftover after parsing attributes in process `syz.3.800'. [ 234.737024][ T8588] netlink: 'syz.3.800': attribute type 5 has an invalid length. [ 234.775895][ T8588] netlink: 3 bytes leftover after parsing attributes in process `syz.3.800'. [ 235.305263][ T8600] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.795'. [ 235.378696][ T8602] mac80211_hwsim hwsim9 .3c: renamed from wlan1 [ 235.506965][ T8604] netlink: 'syz.1.795': attribute type 3 has an invalid length. [ 235.518454][ T8604] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.795'. [ 237.985792][ T8619] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 238.022883][ T8619] netlink: 2 bytes leftover after parsing attributes in process `syz.1.806'. [ 238.072420][ T8619] bond0: entered promiscuous mode [ 238.089307][ T8619] bond_slave_0: entered promiscuous mode [ 238.095311][ T8619] bond_slave_1: entered promiscuous mode [ 238.125160][ T8619] bridge0: entered promiscuous mode [ 238.153497][ T8619] bridge0: port 4(bond0) entered blocking state [ 238.181292][ T8619] bridge0: port 4(bond0) entered disabled state [ 238.204528][ T8619] bond0: entered allmulticast mode [ 238.246310][ T8619] bond_slave_0: entered allmulticast mode [ 238.277408][ T8619] bond_slave_1: entered allmulticast mode [ 238.307310][ T8619] bridge0: entered allmulticast mode [ 238.338003][ T8619] geneve0: entered allmulticast mode [ 238.912107][ T8628] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.810'. [ 238.926785][ T8628] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.810'. [ 238.940624][ T8619] bond0: left allmulticast mode [ 238.945741][ T8619] bond_slave_0: left allmulticast mode [ 238.954961][ T8619] bond_slave_1: left allmulticast mode [ 238.961993][ T8619] bridge0: left allmulticast mode [ 238.967102][ T8619] geneve0: left allmulticast mode [ 239.184465][ T8632] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.812'. [ 239.698469][ T8639] tap0: tun_chr_ioctl cmd 1074025675 [ 239.711115][ T8639] tap0: persist enabled [ 239.751244][ T8639] tap0: tun_chr_ioctl cmd 21731 [ 239.771058][ T8639] tap0: tun_chr_ioctl cmd 1074025675 [ 239.776754][ T8639] tap0: persist enabled [ 239.911184][ T8646] netlink: 763 bytes leftover after parsing attributes in process `syz.1.815'. [ 240.170781][ T8653] netlink: 'syz.3.816': attribute type 4 has an invalid length. [ 240.204174][ T8653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.816'. [ 240.283529][ T8653] netlink: 47419 bytes leftover after parsing attributes in process `syz.3.816'. [ 240.481388][ T8660] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 240.902391][ T8667] delete_channel: no stack [ 241.088526][ T8681] sctp: [Deprecated]: syz.3.826 (pid 8681) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.088526][ T8681] Use struct sctp_sack_info instead [ 241.216120][ T5085] Bluetooth: hci2: ISO packet for unknown connection handle 3078 [ 241.251070][ T8688] netlink: 'syz.0.828': attribute type 10 has an invalid length. [ 241.280504][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.288325][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.404675][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.411967][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.420241][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.427385][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.457220][ T8688] .`: (slave bridge0): Enslaving as an active interface with an up link [ 241.562808][ T8699] netlink: 'syz.1.832': attribute type 39 has an invalid length. [ 242.045118][ T8713] netlink: 'syz.3.836': attribute type 2 has an invalid length. [ 242.066409][ T8713] netlink: 132 bytes leftover after parsing attributes in process `syz.3.836'. [ 242.495957][ T8737] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 243.467812][ T8751] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 243.473720][ T8751] pim6reg1: linktype set to 776 [ 243.524575][ T8754] netlink: 35083 bytes leftover after parsing attributes in process `syz.2.845'. [ 243.839756][ T8763] netlink: 14 bytes leftover after parsing attributes in process `syz.0.848'. [ 244.298448][ T8776] netlink: 168 bytes leftover after parsing attributes in process `syz.0.853'. [ 244.417379][ T8780] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 244.454167][ T8780] team0: Port device wlan1 added [ 244.517855][ T8785] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.856'. [ 245.574771][ T8805] sock: sock_timestamping_bind_phc: sock not bind to device [ 246.323650][ T8836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.873'. [ 246.513744][ T8835] syzkaller0: entered promiscuous mode [ 246.525185][ T8835] syzkaller0: entered allmulticast mode [ 247.070999][ T33] wlan1: Trigger new scan to find an IBSS to join [ 248.212521][ T8856] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 248.239531][ T8856] veth1_to_bridge: entered promiscuous mode [ 248.246301][ T8856] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 248.256723][ T8858] netlink: 'syz.2.879': attribute type 21 has an invalid length. [ 248.284596][ T8858] netlink: 156 bytes leftover after parsing attributes in process `syz.2.879'. [ 248.370780][ T8863] netlink: 128 bytes leftover after parsing attributes in process `syz.3.880'. [ 248.886966][ T8882] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 249.142020][ T8889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.888'. [ 249.224993][ T8892] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.890'. [ 249.252793][ T8891] netlink: 'syz.3.889': attribute type 2 has an invalid length. [ 249.307964][ T8896] veth0_vlan: entered allmulticast mode [ 249.334341][ T8896] veth0_vlan: left promiscuous mode [ 249.355430][ T8896] veth0_vlan: entered promiscuous mode [ 249.601741][ T8908] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.894'. [ 249.619662][ T8908] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.894'. [ 249.723040][ T8907] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.894'. [ 249.917304][ T8919] netlink: 'syz.2.898': attribute type 29 has an invalid length. [ 249.957192][ T8925] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.900'. [ 249.975335][ T8919] netlink: 'syz.2.898': attribute type 29 has an invalid length. [ 249.998029][ T8926] netlink: 'syz.2.898': attribute type 29 has an invalid length. [ 250.103936][ T8923] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 250.693900][ T8930] netlink: 164 bytes leftover after parsing attributes in process `syz.0.901'. [ 250.876703][ T8943] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 250.885129][ T8943] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.905'. [ 250.916216][ T8942] netlink: 'syz.2.904': attribute type 21 has an invalid length. [ 250.929090][ T8942] netlink: 168 bytes leftover after parsing attributes in process `syz.2.904'. [ 251.997087][ T8986] netlink: 'syz.1.914': attribute type 11 has an invalid length. [ 252.030666][ T12] wlan1: Trigger new scan to find an IBSS to join [ 253.025152][ T3477] wlan1: Creating new IBSS network, BSSID 86:fe:b4:4a:bf:a8 [ 253.036477][ T8993] delete_channel: no stack [ 253.092547][ T9014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.923'. [ 253.240519][ T9021] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 253.559529][ T9036] netlink: 'syz.3.929': attribute type 10 has an invalid length. [ 253.580149][ T9036] ipvlan1: entered promiscuous mode [ 253.585706][ T9036] ipvlan1: entered allmulticast mode [ 253.596852][ T9036] veth0_vlan: entered allmulticast mode [ 253.626206][ T9036] bridge0: port 3(ipvlan1) entered blocking state [ 253.634171][ T9036] bridge0: port 3(ipvlan1) entered disabled state [ 253.672942][ T9036] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 254.240970][ T9068] __nla_validate_parse: 3 callbacks suppressed [ 254.241024][ T9068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 254.260276][ T9068] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 254.359365][ T9073] netlink: 'syz.1.940': attribute type 13 has an invalid length. [ 254.385355][ T9073] netlink: 172 bytes leftover after parsing attributes in process `syz.1.940'. [ 254.449106][ T9071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'. [ 254.507426][ T9075] netlink: 'syz.1.940': attribute type 13 has an invalid length. [ 254.538213][ T9075] netlink: 172 bytes leftover after parsing attributes in process `syz.1.940'. [ 254.672580][ T9080] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.942'. [ 255.135052][ T9097] netlink: 'syz.1.946': attribute type 10 has an invalid length. [ 255.786934][ T9109] netlink: 'syz.3.950': attribute type 10 has an invalid length. [ 255.839376][ T9101] delete_channel: no stack [ 255.847957][ T9109] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.857138][ T9109] .`: (slave team0): Enslaving as an active interface with an up link [ 255.873220][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.881418][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.101426][ T9120] netlink: 'syz.1.953': attribute type 46 has an invalid length. [ 256.110816][ T9120] netlink: 'syz.1.953': attribute type 46 has an invalid length. [ 256.167805][ T9120] netlink: 'syz.1.953': attribute type 21 has an invalid length. [ 256.202050][ T9125] netlink: 16358 bytes leftover after parsing attributes in process `syz.1.953'. [ 256.226618][ T9123] can: request_module (can-proto-0) failed. [ 257.971374][ T9168] netlink: 'syz.0.968': attribute type 3 has an invalid length. [ 257.989861][ T9168] netlink: 'syz.0.968': attribute type 2 has an invalid length. [ 257.999536][ T9168] netlink: 132500 bytes leftover after parsing attributes in process `syz.0.968'. [ 258.177796][ T9175] netlink: 144 bytes leftover after parsing attributes in process `syz.2.970'. [ 258.249922][ T9177] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.971'. [ 258.259985][ T9177] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 258.456134][ T9184] veth0_vlan: left promiscuous mode [ 258.545552][ T9184] veth0_vlan: entered promiscuous mode [ 258.596112][ T9184] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 258.873012][ T9207] validate_nla: 1 callbacks suppressed [ 258.873029][ T9207] netlink: 'syz.3.980': attribute type 29 has an invalid length. [ 258.891774][ T9207] netlink: 'syz.3.980': attribute type 29 has an invalid length. [ 258.935895][ T9212] netlink: 'syz.3.980': attribute type 29 has an invalid length. [ 258.951411][ T9207] netlink: 'syz.3.980': attribute type 29 has an invalid length. [ 258.968822][ T9207] netlink: 'syz.3.980': attribute type 29 has an invalid length. [ 259.032853][ T9211] netlink: 'syz.2.979': attribute type 2 has an invalid length. [ 259.041581][ T9211] netlink: 'syz.2.979': attribute type 1 has an invalid length. [ 259.230253][ T9218] netlink: 'syz.1.981': attribute type 25 has an invalid length. [ 259.248131][ T9218] netlink: 'syz.1.981': attribute type 5 has an invalid length. [ 259.578191][ T9239] syz.2.991[9239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.578348][ T9239] syz.2.991[9239] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.333677][ T9265] netlink: 'syz.2.997': attribute type 1 has an invalid length. [ 260.367432][ T9265] __nla_validate_parse: 4 callbacks suppressed [ 260.367448][ T9265] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.997'. [ 260.690574][ T9278] netlink: zone id is out of range [ 260.696412][ T9278] netlink: set zone limit has 8 unknown bytes [ 260.728754][ T9278] netlink: 55 bytes leftover after parsing attributes in process `syz.2.999'. [ 260.748213][ T9278] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 261.079319][ T9278] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 261.540950][ T5085] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 261.706399][ T9303] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1008'. [ 261.752169][ T9305] netlink: 7906 bytes leftover after parsing attributes in process `syz.0.1009'. [ 261.950377][ T9309] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1011'. [ 262.734679][ T9346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1023'. [ 262.874779][ T9340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.120281][ T9350] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1024'. [ 263.203467][ T9352] tc_dump_action: action bad kind [ 263.933744][ T9361] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1028'. [ 264.708861][ T9378] validate_nla: 5 callbacks suppressed [ 264.708887][ T9378] netlink: 'syz.1.1033': attribute type 153 has an invalid length. [ 264.797992][ T9378] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1033'. [ 265.023714][ T9384] netlink: 'syz.2.1034': attribute type 4 has an invalid length. [ 265.188897][ T9384] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1034'. [ 265.443297][ T9383] delete_channel: no stack [ 266.180944][ T9402] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1042'. [ 267.193940][ T9420] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 267.215244][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1048'. [ 267.278820][ T9420] vcan0: entered promiscuous mode [ 267.284297][ T9420] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 268.623831][ T9454] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1056'. [ 269.135236][ T9461] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1059'. [ 269.193488][ T9461] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 269.208421][ T9461] CPU: 0 PID: 9461 Comm: syz.1.1059 Not tainted syzkaller #0 [ 269.215870][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 269.225986][ T9461] Call Trace: [ 269.229299][ T9461] [ 269.232260][ T9461] dump_stack_lvl+0x18c/0x250 [ 269.236991][ T9461] ? show_regs_print_info+0x20/0x20 [ 269.242241][ T9461] ? load_image+0x420/0x420 [ 269.246799][ T9461] sysfs_warn_dup+0x8e/0xa0 [ 269.251361][ T9461] sysfs_do_create_link_sd+0xc0/0x110 [ 269.256771][ T9461] device_add_class_symlinks+0x1cf/0x240 [ 269.262454][ T9461] device_add+0x4f9/0xc40 [ 269.266832][ T9461] wiphy_register+0x1d99/0x2ac0 [ 269.271794][ T9461] ? cfg80211_event_work+0x40/0x40 [ 269.276949][ T9461] ? minstrel_ht_alloc+0x88a/0x990 [ 269.282097][ T9461] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 269.288213][ T9461] ieee80211_register_hw+0x2dd8/0x3b30 [ 269.293730][ T9461] ? ieee80211_register_hw+0xfc1/0x3b30 [ 269.299331][ T9461] ? ieee80211_tasklet_handler+0x20/0x20 [ 269.305001][ T9461] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 269.310946][ T9461] ? __debug_object_init+0xec/0x450 [ 269.316198][ T9461] ? __asan_memset+0x22/0x40 [ 269.320831][ T9461] ? __hrtimer_init+0x189/0x270 [ 269.325742][ T9461] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 269.331535][ T9461] ? mac80211_hwsim_free+0x220/0x220 [ 269.336879][ T9461] ? rcu_is_watching+0x15/0xb0 [ 269.341698][ T9461] ? kstrndup+0xbd/0x140 [ 269.346001][ T9461] hwsim_new_radio_nl+0xdad/0x1a70 [ 269.351173][ T9461] ? __nla_validate+0x50/0x50 [ 269.355925][ T9461] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 269.362392][ T9461] ? __nla_parse+0x40/0x50 [ 269.366849][ T9461] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 269.373247][ T9461] genl_family_rcv_msg_doit+0x21a/0x310 [ 269.378846][ T9461] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 269.384798][ T9461] ? bpf_lsm_capable+0x9/0x10 [ 269.389520][ T9461] ? security_capable+0x89/0xb0 [ 269.394581][ T9461] genl_rcv_msg+0x611/0x7a0 [ 269.399143][ T9461] ? genl_bind+0x360/0x360 [ 269.403599][ T9461] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 269.409968][ T9461] ? ref_tracker_free+0x686/0x830 [ 269.415029][ T9461] ? __kasan_kmalloc_large+0x8b/0xa0 [ 269.420374][ T9461] netlink_rcv_skb+0x235/0x4c0 [ 269.425184][ T9461] ? genl_bind+0x360/0x360 [ 269.429643][ T9461] ? netlink_ack+0x1160/0x1160 [ 269.434461][ T9461] ? __lock_acquire+0x7d80/0x7d80 [ 269.439544][ T9461] ? down_read+0x1ac/0x2e0 [ 269.444011][ T9461] genl_rcv+0x28/0x40 [ 269.448028][ T9461] netlink_unicast+0x7b1/0x930 [ 269.452839][ T9461] netlink_sendmsg+0x8d0/0xbf0 [ 269.457662][ T9461] ? netlink_getsockopt+0x590/0x590 [ 269.462914][ T9461] ? aa_sock_msg_perm+0x94/0x150 [ 269.467898][ T9461] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 269.473230][ T9461] ? security_socket_sendmsg+0x80/0xa0 [ 269.478735][ T9461] ? netlink_getsockopt+0x590/0x590 [ 269.483979][ T9461] ____sys_sendmsg+0x61b/0x980 [ 269.488795][ T9461] ? __asan_memset+0x22/0x40 [ 269.493425][ T9461] ? __sys_sendmsg_sock+0x30/0x30 [ 269.498489][ T9461] ? __import_iovec+0x5f2/0x850 [ 269.503391][ T9461] ? import_iovec+0x73/0xa0 [ 269.507936][ T9461] ___sys_sendmsg+0x2a6/0x360 [ 269.512673][ T9461] ? __sys_sendmsg+0x2b0/0x2b0 [ 269.517540][ T9461] __se_sys_sendmsg+0x1d0/0x2c0 [ 269.522526][ T9461] ? __x64_sys_sendmsg+0x80/0x80 [ 269.527527][ T9461] ? lockdep_hardirqs_on+0x98/0x150 [ 269.532805][ T9461] do_syscall_64+0x55/0xb0 [ 269.537265][ T9461] ? clear_bhb_loop+0x40/0x90 [ 269.541982][ T9461] ? clear_bhb_loop+0x40/0x90 [ 269.546696][ T9461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.552639][ T9461] RIP: 0033:0x7f787a19ce59 [ 269.557097][ T9461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.576749][ T9461] RSP: 002b:00007f787b121028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.585206][ T9461] RAX: ffffffffffffffda RBX: 00007f787a415fa0 RCX: 00007f787a19ce59 [ 269.593215][ T9461] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 269.601228][ T9461] RBP: 00007f787a232e6f R08: 0000000000000000 R09: 0000000000000000 [ 269.609239][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.617242][ T9461] R13: 00007f787a416038 R14: 00007f787a415fa0 R15: 00007ffeb05c9818 [ 269.625268][ T9461] [ 269.743321][ T33] tipc: Subscription rejected, illegal request [ 270.084107][ T9478] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1065'. [ 270.126679][ T9481] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 270.171290][ T9478] netlink: get zone limit has 4 unknown bytes [ 270.188804][ T9481] bond0: (slave bond_slave_0): Releasing backup interface [ 270.579654][ T9487] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1066'. [ 271.508276][ T9500] netlink: 'syz.2.1070': attribute type 1 has an invalid length. [ 271.521656][ T9500] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1070'. [ 271.548122][ T9502] netlink: 'syz.1.1071': attribute type 3 has an invalid length. [ 271.558583][ T9502] netlink: 'syz.1.1071': attribute type 6 has an invalid length. [ 271.577251][ T9502] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1071'. [ 271.822025][ T9514] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1075'. [ 272.058289][ T9528] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1079'. [ 272.068776][ T9528] batadv_slave_1: entered promiscuous mode [ 272.640392][ T9545] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1083'. [ 273.512598][ T9563] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1090'. [ 273.553189][ T9563] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 273.579573][ T9563] CPU: 1 PID: 9563 Comm: syz.1.1090 Not tainted syzkaller #0 [ 273.587008][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.597087][ T9563] Call Trace: [ 273.600392][ T9563] [ 273.603348][ T9563] dump_stack_lvl+0x18c/0x250 [ 273.608065][ T9563] ? show_regs_print_info+0x20/0x20 [ 273.613296][ T9563] ? load_image+0x420/0x420 [ 273.617837][ T9563] sysfs_warn_dup+0x8e/0xa0 [ 273.622372][ T9563] sysfs_do_create_link_sd+0xc0/0x110 [ 273.627774][ T9563] device_add_class_symlinks+0x1cf/0x240 [ 273.633449][ T9563] device_add+0x4f9/0xc40 [ 273.637828][ T9563] wiphy_register+0x1d99/0x2ac0 [ 273.642723][ T9563] ? cfg80211_event_work+0x40/0x40 [ 273.647857][ T9563] ? minstrel_ht_alloc+0x88a/0x990 [ 273.653020][ T9563] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 273.659125][ T9563] ieee80211_register_hw+0x2dd8/0x3b30 [ 273.664617][ T9563] ? ieee80211_register_hw+0xfc1/0x3b30 [ 273.670201][ T9563] ? ieee80211_tasklet_handler+0x20/0x20 [ 273.675869][ T9563] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 273.681808][ T9563] ? __debug_object_init+0xec/0x450 [ 273.687050][ T9563] ? __asan_memset+0x22/0x40 [ 273.691676][ T9563] ? __hrtimer_init+0x189/0x270 [ 273.696566][ T9563] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 273.702345][ T9563] ? mac80211_hwsim_free+0x220/0x220 [ 273.707662][ T9563] ? rcu_is_watching+0x15/0xb0 [ 273.712453][ T9563] ? kstrndup+0xbd/0x140 [ 273.716727][ T9563] hwsim_new_radio_nl+0xdad/0x1a70 [ 273.721889][ T9563] ? __nla_validate+0x50/0x50 [ 273.726609][ T9563] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 273.732977][ T9563] ? __nla_parse+0x40/0x50 [ 273.737414][ T9563] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 273.743779][ T9563] genl_family_rcv_msg_doit+0x21a/0x310 [ 273.749366][ T9563] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 273.755288][ T9563] ? bpf_lsm_capable+0x9/0x10 [ 273.759994][ T9563] ? security_capable+0x89/0xb0 [ 273.764882][ T9563] genl_rcv_msg+0x611/0x7a0 [ 273.769414][ T9563] ? genl_bind+0x360/0x360 [ 273.773860][ T9563] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 273.780220][ T9563] ? perf_trace_lock+0xfc/0x3b0 [ 273.785091][ T9563] ? __kasan_kmalloc_large+0x8b/0xa0 [ 273.790410][ T9563] netlink_rcv_skb+0x235/0x4c0 [ 273.795204][ T9563] ? genl_bind+0x360/0x360 [ 273.799655][ T9563] ? netlink_ack+0x1160/0x1160 [ 273.804469][ T9563] ? __lock_acquire+0x7d80/0x7d80 [ 273.809556][ T9563] ? down_read+0x1ac/0x2e0 [ 273.814002][ T9563] genl_rcv+0x28/0x40 [ 273.818009][ T9563] netlink_unicast+0x7b1/0x930 [ 273.822804][ T9563] netlink_sendmsg+0x8d0/0xbf0 [ 273.827608][ T9563] ? netlink_getsockopt+0x590/0x590 [ 273.832836][ T9563] ? aa_sock_msg_perm+0x94/0x150 [ 273.837809][ T9563] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.843128][ T9563] ? security_socket_sendmsg+0x80/0xa0 [ 273.848613][ T9563] ? netlink_getsockopt+0x590/0x590 [ 273.853841][ T9563] ____sys_sendmsg+0x61b/0x980 [ 273.858636][ T9563] ? __asan_memset+0x22/0x40 [ 273.863257][ T9563] ? __sys_sendmsg_sock+0x30/0x30 [ 273.868330][ T9563] ? __import_iovec+0x5f2/0x850 [ 273.873206][ T9563] ? import_iovec+0x73/0xa0 [ 273.877755][ T9563] ___sys_sendmsg+0x2a6/0x360 [ 273.882477][ T9563] ? __sys_sendmsg+0x2b0/0x2b0 [ 273.887298][ T9563] ? trace_call_bpf+0xc3/0x6c0 [ 273.892127][ T9563] __se_sys_sendmsg+0x1d0/0x2c0 [ 273.897014][ T9563] ? perf_trace_preemptirq_template+0x269/0x330 [ 273.903287][ T9563] ? __x64_sys_sendmsg+0x80/0x80 [ 273.908286][ T9563] ? lockdep_hardirqs_on+0x98/0x150 [ 273.913529][ T9563] do_syscall_64+0x55/0xb0 [ 273.917977][ T9563] ? clear_bhb_loop+0x40/0x90 [ 273.922677][ T9563] ? clear_bhb_loop+0x40/0x90 [ 273.927382][ T9563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 273.933309][ T9563] RIP: 0033:0x7f787a19ce59 [ 273.937766][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.957414][ T9563] RSP: 002b:00007f787b100028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.965860][ T9563] RAX: ffffffffffffffda RBX: 00007f787a416090 RCX: 00007f787a19ce59 [ 273.973862][ T9563] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000048 [ 273.981863][ T9563] RBP: 00007f787a232e6f R08: 0000000000000000 R09: 0000000000000000 [ 273.989861][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.997862][ T9563] R13: 00007f787a416128 R14: 00007f787a416090 R15: 00007ffeb05c9818 [ 274.005882][ T9563] [ 274.580915][ T9573] netlink: 64851 bytes leftover after parsing attributes in process `syz.1.1091'. [ 275.621709][ T9602] sctp: [Deprecated]: syz.1.1100 (pid 9602) Use of int in maxseg socket option. [ 275.621709][ T9602] Use struct sctp_assoc_value instead [ 278.451992][ T9615] netlink: 'syz.0.1104': attribute type 13 has an invalid length. [ 278.478243][ T9615] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.1104'. [ 280.536804][ T9654] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1114'. [ 280.827713][ T9654] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1114'. [ 280.842947][ T9651] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1114'. [ 280.879802][ T9657] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1114'. [ 281.045715][ T9663] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1116'. [ 281.066875][ T9666] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1117'. [ 281.078211][ T9668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1116'. [ 281.432233][ T9678] netlink: 'syz.0.1120': attribute type 27 has an invalid length. [ 281.501121][ T9678] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 281.526979][ T9678] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1120'. [ 281.688234][ T9682] netlink: 'syz.0.1120': attribute type 10 has an invalid length. [ 281.930091][ T9695] netlink: 'syz.1.1126': attribute type 1 has an invalid length. [ 281.938847][ T9695] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.1126'. [ 282.546555][ T9713] syzkaller0: entered promiscuous mode [ 282.566320][ T9713] syzkaller0: entered allmulticast mode [ 283.507472][ T9736] netlink: 'syz.0.1136': attribute type 6 has an invalid length. [ 283.516427][ T9736] __nla_validate_parse: 2 callbacks suppressed [ 283.516541][ T9736] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1136'. [ 283.981947][ T9752] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1140'. [ 284.012349][ T9752] netlink: zone id is out of range [ 284.186923][ T9763] netlink: 'syz.3.1145': attribute type 11 has an invalid length. [ 284.212343][ T9763] netlink: 'syz.3.1145': attribute type 22 has an invalid length. [ 284.368387][ T9772] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1147'. [ 286.234382][ T9786] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1152'. [ 286.564959][ T9790] netlink: 'syz.3.1154': attribute type 7 has an invalid length. [ 287.427652][ T9803] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 287.505495][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.816446][ T9828] netlink: 'syz.2.1166': attribute type 10 has an invalid length. [ 287.825311][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1166'. [ 287.850799][ T9828] caif0: entered promiscuous mode [ 287.857029][ T9828] caif0: entered allmulticast mode [ 287.901986][ T9828] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.997973][ T9830] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1167'. [ 288.008982][ T9830] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 288.029662][ T9830] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 288.331191][ T9850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1171'. [ 288.741761][ T9865] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 288.749914][ T9865] netlink: 'syz.0.1175': attribute type 6 has an invalid length. [ 288.760733][ T9866] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 288.769039][ T9866] netlink: 'syz.0.1175': attribute type 6 has an invalid length. [ 288.887923][ T9872] IPv6: pim6reg1: Disabled Multicast RS [ 289.113964][ T9881] : renamed from vlan0 (while UP) [ 289.381125][ T9895] netlink: 'syz.2.1182': attribute type 9 has an invalid length. [ 289.412070][ T9898] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1184'. [ 289.433396][ T9898] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 289.449436][ T9895] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1182'. [ 290.053484][ T9898] netlink: 'syz.0.1184': attribute type 8 has an invalid length. [ 290.077445][ T9898] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1184'. [ 290.399568][ T9924] netlink: 'syz.1.1191': attribute type 2 has an invalid length. [ 290.407459][ T9924] netlink: 'syz.1.1191': attribute type 8 has an invalid length. [ 290.449555][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1191'. [ 290.510481][ T9928] netlink: 'syz.3.1192': attribute type 21 has an invalid length. [ 290.546697][ T9928] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1192'. [ 290.914209][ T9939] syz.3.1195[9939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.914525][ T9939] syz.3.1195[9939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.919597][ T9935] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1195'. [ 291.937159][ T9960] netlink: 'syz.1.1200': attribute type 3 has an invalid length. [ 291.947143][ T9960] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.1200'. [ 292.031315][ T9967] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1202'. [ 292.050028][ T9967] bridge_slave_1: default FDB implementation only supports local addresses [ 292.120394][ T9970] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 292.151543][ T9969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 292.191059][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1205'. [ 292.207523][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1205'. [ 294.532028][T10057] __nla_validate_parse: 2 callbacks suppressed [ 294.532046][T10057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1228'. [ 294.631617][T10057] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1228'. [ 294.662529][T10049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1228'. [ 294.709406][T10054] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1226'. [ 302.832935][T10130] validate_nla: 4 callbacks suppressed [ 302.832956][T10130] netlink: 'syz.2.1249': attribute type 10 has an invalid length. [ 302.846465][T10130] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1249'. [ 303.028643][T10143] netlink: 'syz.3.1252': attribute type 29 has an invalid length. [ 303.051723][T10143] netlink: 'syz.3.1252': attribute type 29 has an invalid length. [ 303.085097][T10148] netlink: 'syz.3.1252': attribute type 29 has an invalid length. [ 303.139271][T10143] netlink: 'syz.3.1252': attribute type 3 has an invalid length. [ 303.147089][T10143] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1252'. [ 304.244617][T10187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 304.342909][T10186] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 304.704864][T10187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 304.715213][T10190] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1265'. [ 304.921490][T10197] netlink: 'syz.1.1268': attribute type 27 has an invalid length. [ 304.929876][T10197] netlink: 'syz.1.1268': attribute type 4 has an invalid length. [ 304.942684][T10197] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1268'. [ 305.022695][T10198] netlink: 'syz.1.1268': attribute type 10 has an invalid length. [ 305.216517][T10202] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1270'. [ 306.066321][T10226] netlink: 'syz.0.1275': attribute type 3 has an invalid length. [ 306.074781][T10226] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1275'. [ 307.391290][T10264] sock: sock_set_timeout: `syz.2.1287' (pid 10264) tries to set negative timeout [ 307.878408][T10281] netlink: 'syz.2.1292': attribute type 29 has an invalid length. [ 307.886747][T10281] netlink: 'syz.2.1292': attribute type 29 has an invalid length. [ 307.901506][T10281] netlink: 'syz.2.1292': attribute type 29 has an invalid length. [ 308.364391][T10288] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1295'. [ 308.388770][T10288] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 309.223986][T10288] netlink: 'syz.2.1295': attribute type 8 has an invalid length. [ 309.244865][T10288] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1295'. [ 309.701963][T10320] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1306'. [ 309.749556][T10318] netlink: 'syz.3.1305': attribute type 21 has an invalid length. [ 309.769339][T10318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1305'. [ 309.796331][T10318] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 310.283955][T10337] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1311'. [ 310.348884][T10337] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1311'. [ 312.049257][T10385] veth1_macvtap: left promiscuous mode [ 312.523958][T10405] netlink: 'syz.0.1329': attribute type 21 has an invalid length. [ 312.547579][T10405] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1329'. [ 313.257514][T10432] netlink: 'syz.2.1335': attribute type 1 has an invalid length. [ 313.363230][T10432] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1335'. [ 313.783122][T10436] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1333'. [ 313.825356][T10436] bridge_slave_1: default FDB implementation only supports local addresses [ 314.306090][T10442] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 314.334610][T10442] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1337'. [ 314.386173][T10442] batadv_slave_1: entered promiscuous mode [ 314.423240][T10442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.442717][T10442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.671865][T10436] veth1_macvtap: entered promiscuous mode [ 315.400358][T10482] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1348'. [ 315.437815][T10482] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.445078][T10478] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1346'. [ 315.487714][T10481] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1348'. [ 315.505043][T10481] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 315.558359][T10486] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1346'. [ 315.626133][T10479] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1346'. [ 315.909906][T10493] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1351'. [ 316.116784][T10498] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1353'. [ 316.160927][T10498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1353'. [ 316.438512][T10505] netlink: 'syz.2.1355': attribute type 5 has an invalid length. [ 316.517356][T10509] netlink: 'syz.2.1355': attribute type 5 has an invalid length. [ 317.092504][T10517] netlink: 'syz.3.1359': attribute type 7 has an invalid length. [ 317.114387][T10520] netlink: 'syz.2.1361': attribute type 39 has an invalid length. [ 317.396947][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.403600][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.025916][T10540] netlink: 'syz.0.1366': attribute type 46 has an invalid length. [ 318.268582][T10551] netlink: 'syz.2.1369': attribute type 39 has an invalid length. [ 318.331624][ T5085] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 318.504760][T10558] .`: (slave geneve0): Releasing backup interface [ 318.801193][T10571] netlink: 'syz.1.1376': attribute type 29 has an invalid length. [ 318.838693][T10571] netlink: 'syz.1.1376': attribute type 29 has an invalid length. [ 318.877072][T10571] netlink: 'syz.1.1376': attribute type 29 has an invalid length. [ 318.918239][T10571] netlink: 'syz.1.1376': attribute type 29 has an invalid length. [ 319.019780][T10577] netlink: 'syz.1.1376': attribute type 29 has an invalid length. [ 319.053176][T10578] netlink: 'syz.1.1376': attribute type 29 has an invalid length. [ 319.646620][T10593] netlink: 'syz.1.1381': attribute type 10 has an invalid length. [ 319.664734][T10593] __nla_validate_parse: 1 callbacks suppressed [ 319.664751][T10593] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1381'. [ 319.860351][T10611] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1385'. [ 319.902414][T10609] netlink: 'syz.2.1383': attribute type 17 has an invalid length. [ 319.921044][T10609] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 320.037366][T10619] netlink: 'syz.1.1387': attribute type 40 has an invalid length. [ 320.348565][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 321.114776][T10646] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1395'. [ 321.493861][T10653] syzkaller0: entered promiscuous mode [ 321.518319][T10653] syzkaller0: entered allmulticast mode [ 325.321071][T10671] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1401'. [ 325.358057][T10681] validate_nla: 1 callbacks suppressed [ 325.358076][T10681] netlink: 'syz.0.1405': attribute type 19 has an invalid length. [ 325.564688][T10692] netlink: 'syz.3.1407': attribute type 17 has an invalid length. [ 325.588632][T10692] netlink: 'syz.3.1407': attribute type 16 has an invalid length. [ 325.596675][T10692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1407'. [ 326.458799][T10710] netlink: 'syz.1.1413': attribute type 10 has an invalid length. [ 327.317073][T10731] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1418'. [ 327.541293][T10732] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 327.607957][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.650853][T10732] bridge_slave_1: left allmulticast mode [ 327.667943][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.693116][T10732] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 327.724133][T10735] netlink: 'syz.2.1410': attribute type 8 has an invalid length. [ 327.736092][T10735] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1410'. [ 328.174097][T10758] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1423'. [ 328.640934][T10773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 329.082309][T10792] netlink: 'syz.0.1430': attribute type 27 has an invalid length. [ 329.095599][T10792] netlink: 'syz.0.1430': attribute type 4 has an invalid length. [ 329.104368][T10792] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1430'. [ 329.179955][T10795] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 329.206410][T10796] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 329.304280][T10800] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1433'. [ 329.460772][T10806] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1435'. [ 329.507623][T10806] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1435'. [ 329.840056][T10820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1441'. [ 330.124065][T10821] delete_channel: no stack [ 331.961894][T10852] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 332.021631][T10852] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 332.911011][T10885] validate_nla: 2 callbacks suppressed [ 332.911032][T10885] netlink: 'syz.2.1461': attribute type 2 has an invalid length. [ 332.997874][T10885] netlink: 'syz.2.1461': attribute type 8 has an invalid length. [ 333.107935][T10885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1461'. [ 335.267236][T10924] netlink: 'syz.3.1471': attribute type 11 has an invalid length. [ 335.323405][T10924] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1471'. [ 335.659786][T10924] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 335.998201][T10937] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1473'. [ 336.153266][T10939] netlink: 'syz.3.1475': attribute type 10 has an invalid length. [ 336.167103][T10939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1475'. [ 336.212580][T10939] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 337.220776][T10968] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1484'. [ 337.308302][T10969] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 337.342001][T10969] .`: (slave bond_slave_0): Releasing backup interface [ 337.454223][T10973] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 337.462240][T10973] netlink: 'syz.3.1486': attribute type 4 has an invalid length. [ 337.471914][T10973] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1486'. [ 338.340918][T10992] netlink: 'syz.2.1487': attribute type 3 has an invalid length. [ 338.355704][T10992] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1487'. [ 338.373504][T10988] netlink: 'syz.2.1487': attribute type 11 has an invalid length. [ 338.484551][T10980] syzkaller0: entered promiscuous mode [ 338.490749][T10980] syzkaller0: entered allmulticast mode [ 340.174535][T10997] netlink: 'syz.0.1491': attribute type 21 has an invalid length. [ 340.182942][T10997] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1491'. [ 341.742464][T11022] netlink: 'syz.2.1500': attribute type 29 has an invalid length. [ 341.752481][T11022] netlink: 'syz.2.1500': attribute type 29 has an invalid length. [ 341.764877][T11022] netlink: 'syz.2.1500': attribute type 29 has an invalid length. [ 343.095404][T11045] syz.3.1505[11045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.095549][T11045] syz.3.1505[11045] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 343.147434][T11045] netlink: 'syz.3.1505': attribute type 4 has an invalid length. [ 343.211105][T11045] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1505'. [ 343.310404][T11045] wlan1: mtu less than device minimum [ 343.358808][T11045] team0: Device wlan1 failed to change mtu [ 344.973451][T11083] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1518'. [ 348.861501][T11187] syzkaller0: entered promiscuous mode [ 348.869963][T11187] syzkaller0: entered allmulticast mode [ 352.202793][T11261] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1598'. [ 352.745447][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 353.429979][T11305] netlink: 'syz.0.1610': attribute type 21 has an invalid length. [ 353.457849][T11305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1610'. [ 353.910366][T11325] veth0_vlan: left promiscuous mode [ 353.917501][T11325] veth0_vlan: entered promiscuous mode [ 353.960204][T11328] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 353.980486][T11328] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 354.020619][T11324] netlink: 'syz.1.1614': attribute type 29 has an invalid length. [ 354.069076][T11330] netlink: 209024 bytes leftover after parsing attributes in process `syz.3.1616'. [ 354.090254][T11330] openvswitch: netlink: Flow key attr not present in new flow. [ 354.279780][T11341] vcan0: left promiscuous mode [ 354.284652][T11341] vcan0: entered allmulticast mode [ 354.318471][T11341] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 354.380429][T11341] veth0_macvtap: left promiscuous mode [ 354.675758][T11348] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1623'. [ 355.390643][T11366] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1626'. [ 355.409790][T11366] tc_dump_action: action bad kind [ 355.709714][T11378] netlink: zone id is out of range [ 355.716565][T11378] netlink: set zone limit has 8 unknown bytes [ 355.749887][T11378] netlink: 'syz.0.1633': attribute type 10 has an invalid length. [ 355.763369][T11378] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1633'. [ 356.213418][T11389] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 356.224724][T11389] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1635'. [ 356.239484][T11389] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1635'. [ 356.553289][T11384] syzkaller0: entered promiscuous mode [ 356.561559][T11384] syzkaller0: entered allmulticast mode [ 356.743260][T11392] netlink: 'syz.1.1637': attribute type 10 has an invalid length. [ 356.754317][T11392] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1637'. [ 356.763873][T11392] bridge0: port 4(bond0) entered blocking state [ 356.773033][T11392] bridge0: port 4(bond0) entered disabled state [ 356.787931][T11392] bond0: entered allmulticast mode [ 356.797780][T11392] bond_slave_0: entered allmulticast mode [ 356.815321][T11392] bond_slave_1: entered allmulticast mode [ 356.823825][T11392] bridge0: entered allmulticast mode [ 356.832631][T11392] geneve0: entered allmulticast mode [ 356.838450][T11392] veth1_to_bridge: entered allmulticast mode [ 356.849218][T11392] bond0: left allmulticast mode [ 356.854122][T11392] bond_slave_0: left allmulticast mode [ 356.864298][T11392] bond_slave_1: left allmulticast mode [ 356.870285][T11392] bridge0: left allmulticast mode [ 356.875515][T11392] geneve0: left allmulticast mode [ 356.883455][T11392] veth1_to_bridge: left allmulticast mode [ 356.890135][T11396] netlink: 'syz.3.1638': attribute type 29 has an invalid length. [ 356.992995][T11402] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1639'. [ 357.005436][T11402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.804494][T11421] netlink: 'syz.2.1645': attribute type 4 has an invalid length. [ 357.813272][T11421] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1645'. [ 357.823817][T11421] .`: renamed from bond0 (while UP) [ 359.216378][T11470] syzkaller0: entered promiscuous mode [ 359.225152][T11470] syzkaller0: entered allmulticast mode [ 359.396239][T11481] syz.3.1661[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 359.406577][T11481] syz.3.1661[11481] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.936598][T11514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 361.958285][T11515] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1670'. [ 361.980817][T11515] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1670'. [ 362.007736][T11515] tc_dump_action: action bad kind [ 362.024445][T11516] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 362.054840][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 362.252970][T11527] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1674'. [ 362.290969][T11528] netlink: 'syz.2.1675': attribute type 22 has an invalid length. [ 362.308451][T11533] netlink: zone id is out of range [ 362.314618][T11533] netlink: set zone limit has 8 unknown bytes [ 362.321555][T11528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'. [ 362.374729][T11533] netlink: 'syz.1.1676': attribute type 10 has an invalid length. [ 362.418255][T11533] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1676'. [ 363.340862][T11540] netlink: 'syz.0.1679': attribute type 1 has an invalid length. [ 363.349616][T11540] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1679'. [ 363.424376][T11540] syzkaller0: refused to change device tx_queue_len [ 363.579024][T11561] netlink: 'syz.3.1685': attribute type 1 has an invalid length. [ 363.594370][T11561] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1685'. [ 363.657744][T11559] syzkaller0: entered promiscuous mode [ 363.663329][T11559] syzkaller0: entered allmulticast mode [ 365.912815][T11590] lo: entered promiscuous mode [ 365.930868][T11587] syzkaller0: entered promiscuous mode [ 365.977701][T11587] syzkaller0: entered allmulticast mode [ 366.286435][T11596] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 366.307315][T11596] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1696'. [ 366.370675][T11597] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1695'. [ 367.309670][T11637] netlink: 'syz.3.1708': attribute type 12 has an invalid length. [ 367.339200][T11635] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1710'. [ 367.350010][T11637] netlink: 'syz.3.1708': attribute type 11 has an invalid length. [ 367.367998][T11635] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 367.390051][T11637] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.1708'. [ 368.664353][T11684] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1725'. [ 368.938943][T11692] delete_channel: no stack [ 369.059136][T11698] netlink: 'syz.1.1729': attribute type 10 has an invalid length. [ 369.909334][T11709] bridge0: port 3(batadv0) entered blocking state [ 369.924815][T11709] bridge0: port 3(batadv0) entered disabled state [ 369.933336][T11709] batadv0: entered allmulticast mode [ 369.946927][T11709] batadv0: entered promiscuous mode [ 369.963420][T11709] bridge0: port 3(batadv0) entered blocking state [ 369.971193][T11709] bridge0: port 3(batadv0) entered forwarding state [ 370.290954][ T33] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 370.300784][ T33] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 370.393951][T11722] netlink: 'syz.3.1737': attribute type 3 has an invalid length. [ 370.410059][T11722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1737'. [ 370.604354][T11711] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 370.623093][T11711] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 370.759165][T11715] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 370.792265][T11715] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 370.972948][T11728] netlink: 'syz.0.1739': attribute type 10 has an invalid length. [ 371.013389][T11728] netlink: 'syz.0.1739': attribute type 10 has an invalid length. [ 371.041240][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1739'. [ 371.110180][T11728] team0: entered promiscuous mode [ 371.115576][T11728] team_slave_0: entered promiscuous mode [ 371.139261][T11728] team_slave_1: entered promiscuous mode [ 371.146035][T11728] team0: entered allmulticast mode [ 371.152654][T11728] team_slave_0: entered allmulticast mode [ 371.160122][T11728] team_slave_1: entered allmulticast mode [ 371.173425][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.200643][T11728] .`: (slave team0): Releasing backup interface [ 371.354766][T11728] bridge0: port 3(team0) entered blocking state [ 371.378677][T11728] bridge0: port 3(team0) entered disabled state [ 371.646469][T11742] sctp: [Deprecated]: syz.2.1743 (pid 11742) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.646469][T11742] Use struct sctp_sack_info instead [ 371.748578][T11728] syz.0.1739 (11728) used greatest stack depth: 16552 bytes left [ 372.200302][T11751] bridge0: port 3(team0) entered disabled state [ 372.346146][T11751] bridge_slave_1: left allmulticast mode [ 372.376417][T11751] bridge_slave_1: left promiscuous mode [ 372.413564][T11751] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.533246][T11751] bridge_slave_0: left allmulticast mode [ 372.543827][T11751] bridge_slave_0: left promiscuous mode [ 372.554168][T11751] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.812701][T11751] .`: (slave bridge0): Releasing backup interface [ 372.954649][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'. [ 373.031928][T11773] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 373.042568][T11773] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 373.335962][T11790] netlink: 'syz.1.1752': attribute type 21 has an invalid length. [ 373.349005][T11790] netlink: 'syz.1.1752': attribute type 20 has an invalid length. [ 373.452842][T11796] syzkaller0: entered promiscuous mode [ 373.480919][T11796] syzkaller0: entered allmulticast mode [ 373.491596][T11800] netlink: 'syz.3.1757': attribute type 33 has an invalid length. [ 373.499938][T11800] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1757'. [ 375.374559][T11815] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1762'. [ 375.656123][T11826] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1766'. [ 376.611808][T11847] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1772'. [ 376.700229][T11851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.856939][T11855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1775'. [ 376.999015][T11858] netlink: 'syz.1.1774': attribute type 29 has an invalid length. [ 377.043553][T11858] netlink: 'syz.1.1774': attribute type 29 has an invalid length. [ 377.118427][T11866] netlink: 'syz.1.1774': attribute type 29 has an invalid length. [ 377.858844][T11873] netlink: 'syz.1.1779': attribute type 21 has an invalid length. [ 377.900439][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1779'. [ 378.016116][T11878] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1781'. [ 378.753406][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.761352][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.971072][T11902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1787'. [ 380.119886][T11912] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 380.154510][T11912] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 380.168868][T11912] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 380.191699][T11912] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 380.209040][T11912] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 380.285061][T11912] netlink: 'syz.0.1789': attribute type 33 has an invalid length. [ 380.315426][T11912] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1789'. [ 380.341132][T11912] `: renamed from ip6tnl0 (while UP) [ 380.352743][T11912] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 380.373227][T11925] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 380.905537][T11941] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 381.518927][T11966] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1806'. [ 382.090863][ T9963] tipc: Subscription rejected, illegal request [ 385.242558][T12046] netlink: 'syz.3.1828': attribute type 2 has an invalid length. [ 385.267682][T12046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1828'. [ 385.524783][T12057] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1834'. [ 385.616931][T12060] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1832'. [ 385.789060][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1836'. [ 385.819039][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1836'. [ 385.866469][T12064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1836'. [ 386.599354][T12086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1838'. [ 387.259140][T12105] netlink: 'syz.0.1848': attribute type 21 has an invalid length. [ 387.267080][T12105] netlink: 'syz.0.1848': attribute type 1 has an invalid length. [ 387.609058][T12115] bridge0: port 4(batadv0) entered blocking state [ 387.634258][T12115] bridge0: port 4(batadv0) entered disabled state [ 387.645595][T12115] batadv0: entered allmulticast mode [ 388.111529][ T9963] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 388.120896][ T9963] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 388.165767][T12145] netlink: 'syz.2.1863': attribute type 2 has an invalid length. [ 388.188286][T12145] netlink: 'syz.2.1863': attribute type 8 has an invalid length. [ 388.208374][T12145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1863'. [ 388.229169][T12148] netlink: 'syz.2.1863': attribute type 2 has an invalid length. [ 388.237163][T12148] netlink: 'syz.2.1863': attribute type 8 has an invalid length. [ 388.245103][T12148] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1863'. [ 388.847953][T12169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1871'. [ 389.109941][T12174] netlink: 'syz.1.1874': attribute type 5 has an invalid length. [ 389.411511][T12183] netlink: 'syz.3.1877': attribute type 21 has an invalid length. [ 390.263076][T12199] FAULT_INJECTION: forcing a failure. [ 390.263076][T12199] name failslab, interval 1, probability 0, space 0, times 1 [ 390.281012][T12199] CPU: 1 PID: 12199 Comm: syz.0.1882 Not tainted syzkaller #0 [ 390.288539][T12199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.298641][T12199] Call Trace: [ 390.301945][T12199] [ 390.304912][T12199] dump_stack_lvl+0x18c/0x250 [ 390.309622][T12199] ? show_regs_print_info+0x20/0x20 [ 390.314843][T12199] ? load_image+0x420/0x420 [ 390.319384][T12199] ? __might_sleep+0xe0/0xe0 [ 390.323997][T12199] ? __lock_acquire+0x7d80/0x7d80 [ 390.329041][T12199] should_fail_ex+0x394/0x4c0 [ 390.333781][T12199] should_failslab+0x9/0x20 [ 390.338335][T12199] slab_pre_alloc_hook+0x59/0x300 [ 390.343390][T12199] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 390.349138][T12199] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 390.354880][T12199] __kmem_cache_alloc_node+0x53/0x250 [ 390.360290][T12199] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 390.366037][T12199] __kmalloc+0xa7/0x240 [ 390.370225][T12199] tomoyo_realpath_from_path+0xe6/0x5c0 [ 390.375812][T12199] ? tomoyo_domain+0xd6/0x120 [ 390.380612][T12199] tomoyo_path_number_perm+0x248/0x5e0 [ 390.386094][T12199] ? tomoyo_path_number_perm+0x217/0x5e0 [ 390.391748][T12199] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 390.397243][T12199] ? ksys_write+0x1d2/0x260 [ 390.401801][T12199] ? __fget_files+0x28/0x460 [ 390.406430][T12199] security_file_ioctl+0x70/0xa0 [ 390.411428][T12199] __se_sys_ioctl+0x48/0x170 [ 390.416056][T12199] do_syscall_64+0x55/0xb0 [ 390.420505][T12199] ? clear_bhb_loop+0x40/0x90 [ 390.425213][T12199] ? clear_bhb_loop+0x40/0x90 [ 390.429918][T12199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.435844][T12199] RIP: 0033:0x7fef9e99ce59 [ 390.440290][T12199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.459917][T12199] RSP: 002b:00007fef9f8d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.468353][T12199] RAX: ffffffffffffffda RBX: 00007fef9ec15fa0 RCX: 00007fef9e99ce59 [ 390.476361][T12199] RDX: 0000200000000000 RSI: 00000000401054d5 RDI: 0000000000000003 [ 390.484353][T12199] RBP: 00007fef9f8d2090 R08: 0000000000000000 R09: 0000000000000000 [ 390.492341][T12199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.500333][T12199] R13: 00007fef9ec16038 R14: 00007fef9ec15fa0 R15: 00007ffc1272ae08 [ 390.508342][T12199] [ 390.561604][T12199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.935687][T12206] syzkaller0: entered promiscuous mode [ 390.952301][T12206] syzkaller0: entered allmulticast mode [ 393.684983][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 393.694095][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 393.707481][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 393.728220][T12231] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1893'. [ 394.332616][T12255] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 394.344509][T12255] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 394.355607][T12257] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 395.546774][T12293] netlink: 'syz.0.1914': attribute type 2 has an invalid length. [ 395.646301][T12299] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1914'. [ 395.717785][T12299] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 395.927444][T12298] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1915'. [ 395.977087][T12308] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1917'. [ 396.354980][T12317] FAULT_INJECTION: forcing a failure. [ 396.354980][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 396.436730][T12317] CPU: 1 PID: 12317 Comm: syz.0.1929 Not tainted syzkaller #0 [ 396.444285][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.454383][T12317] Call Trace: [ 396.457710][T12317] [ 396.460684][T12317] dump_stack_lvl+0x18c/0x250 [ 396.465423][T12317] ? show_regs_print_info+0x20/0x20 [ 396.470670][T12317] ? load_image+0x420/0x420 [ 396.475228][T12317] ? __lock_acquire+0x7d80/0x7d80 [ 396.480319][T12317] should_fail_ex+0x394/0x4c0 [ 396.485061][T12317] should_failslab+0x9/0x20 [ 396.489616][T12317] slab_pre_alloc_hook+0x59/0x300 [ 396.494716][T12317] kmem_cache_alloc_node+0x5e/0x310 [ 396.499972][T12317] ? alloc_vmap_area+0x6f7/0x1e50 [ 396.505053][T12317] alloc_vmap_area+0x6f7/0x1e50 [ 396.510001][T12317] ? vm_map_ram+0xcf0/0xcf0 [ 396.514540][T12317] ? rcu_is_watching+0x15/0xb0 [ 396.519341][T12317] __get_vm_area_node+0x162/0x370 [ 396.524409][T12317] __vmalloc_node_range+0x36f/0x1320 [ 396.529727][T12317] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 396.535303][T12317] ? trace_call_bpf+0xc3/0x6c0 [ 396.540120][T12317] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 396.545962][T12317] ? free_vm_area+0x50/0x50 [ 396.550492][T12317] ? mark_lock+0x94/0x320 [ 396.554851][T12317] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 396.560428][T12317] __vmalloc+0x7a/0x90 [ 396.564526][T12317] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 396.570100][T12317] bpf_prog_alloc_no_stats+0x46/0x430 [ 396.575500][T12317] bpf_prog_alloc+0x3d/0x1a0 [ 396.580125][T12317] __get_filter+0xf2/0x400 [ 396.584572][T12317] ? _local_bh_enable+0xa0/0xa0 [ 396.589457][T12317] sk_attach_filter+0x24/0x140 [ 396.594253][T12317] tun_attach_filter+0x170/0x270 [ 396.599228][T12317] __tun_chr_ioctl+0x17ce/0x2070 [ 396.604227][T12317] ? tun_flow_create+0x310/0x310 [ 396.609208][T12317] ? bpf_lsm_file_ioctl+0x9/0x10 [ 396.614164][T12317] ? security_file_ioctl+0x80/0xa0 [ 396.619304][T12317] ? tun_chr_poll+0x630/0x630 [ 396.624011][T12317] __se_sys_ioctl+0xfd/0x170 [ 396.628643][T12317] do_syscall_64+0x55/0xb0 [ 396.633088][T12317] ? clear_bhb_loop+0x40/0x90 [ 396.637785][T12317] ? clear_bhb_loop+0x40/0x90 [ 396.642490][T12317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.648429][T12317] RIP: 0033:0x7fef9e99ce59 [ 396.652870][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.672514][T12317] RSP: 002b:00007fef9f8d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.680983][T12317] RAX: ffffffffffffffda RBX: 00007fef9ec15fa0 RCX: 00007fef9e99ce59 [ 396.688986][T12317] RDX: 0000200000000000 RSI: 00000000401054d5 RDI: 0000000000000003 [ 396.696978][T12317] RBP: 00007fef9f8d2090 R08: 0000000000000000 R09: 0000000000000000 [ 396.704972][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.712963][T12317] R13: 00007fef9ec16038 R14: 00007fef9ec15fa0 R15: 00007ffc1272ae08 [ 396.720976][T12317] [ 397.620479][T12342] netlink: 167768 bytes leftover after parsing attributes in process `syz.3.1925'. [ 398.687735][T12342] netlink: 'syz.3.1925': attribute type 39 has an invalid length. [ 399.016086][T12357] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1931'. [ 399.133231][T12357] netlink: 'syz.0.1931': attribute type 7 has an invalid length. [ 399.141570][T12357] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 399.153897][T12361] FAULT_INJECTION: forcing a failure. [ 399.153897][T12361] name failslab, interval 1, probability 0, space 0, times 0 [ 399.165336][T12357] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1931'. [ 399.168398][T12361] CPU: 1 PID: 12361 Comm: syz.2.1933 Not tainted syzkaller #0 [ 399.183467][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.193562][T12361] Call Trace: [ 399.196882][T12361] [ 399.199851][T12361] dump_stack_lvl+0x18c/0x250 [ 399.204620][T12361] ? show_regs_print_info+0x20/0x20 [ 399.209874][T12361] ? load_image+0x420/0x420 [ 399.214435][T12361] ? __lock_acquire+0x7d80/0x7d80 [ 399.219506][T12361] should_fail_ex+0x394/0x4c0 [ 399.224224][T12361] should_failslab+0x9/0x20 [ 399.228817][T12361] slab_pre_alloc_hook+0x59/0x300 [ 399.234164][T12361] ? __vmalloc_node_range+0x598/0x1320 [ 399.239687][T12361] ? __vmalloc_node_range+0x598/0x1320 [ 399.245191][T12361] __kmem_cache_alloc_node+0x53/0x250 [ 399.250608][T12361] ? __vmalloc_node_range+0x598/0x1320 [ 399.256100][T12361] __kmalloc_node+0xa6/0x240 [ 399.260717][T12361] __vmalloc_node_range+0x598/0x1320 [ 399.266060][T12361] ? free_vm_area+0x50/0x50 [ 399.270588][T12361] ? mark_lock+0x94/0x320 [ 399.274948][T12361] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 399.280515][T12361] __vmalloc+0x7a/0x90 [ 399.284610][T12361] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 399.290190][T12361] bpf_prog_alloc_no_stats+0x46/0x430 [ 399.295600][T12361] bpf_prog_alloc+0x3d/0x1a0 [ 399.300229][T12361] __get_filter+0xf2/0x400 [ 399.304701][T12361] ? _local_bh_enable+0xa0/0xa0 [ 399.309582][T12361] sk_attach_filter+0x24/0x140 [ 399.314403][T12361] tun_attach_filter+0x170/0x270 [ 399.319390][T12361] __tun_chr_ioctl+0x17ce/0x2070 [ 399.324377][T12361] ? tun_flow_create+0x310/0x310 [ 399.329364][T12361] ? bpf_lsm_file_ioctl+0x9/0x10 [ 399.334361][T12361] ? security_file_ioctl+0x80/0xa0 [ 399.339499][T12361] ? tun_chr_poll+0x630/0x630 [ 399.344238][T12361] __se_sys_ioctl+0xfd/0x170 [ 399.348856][T12361] do_syscall_64+0x55/0xb0 [ 399.353317][T12361] ? clear_bhb_loop+0x40/0x90 [ 399.358044][T12361] ? clear_bhb_loop+0x40/0x90 [ 399.362760][T12361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.368694][T12361] RIP: 0033:0x7fb163d9ce59 [ 399.373170][T12361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.392791][T12361] RSP: 002b:00007fb164d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.401214][T12361] RAX: ffffffffffffffda RBX: 00007fb164015fa0 RCX: 00007fb163d9ce59 [ 399.409214][T12361] RDX: 0000200000000000 RSI: 00000000401054d5 RDI: 0000000000000003 [ 399.417216][T12361] RBP: 00007fb164d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 399.425229][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.433217][T12361] R13: 00007fb164016038 R14: 00007fb164015fa0 R15: 00007ffd889ba458 [ 399.441211][T12361] [ 399.462336][T12361] syz.2.1933: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 399.481071][T12361] CPU: 1 PID: 12361 Comm: syz.2.1933 Not tainted syzkaller #0 [ 399.488580][T12361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.498683][T12361] Call Trace: [ 399.502016][T12361] [ 399.504993][T12361] dump_stack_lvl+0x18c/0x250 [ 399.509735][T12361] ? show_regs_print_info+0x20/0x20 [ 399.514994][T12361] ? load_image+0x420/0x420 [ 399.519555][T12361] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 399.526008][T12361] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 399.532541][T12361] warn_alloc+0x246/0x340 [ 399.536917][T12361] ? zone_watermark_ok_safe+0x230/0x230 [ 399.542505][T12361] ? __vmalloc_node_range+0x598/0x1320 [ 399.548005][T12361] ? __vmalloc_node_range+0x598/0x1320 [ 399.553501][T12361] ? rcu_is_watching+0x15/0xb0 [ 399.558296][T12361] ? __vmalloc_node_range+0x598/0x1320 [ 399.563781][T12361] ? __kmalloc_node+0xe4/0x240 [ 399.568577][T12361] __vmalloc_node_range+0x661/0x1320 [ 399.573929][T12361] ? free_vm_area+0x50/0x50 [ 399.578467][T12361] ? mark_lock+0x94/0x320 [ 399.582824][T12361] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 399.588394][T12361] __vmalloc+0x7a/0x90 [ 399.592518][T12361] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 399.598095][T12361] bpf_prog_alloc_no_stats+0x46/0x430 [ 399.603504][T12361] bpf_prog_alloc+0x3d/0x1a0 [ 399.608216][T12361] __get_filter+0xf2/0x400 [ 399.612665][T12361] ? _local_bh_enable+0xa0/0xa0 [ 399.617557][T12361] sk_attach_filter+0x24/0x140 [ 399.622373][T12361] tun_attach_filter+0x170/0x270 [ 399.627338][T12361] __tun_chr_ioctl+0x17ce/0x2070 [ 399.632321][T12361] ? tun_flow_create+0x310/0x310 [ 399.637302][T12361] ? bpf_lsm_file_ioctl+0x9/0x10 [ 399.642257][T12361] ? security_file_ioctl+0x80/0xa0 [ 399.647388][T12361] ? tun_chr_poll+0x630/0x630 [ 399.652092][T12361] __se_sys_ioctl+0xfd/0x170 [ 399.656759][T12361] do_syscall_64+0x55/0xb0 [ 399.661205][T12361] ? clear_bhb_loop+0x40/0x90 [ 399.665915][T12361] ? clear_bhb_loop+0x40/0x90 [ 399.670614][T12361] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.676541][T12361] RIP: 0033:0x7fb163d9ce59 [ 399.680980][T12361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.700608][T12361] RSP: 002b:00007fb164d0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.709048][T12361] RAX: ffffffffffffffda RBX: 00007fb164015fa0 RCX: 00007fb163d9ce59 [ 399.717044][T12361] RDX: 0000200000000000 RSI: 00000000401054d5 RDI: 0000000000000003 [ 399.725032][T12361] RBP: 00007fb164d0d090 R08: 0000000000000000 R09: 0000000000000000 [ 399.733024][T12361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.741014][T12361] R13: 00007fb164016038 R14: 00007fb164015fa0 R15: 00007ffd889ba458 [ 399.749018][T12361] [ 399.754558][T12361] Mem-Info: [ 399.758244][T12361] active_anon:8117 inactive_anon:0 isolated_anon:0 [ 399.758244][T12361] active_file:16817 inactive_file:40071 isolated_file:0 [ 399.758244][T12361] unevictable:768 dirty:150 writeback:0 [ 399.758244][T12361] slab_reclaimable:10493 slab_unreclaimable:94443 [ 399.758244][T12361] mapped:24158 shmem:1361 pagetables:546 [ 399.758244][T12361] sec_pagetables:0 bounce:0 [ 399.758244][T12361] kernel_misc_reclaimable:0 [ 399.758244][T12361] free:1344028 free_pcp:12473 free_cma:0 [ 399.806707][T12361] Node 0 active_anon:32468kB inactive_anon:0kB active_file:67268kB inactive_file:160084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96632kB dirty:600kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10376kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 399.839110][T12361] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 399.909889][T12361] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 399.939785][T12361] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 399.945735][T12361] Node 0 DMA32 free:1472648kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:32428kB inactive_anon:0kB active_file:67268kB inactive_file:159260kB unevictable:1536kB writepending:600kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:28980kB local_pcp:13188kB free_cma:0kB [ 399.978076][T12361] lowmem_reserve[]: 0 0 0 0 0 [ 399.982912][T12361] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.010806][T12361] lowmem_reserve[]: 0 0 0 0 0 [ 400.016772][T12361] Node 1 Normal free:3888096kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21068kB local_pcp:9612kB free_cma:0kB [ 400.052844][T12361] lowmem_reserve[]: 0 0 0 0 0 [ 400.057881][T12361] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 400.074719][T12361] Node 0 DMA32: 1574*4kB (UM) 1282*8kB (UME) 1384*16kB (UME) 749*32kB (UME) 367*64kB (UME) 180*128kB (UME) 78*256kB (UM) 52*512kB (UME) 36*1024kB (UME) 19*2048kB (UM) 303*4096kB (M) = 1472648kB [ 400.096952][T12361] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 400.111771][T12361] Node 1 Normal: 246*4kB (UME) 59*8kB (UME) 41*16kB (UME) 61*32kB (UME) 14*64kB (UME) 5*128kB (UME) 2*256kB (UM) 2*512kB (UE) 0*1024kB 1*2048kB (E) 947*4096kB (M) = 3888096kB [ 400.132366][T12361] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.142834][T12361] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.153191][T12361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.163636][T12361] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.175316][T12361] 58249 total pagecache pages [ 400.184169][T12361] 0 pages in swap cache [ 400.191887][T12361] Free swap = 124996kB [ 400.196781][T12361] Total swap = 124996kB [ 400.229805][T12361] 2097051 pages RAM [ 400.233779][T12361] 0 pages HighMem/MovableOnly [ 400.242023][T12361] 416931 pages reserved [ 400.246226][T12361] 0 pages cma reserved [ 400.292838][T12368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.982712][T12396] netlink: 'syz.2.1942': attribute type 39 has an invalid length. [ 402.917367][T12392] netlink: 'syz.1.1941': attribute type 29 has an invalid length. [ 403.010178][T12392] netlink: 'syz.1.1941': attribute type 29 has an invalid length. [ 403.969965][T12435] netlink: 'syz.2.1951': attribute type 10 has an invalid length. [ 403.988150][T12435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1951'. [ 404.957036][T12447] netlink: 'syz.3.1953': attribute type 17 has an invalid length. [ 404.985520][T12447] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1953'. [ 408.343491][T12505] netlink: 'syz.3.1968': attribute type 39 has an invalid length. [ 408.418668][T12515] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 408.491669][T12505] hsr_slave_1 (unregistering): left promiscuous mode [ 408.576217][T12515] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 408.645316][T12519] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 408.700563][T12520] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 410.056194][T12550] : renamed from gre0 (while UP) [ 410.288357][T12554] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 410.318056][T12554] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 410.343925][T12554] netlink: 'syz.0.1983': attribute type 29 has an invalid length. [ 410.507985][ T5779] Bluetooth: hci1: ISO packet for unknown connection handle 17 [ 410.802765][T12566] GPL: port 1(syz_tun) entered blocking state [ 410.815608][T12566] GPL: port 1(syz_tun) entered disabled state [ 410.835223][T12566] syz_tun: entered allmulticast mode [ 410.861754][T12566] syz_tun: entered promiscuous mode [ 411.018390][T12578] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1985'. [ 411.365200][T12585] netlink: 'syz.1.1985': attribute type 10 has an invalid length. [ 411.471327][T12585] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.1985'. [ 411.568979][T12585] openvswitch: netlink: Flow key attr not present in new flow. [ 412.800517][T12610] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 412.969561][T12610] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1995'. [ 413.483762][T12622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2001'. [ 414.243338][T12486] delete_channel: no stack [ 414.276536][T12650] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 414.361567][T12657] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2010'. [ 414.390464][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 414.880820][T12676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2015'. [ 414.906172][T12676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2015'. [ 416.600169][T12717] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2027'. [ 416.731519][T12717] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2027'. [ 417.544985][T12747] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2033'. [ 422.214325][T12802] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2047'. [ 422.632057][T12815] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2052'. [ 422.658635][T12815] netlink: get zone limit has 4 unknown bytes [ 422.711677][T12816] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2051'. [ 424.344391][T12845] syzkaller0: entered promiscuous mode [ 424.352961][T12845] syzkaller0: entered allmulticast mode [ 424.471552][T12859] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2064'. [ 426.219605][T12859] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2064'. [ 426.237319][T12857] sit0: left promiscuous mode [ 426.321424][T12860] sit0: entered promiscuous mode [ 426.573078][T12880] netlink: 'syz.2.2068': attribute type 4 has an invalid length. [ 426.581899][T12880] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2068'. [ 426.801763][T12884] netlink: 7986 bytes leftover after parsing attributes in process `syz.1.2070'. [ 426.976530][T12896] netlink: 'syz.1.2074': attribute type 21 has an invalid length. [ 426.985383][T12896] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2074'. [ 426.997932][T12896] netlink: 'syz.1.2074': attribute type 4 has an invalid length. [ 427.006018][T12896] netlink: 'syz.1.2074': attribute type 5 has an invalid length. [ 427.015079][T12896] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2074'. [ 428.205479][T12902] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2077'. [ 428.345346][T12902] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 429.073836][T12941] netlink: 'syz.1.2088': attribute type 3 has an invalid length. [ 429.083563][T12941] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2088'. [ 431.051992][T12991] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2098'. [ 431.416416][T13000] syzkaller0: entered promiscuous mode [ 431.423564][T13000] syzkaller0: entered allmulticast mode [ 434.432594][T13024] netlink: 'syz.1.2108': attribute type 11 has an invalid length. [ 434.661096][T13043] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2113'. [ 434.824857][T13052] netlink: 183696 bytes leftover after parsing attributes in process `syz.3.2116'. [ 434.839907][ T5779] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 434.986740][T13055] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 435.006892][T13055] syzkaller1: linktype set to 6 [ 435.035753][T13055] netlink: 'syz.3.2117': attribute type 3 has an invalid length. [ 435.056613][T13055] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2117'. [ 435.306267][T13055] syzkaller0: entered promiscuous mode [ 435.327741][T13055] syzkaller0: entered allmulticast mode [ 435.438244][T13070] netlink: 'syz.2.2122': attribute type 4 has an invalid length. [ 435.459091][T13070] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2122'. [ 436.091507][T13079] delete_channel: no stack [ 440.191934][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.204617][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.253892][T13082] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 442.282690][T13083] netlink: 'syz.0.2125': attribute type 3 has an invalid length. [ 442.296800][T13083] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2125'. [ 442.312392][T13084] netlink: 'syz.0.2125': attribute type 12 has an invalid length. [ 442.320632][T13084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2125'. [ 447.762582][T13166] netlink: 'syz.1.2146': attribute type 4 has an invalid length. [ 448.326320][T13186] netlink: 'syz.0.2152': attribute type 10 has an invalid length. [ 448.349553][T13186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2152'. [ 448.536271][T13198] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.544939][T13197] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.558081][T13198] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.575149][T13197] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.591263][T13198] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.608650][T13197] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.649524][T13198] netlink: 'syz.1.2155': attribute type 29 has an invalid length. [ 448.714352][T13198] netlink: 'syz.1.2155': attribute type 1 has an invalid length. [ 448.728222][T13197] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2155'. [ 448.738693][T13198] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2155'. [ 448.764837][T13200] bridge0: port 3(batadv0) entered disabled state [ 448.772480][T13200] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.780877][T13200] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.798591][T13200] bridge0: entered allmulticast mode [ 449.027083][T13207] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2158'. [ 449.908141][T13241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2168'. [ 449.934053][T13239] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2167'. [ 449.974116][T13239] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 450.751621][T13268] syzkaller0: entered promiscuous mode [ 450.762597][T13268] syzkaller0: entered allmulticast mode [ 450.829282][T13268] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2174'. [ 454.478183][T13289] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2180'. [ 454.487897][T13295] validate_nla: 1 callbacks suppressed [ 454.487910][T13295] netlink: 'syz.1.2181': attribute type 2 has an invalid length. [ 454.502273][T13295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2181'. [ 454.593293][T13305] netlink: 'syz.2.2185': attribute type 10 has an invalid length. [ 454.606573][T13305] macvlan1: entered allmulticast mode [ 454.632534][T13305] team0: Port device macvlan1 added [ 455.243633][T13335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2193'. [ 455.300572][T13335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2193'. [ 455.351629][T13336] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2193'. [ 455.427179][T13335] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2193'. [ 455.510626][T13335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2193'. [ 455.540052][T13335] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2193'. [ 455.582993][T13340] netlink: 'syz.2.2195': attribute type 39 has an invalid length. [ 456.279783][T13351] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2199'. [ 456.337868][T13351] openvswitch: netlink: Flow key attr not present in new flow. [ 456.716573][T13365] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 456.736555][T13365] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 456.749090][T13365] netlink: 'syz.2.2206': attribute type 29 has an invalid length. [ 457.857021][T13393] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2213'. [ 457.923084][T13390] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 457.970861][T13393] netlink: 'syz.3.2213': attribute type 1 has an invalid length. [ 458.050050][T13399] netlink: 'syz.0.2214': attribute type 17 has an invalid length. [ 458.596574][T13410] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 460.616571][T13454] __nla_validate_parse: 3 callbacks suppressed [ 460.616595][T13454] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2230'. [ 460.944106][ C0] [ 460.944116][ C0] ================================ [ 460.944123][ C0] WARNING: inconsistent lock state [ 460.944144][ C0] syzkaller #0 Not tainted [ 460.944154][ C0] -------------------------------- [ 460.944160][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 460.944168][ C0] syz.0.2231/13457 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 460.944190][ C0] ffff88802eaab218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 460.944245][ C0] {INITIAL USE} state was registered at: [ 460.944252][ C0] lock_acquire+0x19e/0x420 [ 460.944274][ C0] _raw_spin_lock+0x2e/0x40 [ 460.944300][ C0] htab_lock_bucket+0x17d/0x300 [ 460.944319][ C0] htab_map_update_elem+0x237/0x1270 [ 460.944336][ C0] bpf_map_update_value+0x64b/0x710 [ 460.944352][ C0] generic_map_update_batch+0x5de/0x800 [ 460.944369][ C0] bpf_map_do_batch+0x3f2/0x600 [ 460.944389][ C0] __sys_bpf+0x381/0x890 [ 460.944406][ C0] __x64_sys_bpf+0x7c/0x90 [ 460.944423][ C0] do_syscall_64+0x55/0xb0 [ 460.944445][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.944478][ C0] irq event stamp: 1100 [ 460.944485][ C0] hardirqs last enabled at (1099): [] syscall_enter_from_user_mode+0x25/0x80 [ 460.944521][ C0] hardirqs last disabled at (1100): [] exc_debug+0x73/0x140 [ 460.944549][ C0] softirqs last enabled at (1076): [] bpf_prog_load+0x1204/0x1610 [ 460.944575][ C0] softirqs last disabled at (1074): [] bpf_ksym_add+0x2c/0x330 [ 460.944601][ C0] [ 460.944601][ C0] other info that might help us debug this: [ 460.944607][ C0] Possible unsafe locking scenario: [ 460.944607][ C0] [ 460.944612][ C0] CPU0 [ 460.944615][ C0] ---- [ 460.944618][ C0] lock(&htab->lockdep_key); [ 460.944631][ C0] [ 460.944634][ C0] lock(&htab->lockdep_key); [ 460.944646][ C0] [ 460.944646][ C0] *** DEADLOCK *** [ 460.944646][ C0] [ 460.944650][ C0] no locks held by syz.0.2231/13457. [ 460.944659][ C0] [ 460.944659][ C0] stack backtrace: [ 460.944665][ C0] CPU: 0 PID: 13457 Comm: syz.0.2231 Not tainted syzkaller #0 [ 460.944689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.944700][ C0] Call Trace: [ 460.944709][ C0] <#DB> [ 460.944716][ C0] dump_stack_lvl+0x18c/0x250 [ 460.944744][ C0] ? show_regs_print_info+0x20/0x20 [ 460.944774][ C0] ? print_usage_bug+0x43d/0x6a0 [ 460.944798][ C0] ? verify_lock_unused+0x15/0x140 [ 460.944824][ C0] lock_acquire+0x2c2/0x420 [ 460.944846][ C0] ? look_up_lock_class+0x75/0x140 [ 460.944878][ C0] ? htab_lock_bucket+0x17d/0x300 [ 460.944901][ C0] ? read_lock_is_recursive+0x20/0x20 [ 460.944923][ C0] ? lock_release+0xb5/0x8c0 [ 460.944943][ C0] ? perf_callchain_user+0xe30/0x15d0 [ 460.944980][ C0] ? perf_trace_lock_acquire+0x105/0x400 [ 460.945015][ C0] _raw_spin_lock+0x2e/0x40 [ 460.945042][ C0] ? htab_lock_bucket+0x17d/0x300 [ 460.945071][ C0] htab_lock_bucket+0x17d/0x300 [ 460.945096][ C0] ? htab_lru_map_delete_node+0x770/0x770 [ 460.945117][ C0] ? look_up_lock_class+0x75/0x140 [ 460.945146][ C0] ? verify_lock_unused+0x15/0x140 [ 460.945168][ C0] ? htab_map_hash+0x1d7/0x330 [ 460.945191][ C0] htab_map_delete_elem+0x19f/0x640 [ 460.945214][ C0] ? htab_map_update_elem+0x1270/0x1270 [ 460.945234][ C0] ? perf_callchain+0x220/0x220 [ 460.945261][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 460.945283][ C0] bpf_overflow_handler+0x1fc/0x510 [ 460.945311][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 460.945333][ C0] ? bpf_overflow_handler+0xde/0x510 [ 460.945360][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 460.945394][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 460.945419][ C0] __perf_event_overflow+0x461/0x660 [ 460.945448][ C0] perf_swevent_overflow+0x274/0x340 [ 460.945476][ C0] ? perf_event_switch_output+0x790/0x790 [ 460.945505][ C0] ? __perf_event_overflow+0x514/0x660 [ 460.945533][ C0] perf_swevent_event+0x45c/0x570 [ 460.945558][ C0] ? perf_tp_event+0x1550/0x1550 [ 460.945592][ C0] perf_bp_event+0x319/0x430 [ 460.945619][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 460.945669][ C0] ? lock_acquire+0x2c2/0x420 [ 460.945698][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 460.945729][ C0] notifier_call_chain+0x18f/0x380 [ 460.945756][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 460.945784][ C0] atomic_notifier_call_chain+0xda/0x180 [ 460.945811][ C0] notify_die+0x145/0x1a0 [ 460.945839][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 460.945871][ C0] ? rcu_is_watching+0x15/0xb0 [ 460.945900][ C0] notify_debug+0x2e/0x50 [ 460.945919][ C0] exc_debug+0xde/0x140 [ 460.945947][ C0] asm_exc_debug+0x1e/0x40 [ 460.945976][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 460.946004][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 460.946022][ C0] RSP: 0018:ffffc9000b8bfd50 EFLAGS: 00050202 [ 460.946040][ C0] RAX: ffffffff84294d01 RBX: 0000000000000050 RCX: 000000000000000f [ 460.946053][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc9000b8bfe01 [ 460.946079][ C0] RBP: ffffc9000b8bfee8 R08: ffffc9000b8bfe0f R09: 1ffff92001717fc1 [ 460.946094][ C0] R10: dffffc0000000000 R11: fffff52001717fc2 R12: 0000200000000310 [ 460.946109][ C0] R13: 0000000000000050 R14: ffffc9000b8bfdc0 R15: 00002000000002c0 [ 460.946129][ C0] ? rcuref_put_slowpath+0x141/0x150 [ 460.946163][ C0] [ 460.946168][ C0] [ 460.946174][ C0] _copy_from_user+0x8b/0xe0 [ 460.946201][ C0] __sys_bpf+0x23e/0x890 [ 460.946224][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 460.946259][ C0] ? lock_chain_count+0x20/0x20 [ 460.946288][ C0] __x64_sys_bpf+0x7c/0x90 [ 460.946309][ C0] do_syscall_64+0x55/0xb0 [ 460.946331][ C0] ? clear_bhb_loop+0x40/0x90 [ 460.946349][ C0] ? clear_bhb_loop+0x40/0x90 [ 460.946369][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.946398][ C0] RIP: 0033:0x7fef9e99ce59 [ 460.946414][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.946430][ C0] RSP: 002b:00007fef9f8d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.946450][ C0] RAX: ffffffffffffffda RBX: 00007fef9ec15fa0 RCX: 00007fef9e99ce59 [ 460.946465][ C0] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 460.946477][ C0] RBP: 00007fef9ea32e6f R08: 0000000000000000 R09: 0000000000000000 [ 460.946489][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.946501][ C0] R13: 00007fef9ec16038 R14: 00007fef9ec15fa0 R15: 00007ffc1272ae08 [ 460.946528][ C0]