last executing test programs: 14m1.990606958s ago: executing program 4 (id=4589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000bb8f65f046cb802e5371f674acabb06bc7631b3c16432eea216063385abfd2a355b666feb01f43b003fd11c3dace3ff036cdb2220dc981992dfe6ef284c947f910765b97837e8644e662e890d8a84a09822f9c33a43dd58f0913106980f7f1dfea925b9881524ffe694a3fcae76100b0b44fde7d6ffc4b697c39"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xb) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9ff0300600d698cb89e14f00800", 0x0, 0x100, 0x60000000, 0x29, 0x0, &(0x7f0000000180)="6046320319a1928345e9bc03cc9b9df77521ccad02603f3c2d5b362b0f00d8105d7d72651685e8b62a", 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_int(r2, &(0x7f0000000100)=0x1, 0x12) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1900000004000000040000008100000014100100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/24, @ANYRES32=r9, @ANYBLOB="ca6faf3cd98c63fdb2b33e0fc4df8662970b6872a94fdfb6ea1be617fec6d85e452eaeb6e8bf13641fa554d9cdde5d447fae03c3c90a0e2e5f7c5f1f5afcac6e611a759161ba1bb924d3f0b68a5f947a07c3ce61aedfab08b3cd9fdf9cf265e0d5a2e53154ae6afa1984dd2106f881351a430462e5c8343e3eb47f87"], 0xfffffffffffffd47) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, r9, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000003000000000000800500000000800000", @ANYRES32=r2, @ANYBLOB="440a000000000000000000000000000000000000926eb547d74c6aac79977a30ca076622a32ea7d8ee4fec015d3855c5d5ec786d1bc91a53a3cba0fd21d2a822231ace3e794f32b1ea4788", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0500000001000000000000000d00000000000000", @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 14m0.304473867s ago: executing program 4 (id=4591): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6f, 0x0, 0x2, [0x10]}]}}}], 0x38}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001440)}], 0x2}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) socket$kcm(0x2, 0x3, 0x2) (async) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x6f, 0x0, 0x2, [0x10]}]}}}], 0x38}, 0x4008804) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001440)}], 0x2}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000140), 0x0}, 0x20) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) 13m59.921320779s ago: executing program 4 (id=4597): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r1 = gettid() syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/user\x00') r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x8000) r3 = perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x5, 0xfd, 0x5, 0x0, 0x80000000, 0x10, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x8008, 0x8, 0x2, 0x84a41cb25253a5be, 0x6, 0xb, 0x4, 0x0, 0x9, 0x0, 0x9}, 0xffffffffffffffff, 0xe, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xffffffffffffff1e) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000f5170000000000000000000000950000000000db"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8982, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x4, 0x0, 0xf5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ca481f7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x20000, 0x0, 0xffffffffffffffe4, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004100)=[{0x10, 0x84, 0x2}], 0x10}, 0x8000) 13m59.260279758s ago: executing program 4 (id=4603): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) socket$kcm(0x2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa0000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb410018000000000000000c0000000c000000080000000600000000000006040000000000000000005f00"], &(0x7f0000001dc0)=""/146, 0x2c, 0x92, 0x1}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 13m58.262245527s ago: executing program 4 (id=4609): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000950000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x20000000000000dc, &(0x7f0000000000)=[{0xc, 0x0, 0x8}, {0x94, 0x0, 0x2, 0xffffffff}]}) 13m57.01050163s ago: executing program 4 (id=4613): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002a000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) syz_clone(0x4b001000, 0x0, 0x0, 0x0, 0x0, 0x0) 13m41.639210424s ago: executing program 32 (id=4613): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000006000000850000002a000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) syz_clone(0x4b001000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.945595472s ago: executing program 1 (id=9135): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3"], 0x0, 0x5}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x766073b3f9440989, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r3}, 0x38) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 6.637889931s ago: executing program 2 (id=9138): r0 = socket$kcm(0x10, 0x400000000, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7) ioctl$SIOCSIFHWADDR(r3, 0x89f0, &(0x7f0000000900)={'sit0\x00', @random="0040230c1100"}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x6, 0xb}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000011c0)=""/105, 0x69}], 0x4}, 0x12002) 6.389572515s ago: executing program 0 (id=9139): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), 0x0, 0x404, r0, 0x0, 0x1ba8847c99}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff229, 0x1, @perf_config_ext={0x80000001, 0x1}, 0x8041, 0x7, 0x0, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.777760901s ago: executing program 1 (id=9142): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003200000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00d3ff71ef288563"], 0xffdd) 5.77705474s ago: executing program 2 (id=9143): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x1f, &(0x7f0000000980)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70500000800", @ANYRES32, @ANYBLOB="000000000000000018250000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018420000050000000000000000000000850000008a0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0x32, &(0x7f0000000440)=""/50, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xe, 0x8, 0x3ff}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x4, 0x4, 0x3, 0x8}], 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xfe7c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000009ec057", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000038424a08000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200008b5caccb886b3afe", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0xffce}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10c002, 0xac5d, 0x4, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 5.664016107s ago: executing program 0 (id=9146): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x101c01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r3, 0x58, &(0x7f0000000c40)}, 0x10) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8000}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0x5, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x28}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008041) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={0x0, 0x0, 0x26, 0x0, 0x0, 0x8}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 5.300039369s ago: executing program 5 (id=9148): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 5.244711712s ago: executing program 0 (id=9149): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) socket$kcm(0xa, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r5, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) socket$kcm(0x2, 0x5, 0x84) 4.999322987s ago: executing program 2 (id=9150): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r2, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0xf5, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0x3, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0x3, 0x2}, {0x10, 0x3}, {0x1, 0x4}, {0xd, 0x4}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x5}]}, @enum64={0xc, 0x8, 0x0, 0x13, 0x1, 0xb, [{0x9, 0xfffffffb, 0xa180}, {0xe, 0x6, 0x8}, {0x8, 0x2, 0x3}, {0x10, 0x9, 0xfca}, {0xb, 0x39, 0x6}, {0xf, 0x4, 0x6a18}, {0x1, 0x1, 0x5}, {0xc, 0x19f7, 0xffff8000}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x7fff}}]}, {0x0, [0x61]}}, &(0x7f0000000200)=""/33, 0xff, 0x21, 0x0, 0x100, 0x10000}, 0x28) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0x8, '\x00', r3, r4, 0x2, 0x4, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r6, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f00000007c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x1, '\x00', r3, r4, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbb1, 0x0, 0x0, 0x0, 0xcea7}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x8}]}, &(0x7f0000000780)='syzkaller\x00', 0x7, 0x2c, &(0x7f00000007c0)=""/44, 0x41000, 0x54, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xc, 0x28bf, 0xd8}, 0x10, r8, 0x0, 0x0, &(0x7f0000000880)=[r1, r5, r1, r5, r1, r1, r1, r9], 0x0, 0x10, 0x2}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.932699881s ago: executing program 5 (id=9152): socket$kcm(0x11, 0x200000000000002, 0x300) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="850000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup=r3, r2, 0x30, 0x20, r2, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) r5 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000001d80)=ANY=[@ANYBLOB='b 0:', @ANYRESOCT], 0xa) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000001000000000000000000000014c90000d00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.698011964s ago: executing program 2 (id=9153): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000f42f3f9a52273462e00"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0xfc, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0xfffffffe, 0x2, 0xffffffffffffffff}, 0x0, 0xc, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x5c8}, 0xf7e5) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4400, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x64, 0x1, 0x0, 0x9}, {0x6, 0x6, 0x0, 0x3}]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540), 0x4}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1a84}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x4000000) socket$kcm(0x2, 0x1, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8970, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000580)='\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000f11f0001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080bace8017cb090000001fb791643a5ee4001b146218a0cd427f02c5751949e42fb56abd39d37445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000001e7ccff5cf0740fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef000000000000000000000000000044b3ac1698619e951316689cd924cf866fe65027551f6775c023e58ffff180a7778ab1251ecbadf15e735484185a85cf2caae189940bd40e86b81fd6267313fe64665a66861a6d329944d8c3b69211b9130877bab9738898d736cf0da21180c94cb6f35e358c84f2f907ec3ad2f639c10164afb15f9e056e6f6a4d1ea97f984329396feee71d00"/356, 0x164}], 0x1, 0x0, 0x0, 0x7400}, 0x40011) 3.547238282s ago: executing program 3 (id=9157): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="5c0000001300", 0x6}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000800)) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={&(0x7f0000000a00), 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x40, 0x0, 0x300000}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x0, 0x0, 0xc2ba, 0x0, 0x200004000000, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0008000000efffff070000000800000020000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4], 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0xfdef) 2.03212312s ago: executing program 5 (id=9158): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0x89, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x11, 0x0, &(0x7f0000000000)="df", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061106d0000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000"], 0x50) r6 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x11b, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="85000037b4893dcfe5b4d400000000005c0000000000690095000000000033f6ffffffffffffffd27c2a73afa55f29830564983cf2b58178960f982a08ba4b53e8d8807cf47cf9a937e11aa2069e07ce7db06d95dd7899ee39d9947376b59c9026c780fd0cb8e6ee88ee396cf5a25ce596136ceb93f02a7dcb3aa688ab5d318813249ee3e28c84b3767c8223197360cadbba60afa7d97a37e6db34c318662324c22d968b2c39dc3cb8f1d9c5bcbfa35c53fc000000ecd68fc204ea94116745ab0ead7655a6e8c9fd"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000000053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0) 2.013222711s ago: executing program 1 (id=9159): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x17, 0x8, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcd, 0xcd, 0x6, [@struct={0x0, 0x5, 0x0, 0x4, 0x0, 0xf90, [{0x5, 0x1, 0xef}, {0x4, 0x5, 0x8000}, {0x9, 0x1, 0x9}, {0xb, 0x2, 0x3}, {0xd, 0x5, 0x5}]}, @const={0x5, 0x0, 0x0, 0xa, 0x2}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}, @typedef={0xd, 0x0, 0x0, 0x8, 0x4}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @datasec={0x3, 0x5, 0x0, 0xf, 0x1, [{0x4, 0x1, 0x81}, {0x2, 0x8, 0x9}, {0x1, 0x34a, 0x3ff}, {0x3, 0x3, 0x5}, {0x4, 0x52a4, 0x8d}], "fc"}]}, {0x0, [0x0, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000780)=""/86, 0xee, 0x56, 0x1, 0x1, 0x10000}, 0x28) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@generic={&(0x7f0000000d40)='./file0\x00', 0x0, 0x8}, 0x18) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e00)=@generic={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x28}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x27, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @jmp={0x5, 0x0, 0xc, 0xb, 0x5, 0x6, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4e2, 0x0, 0x0, 0x41100, 0x41, '\x00', r2, @fallback=0x6, r3, 0x8, &(0x7f0000000cc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000d00)={0x2, 0x10, 0x0, 0x648a}, 0x10, r7, r8, 0x3, &(0x7f0000000e40)=[r9, r1, r1, r1, r1, r1], &(0x7f0000000e80)=[{0x2, 0x5, 0xd, 0xf}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x5, 0xa}], 0x10, 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r11, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000400)=[0x0, 0x0], 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.925439847s ago: executing program 3 (id=9160): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x1f, &(0x7f0000000980)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5", @ANYRES32, @ANYBLOB="000000000000000018250000", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018420000050000000000000000000000850000008a0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x1, 0x32, &(0x7f0000000440)=""/50, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0xe, 0x8, 0x3ff}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x4, 0x4, 0x3, 0x8}], 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xfe7c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="02000000000000000000000000000000000000009ec057", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000038424a08000000ff0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200008b5caccb886b3afe", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0xffce}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x5, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0x5) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x114, 0x0, @perf_bp={&(0x7f0000000040)}, 0x10c002, 0xac5d, 0x4, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 1.921679307s ago: executing program 2 (id=9161): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/135, 0x87}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc72380000000001000000fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000840)}], 0x2}, 0x0) close(r4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000080)=r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000ac0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000940)}, 0x8054) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x8806, 0x3, 0x634e, 0x0, 0x0, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg(r3, &(0x7f0000000840)={&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000300)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000400)=""/71, 0x47}, {&(0x7f0000000500)=""/79, 0x4f}, {&(0x7f0000000740)=""/255, 0xff}], 0x4, &(0x7f0000000580)=""/89, 0x59}, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xeffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.658220082s ago: executing program 5 (id=9162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x4, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x4, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) 1.525371531s ago: executing program 0 (id=9163): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) 1.52363375s ago: executing program 1 (id=9164): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x98020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4001, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x20, 0x0, 0xc29a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x40, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='veth0'], 0x12) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007f00000500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a839543370e9701008400002d3bc7ff0100000000000000", 0xcb}, {&(0x7f00000001c0)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10) r8 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x1a, 0x0, 0x1}, 0x28) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x17, &(0x7f0000000000)=r11, 0x10) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) 1.409445097s ago: executing program 5 (id=9165): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000580)="4830b7877523086ce1722ee47d66bf9e38", 0x11}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3880d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab0700040005"], 0xfe33) (async, rerun: 32) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.282859875s ago: executing program 0 (id=9166): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x1003a3, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000500)=r0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20000004) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40014063) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{0x0}], 0x1}, 0x3e8) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/134, 0x86}, {&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/210, 0xd2}, {&(0x7f0000000200)=""/253, 0xfd}], 0x4, &(0x7f0000000640)=""/4096, 0x1000}, 0x2000) socket$kcm(0x10, 0x2, 0x0) getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xe1}, 0x0, 0x5, 0x9, 0x0, 0x7, 0x0, 0x800, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'nicvf0\x00', 0x8000}) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x0, 0x29, 0x0, 0x5012) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) 1.260962526s ago: executing program 3 (id=9167): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r3, &(0x7f0000000180)="977baf12481803461a16ff710dc8fdefcfd4a0d8be3b56aa7248b4f1a1adfd7929a525dd769e280f63f3bae68bd14c73f5735e48cc1b31bfe56801a7a6f5397fa920c9fcb7340faf2c199c3e356b08d66a287c2667ab8e0885985882737186ff56adb48aef4aadd641a1d410fcb57b3c16e6ed19b3d7a77bacb5e356f325738ddd774b342c86cbcc9651a1183a1732713998a5d124bf1f09e4bf3bac3ab335d5227e0673357c7518d89ca7a1b87fd134acc7bac37c04cd4fef52506c3b5d0bbfd5", &(0x7f0000000280)=""/116}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002500)={0xffffffffffffffff, 0x20, &(0x7f00000024c0)={&(0x7f0000001480)=""/35, 0x23, 0x0, &(0x7f00000014c0)=""/4096, 0x1000}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002540)={0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002580)=@bloom_filter={0x1e, 0x80, 0x10000, 0xd1, 0x18000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x1, @value=r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x10, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x0, 0xb, 0x1, 0x9, 0x2}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4caa, 0x1000, &(0x7f0000000400)=""/4096, 0x41000, 0x26, '\x00', 0x0, @fallback=0x33, r4, 0x8, &(0x7f0000001440)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x5, &(0x7f0000002600)=[r3, r7, r3], &(0x7f0000002640)=[{0x0, 0x5, 0x9, 0xc}, {0x1, 0x3, 0x7, 0xb}, {0x0, 0x4, 0xf, 0x6}, {0x0, 0x2, 0xf, 0x6}, {0x5, 0x4, 0xd, 0x2}], 0x10, 0x9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002900)={r7, 0x58, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = openat$cgroup_ro(r0, &(0x7f00000029c0)='net_prio.prioidx\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002a00)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x8001, '\x00', 0x0, r4, 0x5, 0x2, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a80)={r3, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x11, 0xc, &(0x7f0000002780)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000000}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}], &(0x7f0000002800)='syzkaller\x00', 0x9, 0x7, &(0x7f0000002840)=""/7, 0x41000, 0x40, '\x00', r8, 0x0, r4, 0x8, &(0x7f0000002940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000002980)={0x0, 0x7, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002b40)=[r9, r3, r10, r11, r12], &(0x7f0000002b80)=[{0x0, 0x4, 0x1, 0x5}, {0x1, 0x2, 0x5, 0xc}, {0x0, 0x1, 0xd}, {0x4, 0x2, 0x9, 0xc}, {0x3, 0x3, 0x7, 0x2}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002dc0)={@fallback=0xffffffffffffffff, 0x0, 0x1, 0x1, &(0x7f0000002cc0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002d00)=[0x0, 0x0], &(0x7f0000002d40)=[0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002e40)={0x1, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002e00)={@fallback=r3, r9, 0x5, 0x26, r6, @void, @void, @void, @value=r16, r15}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002f80)={@map=r14, 0xf, 0x1, 0x7cc, &(0x7f0000002e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000002ec0)=[0x0, 0x0, 0x0], &(0x7f0000002f00)=[0x0, 0x0, 0x0], &(0x7f0000002f40)=[0x0]}, 0x40) ioctl$PERF_EVENT_IOC_REFRESH(r9, 0x2402, 0x1) recvmsg$kcm(r9, &(0x7f0000003440)={&(0x7f0000002fc0)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003040)=""/222, 0xde}, {&(0x7f0000003140)=""/150, 0x96}, {&(0x7f0000003200)=""/115, 0x73}, {&(0x7f0000003280)=""/96, 0x60}, {&(0x7f0000003300)=""/66, 0x42}], 0x5, &(0x7f0000003400)=""/5, 0x5}, 0x0) openat$cgroup_devices(r0, &(0x7f0000003480)='devices.deny\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003640)={&(0x7f00000034c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x4, [@volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0x0, 0x4}, {0x10}, {0xa}, {0xc, 0x5}, {0x7, 0x2}, {0xd, 0x4}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000003540)=""/231, 0x6c, 0xe7, 0x1, 0x7f}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003680)={r9}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000036c0)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000039c0)={r9, 0x0, 0xe3, 0xb6, &(0x7f0000003700)="c5353a91e6b9b19fa0dd7e0d69446f330e56fcbb89761dc1fa3aba49723bbe02a8bf9d685166718e3224722f3d16348210a254833ec3316ef4ac7288eb9ca688e6278ad29ce012718ac1a25aa4cd725eef3945601416c05e51049cca6dc07e2cb0cf90f31146e9203df59a21d6e049c822a0ac6c26d191afba6e733f627bdd4c654f111222ec6a38def0fa381263e8566d6b1abac35a523e56bc7a386aba706b04e2a67652c67024cdb11154444fc8a27226301773158fb1619c62a8143f98b5a5a8ddc0707b644119f7f49fd541e0abe63cb04d332b5c55030356901ebc1a843614c2", &(0x7f0000003800)=""/182, 0xfffffffb, 0x0, 0x0, 0xb0, &(0x7f00000038c0), &(0x7f0000003900)="eba817deaa41e6d807e5f26bf2a973c5a0efdaadb3642ffa0cd30ee97fc7319c0305fc92c61984db3431dcac97ec8966e4cf08a31bedefad15136e479c2134b5354f4aedecc5440023952ee859643321ebcb8eca67d8560cff5c9b735cd41cdbcfaeb032b80750240d3491a70a7704280aeab7ebf33b13f42fe80fbf6621736bf2e853cc174620c9bc37ef88d0259f6576d8d3f38c425fbb1dc3cb67becda393bf9b9adfe66667c0eb37e9e83dea3c2d", 0x5, 0x0, 0x5}, 0x50) recvmsg$unix(r14, &(0x7f0000003f40)={&(0x7f0000003a40), 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003ac0)=""/181, 0xb5}, {&(0x7f0000003b80)=""/86, 0x56}, {&(0x7f0000003c00)=""/98, 0x62}, {&(0x7f0000003c80)=""/182, 0xb6}, {&(0x7f0000003d40)=""/140, 0x8c}, {&(0x7f0000003e00)=""/153, 0x99}], 0x6}, 0x12120) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003f80)={@fallback=r2, r13, 0x35, 0x2000, r13, @value=r9, @void, @void, @void, r15}, 0x20) 1.117574054s ago: executing program 3 (id=9168): r0 = socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="ac95000000000000000000000000000085000000756b00002020207b1af8ff00000000bfa108000000000007010000f8ffffffb7020000080000f17c7932cd3865ba00850000000e000000950000000000008000000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 584.313186ms ago: executing program 5 (id=9169): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003da0906fdd594d0a81"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080003000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{0x0, 0x4a}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev, @loopback}}}], 0x20}, 0x0) sendmsg$sock(r2, &(0x7f0000000500)={&(0x7f0000000340)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000d00)="05f265b9b3656ec4f48b9ee0c6ccc6f4cb0a40099ceb3b0f8e2c7794bc4c0388be8d9edd938d40f84b14b5a9ad11301fe603001ff8373cb54ab8ef171f56c289985b48aa50bdab56a336a635bee6509d8ca6c478eab097c49768bcddd773c7d73b53413449918e94807280baa0003475e2a5bf7c3a90f170208a10139fb25b39734ebdd92f5686f8ad1c4c59a1c3281f8b5ae2686869de31dbd83360d66bf5a256ae16a3d08e048284a728a35eeb6afbd3b8197c3db2116562fc771e5eff7f6464b67ea7501c6d45f3f8525a101c89140a9694", 0xd3}, {&(0x7f0000000100)="3e25f9a6fc5fe56bc409fc9cd39455b585e163a09e42ea10513b70a3bcfc44d3cb46b09038909d343eb19221", 0x2c}, {&(0x7f00000001c0)="74c164b462eb91", 0x7}], 0x3, &(0x7f0000000c80)=[@txtime={{0x18, 0x1, 0x3d, 0x7ffffffe}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}, 0x20000800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1f, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socket$kcm(0x18, 0x0, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x2f, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000c000000000000002801000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000185b000009000000000000000000000018110000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018230000", @ANYRES32=r5, @ANYBLOB="0000000009000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0xc800000, 0x96, &(0x7f0000000980)=""/150, 0x41000, 0x14, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x4af, 0x2}, 0x10, r6, r5, 0x4, &(0x7f0000000ac0)=[r5, r5], &(0x7f0000000c40)=[{0x0, 0x3, 0x0, 0x8}, {0x0, 0x7, 0xb, 0x6}, {0x2, 0x3, 0xc, 0x4}, {0x2, 0x4, 0xe}], 0x10, 0x8742}, 0x94) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x206000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x19, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x5, 0x10000, 0xffff}, 0x10, 0x2e04d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 471.431222ms ago: executing program 2 (id=9170): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x10, 0x0, 0x1, 0x0, 0x5d31, 0x23851, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x9}, 0x104046, 0x800000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000b7220000020000006d673a91", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000002c0)="fd53d938c8afb2d3d147bcbcbf0263e9282fd77f6a906d38254af3583e966f9064e41cddfbc425959ea2993e788eea02f71d0a5bfcd9fcd9a89ce22554e5531f8a6b4f63aa18ad6983e548a618eda0e6937c496190b9edddabcc84189bb1bcf52aaa918a7537a9468e9bff4212528870753dff6d1f7a25018360cec1c60e87c325c2948cc5cd83950ef3d6e115a62787c5754e470b4a3515175ce4c4d3599e18195f1fe988065fe5f152b78773a91a2468723e6d4b8e32bbcc3e69f6da84918d2ce2243d752c214ff2fe39b4769a8edc4c01295a22354a73c9cd5589c2c230d419cad92a5c14929c17bfab3bfffe6a", &(0x7f00000003c0)=""/123, &(0x7f0000000440)="0d5de90b44ab93e995a2", &(0x7f0000000480)="c644fcb3b8afac3d9cdb2ababcc90b161d7ae0ffbed8888d29946e818de5a6ca0b97136153", 0x1, r0}, 0x38) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="5dacbc43ac76f73614d5a727ed05f9eadb30fd1c", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000001200000002000000", @ANYRES32, @ANYBLOB="000000004bc3377b9f1639cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 446.716014ms ago: executing program 1 (id=9171): r0 = socket$kcm(0x1e, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async, rerun: 32) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time_for_children\x00') (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (rerun: 64) close(r1) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xdd, 0x708}, 0x0, 0x3, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000000000002f5e00008000000a16baad6553d73fcd04f31cb3a678100000000000000a9e0b3790bedc8b9608be632a9685a8f986346bb89daf1b5", @ANYRES32=0x0, @ANYBLOB="ac14140be0000001000000001800000000000000000000000700000044086f2000000010"], 0x38}, 0x4008804) (async) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000000)="da2e3ba39a57813320603a68c8027d4b6663b934f4243b3bf60b61778581e3c5844e1fe3ff4a94d2e4ecd4a82a1bf3f1293c8c3d56811e7ad19d049d7d242a13c8", 0x0, 0x200, 0x0, 0x92, 0x0, &(0x7f0000000080)="86c89424dd4af7420e999c38af8c87216a29c813346352951fc0aafe41ecc999e436aaa6b616e7ec4e54ec5a4b0d78b650b7dc106dfca5f117b85cefa9576e7441d4de8a9b618a4988d2d8907527382d14101f499651c1c443c725690d42377071ed0d8c5c7ec65a0060d73cfd1abe89e02cf20b1527eeefe16a25ace53244756d90817af25f5b1d064680212b675bfb3ad0", 0x0, 0x2, 0x0, 0x400}, 0x50) (async, rerun: 64) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)=""/250, 0xfa}], 0x1}, 0x10000) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) close(0x3) close(r4) 167.95328ms ago: executing program 0 (id=9172): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x1000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 166.56982ms ago: executing program 3 (id=9173): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0xa, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x61, 0x0, 0x0, 0x2e, 0x61, 0x61]}}, &(0x7f0000000080)=""/8, 0x2d, 0x8, 0x0, 0xfffffff3, 0x10000}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0x9, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x2e, 0x61]}}, &(0x7f0000000300)=""/61, 0x29, 0x3d, 0x0, 0xffff, 0x10000, @value=r0}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000400000000000000000200000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000040000000e00"/28], 0x50) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172, @ANYBLOB="8c77343da5379090700f359eef2ec537aba48e2a3efc8ce8c018a7ac32aacfe1f3281336c0cae88050fb5a87fd7b408d096491d3013112dad30b4dd03e3c03926da716ebb6ba53acaf5817404f4006d5767b082fb60d7c44eecdf7b809861f4c9ebb2c5de6403b4a19"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0xa, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f, 0x61, 0x0, 0x0, 0x2e, 0x61, 0x61]}}, &(0x7f0000000080)=""/8, 0x2d, 0x8, 0x0, 0xfffffff3, 0x10000}, 0x28) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0x9, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e, 0x2e, 0x61]}}, &(0x7f0000000300)=""/61, 0x29, 0x3d, 0x0, 0xffff, 0x10000, @value=r0}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e000000000400000000000000000200000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000000000040000000e00"/28], 0x50) (async) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172, @ANYBLOB="8c77343da5379090700f359eef2ec537aba48e2a3efc8ce8c018a7ac32aacfe1f3281336c0cae88050fb5a87fd7b408d096491d3013112dad30b4dd03e3c03926da716ebb6ba53acaf5817404f4006d5767b082fb60d7c44eecdf7b809861f4c9ebb2c5de6403b4a19"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 124.777012ms ago: executing program 1 (id=9174): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x40000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80047437, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f00000007c0)=@phonet={0x23, 0x9, 0x9, 0x5}, 0x80, 0x0}, 0x24000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x27, 0x15, 0x0, &(0x7f0000000dc0)="f8ad1dcc02cb29dcc8003200810066a288a8c6617f", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 0s ago: executing program 3 (id=9175): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000458c35d43ae7040019b06e5454f20a698b65cbec40bf1ac6553202c7b5f9bfd104ca34461bafca4d413462534c61b1", @ANYBLOB="00000000000000006200000a00000000180000000000000000000000040000009500000000000000369a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b *'], 0xb) gettid() (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3e871ed566cdf2b6d03df"], 0x8) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) (async) r4 = openat$cgroup_devices(r2, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) (async) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x68}, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@generic={&(0x7f0000000500)='./file0\x00', r0}, 0x18) kernel console output (not intermixed with test programs): process `syz.0.7120'. [ 1392.476152][T32221] netlink: 'syz.3.7125': attribute type 11 has an invalid length. [ 1392.500127][T32221] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7125'. [ 1393.259768][T32220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.907525][T32238] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.7130'. [ 1394.068468][T32250] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7133'. [ 1394.421159][T32254] netlink: 'syz.5.7134': attribute type 2 has an invalid length. [ 1397.914150][T32314] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7149'. [ 1398.122025][T32321] netlink: 'syz.2.7152': attribute type 21 has an invalid length. [ 1398.194728][T32325] tap0: tun_chr_ioctl cmd 1074025677 [ 1398.260909][T32325] tap0: linktype set to 773 [ 1398.358418][T32336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7156'. [ 1398.403486][T32336] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7156'. [ 1399.537766][T32356] netlink: 'syz.5.7162': attribute type 3 has an invalid length. [ 1399.580741][T32356] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7162'. [ 1399.734264][T32365] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.7165'. [ 1399.794359][T32365] openvswitch: netlink: Key type 386 is out of range max 32 [ 1399.843110][T32367] sctp: [Deprecated]: syz.2.7165 (pid 32367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1399.843110][T32367] Use struct sctp_sack_info instead [ 1400.545635][T32387] netlink: 'syz.0.7170': attribute type 2 has an invalid length. [ 1401.926287][T32411] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1401.952408][T32411] device syzkaller0 entered promiscuous mode [ 1402.370222][T32416] sctp: [Deprecated]: syz.0.7178 (pid 32416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1402.370222][T32416] Use struct sctp_sack_info instead [ 1406.201576][T32464] netlink: 'syz.1.7189': attribute type 2 has an invalid length. [ 1406.435368][T32475] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7193'. [ 1406.513517][T32475] openvswitch: netlink: Message has 6 unknown bytes. [ 1406.620182][T32480] netlink: 'syz.5.7195': attribute type 21 has an invalid length. [ 1406.887327][T32487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7196'. [ 1408.736478][T32519] netlink: 'syz.1.7205': attribute type 3 has an invalid length. [ 1408.756271][T32519] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7205'. [ 1409.100257][T32530] device syzkaller0 entered promiscuous mode [ 1409.109677][T32532] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7211'. [ 1411.915943][T31764] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1411.925076][T32584] netlink: 'syz.0.7225': attribute type 11 has an invalid length. [ 1411.940782][T32584] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7225'. [ 1413.211288][T32575] netlink: 'syz.3.7222': attribute type 10 has an invalid length. [ 1414.530309][T32627] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7236'. [ 1414.555483][T32636] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7237'. [ 1414.566578][T32630] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7236'. [ 1414.581787][T32636] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1415.596658][ T4272] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1416.271679][T32694] netlink: 160 bytes leftover after parsing attributes in process `syz.3.7254'. [ 1416.516648][T32706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1416.562713][T32706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7258'. [ 1417.107337][T32729] device wlan1 entered promiscuous mode [ 1417.173946][T32729] mac80211_hwsim hwsim63 wlan1: refused to change device tx_queue_len [ 1418.908939][ T305] netlink: 'syz.3.7276': attribute type 4 has an invalid length. [ 1418.939264][ T305] netlink: 124468 bytes leftover after parsing attributes in process `syz.3.7276'. [ 1419.378148][ T314] netlink: 'syz.3.7278': attribute type 13 has an invalid length. [ 1419.410987][ T314] netlink: 'syz.3.7278': attribute type 14 has an invalid length. [ 1419.418875][ T314] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1420.025651][ T327] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.7281'. [ 1420.125698][ T327] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1420.190464][ T327] CPU: 0 PID: 327 Comm: syz.3.7281 Not tainted syzkaller #0 [ 1420.197861][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1420.207983][ T327] Call Trace: [ 1420.211339][ T327] [ 1420.214346][ T327] dump_stack_lvl+0x188/0x24e [ 1420.219118][ T327] ? show_regs_print_info+0x12/0x12 [ 1420.224406][ T327] ? load_image+0x400/0x400 [ 1420.229040][ T327] sysfs_warn_dup+0x8a/0xa0 [ 1420.233618][ T327] sysfs_do_create_link_sd+0xc0/0x110 [ 1420.239080][ T327] device_add+0x7ed/0xfb0 [ 1420.243535][ T327] wiphy_register+0x1d9f/0x2ac0 [ 1420.248553][ T327] ? cfg80211_event_work+0x40/0x40 [ 1420.253756][ T327] ? minstrel_ht_alloc+0x894/0xa20 [ 1420.259003][ T327] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1420.265157][ T327] ieee80211_register_hw+0x2d00/0x39f0 [ 1420.270749][ T327] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1420.276375][ T327] ? ieee80211_register_hw+0xeb1/0x39f0 [ 1420.282001][ T327] ? ieee80211_tasklet_handler+0x20/0x20 [ 1420.287724][ T327] ? memset+0x1e/0x40 [ 1420.291760][ T327] ? __hrtimer_init+0x186/0x270 [ 1420.296674][ T327] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1420.302497][ T327] hwsim_new_radio_nl+0xafa/0xce0 [ 1420.307617][ T327] genl_family_rcv_msg_doit+0x22a/0x330 [ 1420.313213][ T327] ? end_current_label_crit_section+0x170/0x170 [ 1420.319513][ T327] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1420.325487][ T327] ? bpf_lsm_capable+0x5/0x10 [ 1420.330202][ T327] ? security_capable+0x85/0xb0 [ 1420.335116][ T327] genl_rcv_msg+0x604/0x790 [ 1420.339694][ T327] ? genl_bind+0x360/0x360 [ 1420.344154][ T327] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1420.350594][ T327] netlink_rcv_skb+0x1fb/0x450 [ 1420.355480][ T327] ? genl_bind+0x360/0x360 [ 1420.359955][ T327] ? netlink_ack+0x1170/0x1170 [ 1420.364812][ T327] ? down_read+0x1a8/0x2d0 [ 1420.369290][ T327] genl_rcv+0x24/0x40 [ 1420.373317][ T327] netlink_unicast+0x74d/0x8d0 [ 1420.378152][ T327] netlink_sendmsg+0x8ad/0xbd0 [ 1420.382996][ T327] ? netlink_getsockopt+0x550/0x550 [ 1420.388289][ T327] ? aa_sock_msg_perm+0x94/0x150 [ 1420.393280][ T327] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1420.398617][ T327] ? security_socket_sendmsg+0x7c/0xa0 [ 1420.404126][ T327] ? netlink_getsockopt+0x550/0x550 [ 1420.409367][ T327] ____sys_sendmsg+0x5be/0x970 [ 1420.414213][ T327] ? __sys_sendmsg_sock+0x30/0x30 [ 1420.419286][ T327] ? __import_iovec+0x315/0x500 [ 1420.424194][ T327] ? import_iovec+0x6f/0xa0 [ 1420.428744][ T327] ___sys_sendmsg+0x2a2/0x360 [ 1420.433459][ T327] ? try_to_wake_up+0x6ae/0x1080 [ 1420.438470][ T327] ? __sys_sendmsg+0x290/0x290 [ 1420.443421][ T327] __se_sys_sendmsg+0x1bb/0x2a0 [ 1420.448323][ T327] ? __x64_sys_sendmsg+0x80/0x80 [ 1420.453357][ T327] ? lockdep_hardirqs_on+0x94/0x140 [ 1420.458603][ T327] do_syscall_64+0x4c/0xa0 [ 1420.463062][ T327] ? clear_bhb_loop+0x60/0xb0 [ 1420.467774][ T327] ? clear_bhb_loop+0x60/0xb0 [ 1420.472503][ T327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.478431][ T327] RIP: 0033:0x7fd28899bf79 [ 1420.482886][ T327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.502526][ T327] RSP: 002b:00007fd2897d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1420.511155][ T327] RAX: ffffffffffffffda RBX: 00007fd288c16090 RCX: 00007fd28899bf79 [ 1420.519173][ T327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1420.527184][ T327] RBP: 00007fd288a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.535196][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.543219][ T327] R13: 00007fd288c16128 R14: 00007fd288c16090 R15: 00007ffcb5906d38 [ 1420.551286][ T327] [ 1422.532704][ T345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1422.598800][ T345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7287'. [ 1422.941718][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.948103][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.756860][ T395] delete_channel: no stack [ 1424.506010][ T426] netlink: 'syz.5.7307': attribute type 6 has an invalid length. [ 1425.005138][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 1426.323354][ T466] netlink: 'syz.5.7322': attribute type 29 has an invalid length. [ 1426.594945][ T466] netlink: 'syz.5.7322': attribute type 29 has an invalid length. [ 1426.622049][ T468] netlink: 'syz.5.7322': attribute type 29 has an invalid length. [ 1427.926953][ T500] netlink: 'syz.1.7329': attribute type 21 has an invalid length. [ 1428.642776][ T527] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7337'. [ 1429.043991][ T538] netlink: 'syz.5.7342': attribute type 16 has an invalid length. [ 1429.062646][ T538] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7342'. [ 1430.001045][ T567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7349'. [ 1430.005281][ T566] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.7348'. [ 1430.075328][ T567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7349'. [ 1430.216991][ T568] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7349'. [ 1431.308190][ T577] sctp: [Deprecated]: syz.1.7352 (pid 577) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1431.308190][ T577] Use struct sctp_sack_info instead [ 1431.731068][ T576] netlink: 'syz.1.7352': attribute type 10 has an invalid length. [ 1432.105791][ T576] bond0: (slave bond_slave_0): Releasing backup interface [ 1434.142299][ T655] delete_channel: no stack [ 1434.304541][ T664] netlink: 'syz.0.7377': attribute type 21 has an invalid length. [ 1436.540473][ T719] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1436.547509][ T719] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1438.379605][ T756] pimreg0: tun_chr_ioctl cmd 35111 [ 1438.724427][ T761] netlink: 6 bytes leftover after parsing attributes in process `syz.1.7407'. [ 1440.482483][ T797] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.7416'. [ 1440.813698][ T805] netlink: 'syz.0.7419': attribute type 10 has an invalid length. [ 1440.860175][ T805] bond0: (slave bond_slave_0): Releasing backup interface [ 1442.840951][T31760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1442.897838][ T839] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7430'. [ 1442.932383][ T840] Ÿë: port 1(gretap0) entered blocking state [ 1442.952812][ T840] Ÿë: port 1(gretap0) entered disabled state [ 1442.982742][ T840] device gretap0 entered promiscuous mode [ 1443.229521][ T850] netlink: 'syz.5.7433': attribute type 27 has an invalid length. [ 1443.261229][ T850] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7433'. [ 1444.143062][ T870] netlink: 'syz.1.7439': attribute type 3 has an invalid length. [ 1444.152941][ T870] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7439'. [ 1444.368808][ T879] netlink: 'syz.2.7442': attribute type 29 has an invalid length. [ 1444.426785][ T879] netlink: 'syz.2.7442': attribute type 29 has an invalid length. [ 1444.496329][ T888] netlink: 'syz.2.7442': attribute type 29 has an invalid length. [ 1445.021732][ T909] netlink: 'syz.5.7446': attribute type 21 has an invalid length. [ 1447.063702][ T966] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7462'. [ 1452.887309][ T1088] netlink: 'syz.1.7489': attribute type 1 has an invalid length. [ 1452.932412][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1452.984355][ T1093] device bond_slave_0 entered promiscuous mode [ 1453.021718][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.032031][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.041607][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.060938][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.102438][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.112263][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.123113][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.163212][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.178113][ T1089] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7489'. [ 1453.480367][ T1105] netlink: 'syz.0.7491': attribute type 3 has an invalid length. [ 1456.395597][ T1106] delete_channel: no stack [ 1459.392497][ T1157] IPv6: NLM_F_CREATE should be specified when creating new route [ 1459.408993][ T1157] __nla_validate_parse: 56 callbacks suppressed [ 1459.409013][ T1157] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7509'. [ 1462.977588][ T1260] netlink: 'syz.0.7535': attribute type 12 has an invalid length. [ 1462.996466][ T1260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7535'. [ 1463.185838][ T1262] netlink: 'syz.5.7538': attribute type 41 has an invalid length. [ 1463.215562][ T1262] netlink: 'syz.5.7538': attribute type 41 has an invalid length. [ 1463.519007][ T1283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7542'. [ 1463.552510][ T1283] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7542'. [ 1463.585170][ T1288] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7542'. [ 1463.618195][ T1283] netlink: 'syz.5.7542': attribute type 5 has an invalid length. [ 1464.453794][ T1312] netlink: 'syz.5.7550': attribute type 21 has an invalid length. [ 1464.563025][ T1316] netlink: 192432 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1464.619203][ T1316] netlink: get zone limit has 4 unknown bytes [ 1464.685107][ T1316] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1464.883848][ T1325] netlink: 'syz.3.7552': attribute type 2 has an invalid length. [ 1464.960505][ T1312] netlink: 'syz.5.7550': attribute type 10 has an invalid length. [ 1465.080521][ T1312] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1466.429434][ T1358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1466.437119][ T1358] IPv6: NLM_F_CREATE should be set when creating new route [ 1466.445516][ T1358] IPv6: NLM_F_CREATE should be set when creating new route [ 1466.453156][ T1358] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.787525][ T1394] netlink: 'syz.5.7569': attribute type 10 has an invalid length. [ 1468.356996][ T1411] netlink: 'syz.5.7575': attribute type 19 has an invalid length. [ 1468.379517][ T1411] netlink: 14552 bytes leftover after parsing attributes in process `syz.5.7575'. [ 1470.907140][ T1452] netlink: 'syz.3.7585': attribute type 21 has an invalid length. [ 1471.324343][ T1452] netlink: 'syz.3.7585': attribute type 10 has an invalid length. [ 1471.458897][ T1452] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1473.455996][ T1510] netlink: 'syz.1.7599': attribute type 10 has an invalid length. [ 1474.099091][T31760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1474.303171][ T1510] device wlan1 left promiscuous mode [ 1474.720318][ T1534] netlink: 'syz.0.7603': attribute type 21 has an invalid length. [ 1475.229412][ T1542] device wlan0 entered promiscuous mode [ 1475.361508][ T1534] netlink: 'syz.0.7603': attribute type 10 has an invalid length. [ 1475.477134][ T1534] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1475.736267][ T1563] netlink: 'syz.0.7613': attribute type 3 has an invalid length. [ 1475.755734][ T1563] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7613'. [ 1476.540270][ T1574] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7617'. [ 1478.362436][ T1612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7627'. [ 1478.548260][ T1619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1478.578281][ T1619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1478.609447][ T1616] netlink: 'syz.2.7632': attribute type 25 has an invalid length. [ 1478.625726][ T1622] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1478.675664][ T1619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1478.812611][ T1627] netlink: 'syz.2.7635': attribute type 29 has an invalid length. [ 1478.861755][ T1627] netlink: 'syz.2.7635': attribute type 29 has an invalid length. [ 1478.899961][ T1635] netlink: 26 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1478.945237][ T4272] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 1479.127046][ T1641] netlink: 'syz.2.7639': attribute type 2 has an invalid length. [ 1479.298603][ T1650] netlink: 'syz.3.7642': attribute type 3 has an invalid length. [ 1479.342352][ T1650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7642'. [ 1479.555314][ T1661] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1479.977750][ T1676] netlink: 'syz.5.7650': attribute type 27 has an invalid length. [ 1482.626787][ T1741] netlink: 'syz.5.7670': attribute type 3 has an invalid length. [ 1482.652077][ T1741] __nla_validate_parse: 1 callbacks suppressed [ 1482.652095][ T1741] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.7670'. [ 1482.733538][ T1741] netlink: 'syz.5.7670': attribute type 1 has an invalid length. [ 1482.763264][ T1741] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7670'. [ 1482.842035][ T1748] netlink: 'syz.0.7672': attribute type 21 has an invalid length. [ 1483.467126][ T4272] Bluetooth: hci5: ISO packet for unknown connection handle 300 [ 1483.481437][ T1776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7681'. [ 1483.795616][ T1783] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7685'. [ 1484.365175][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.373912][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.735648][ T1791] netlink: 'syz.3.7687': attribute type 10 has an invalid length. [ 1484.761851][ T1791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7687'. [ 1484.834997][ T1791] device caif0 entered promiscuous mode [ 1484.862348][ T1791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1486.596047][ T4272] Bluetooth: hci2: command 0x0406 tx timeout [ 1486.623670][ T1808] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1489.889464][ T1829] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7698'. [ 1489.952936][ T1829] device batadv_slave_1 entered promiscuous mode [ 1490.209616][ T1845] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7703'. [ 1490.253361][ T1847] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7704'. [ 1491.698246][ T4270] Bluetooth: hci0: ISO packet for unknown connection handle 18 [ 1493.231140][ T1899] netlink: 'syz.1.7718': attribute type 29 has an invalid length. [ 1497.102187][ T1899] netlink: 'syz.1.7718': attribute type 29 has an invalid length. [ 1497.257851][ T1920] netlink: 'syz.3.7723': attribute type 153 has an invalid length. [ 1497.281742][ T1920] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.7723'. [ 1500.141268][ T1931] netlink: 'syz.0.7727': attribute type 2 has an invalid length. [ 1500.159563][ T1931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7727'. [ 1500.172789][ T1935] netlink: 'syz.5.7728': attribute type 39 has an invalid length. [ 1500.302171][ T1938] netlink: 'syz.1.7729': attribute type 10 has an invalid length. [ 1500.323230][ T1938] device syz_tun entered promiscuous mode [ 1500.387613][ T1938] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1500.439936][ T1952] netlink: 'syz.0.7731': attribute type 4 has an invalid length. [ 1500.450998][ T1952] netlink: 171460 bytes leftover after parsing attributes in process `syz.0.7731'. [ 1500.675909][ T1960] netlink: 'syz.5.7736': attribute type 2 has an invalid length. [ 1500.710855][ T1960] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7736'. [ 1501.134792][ T1972] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7739'. [ 1501.728299][ T1977] netlink: 'syz.2.7741': attribute type 17 has an invalid length. [ 1501.753835][ T1977] netlink: 'syz.2.7741': attribute type 16 has an invalid length. [ 1501.766642][ T1977] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7741'. [ 1502.682461][ T1997] delete_channel: no stack [ 1503.085754][ T2007] netlink: 'syz.3.7750': attribute type 28 has an invalid length. [ 1503.104512][ T2007] netlink: 'syz.3.7750': attribute type 29 has an invalid length. [ 1503.122005][ T2007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7750'. [ 1503.178691][ T2007] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.7750'. [ 1503.795069][ T2014] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1503.811715][ T2014] netlink: 'syz.3.7753': attribute type 1 has an invalid length. [ 1503.859298][ T2014] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.7753'. [ 1503.945619][ T2020] device macvlan1 entered promiscuous mode [ 1504.989329][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7759'. [ 1505.001458][ T2032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7759'. [ 1505.099729][T31760] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1505.973350][ T2065] validate_nla: 2 callbacks suppressed [ 1505.973384][ T2065] netlink: 'syz.0.7770': attribute type 28 has an invalid length. [ 1505.996227][ T2065] netlink: 'syz.0.7770': attribute type 29 has an invalid length. [ 1506.010322][ T2065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7770'. [ 1506.040760][ T2067] netlink: 'syz.1.7772': attribute type 2 has an invalid length. [ 1506.055522][ T2065] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.7770'. [ 1506.067328][ T2067] netlink: 'syz.1.7772': attribute type 8 has an invalid length. [ 1506.096782][ T2067] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7772'. [ 1508.972585][ T2137] netlink: 'syz.0.7794': attribute type 3 has an invalid length. [ 1509.004766][ T2137] netlink: 163592 bytes leftover after parsing attributes in process `syz.0.7794'. [ 1509.470383][ T2165] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.7801'. [ 1509.788846][ T2171] netlink: 'syz.0.7803': attribute type 10 has an invalid length. [ 1509.797206][ T2171] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7803'. [ 1510.963571][ T2189] netlink: 'syz.2.7811': attribute type 22 has an invalid length. [ 1510.980232][ T2189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7811'. [ 1510.989519][ T2190] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7810'. [ 1511.072245][ T2195] device syzkaller0 entered promiscuous mode [ 1511.105814][ T4347] syzkaller0: tun_net_xmit 48 [ 1514.198868][ T2235] netlink: 'syz.5.7820': attribute type 1 has an invalid length. [ 1514.230509][ T2235] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7820'. [ 1517.870751][ T2286] netlink: 'syz.5.7836': attribute type 21 has an invalid length. [ 1517.878654][ T2286] netlink: 'syz.5.7836': attribute type 4 has an invalid length. [ 1517.892706][ T2287] netlink: 'syz.5.7836': attribute type 21 has an invalid length. [ 1517.903312][ T2287] netlink: 'syz.5.7836': attribute type 4 has an invalid length. [ 1518.319148][ T2308] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7843'. [ 1519.037371][ T2320] netlink: 'syz.1.7848': attribute type 10 has an invalid length. [ 1519.196193][ T2320] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.243088][ T2320] bond0: (slave team0): Enslaving as an active interface with an up link [ 1519.259643][ T2328] netlink: 16278 bytes leftover after parsing attributes in process `syz.0.7850'. [ 1521.390462][ T2405] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.7869'. [ 1522.030975][ T2447] netlink: 'syz.1.7879': attribute type 29 has an invalid length. [ 1522.060257][ T2447] netlink: 'syz.1.7879': attribute type 29 has an invalid length. [ 1522.092575][ T2449] netlink: 'syz.1.7879': attribute type 29 has an invalid length. [ 1522.118891][ T2447] netlink: 'syz.1.7879': attribute type 29 has an invalid length. [ 1522.139268][ T2447] netlink: 'syz.1.7879': attribute type 29 has an invalid length. [ 1522.673860][ T2468] netlink: 'syz.5.7883': attribute type 10 has an invalid length. [ 1522.708697][ T2468] device geneve0 entered promiscuous mode [ 1522.817249][ T2468] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1522.858161][ T2467] delete_channel: no stack [ 1523.847693][ T2510] netlink: 'syz.3.7891': attribute type 25 has an invalid length. [ 1523.865890][ T2510] netlink: 'syz.3.7891': attribute type 28 has an invalid length. [ 1524.452654][ T2535] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7900'. [ 1524.477180][ T2540] netlink: 'syz.1.7901': attribute type 21 has an invalid length. [ 1524.495682][ T2540] netlink: 'syz.1.7901': attribute type 5 has an invalid length. [ 1525.979864][ T2590] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7913'. [ 1526.260432][ T2619] device wlan0 entered promiscuous mode [ 1526.303832][ T2621] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1526.394285][ T2621] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1526.421999][ T2621] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7920'. [ 1529.842201][ T2663] validate_nla: 4 callbacks suppressed [ 1529.842217][ T2663] netlink: 'syz.5.7928': attribute type 23 has an invalid length. [ 1531.287095][ T2711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7940'. [ 1531.373388][ T2705] netlink: 'syz.1.7937': attribute type 3 has an invalid length. [ 1531.451227][ T2705] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7937'. [ 1532.895955][ T2744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1533.127772][ T2751] netlink: 'syz.3.7952': attribute type 21 has an invalid length. [ 1533.161730][ T2753] netlink: 'syz.3.7952': attribute type 10 has an invalid length. [ 1533.205164][ T2754] netlink: 'syz.1.7951': attribute type 10 has an invalid length. [ 1533.262694][ T2752] delete_channel: no stack [ 1533.335304][ T2758] netlink: 'syz.2.7953': attribute type 17 has an invalid length. [ 1533.383138][ T2758] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7953'. [ 1533.467242][ T2758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1534.605245][ T2779] netlink: 'syz.2.7958': attribute type 10 has an invalid length. [ 1534.730281][ T2779] team0: Port device vlan0 added [ 1535.421058][ T2809] netlink: 'syz.1.7965': attribute type 2 has an invalid length. [ 1535.439763][ T2809] netlink: 'syz.1.7965': attribute type 8 has an invalid length. [ 1535.458367][ T2809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7965'. [ 1535.584359][ T2809] netlink: 'syz.1.7965': attribute type 10 has an invalid length. [ 1535.603524][ T2809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7965'. [ 1535.654563][ T2815] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 1535.664047][ T2815] syzkaller1: group set to 778 [ 1535.912966][ T2822] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7967'. [ 1536.127157][T31761] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1538.430109][ T2842] netlink: 'syz.3.7973': attribute type 10 has an invalid length. [ 1538.797844][ T2842] bond0: (slave netdevsim0): Releasing backup interface [ 1538.972858][ T2846] netlink: 'syz.5.7974': attribute type 2 has an invalid length. [ 1539.018786][ T2846] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.7974'. [ 1539.924484][ T2861] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.7978'. [ 1541.649911][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1541.661722][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1541.670872][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1541.678697][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1541.710073][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1541.717559][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1541.987779][ T2872] chnl_net:caif_netlink_parms(): no params data found [ 1542.096668][ T2872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.104125][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.112639][ T2872] device bridge_slave_0 entered promiscuous mode [ 1542.122086][ T2872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.132259][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.140864][ T2872] device bridge_slave_1 entered promiscuous mode [ 1542.174843][ T2872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.186102][ T2896] netlink: 'syz.1.7987': attribute type 13 has an invalid length. [ 1542.200663][ T2896] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7987'. [ 1543.715019][ T2896] erspan0: refused to change device tx_queue_len [ 1543.749990][ T2896] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1543.782826][ T2872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.801689][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 1543.914789][T31760] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.996682][ T2872] team0: Port device team_slave_0 added [ 1544.040108][T31760] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.086500][ T2914] netlink: 'syz.0.7991': attribute type 2 has an invalid length. [ 1544.112944][ T2914] netlink: 'syz.0.7991': attribute type 3 has an invalid length. [ 1544.140993][ T2914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7991'. [ 1544.152032][ T2872] team0: Port device team_slave_1 added [ 1544.234857][T31760] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.307615][ T2921] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7994'. [ 1544.374574][T31760] bond0: (slave netdevsim0): Releasing backup interface [ 1544.397468][T31760] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.433675][ T2872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.441219][ T2872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.493135][ T2872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.527052][ T2872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.544399][ T2872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.616288][ T2872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.817403][ T2872] device hsr_slave_0 entered promiscuous mode [ 1544.848867][ T2872] device hsr_slave_1 entered promiscuous mode [ 1544.862234][ T2872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1544.871203][ T2872] Cannot create hsr debugfs directory [ 1544.955143][T31760] tipc: Left network mode [ 1545.089500][ T2943] netlink: 'syz.0.8000': attribute type 3 has an invalid length. [ 1545.109758][ T2943] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8000'. [ 1545.464424][ T2948] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8001'. [ 1545.502057][ T2948] ksmbd: Unknown IPC event: 10, ignore. [ 1545.803008][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.809413][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.884108][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 1546.479991][ T2968] netlink: 'syz.1.8008': attribute type 21 has an invalid length. [ 1546.510743][ T2968] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1546.560391][ T2973] netlink: 'syz.1.8008': attribute type 22 has an invalid length. [ 1546.612441][ T2973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8008'. [ 1546.911685][ T2984] tap0: tun_chr_ioctl cmd 1074025677 [ 1546.920380][ T2984] tap0: linktype set to 773 [ 1547.503884][T31760] team0: Port device wlan1 removed [ 1547.971029][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 1548.585010][ T2872] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1548.616072][ T3018] netlink: 'syz.3.8021': attribute type 21 has an invalid length. [ 1548.641845][ T2872] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1548.669807][ T2872] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1548.708308][ T2872] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1549.074819][ T3031] netlink: 'syz.1.8023': attribute type 10 has an invalid length. [ 1549.148215][T31760] device bridge_slave_1 left promiscuous mode [ 1549.200929][T31760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.273779][T31760] device bridge_slave_0 left promiscuous mode [ 1549.283250][T31760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.386793][T31760] device veth1_vlan left promiscuous mode [ 1549.973945][T31760] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1550.041508][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 1550.340168][T31760] team0 (unregistering): Port device team_slave_1 removed [ 1550.417082][T31760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1550.463063][T31760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1550.728476][T31760] bond0 (unregistering): Released all slaves [ 1550.822198][ T3051] netlink: 'syz.3.8026': attribute type 22 has an invalid length. [ 1550.833931][ T3060] netlink: 'syz.1.8028': attribute type 10 has an invalid length. [ 1550.922691][ T2872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1550.999593][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1551.011655][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1551.023383][ T2872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.146313][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1551.169493][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1551.179320][T31761] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.186542][T31761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1551.203178][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1551.212246][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1551.243019][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1551.308084][T31761] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.315357][T31761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1551.390824][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1551.416748][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1551.457242][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1551.492887][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1551.516441][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1551.537275][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1551.546578][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1551.574751][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1551.589524][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1551.604144][ T2872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1551.621248][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1551.630176][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1551.642809][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1551.840232][ T3085] device syzkaller0 entered promiscuous mode [ 1551.859120][ T3096] netlink: 'syz.3.8038': attribute type 10 has an invalid length. [ 1554.531864][ T3109] netlink: 'syz.2.8043': attribute type 12 has an invalid length. [ 1554.540759][ T3109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8043'. [ 1554.549981][ T3114] netlink: 'syz.0.8045': attribute type 10 has an invalid length. [ 1554.568190][ T3114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8045'. [ 1554.588494][ T3115] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.8045'. [ 1554.608727][ T3120] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8046'. [ 1554.944163][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1554.963993][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1554.988325][ T2872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.008564][ T3143] netlink: 'syz.0.8050': attribute type 10 has an invalid length. [ 1555.647612][ T3143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.678117][ T3143] bond0: (slave team0): Enslaving as an active interface with an up link [ 1556.238614][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1556.248391][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1556.289160][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1556.308129][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1556.320342][ T2872] device veth0_vlan entered promiscuous mode [ 1556.332102][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1556.350731][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1556.365535][ T2872] device veth1_vlan entered promiscuous mode [ 1556.408463][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1556.427973][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1556.465417][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1556.481532][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1556.503307][ T2872] device veth0_macvtap entered promiscuous mode [ 1556.532907][ T2872] device veth1_macvtap entered promiscuous mode [ 1556.587515][ T2872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1556.620490][ T2872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.653520][ T2872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1556.672960][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1556.681600][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1556.694468][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1556.741688][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1556.773105][ T2872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.791009][ T2872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.812781][ T2872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.822168][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1556.848410][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1556.882530][ T2872] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.904192][ T2872] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.930609][ T2872] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.979140][ T2872] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.788054][T31760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.804336][T31760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.813588][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1557.885332][T31765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1557.894194][T31765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1557.908406][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1558.069149][ T3194] netlink: 'syz.5.7980': attribute type 10 has an invalid length. [ 1558.232568][ T3194] team0: Port device syz_tun added [ 1559.549487][ T3240] netlink: 'syz.1.8076': attribute type 29 has an invalid length. [ 1559.581054][ T3240] netlink: 'syz.1.8076': attribute type 29 has an invalid length. [ 1559.583541][ T3242] netlink: 'syz.1.8076': attribute type 29 has an invalid length. [ 1559.620766][ T3240] netlink: 'syz.1.8076': attribute type 29 has an invalid length. [ 1559.664016][ T3245] netlink: 'syz.3.8077': attribute type 11 has an invalid length. [ 1559.704581][ T3245] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8077'. [ 1559.727761][ T3244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1559.750232][ T3242] cgroup: fork rejected by pids controller in /syz1 [ 1560.225198][ T3263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8082'. [ 1561.344452][T27755] bond0: (slave syz_tun): Releasing backup interface [ 1561.681859][ T3284] device sit0 entered promiscuous mode [ 1562.210431][T31761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.374248][T31761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.442347][ T3295] netlink: 'syz.3.8092': attribute type 21 has an invalid length. [ 1562.504799][ T3295] netlink: 'syz.3.8092': attribute type 3 has an invalid length. [ 1562.567275][ T3295] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8092'. [ 1562.711944][T31761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.930999][ T3307] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.8095'. [ 1562.983445][T31761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.373511][ T3310] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8096'. [ 1563.529676][T31761] device 0 left promiscuous mode [ 1563.563933][ T3310] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8096'. [ 1564.004186][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1564.013874][ T4272] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1564.035511][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1564.043375][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1564.060830][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1564.075444][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1564.416266][ T3319] netlink: 'syz.0.8097': attribute type 21 has an invalid length. [ 1564.426737][ T3319] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8097'. [ 1564.463779][ T3319] netlink: 'syz.0.8097': attribute type 4 has an invalid length. [ 1564.480755][ T3319] netlink: 'syz.0.8097': attribute type 5 has an invalid length. [ 1564.488556][ T3319] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8097'. [ 1564.814135][ T3355] netlink: 'syz.5.8101': attribute type 29 has an invalid length. [ 1564.853369][ T3355] netlink: 'syz.5.8101': attribute type 29 has an invalid length. [ 1564.984329][ T3339] netlink: 'syz.5.8101': attribute type 29 has an invalid length. [ 1565.217214][ T3363] netlink: 'syz.3.8106': attribute type 2 has an invalid length. [ 1565.597911][ T3363] device 1 entered promiscuous mode [ 1565.715926][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 1565.853402][ T3381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1565.884358][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.930888][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.946531][ T3314] device bridge_slave_0 entered promiscuous mode [ 1565.965468][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.983174][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.002163][ T3314] device bridge_slave_1 entered promiscuous mode [ 1566.013829][ T3381] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8108'. [ 1566.120807][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 1566.145438][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1566.157821][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1566.203167][ T3314] team0: Port device team_slave_0 added [ 1566.223605][ T3314] team0: Port device team_slave_1 added [ 1566.284286][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.302830][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.344643][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.365478][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.378412][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1566.450705][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1567.484281][ T3314] device hsr_slave_0 entered promiscuous mode [ 1567.503340][ T3314] device hsr_slave_1 entered promiscuous mode [ 1567.510232][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1567.521975][ T3314] Cannot create hsr debugfs directory [ 1567.596934][ T3419] netlink: 'syz.5.8114': attribute type 10 has an invalid length. [ 1567.719722][ T3419] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1568.201290][ T4272] Bluetooth: hci3: command 0x041b tx timeout [ 1568.287549][T31763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1568.614882][T31761] team0: Port device wlan1 removed [ 1568.665575][ T3448] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.8120'. [ 1568.863290][ T3448] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1569.114871][ T3463] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1569.180995][ T3464] netlink: 'syz.0.8123': attribute type 3 has an invalid length. [ 1569.217403][ T3464] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8123'. [ 1569.303083][ T3459] netlink: 'syz.3.8122': attribute type 10 has an invalid length. [ 1569.393458][T31761] device bridge_slave_1 left promiscuous mode [ 1569.399919][T31761] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.414557][T31761] device bridge_slave_0 left promiscuous mode [ 1569.425158][T31761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.915752][T31761] device veth1_macvtap left promiscuous mode [ 1570.280994][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 1570.602839][T31761] team0 (unregistering): Port device team_slave_1 removed [ 1570.698239][T31761] team0 (unregistering): Port device team_slave_0 removed [ 1570.809875][T31761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.367942][T31761] bond0 (unregistering): (slave team0): Releasing backup interface [ 1571.393709][T31761] team0 (unregistering): Port device bridge0 removed [ 1571.534686][ T3499] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1571.549812][T31761] bond0 (unregistering): Released all slaves [ 1572.361046][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 1574.205102][ T3495] device wg2 entered promiscuous mode [ 1574.220164][ T3497] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8131'. [ 1574.629158][ T3510] netlink: 'syz.3.8135': attribute type 10 has an invalid length. [ 1574.705935][ T3515] netlink: 'syz.3.8135': attribute type 3 has an invalid length. [ 1574.759710][ T3515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8135'. [ 1574.802979][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1574.905736][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1574.956305][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1575.005629][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1575.384325][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.434180][T31764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1575.487989][T31764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1575.528446][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.573246][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1575.616432][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1575.651290][ T3545] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.8140'. [ 1575.720266][T31763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.727507][T31763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.812679][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1575.893339][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1575.917561][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1575.977602][T31760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.984837][T31760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.052453][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1576.093502][T31764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1576.130443][ T3553] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.8141'. [ 1576.150624][ T3552] netlink: 'syz.5.8142': attribute type 21 has an invalid length. [ 1576.174163][ T3552] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8142'. [ 1576.213655][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1576.243429][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1576.276174][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1576.356320][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1576.438689][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1576.509026][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1576.564184][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1576.636830][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1576.709253][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1576.750170][ T3554] can: request_module (can-proto-0) failed. [ 1576.793684][ T3314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1577.943097][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1577.975396][T31761] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1578.003339][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.113696][T31764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1578.131149][T31764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1578.205857][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1578.237462][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1578.285411][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1578.325794][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1578.373681][ T3630] netlink: 'syz.0.8157': attribute type 21 has an invalid length. [ 1578.415802][ T3632] can: request_module (can-proto-0) failed. [ 1578.424218][ T3630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8157'. [ 1578.457800][ T3314] device veth0_vlan entered promiscuous mode [ 1578.471991][ T3640] netlink: 'syz.2.8168': attribute type 21 has an invalid length. [ 1578.505451][ T3640] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8168'. [ 1578.538321][ T3314] device veth1_vlan entered promiscuous mode [ 1578.643909][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1578.673264][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1578.715398][ T3314] device veth0_macvtap entered promiscuous mode [ 1578.754786][ T3314] device veth1_macvtap entered promiscuous mode [ 1578.818360][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1578.848826][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.890050][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1578.913782][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.943791][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1578.968598][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1578.991449][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1579.018046][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1579.051768][T31763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1579.097414][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.128672][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.161242][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1579.188263][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1579.200068][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1579.214676][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1579.268485][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1579.318034][ T3314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.390064][ T3314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.441131][ T3314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1579.450298][ T3314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1580.413409][ T3688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8171'. [ 1580.491144][T31765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.516903][T31765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.585921][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1580.758121][T31765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1580.801911][T31765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1580.819373][T31760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.350125][ T3693] netlink: 'syz.2.8172': attribute type 21 has an invalid length. [ 1581.430271][ T3693] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8172'. [ 1581.859670][ T3704] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.8089'. [ 1582.053024][ T3694] can: request_module (can-proto-0) failed. [ 1583.914155][ T3736] netlink: 'syz.2.8180': attribute type 1 has an invalid length. [ 1584.211656][ T3736] netlink: 'syz.2.8180': attribute type 4 has an invalid length. [ 1584.251535][ T3736] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8180'. [ 1586.029343][T31760] tipc: Subscription rejected, illegal request [ 1586.247019][ T3794] netlink: 'syz.3.8196': attribute type 39 has an invalid length. [ 1586.644906][ T3822] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.8201'. [ 1586.784090][T12323] tipc: Subscription rejected, illegal request [ 1587.065950][ T3840] team0: Port device team_slave_0 removed [ 1587.075258][ T3840] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1587.395223][ T3849] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.8210'. [ 1587.808365][ T3855] mac80211_hwsim hwsim60 »»»»»»: renamed from wlan0 [ 1587.906923][T12323] tipc: Subscription rejected, illegal request [ 1588.963310][ T3887] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8222'. [ 1590.084107][ T3918] device bridge_slave_1 left promiscuous mode [ 1590.095581][ T3918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.165616][ T3918] device bridge_slave_0 left promiscuous mode [ 1590.175621][ T3918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.277449][T12322] tipc: Subscription rejected, illegal request [ 1590.405903][ T3924] netlink: 'syz.2.8241': attribute type 10 has an invalid length. [ 1590.414263][ T3924] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 1591.157266][ T3962] netlink: 'syz.5.8242': attribute type 2 has an invalid length. [ 1591.181358][ T3962] netlink: 'syz.5.8242': attribute type 8 has an invalid length. [ 1591.223687][ T3962] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8242'. [ 1591.326172][ T3962] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8242'. [ 1591.348006][ T3962] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8242'. [ 1591.371866][ T3962] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8242'. [ 1591.392922][ T3962] netlink: 'syz.5.8242': attribute type 10 has an invalid length. [ 1591.637868][ T3962] device veth0_vlan left promiscuous mode [ 1591.677620][ T3962] device veth0_vlan entered promiscuous mode [ 1591.775859][ T3962] team0: Device veth0_vlan failed to register rx_handler [ 1592.355681][ T4000] device syzkaller0 entered promiscuous mode [ 1592.667510][ T4017] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8257'. [ 1592.909325][ T4017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.027782][ T4017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.050645][ T4017] bond0 (unregistering): (slave team0): Releasing backup interface [ 1593.061587][ T4017] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1593.084580][ T4017] bond0 (unregistering): Released all slaves [ 1596.244251][ T4039] netlink: 'syz.3.8263': attribute type 16 has an invalid length. [ 1596.252285][ T4039] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8263'. [ 1596.418219][ T4272] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1596.808934][ T4063] netlink: 'syz.1.8272': attribute type 4 has an invalid length. [ 1596.816948][ T4063] netlink: 'syz.1.8272': attribute type 1 has an invalid length. [ 1596.851385][ T4063] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.8272'. [ 1596.899670][ T4063] netlink: 'syz.1.8272': attribute type 39 has an invalid length. [ 1597.305263][ T4070] netlink: 'syz.2.8273': attribute type 10 has an invalid length. [ 1597.326887][ T4070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8273'. [ 1597.359238][ T4070] batman_adv: batadv0: Adding interface: geneve0 [ 1597.378383][ T4070] batman_adv: batadv0: The MTU of interface geneve0 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.478244][ T4070] batman_adv: batadv0: Interface activated: geneve0 [ 1597.586566][ T4088] netlink: 126612 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1597.596518][ T4088] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1597.614477][ T4088] netlink: 126612 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1597.614496][ T4072] device syzkaller0 entered promiscuous mode [ 1597.634439][ T4088] netlink: 17 bytes leftover after parsing attributes in process `syz.3.8276'. [ 1599.423123][ T4130] netlink: 'syz.5.8289': attribute type 4 has an invalid length. [ 1599.434640][ T4130] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.8289'. [ 1601.814414][ T4148] netlink: 'syz.5.8293': attribute type 5 has an invalid length. [ 1601.828118][ T4158] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8295'. [ 1601.977054][ T4158] team0: Port device team_slave_0 removed [ 1601.999939][ T4158] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1602.874101][ T4171] netlink: 'syz.1.8298': attribute type 10 has an invalid length. [ 1602.954378][ T4171] team0: Port device vlan0 added [ 1603.677271][ T4209] netlink: 'syz.2.8309': attribute type 1 has an invalid length. [ 1603.717936][ T4209] netlink: 5 bytes leftover after parsing attributes in process `syz.2.8309'. [ 1605.112865][ T4206] delete_channel: no stack [ 1605.932272][ T4255] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.8319'. [ 1606.097111][ T4266] sock: sock_set_timeout: `syz.1.8322' (pid 4266) tries to set negative timeout [ 1606.240218][ T4273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8325'. [ 1606.336704][ T4277] netlink: 'syz.0.8324': attribute type 10 has an invalid length. [ 1606.472755][ T4278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8326'. [ 1607.269052][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.275543][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.139172][ T4324] netlink: 156 bytes leftover after parsing attributes in process `syz.5.8338'. [ 1609.141604][ T4272] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 1609.249033][ T4370] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8350'. [ 1611.488654][ T4410] netlink: 'syz.3.8362': attribute type 39 has an invalid length. [ 1611.609568][ T4418] delete_channel: no stack [ 1611.677547][ T4410] device veth0_macvtap left promiscuous mode [ 1613.291975][ T4445] netlink: 'syz.0.8374': attribute type 10 has an invalid length. [ 1613.321140][ T4445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8374'. [ 1613.815714][ T4459] netlink: 'syz.3.8377': attribute type 1 has an invalid length. [ 1614.144523][ T4471] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8380'. [ 1614.357321][ T4476] netlink: 'syz.1.8383': attribute type 21 has an invalid length. [ 1614.424457][ T4476] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.8383'. [ 1614.504153][ T4475] netlink: 'syz.5.8384': attribute type 20 has an invalid length. [ 1614.656234][ T4476] netlink: 'syz.1.8383': attribute type 2 has an invalid length. [ 1614.740790][ T4476] netlink: 193088 bytes leftover after parsing attributes in process `syz.1.8383'. [ 1614.939169][ T4498] tipc: Started in network mode [ 1614.970633][ T4498] tipc: Node identity 9215a268, cluster identity 4711 [ 1614.977622][ T4498] tipc: Node number set to 2450891368 [ 1616.176904][ T4542] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8403'. [ 1616.242292][ T4545] netlink: 192 bytes leftover after parsing attributes in process `syz.3.8400'. [ 1616.343298][ T4272] Bluetooth: hci5: ISO packet for unknown connection handle 2 [ 1616.516173][ T4550] netlink: 'syz.5.8405': attribute type 21 has an invalid length. [ 1617.008520][ T4556] netlink: 'syz.1.8406': attribute type 21 has an invalid length. [ 1617.155302][ T4556] netlink: 'syz.1.8406': attribute type 10 has an invalid length. [ 1617.838381][ T4556] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1618.517516][ T4590] netlink: 'syz.0.8414': attribute type 2 has an invalid length. [ 1618.672664][ T4590] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.8414'. [ 1618.869767][ T4602] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 1618.898223][ T4602] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.8419'. [ 1619.427021][ T4613] netlink: 'syz.0.8420': attribute type 16 has an invalid length. [ 1619.448716][ T4613] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8420'. [ 1619.528972][ T4614] netlink: 'syz.0.8420': attribute type 16 has an invalid length. [ 1619.582056][ T4614] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8420'. [ 1620.054191][ T4630] netlink: 'syz.3.8428': attribute type 10 has an invalid length. [ 1620.100762][ T4630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8428'. [ 1621.185012][ T4658] FAULT_INJECTION: forcing a failure. [ 1621.185012][ T4658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.212902][ T4658] CPU: 1 PID: 4658 Comm: syz.3.8437 Not tainted syzkaller #0 [ 1621.220379][ T4658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1621.230501][ T4658] Call Trace: [ 1621.233842][ T4658] [ 1621.236828][ T4658] dump_stack_lvl+0x188/0x24e [ 1621.241598][ T4658] ? show_regs_print_info+0x12/0x12 [ 1621.246891][ T4658] ? load_image+0x400/0x400 [ 1621.251514][ T4658] ? __lock_acquire+0x7d10/0x7d10 [ 1621.256636][ T4658] should_fail_ex+0x399/0x4d0 [ 1621.261409][ T4658] _copy_from_user+0x2c/0x170 [ 1621.266189][ T4658] iovec_from_user+0x143/0x360 [ 1621.271063][ T4658] __import_iovec+0x6d/0x500 [ 1621.275774][ T4658] import_iovec+0x6f/0xa0 [ 1621.280205][ T4658] ___sys_sendmsg+0x252/0x360 [ 1621.284984][ T4658] ? __sys_sendmsg+0x290/0x290 [ 1621.289922][ T4658] ? __lock_acquire+0x7d10/0x7d10 [ 1621.295149][ T4658] __se_sys_sendmsg+0x1bb/0x2a0 [ 1621.300078][ T4658] ? ct_nmi_exit+0x145/0x1c0 [ 1621.304741][ T4658] ? __x64_sys_sendmsg+0x80/0x80 [ 1621.309837][ T4658] ? lockdep_hardirqs_on+0x94/0x140 [ 1621.315125][ T4658] do_syscall_64+0x4c/0xa0 [ 1621.319611][ T4658] ? clear_bhb_loop+0x60/0xb0 [ 1621.324348][ T4658] ? clear_bhb_loop+0x60/0xb0 [ 1621.329097][ T4658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1621.335066][ T4658] RIP: 0033:0x7fd28899bf79 [ 1621.339546][ T4658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.359217][ T4658] RSP: 002b:00007fd2897f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1621.367707][ T4658] RAX: ffffffffffffffda RBX: 00007fd288c15fa0 RCX: 00007fd28899bf79 [ 1621.375745][ T4658] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1621.383802][ T4658] RBP: 00007fd2897f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.391835][ T4658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.399869][ T4658] R13: 00007fd288c16038 R14: 00007fd288c15fa0 R15: 00007ffcb5906d38 [ 1621.407964][ T4658] [ 1623.195828][ T4684] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.8444'. [ 1623.290017][ T4691] FAULT_INJECTION: forcing a failure. [ 1623.290017][ T4691] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.341175][ T4691] CPU: 0 PID: 4691 Comm: syz.5.8448 Not tainted syzkaller #0 [ 1623.348640][ T4691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1623.358765][ T4691] Call Trace: [ 1623.362072][ T4691] [ 1623.365023][ T4691] dump_stack_lvl+0x188/0x24e [ 1623.369758][ T4691] ? show_regs_print_info+0x12/0x12 [ 1623.375011][ T4691] ? load_image+0x400/0x400 [ 1623.379563][ T4691] ? __might_sleep+0xd0/0xd0 [ 1623.384171][ T4691] ? __lock_acquire+0x7d10/0x7d10 [ 1623.389218][ T4691] ? lock_chain_count+0x20/0x20 [ 1623.394103][ T4691] should_fail_ex+0x399/0x4d0 [ 1623.398819][ T4691] should_failslab+0x5/0x20 [ 1623.403363][ T4691] slab_pre_alloc_hook+0x59/0x310 [ 1623.408420][ T4691] ? netdevice_event+0x325/0x900 [ 1623.413381][ T4691] ? netdevice_event+0x325/0x900 [ 1623.418339][ T4691] __kmem_cache_alloc_node+0x4f/0x260 [ 1623.423734][ T4691] ? netdevice_event+0x325/0x900 [ 1623.428692][ T4691] kmalloc_trace+0x26/0xe0 [ 1623.433148][ T4691] netdevice_event+0x325/0x900 [ 1623.437936][ T4691] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1623.444125][ T4691] ? netdevice_event+0x900/0x900 [ 1623.449085][ T4691] ? rdma_roce_rescan_device+0x30/0x30 [ 1623.454573][ T4691] raw_notifier_call_chain+0xcb/0x160 [ 1623.459973][ T4691] unregister_netdevice_many+0x1086/0x1930 [ 1623.465838][ T4691] ? lockdep_hardirqs_on+0x94/0x140 [ 1623.471077][ T4691] ? mark_lock+0x94/0x320 [ 1623.475455][ T4691] ? alloc_netdev_mqs+0xf00/0xf00 [ 1623.480523][ T4691] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1623.486582][ T4691] ? lock_chain_count+0x20/0x20 [ 1623.491477][ T4691] unregister_netdevice_queue+0x324/0x370 [ 1623.497229][ T4691] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1623.503434][ T4691] ? list_netdevice+0x6c0/0x6c0 [ 1623.508332][ T4691] ? __tun_detach+0xd40/0x1500 [ 1623.513137][ T4691] __tun_detach+0xd4a/0x1500 [ 1623.517787][ T4691] tun_chr_close+0x109/0x1b0 [ 1623.522401][ T4691] ? tun_chr_open+0x4d0/0x4d0 [ 1623.527100][ T4691] __fput+0x22c/0x920 [ 1623.531113][ T4691] task_work_run+0x1d0/0x260 [ 1623.535731][ T4691] ? task_work_cancel+0x220/0x220 [ 1623.540785][ T4691] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1623.546968][ T4691] ? exit_to_user_mode_loop+0x3b/0x110 [ 1623.552466][ T4691] exit_to_user_mode_loop+0xe6/0x110 [ 1623.557780][ T4691] exit_to_user_mode_prepare+0xee/0x180 [ 1623.563351][ T4691] syscall_exit_to_user_mode+0x16/0x40 [ 1623.568827][ T4691] do_syscall_64+0x58/0xa0 [ 1623.573277][ T4691] ? clear_bhb_loop+0x60/0xb0 [ 1623.577987][ T4691] ? clear_bhb_loop+0x60/0xb0 [ 1623.582688][ T4691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1623.588602][ T4691] RIP: 0033:0x7f2b72b9bf79 [ 1623.593033][ T4691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.612657][ T4691] RSP: 002b:00007f2b7398e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1623.621094][ T4691] RAX: 0000000000000000 RBX: 00007f2b72e15fa0 RCX: 00007f2b72b9bf79 [ 1623.629088][ T4691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1623.637108][ T4691] RBP: 00007f2b7398e090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.645122][ T4691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.653110][ T4691] R13: 00007f2b72e16038 R14: 00007f2b72e15fa0 R15: 00007fffdb1029a8 [ 1623.661116][ T4691] [ 1623.836039][ T4697] sctp: [Deprecated]: syz.3.8451 (pid 4697) Use of int in maxseg socket option. [ 1623.836039][ T4697] Use struct sctp_assoc_value instead [ 1624.388323][ T4711] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.8453'. [ 1624.421163][ T4713] netlink: 'syz.3.8453': attribute type 11 has an invalid length. [ 1624.476850][ T4713] netlink: 'syz.3.8453': attribute type 7 has an invalid length. [ 1624.508018][ T4713] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.8453'. [ 1624.535419][ T4721] netlink: 'syz.3.8453': attribute type 4 has an invalid length. [ 1625.334240][ T4749] sctp: [Deprecated]: syz.5.8464 (pid 4749) Use of int in maxseg socket option. [ 1625.334240][ T4749] Use struct sctp_assoc_value instead [ 1625.584077][ T4753] netlink: 'syz.3.8466': attribute type 46 has an invalid length. [ 1625.737170][ T4753] netlink: 'syz.3.8466': attribute type 10 has an invalid length. [ 1626.685872][ T4786] netlink: 154788 bytes leftover after parsing attributes in process `syz.5.8474'. [ 1626.732698][ T4786] openvswitch: netlink: Message has 48126 unknown bytes. [ 1629.393809][ T4779] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.8472'. [ 1629.404050][ T4782] netlink: 'syz.0.8472': attribute type 11 has an invalid length. [ 1629.421375][ T4782] netlink: 'syz.0.8472': attribute type 7 has an invalid length. [ 1629.447465][ T4782] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.8472'. [ 1629.467460][ T4784] netlink: 'syz.0.8472': attribute type 4 has an invalid length. [ 1629.918336][ T4812] sctp: [Deprecated]: syz.2.8481 (pid 4812) Use of int in maxseg socket option. [ 1629.918336][ T4812] Use struct sctp_assoc_value instead [ 1630.237364][ T4827] device pim6reg1 entered promiscuous mode [ 1630.849489][ T4829] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8487'. [ 1630.860267][ T4834] netlink: 'syz.1.8487': attribute type 10 has an invalid length. [ 1630.880667][ T4834] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8487'. [ 1630.914324][ T4834] device dummy0 entered promiscuous mode [ 1630.934444][ T4834] bridge0: port 3(dummy0) entered blocking state [ 1630.961950][ T4834] bridge0: port 3(dummy0) entered disabled state [ 1630.996224][ T4834] bridge0: port 3(dummy0) entered blocking state [ 1631.002829][ T4834] bridge0: port 3(dummy0) entered forwarding state [ 1631.052184][ T4839] netlink: 'syz.0.8490': attribute type 10 has an invalid length. [ 1631.127374][ T4839] bond0: (slave team0): Releasing backup interface [ 1631.176415][ T4839] team0 (unregistering): Port device team_slave_1 removed [ 1631.274816][ T4843] netlink: 11594 bytes leftover after parsing attributes in process `syz.5.8491'. [ 1631.564180][ T4842] netlink: 'syz.5.8491': attribute type 11 has an invalid length. [ 1631.572977][ T4842] netlink: 'syz.5.8491': attribute type 7 has an invalid length. [ 1631.591726][ T4842] netlink: 11594 bytes leftover after parsing attributes in process `syz.5.8491'. [ 1631.619437][ T4846] netlink: 'syz.5.8491': attribute type 4 has an invalid length. [ 1631.704151][ T4859] IPv6: Can't replace route, no match found [ 1632.194516][ T4881] netlink: 'syz.2.8503': attribute type 3 has an invalid length. [ 1632.215712][ T4881] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8503'. [ 1632.427382][ T4886] netlink: 'syz.5.8504': attribute type 12 has an invalid length. [ 1632.482222][ T4886] netlink: 'syz.5.8504': attribute type 10 has an invalid length. [ 1632.534848][ T4888] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.8505'. [ 1632.808507][ T4892] netlink: 'syz.5.8507': attribute type 6 has an invalid length. [ 1632.817620][ T4892] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.8507'. [ 1632.879702][ T4894] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.8508'. [ 1633.433485][ T4915] netlink: 'syz.5.8515': attribute type 11 has an invalid length. [ 1634.147984][ T4913] device pim6reg1 entered promiscuous mode [ 1634.406783][ T4926] __nla_validate_parse: 6 callbacks suppressed [ 1634.406829][ T4926] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8518'. [ 1634.617808][ T4931] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8520'. [ 1634.689211][ T4937] validate_nla: 2 callbacks suppressed [ 1634.689228][ T4937] netlink: 'syz.3.8522': attribute type 2 has an invalid length. [ 1635.383723][ T4956] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8527'. [ 1635.401226][ T4960] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.8527'. [ 1635.432213][ T4955] netlink: 'syz.0.8527': attribute type 10 has an invalid length. [ 1635.463778][ T4943] netlink: 'syz.1.8523': attribute type 2 has an invalid length. [ 1635.492907][ T4955] device dummy0 left promiscuous mode [ 1635.530637][ T4956] netlink: 'syz.0.8527': attribute type 10 has an invalid length. [ 1635.609441][ T4943] device .d entered promiscuous mode [ 1635.759646][ T4967] netlink: 'syz.3.8529': attribute type 10 has an invalid length. [ 1635.922900][ T4973] device wlan1 entered promiscuous mode [ 1636.253749][ T4983] device pim6reg1 entered promiscuous mode [ 1636.728802][ T4996] netlink: 184 bytes leftover after parsing attributes in process `syz.3.8535'. [ 1637.118014][ T5011] FAULT_INJECTION: forcing a failure. [ 1637.118014][ T5011] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.163808][ T5011] CPU: 0 PID: 5011 Comm: syz.0.8540 Not tainted syzkaller #0 [ 1637.171275][ T5011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1637.181378][ T5011] Call Trace: [ 1637.184695][ T5011] [ 1637.187672][ T5011] dump_stack_lvl+0x188/0x24e [ 1637.192406][ T5011] ? show_regs_print_info+0x12/0x12 [ 1637.197654][ T5011] ? load_image+0x400/0x400 [ 1637.202201][ T5011] ? __might_sleep+0xd0/0xd0 [ 1637.206840][ T5011] ? __lock_acquire+0x7d10/0x7d10 [ 1637.211961][ T5011] should_fail_ex+0x399/0x4d0 [ 1637.216703][ T5011] should_failslab+0x5/0x20 [ 1637.221264][ T5011] slab_pre_alloc_hook+0x59/0x310 [ 1637.226335][ T5011] ? do_syscall_64+0x4c/0xa0 [ 1637.230970][ T5011] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.237083][ T5011] kmem_cache_alloc_node+0x5a/0x320 [ 1637.242346][ T5011] ? __alloc_skb+0xfc/0x7e0 [ 1637.246903][ T5011] __alloc_skb+0xfc/0x7e0 [ 1637.251294][ T5011] netlink_dump+0x1ee/0xd00 [ 1637.255862][ T5011] ? netlink_lookup+0x200/0x200 [ 1637.260764][ T5011] ? genl_start+0x2e3/0x4a0 [ 1637.265320][ T5011] __netlink_dump_start+0x537/0x6f0 [ 1637.270596][ T5011] genl_family_rcv_msg_dumpit+0x228/0x3c0 [ 1637.276374][ T5011] ? genl_rcv_msg+0x790/0x790 [ 1637.281121][ T5011] ? __mutex_lock+0x1ab/0xaf0 [ 1637.285855][ T5011] ? genl_family_rcv_msg_doit+0x330/0x330 [ 1637.291607][ T5011] ? genl_start+0x4a0/0x4a0 [ 1637.296153][ T5011] ? genl_lock_dumpit+0x90/0x90 [ 1637.301042][ T5011] ? mutex_lock_nested+0x10/0x10 [ 1637.306064][ T5011] ? genl_get_cmd+0xe4/0x8b0 [ 1637.310756][ T5011] ? memcpy+0x3c/0x60 [ 1637.314796][ T5011] ? genl_get_cmd+0x518/0x8b0 [ 1637.319549][ T5011] genl_rcv_msg+0x5cb/0x790 [ 1637.324134][ T5011] ? genl_bind+0x360/0x360 [ 1637.328600][ T5011] ? tipc_nametbl_stop+0x10a0/0x10a0 [ 1637.333976][ T5011] netlink_rcv_skb+0x1fb/0x450 [ 1637.338795][ T5011] ? genl_bind+0x360/0x360 [ 1637.343292][ T5011] ? netlink_ack+0x1170/0x1170 [ 1637.348149][ T5011] ? down_read+0x1a8/0x2d0 [ 1637.352627][ T5011] genl_rcv+0x24/0x40 [ 1637.356661][ T5011] netlink_unicast+0x74d/0x8d0 [ 1637.361495][ T5011] netlink_sendmsg+0x8ad/0xbd0 [ 1637.366437][ T5011] ? netlink_getsockopt+0x550/0x550 [ 1637.371702][ T5011] ? aa_sock_msg_perm+0x94/0x150 [ 1637.376691][ T5011] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1637.382031][ T5011] ? security_socket_sendmsg+0x7c/0xa0 [ 1637.387563][ T5011] ? netlink_getsockopt+0x550/0x550 [ 1637.392816][ T5011] ____sys_sendmsg+0x5be/0x970 [ 1637.397640][ T5011] ? __sys_sendmsg_sock+0x30/0x30 [ 1637.402707][ T5011] ? __import_iovec+0x315/0x500 [ 1637.407604][ T5011] ? import_iovec+0x6f/0xa0 [ 1637.412177][ T5011] ___sys_sendmsg+0x2a2/0x360 [ 1637.416903][ T5011] ? __sys_sendmsg+0x290/0x290 [ 1637.421746][ T5011] ? __lock_acquire+0x7d10/0x7d10 [ 1637.426846][ T5011] __se_sys_sendmsg+0x1bb/0x2a0 [ 1637.431742][ T5011] ? ct_nmi_exit+0x145/0x1c0 [ 1637.436381][ T5011] ? __x64_sys_sendmsg+0x80/0x80 [ 1637.441394][ T5011] ? lockdep_hardirqs_on+0x94/0x140 [ 1637.446645][ T5011] do_syscall_64+0x4c/0xa0 [ 1637.451113][ T5011] ? clear_bhb_loop+0x60/0xb0 [ 1637.455837][ T5011] ? clear_bhb_loop+0x60/0xb0 [ 1637.460549][ T5011] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.466490][ T5011] RIP: 0033:0x7f7c3e19bf79 [ 1637.470947][ T5011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.490601][ T5011] RSP: 002b:00007f7c3f10c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1637.499095][ T5011] RAX: ffffffffffffffda RBX: 00007f7c3e416090 RCX: 00007f7c3e19bf79 [ 1637.507100][ T5011] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1637.515136][ T5011] RBP: 00007f7c3f10c090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.523143][ T5011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.531160][ T5011] R13: 00007f7c3e416128 R14: 00007f7c3e416090 R15: 00007fffc1d15d68 [ 1637.539197][ T5011] [ 1638.195841][ T5017] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.8543'. [ 1638.997595][ T5044] netlink: 'syz.0.8551': attribute type 3 has an invalid length. [ 1639.047482][ T5044] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8551'. [ 1639.104594][ T5045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8551'. [ 1640.584553][ T5090] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8561'. [ 1640.604870][ T5090] tc_dump_action: action bad kind [ 1640.875318][ T5088] netlink: 'syz.2.8563': attribute type 10 has an invalid length. [ 1640.887739][ T5088] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8563'. [ 1641.522830][ T5088] team0: Port device vlan0 removed [ 1642.083919][ T5115] netlink: 'syz.5.8569': attribute type 10 has an invalid length. [ 1642.754917][ T5141] netlink: 184 bytes leftover after parsing attributes in process `syz.1.8573'. [ 1642.828135][ T5146] netlink: 'syz.5.8580': attribute type 27 has an invalid length. [ 1643.355808][ T5154] netlink: 'syz.2.8583': attribute type 10 has an invalid length. [ 1643.374787][ T5154] batman_adv: batadv0: Interface deactivated: geneve0 [ 1643.596370][ T5154] batman_adv: batadv0: Removing interface: geneve0 [ 1643.727274][ T5156] device sit0 entered promiscuous mode [ 1644.390287][ T5171] mac80211_hwsim hwsim79 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1644.418176][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8589'. [ 1646.680772][T12319] wlan1: Trigger new scan to find an IBSS to join [ 1648.156975][ T5263] netlink: 'syz.0.8617': attribute type 10 has an invalid length. [ 1649.573759][ T5309] netlink: 'syz.2.8629': attribute type 10 has an invalid length. [ 1649.686013][ T5309] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.710372][ T5309] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.779793][ T5309] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.821565][ T5309] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.907274][ T5309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.939022][ T5309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.962955][ T5309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.976674][ T5309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1649.994393][ T5309] team0: Port device geneve1 added [ 1650.000489][ T5321] device pim6reg1 left promiscuous mode [ 1650.191621][ T5336] netlink: 'syz.1.8633': attribute type 10 has an invalid length. [ 1650.229143][ T5345] sctp: [Deprecated]: syz.0.8636 (pid 5345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1650.229143][ T5345] Use struct sctp_sack_info instead [ 1650.295586][ T5336] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8633'. [ 1650.570937][ T5355] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8640'. [ 1650.610466][ T5361] delete_channel: no stack [ 1650.621603][ T5361] delete_channel: no stack [ 1650.772190][T12323] wlan1: Trigger new scan to find an IBSS to join [ 1650.860047][ T5336] team0: Port device vlan0 removed [ 1651.076085][ T5346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8633'. [ 1651.503201][ T5377] netlink: 'syz.1.8644': attribute type 27 has an invalid length. [ 1651.540687][T12320] tipc: Subscription rejected, illegal request [ 1651.553989][ T5377] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1652.683618][T12319] wlan1: Creating new IBSS network, BSSID ee:fc:be:62:28:87 [ 1653.021348][ T5429] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8661'. [ 1653.139265][ T5434] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.8663'. [ 1654.308553][ T5465] netlink: 'syz.2.8673': attribute type 3 has an invalid length. [ 1654.879284][ T5488] tun0: tun_chr_ioctl cmd 1074025680 [ 1655.193696][ T5494] netlink: 'syz.5.8682': attribute type 39 has an invalid length. [ 1655.198839][ T5496] sctp: [Deprecated]: syz.2.8681 (pid 5496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1655.198839][ T5496] Use struct sctp_sack_info instead [ 1655.238730][ T5494] device veth0_macvtap left promiscuous mode [ 1655.270842][ T5498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8681'. [ 1655.427570][ T5497] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.8683'. [ 1655.459549][ T5513] netlink: 'syz.0.8685': attribute type 10 has an invalid length. [ 1655.561981][ T5498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8681'. [ 1655.591752][ T5496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8681'. [ 1655.648096][ T5509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8681'. [ 1656.179064][ T5526] device syzkaller0 entered promiscuous mode [ 1658.987805][ T5569] netlink: 144 bytes leftover after parsing attributes in process `syz.5.8702'. [ 1659.287000][ T5585] netlink: 'syz.0.8706': attribute type 3 has an invalid length. [ 1659.370864][ T5585] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8706'. [ 1660.012782][ T5589] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1660.130118][ T5589] team0: Port device team_slave_0 removed [ 1660.143112][ T5589] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1660.517299][ T5628] netlink: 'syz.0.8717': attribute type 10 has an invalid length. [ 1660.546673][ T5628] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8717'. [ 1660.557310][ T5632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1660.588635][ T5632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1660.626354][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1660.669980][ T5638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1660.700357][ T5632] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1660.712258][ T5637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8719'. [ 1661.397381][ T5657] netlink: 'syz.2.8725': attribute type 3 has an invalid length. [ 1661.452825][ T5657] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1661.495675][ T5658] netlink: 'syz.2.8725': attribute type 3 has an invalid length. [ 1661.558206][ T5658] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1662.044873][ T5662] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8727'. [ 1662.204596][ T5662] team0: Port device team_slave_0 removed [ 1662.225420][ T5662] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1662.393571][ T5676] netlink: 'syz.1.8726': attribute type 12 has an invalid length. [ 1663.483539][ T5741] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1664.226898][ T5759] netlink: 'syz.2.8750': attribute type 2 has an invalid length. [ 1665.290702][ T5790] netlink: 'syz.5.8761': attribute type 29 has an invalid length. [ 1665.321426][ T5790] netlink: 'syz.5.8761': attribute type 29 has an invalid length. [ 1665.438862][ T5793] netlink: 'syz.3.8759': attribute type 3 has an invalid length. [ 1665.452010][ T5793] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 1665.640665][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 1665.898541][ T5807] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1666.004112][ T5820] netlink: 'syz.1.8768': attribute type 2 has an invalid length. [ 1666.039841][ T5820] netlink: 'syz.1.8768': attribute type 2 has an invalid length. [ 1666.193575][ T4270] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 1666.829770][ T5850] netlink: 'syz.5.8777': attribute type 2 has an invalid length. [ 1666.859592][ T5850] __nla_validate_parse: 8 callbacks suppressed [ 1666.859608][ T5850] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8777'. [ 1666.944759][ T5848] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.8776'. [ 1667.347235][ T5871] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8782'. [ 1667.584822][ T5873] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.8784'. [ 1667.859058][ T5882] netlink: 'syz.0.8789': attribute type 10 has an invalid length. [ 1667.957164][ T5886] netlink: 140 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1667.982015][ T5886] netlink: 6 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1668.205681][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 1668.675796][ T5913] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1668.693304][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.699712][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.756161][ T5915] netlink: 'syz.3.8799': attribute type 8 has an invalid length. [ 1668.770295][ T5915] netlink: 399 bytes leftover after parsing attributes in process `syz.3.8799'. [ 1669.626037][ T5957] netlink: 184 bytes leftover after parsing attributes in process `syz.2.8809'. [ 1669.836109][ T5963] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.8811'. [ 1670.237913][ T5972] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1672.827868][ T6025] device wlan1 left promiscuous mode [ 1673.207714][ T6032] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1674.301970][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1674.309503][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1674.334435][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1674.365072][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1675.329243][ T6094] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.8851'. [ 1675.658449][ T6098] netlink: 'syz.3.8849': attribute type 153 has an invalid length. [ 1675.745644][ T6098] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.8849'. [ 1676.117138][ T6122] netlink: 'syz.2.8857': attribute type 1 has an invalid length. [ 1676.707323][ T6149] netlink: 'syz.0.8865': attribute type 1 has an invalid length. [ 1676.766433][ T6151] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.8866'. [ 1678.139687][ T6169] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8871'. [ 1678.157955][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1678.196463][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1678.205235][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1678.233634][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1678.251406][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1678.259289][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1680.279119][T31749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.371024][ T4272] Bluetooth: hci0: command 0x0409 tx timeout [ 1680.448422][T31749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.496440][ T6180] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.8874'. [ 1680.526376][ T6185] netlink: 'syz.2.8875': attribute type 10 has an invalid length. [ 1680.606626][ T6185] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1680.658739][T31749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.832539][T31749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.250242][T31749] device 0 left promiscuous mode [ 1681.331143][T31749] device 1 left promiscuous mode [ 1681.459288][ T6170] chnl_net:caif_netlink_parms(): no params data found [ 1682.161583][ T6170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.251251][ T6170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.294117][ T6170] device bridge_slave_0 entered promiscuous mode [ 1682.450996][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 1682.499674][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.507009][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1682.516918][ T6224] netlink: 'syz.5.8882': attribute type 29 has an invalid length. [ 1682.526629][ T6170] device bridge_slave_1 entered promiscuous mode [ 1682.543961][ T6224] netlink: 'syz.5.8882': attribute type 29 has an invalid length. [ 1682.606302][ T6217] netlink: 'syz.5.8882': attribute type 29 has an invalid length. [ 1682.643108][ T6170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.672170][ T6225] netlink: 'syz.1.8884': attribute type 2 has an invalid length. [ 1682.700885][ T6225] netlink: 'syz.1.8884': attribute type 8 has an invalid length. [ 1682.709098][ T6225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8884'. [ 1682.969727][ T6170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1683.004823][ T6231] netlink: 'syz.5.8886': attribute type 10 has an invalid length. [ 1683.019659][ T6231] device veth0_vlan left promiscuous mode [ 1683.060217][ T6231] device veth0_vlan entered promiscuous mode [ 1683.120534][ T6231] team0: Device veth0_vlan failed to register rx_handler [ 1683.308640][ T6232] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8886'. [ 1683.499724][ T6170] team0: Port device team_slave_0 added [ 1683.576321][ T6170] team0: Port device team_slave_1 added [ 1683.704380][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1683.712149][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.790977][ T6170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1683.877139][ T6170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1683.888457][ T6170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.919745][ T6170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1684.081770][ T6269] netlink: 'syz.0.8894': attribute type 10 has an invalid length. [ 1684.246992][ T6272] device hsr0 entered promiscuous mode [ 1684.265142][ T6170] device hsr_slave_0 entered promiscuous mode [ 1684.280396][ T6170] device hsr_slave_1 entered promiscuous mode [ 1684.318805][ T6170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1684.332257][ T6170] Cannot create hsr debugfs directory [ 1684.521797][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 1684.549774][ T6281] device syzkaller0 entered promiscuous mode [ 1685.385506][T31749] team0: Port device wlan1 removed [ 1686.610652][ T4272] Bluetooth: hci0: command 0x0419 tx timeout [ 1687.897356][T31749] device hsr_slave_0 left promiscuous mode [ 1687.906285][T31749] device hsr_slave_1 left promiscuous mode [ 1687.918317][T31749] device bridge_slave_0 left promiscuous mode [ 1687.925513][T31749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.996750][T31749] device veth1_macvtap left promiscuous mode [ 1688.787666][T31749] team0 (unregistering): Port device veth0_to_hsr removed [ 1689.012253][T31749] team0 (unregistering): Port device team_slave_1 removed [ 1689.694121][ T6329] netlink: 'syz.2.8907': attribute type 10 has an invalid length. [ 1689.730623][ T6329] team0: Device hsr_slave_0 failed to register rx_handler [ 1689.953627][ T6335] netlink: 'syz.5.8909': attribute type 3 has an invalid length. [ 1689.993287][ T6335] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.8909'. [ 1690.369703][ T6337] netlink: 'syz.2.8908': attribute type 153 has an invalid length. [ 1690.440160][ T6337] netlink: 69544 bytes leftover after parsing attributes in process `syz.2.8908'. [ 1690.614419][ T6170] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1690.692117][ T6170] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1690.801379][ T6170] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1690.859211][ T6170] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1691.250794][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 1691.294450][ T6170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.304221][ T6358] delete_channel: no stack [ 1691.343522][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1691.358968][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1691.421006][ T6170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.435481][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1691.465839][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1691.495022][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.502259][T12323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.571853][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1691.604313][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1691.631807][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1691.661303][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.668466][T12323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.720970][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1691.780262][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1691.895564][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1691.922893][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1692.051071][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1692.078866][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1692.127187][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1692.181664][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1692.211371][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1692.241128][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1692.271311][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1692.311476][ T6170] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1692.411085][ T6388] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8918'. [ 1692.422309][ T6384] netlink: 'syz.0.8917': attribute type 11 has an invalid length. [ 1692.430184][ T6384] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8917'. [ 1692.831460][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1692.909077][ T6395] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8919'. [ 1693.425156][ T6425] delete_channel: no stack [ 1693.472909][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1693.483003][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1693.518063][ T6170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1693.777145][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1693.814962][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1693.826351][ T6436] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.8927'. [ 1694.089235][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1694.115730][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1694.126822][ T6170] device veth0_vlan entered promiscuous mode [ 1694.162823][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1694.178979][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1694.205982][ T6170] device veth1_vlan entered promiscuous mode [ 1694.330479][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1694.357186][ T6451] netlink: 'syz.2.8929': attribute type 3 has an invalid length. [ 1694.373569][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1694.390095][ T6451] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8929'. [ 1694.415704][ T6170] device veth0_macvtap entered promiscuous mode [ 1694.549656][ T6170] device veth1_macvtap entered promiscuous mode [ 1694.587410][ T6460] netlink: 'syz.0.8931': attribute type 7 has an invalid length. [ 1694.607277][ T6460] netlink: 'syz.0.8931': attribute type 1 has an invalid length. [ 1694.624388][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.639059][ T6460] netlink: 'syz.0.8931': attribute type 1 has an invalid length. [ 1694.653832][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.666040][ T6460] netlink: 'syz.0.8931': attribute type 2 has an invalid length. [ 1694.676621][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1694.689527][ T6460] netlink: 'syz.0.8931': attribute type 14 has an invalid length. [ 1694.700463][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1694.714722][ T6460] netlink: 'syz.0.8931': attribute type 3 has an invalid length. [ 1694.724354][ T6460] netlink: 'syz.0.8931': attribute type 4 has an invalid length. [ 1694.746319][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1694.751137][ T6460] netlink: 'syz.0.8931': attribute type 6 has an invalid length. [ 1694.762599][T31753] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1694.776326][T31753] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1694.784376][ T6460] netlink: 'syz.0.8931': attribute type 7 has an invalid length. [ 1694.801218][ T6460] netlink: 'syz.0.8931': attribute type 5 has an invalid length. [ 1694.820367][T31753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1694.834461][ T6460] netlink: 'syz.0.8931': attribute type 12 has an invalid length. [ 1694.855839][T31753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1694.865657][ T6460] netlink: 'syz.0.8931': attribute type 13 has an invalid length. [ 1694.903751][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1694.921589][ T6460] netlink: 'syz.0.8931': attribute type 19 has an invalid length. [ 1694.950657][ T6460] netlink: 207236 bytes leftover after parsing attributes in process `syz.0.8931'. [ 1694.973170][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.006053][ T6170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1695.038391][ T6170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1695.081997][ T6170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1695.112913][T31753] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1695.151770][T31753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1695.213804][ T6170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.253982][ T6170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.290789][ T6170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.330135][ T6170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1695.467410][ T6479] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.8934'. [ 1696.015432][T31765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.037827][T31765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.075341][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1696.161492][T12319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1696.169464][T12319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.210289][T31765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1696.428986][ T6498] sctp: [Deprecated]: syz.0.8940 (pid 6498) Use of int in max_burst socket option deprecated. [ 1696.428986][ T6498] Use struct sctp_assoc_value instead [ 1696.570168][ T6512] netlink: 'syz.1.8942': attribute type 3 has an invalid length. [ 1696.618446][ T6512] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.8942'. [ 1696.718753][ T6506] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8942'. [ 1698.646792][ T4272] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 1699.882655][ T6595] netlink: 'syz.1.8962': attribute type 2 has an invalid length. [ 1699.965717][ T6595] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8962'. [ 1700.033794][ T6609] netlink: 'syz.3.8964': attribute type 2 has an invalid length. [ 1700.069719][ T6609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8964'. [ 1703.315672][ T6660] netlink: 'syz.0.8978': attribute type 2 has an invalid length. [ 1703.364126][ T6660] netlink: 'syz.0.8978': attribute type 3 has an invalid length. [ 1703.380607][ T6660] netlink: 'syz.0.8978': attribute type 4 has an invalid length. [ 1703.398683][ T6660] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.8978'. [ 1706.616439][ T6719] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8994'. [ 1706.757111][ T6720] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.8994'. [ 1707.474283][ T6748] netlink: 'syz.3.9003': attribute type 3 has an invalid length. [ 1707.527201][ T6748] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9003'. [ 1707.579396][ T6737] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.9003'. [ 1707.831394][ T6753] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9007'. [ 1708.220694][ T6761] netlink: 'syz.3.9010': attribute type 10 has an invalid length. [ 1708.228614][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9010'. [ 1708.341737][ T6761] bridge0: port 3(veth0_vlan) entered blocking state [ 1708.440899][ T6761] bridge0: port 3(veth0_vlan) entered disabled state [ 1708.492840][ T6761] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1712.607547][ T6833] netlink: 'syz.5.9031': attribute type 21 has an invalid length. [ 1712.676363][ T6835] netlink: 'syz.0.9033': attribute type 21 has an invalid length. [ 1712.688428][ T6835] IPv6: NLM_F_CREATE should be specified when creating new route [ 1712.712213][ T6835] IPv6: Can't replace route, no match found [ 1713.935109][ T6854] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1713.951780][ T6854] syzkaller1: linktype set to 823 [ 1714.058476][ T6863] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9042'. [ 1715.544146][ T6899] netlink: 'syz.3.9052': attribute type 10 has an invalid length. [ 1715.980287][ T6908] netlink: 'syz.0.9054': attribute type 10 has an invalid length. [ 1716.778987][ T6925] netlink: 'syz.0.9059': attribute type 21 has an invalid length. [ 1716.788082][ T6925] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9059'. [ 1717.184892][ T6936] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.9063'. [ 1717.197590][ T6938] netlink: 'syz.5.9064': attribute type 21 has an invalid length. [ 1717.215989][ T6938] netlink: 128 bytes leftover after parsing attributes in process `syz.5.9064'. [ 1717.240634][ T6938] netlink: 'syz.5.9064': attribute type 5 has an invalid length. [ 1717.248441][ T6938] netlink: 'syz.5.9064': attribute type 6 has an invalid length. [ 1717.256819][ T6938] netlink: 3 bytes leftover after parsing attributes in process `syz.5.9064'. [ 1717.537147][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1717.573112][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1717.593871][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1717.608098][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1717.616988][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1717.624338][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1717.733203][ T6952] delete_channel: no stack [ 1717.895954][ T6950] chnl_net:caif_netlink_parms(): no params data found [ 1717.951364][ T6961] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.9070'. [ 1718.005355][T12329] tipc: Subscription rejected, illegal request [ 1718.247979][ T6950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1718.280971][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1718.289072][ T6950] device bridge_slave_0 entered promiscuous mode [ 1718.332827][ T6950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.340315][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.353647][ T6950] device bridge_slave_1 entered promiscuous mode [ 1718.412254][ T6950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1718.447260][ T6971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1718.457156][ T6950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.517870][ T6971] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1718.555659][ T6950] team0: Port device team_slave_0 added [ 1718.572439][ T6976] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1718.590930][ T6978] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9071'. [ 1718.645229][ T6977] netlink: 'syz.5.9072': attribute type 10 has an invalid length. [ 1718.704712][ T6977] bond0: (slave wlan1): Releasing backup interface [ 1718.754284][ T6977] team0: Port device wlan1 added [ 1718.769148][ T6950] team0: Port device team_slave_1 added [ 1718.836414][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.856399][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1718.952240][ T6950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.992777][ T6950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.020141][ T6950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1719.097494][ T6950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.129559][ T6995] netlink: 'syz.3.9077': attribute type 10 has an invalid length. [ 1719.295206][ T6995] team0: Port device syz_tun added [ 1719.359719][ T6997] netlink: 'syz.2.9074': attribute type 21 has an invalid length. [ 1719.410843][ T6997] netlink: 156 bytes leftover after parsing attributes in process `syz.2.9074'. [ 1719.428478][ T6999] netlink: 'syz.5.9078': attribute type 21 has an invalid length. [ 1719.437455][ T6999] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9078'. [ 1719.495126][ T6950] device hsr_slave_0 entered promiscuous mode [ 1719.526179][ T6950] device hsr_slave_1 entered promiscuous mode [ 1719.550111][ T6950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1719.568226][ T6950] Cannot create hsr debugfs directory [ 1719.640744][ T4272] Bluetooth: hci3: command 0x0409 tx timeout [ 1719.861727][ T7011] device syzkaller0 entered promiscuous mode [ 1720.304488][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9084'. [ 1720.456599][ T7027] netlink: 'syz.2.9085': attribute type 3 has an invalid length. [ 1720.465214][ T7027] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9085'. [ 1720.747792][ T7030] netlink: 'syz.2.9085': attribute type 3 has an invalid length. [ 1720.772683][ T7030] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9085'. [ 1721.278209][ T7042] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9088'. [ 1721.727081][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 1722.741751][ T7025] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9084'. [ 1722.971445][ T7048] netlink: 'syz.3.9089': attribute type 29 has an invalid length. [ 1722.985247][ T7056] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9090'. [ 1723.043081][ T6950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.088622][ T7048] netlink: 'syz.3.9089': attribute type 29 has an invalid length. [ 1723.133021][ T7057] netlink: 'syz.3.9089': attribute type 29 has an invalid length. [ 1723.171420][ T7058] netlink: 'syz.5.9090': attribute type 10 has an invalid length. [ 1723.203163][ T7058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.215513][ T7067] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9093'. [ 1723.252182][ T7058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.302990][ T7058] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1723.389097][ T6950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.670367][ T6950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.810829][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 1723.934196][ T6950] bond0: (slave netdevsim0): Releasing backup interface [ 1723.958152][ T6950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.253256][ T7091] validate_nla: 2 callbacks suppressed [ 1724.253476][ T7091] netlink: 'syz.3.9101': attribute type 21 has an invalid length. [ 1724.267812][ T7091] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1724.300685][ T6950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1724.316853][ T6950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1724.356101][ T6950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1724.393722][ T6950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1724.423242][ T7096] netlink: 'syz.2.9102': attribute type 2 has an invalid length. [ 1724.436164][ T7096] netlink: 'syz.2.9102': attribute type 8 has an invalid length. [ 1724.444565][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9102'. [ 1724.623374][ T6950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.674303][T31749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1724.701496][T31749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1724.713868][ T6950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.739838][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1724.781062][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1724.809932][T12319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.817178][T12319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.841141][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1724.874554][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1724.900943][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1724.918989][T12319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.926246][T12319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.988648][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1725.011850][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1725.026404][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1725.057202][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1725.079095][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1725.098755][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1725.108732][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1725.128640][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1725.143394][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1725.165925][ T6950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1725.187811][ T6950] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1725.196882][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1725.217360][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1725.708872][T12329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1725.718057][T12329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1725.745848][ T6950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.815590][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1725.828894][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1725.890931][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 1725.978980][ T7146] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1726.008490][ T7146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1726.039409][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1726.051671][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1726.065757][ T6950] device veth0_vlan entered promiscuous mode [ 1726.082704][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1726.098929][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1726.126320][ T6950] device veth1_vlan entered promiscuous mode [ 1726.196194][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1726.208330][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1726.226817][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1726.236841][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1726.253923][ T6950] device veth0_macvtap entered promiscuous mode [ 1726.274684][ T7158] netlink: 'syz.0.9115': attribute type 3 has an invalid length. [ 1726.297802][ T6950] device veth1_macvtap entered promiscuous mode [ 1726.320776][ T7158] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9115'. [ 1726.382310][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.420593][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.440927][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1726.460549][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.474338][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1726.490250][T12329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1726.502051][T12329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1726.510453][T12329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1726.527848][T12329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1726.545000][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.579947][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.656900][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.738459][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.813863][ T6950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1726.874973][ T6950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1726.935618][ T6950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1726.951045][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1726.968241][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1727.005019][ T6950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.029618][ T6950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.056524][ T6950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.080977][ T6950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.498132][T12323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.537083][T12323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.592266][T12323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1727.677230][T12323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.707619][T12323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.735882][T12319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1728.127106][ T7210] netlink: 'syz.3.9128': attribute type 3 has an invalid length. [ 1728.158605][ T7210] netlink: 'syz.3.9128': attribute type 8 has an invalid length. [ 1728.181990][ T7210] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.9128'. [ 1728.700279][ T7223] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 1728.783575][ T7226] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.9134'. [ 1728.850215][ T7226] netlink: 6955 bytes leftover after parsing attributes in process `syz.5.9134'. [ 1729.297096][ T7232] netlink: 'syz.5.9136': attribute type 4 has an invalid length. [ 1729.335719][ T7232] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9136'. [ 1729.393967][ T7232] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1729.444506][ T7239] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9138'. [ 1729.522933][ T7239] netlink: zone id is out of range [ 1729.529297][ T7239] netlink: zone id is out of range [ 1729.602124][ T7239] netlink: zone id is out of range [ 1729.621063][ T7239] netlink: zone id is out of range [ 1729.626286][ T7239] netlink: zone id is out of range [ 1729.660840][ T7239] netlink: zone id is out of range [ 1729.687924][ T7239] netlink: zone id is out of range [ 1729.733625][ T7239] netlink: zone id is out of range [ 1730.126097][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.132611][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.187314][ T7250] device syzkaller0 entered promiscuous mode [ 1730.278840][T12319] device .d left promiscuous mode [ 1733.915143][ T7331] netlink: 'syz.5.9158': attribute type 2 has an invalid length. [ 1733.954711][ T7331] netlink: 'syz.5.9158': attribute type 1 has an invalid length. [ 1733.976725][ T7331] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.9158'. [ 1735.449521][T12319] device hsr_slave_0 left promiscuous mode [ 1735.464072][T12319] device hsr_slave_1 left promiscuous mode [ 1735.483651][T12319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.501588][T12319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.537675][T12319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.567870][T12319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.594257][T12319] bridge0: port 3(dummy0) entered disabled state [ 1735.621131][T12319] device bridge_slave_1 left promiscuous mode [ 1735.653728][T12319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.676663][T12319] device bridge_slave_0 left promiscuous mode [ 1735.683346][T12319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.760985][T12319] device veth1_macvtap left promiscuous mode [ 1735.775520][T12319] device veth0_macvtap left promiscuous mode [ 1735.826159][ C1] ================================================================== [ 1735.834308][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 1735.842181][ C1] Write of size 80 at addr ffff888059944690 by task syz.0.9172/7379 [ 1735.850205][ C1] [ 1735.852571][ C1] CPU: 1 PID: 7379 Comm: syz.0.9172 Not tainted syzkaller #0 [ 1735.860008][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1735.870110][ C1] Call Trace: [ 1735.873435][ C1] [ 1735.876315][ C1] dump_stack_lvl+0x188/0x24e [ 1735.881052][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1735.886150][ C1] ? show_regs_print_info+0x12/0x12 [ 1735.891426][ C1] ? load_image+0x400/0x400 [ 1735.895976][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1735.901477][ C1] ? __virt_addr_valid+0x188/0x540 [ 1735.906643][ C1] ? __virt_addr_valid+0x465/0x540 [ 1735.911810][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 1735.916966][ C1] print_report+0xa8/0x210 [ 1735.921426][ C1] kasan_report+0x10b/0x140 [ 1735.925993][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 1735.931153][ C1] kasan_check_range+0x235/0x290 [ 1735.936160][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 1735.941352][ C1] memcpy+0x3c/0x60 [ 1735.945214][ C1] __bpf_get_stackid+0x6c9/0x920 [ 1735.950217][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 1735.955290][ C1] bpf_prog_329ce602f177131b+0x21/0x36 [ 1735.960809][ C1] bpf_overflow_handler+0x522/0x7c0 [ 1735.966058][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1735.971394][ C1] ? perf_event_switch_output+0x760/0x760 [ 1735.977172][ C1] ? sched_clock_cpu+0x6e/0x260 [ 1735.982088][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1735.988393][ C1] __perf_event_overflow+0x448/0x610 [ 1735.993731][ C1] perf_swevent_hrtimer+0x3ef/0x590 [ 1735.998989][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1736.004294][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1736.009545][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1736.015476][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1736.020379][ C1] __hrtimer_run_queues+0x521/0xd70 [ 1736.025617][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1736.031666][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1736.037697][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1736.042945][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1736.048107][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 1736.053101][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1736.059135][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1736.064838][ C1] [ 1736.067802][ C1] [ 1736.070789][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1736.076823][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 1736.082680][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 d0 fd dc 08 e8 0b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1736.102368][ C1] RSP: 0018:ffffc900053278f8 EFLAGS: 00000282 [ 1736.108495][ C1] RAX: 6aacb264da1e6a00 RBX: 0000000000000000 RCX: 6aacb264da1e6a00 [ 1736.116507][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 1736.124523][ C1] RBP: ffffc90005327950 R08: ffff8880b8f3ab03 R09: 1ffff110171e7560 [ 1736.132539][ C1] R10: dffffc0000000000 R11: ffffed10171e7561 R12: ffff88803002bb80 [ 1736.140557][ C1] R13: dffffc0000000000 R14: ffff888041f4d940 R15: ffff8880b8f3b5d0 [ 1736.148580][ C1] ? finish_task_switch+0x265/0x8f0 [ 1736.153838][ C1] __schedule+0x11d9/0x40e0 [ 1736.158412][ C1] ? __sched_text_start+0x8/0x8 [ 1736.163323][ C1] ? plist_add+0x3d4/0x480 [ 1736.167795][ C1] schedule+0xb9/0x180 [ 1736.171952][ C1] ? futex_wait_queue+0x23/0x1b0 [ 1736.176926][ C1] futex_wait_queue+0x134/0x1b0 [ 1736.181822][ C1] futex_wait+0x1e8/0x5e0 [ 1736.186205][ C1] ? futex_wait_setup+0x270/0x270 [ 1736.191292][ C1] ? perf_poll+0x1b0/0x1b0 [ 1736.195849][ C1] do_futex+0x310/0x320 [ 1736.200059][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1736.206003][ C1] __se_sys_futex+0x381/0x410 [ 1736.210734][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 1736.215567][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 1736.220384][ C1] do_syscall_64+0x4c/0xa0 [ 1736.224850][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1736.229579][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1736.234309][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.240270][ C1] RIP: 0033:0x7f7c3e19bf79 [ 1736.244728][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1736.264374][ C1] RSP: 002b:00007f7c3f12d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1736.272831][ C1] RAX: ffffffffffffffda RBX: 00007f7c3e415fa8 RCX: 00007f7c3e19bf79 [ 1736.280845][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c3e415fa8 [ 1736.288855][ C1] RBP: 00007f7c3e415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.296856][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1736.304884][ C1] R13: 00007f7c3e416038 R14: 00007fffc1d15c80 R15: 00007fffc1d15d68 [ 1736.312902][ C1] [ 1736.315952][ C1] [ 1736.318323][ C1] Allocated by task 7379: [ 1736.322682][ C1] kasan_set_track+0x4b/0x70 [ 1736.327312][ C1] __kasan_kmalloc+0x8e/0xa0 [ 1736.331945][ C1] __kmalloc_node+0xb0/0x240 [ 1736.336579][ C1] bpf_map_area_alloc+0x47/0xe0 [ 1736.341469][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 1736.347229][ C1] stack_map_alloc+0x390/0x520 [ 1736.352031][ C1] map_create+0x534/0x1000 [ 1736.356492][ C1] __sys_bpf+0x38b/0x780 [ 1736.360780][ C1] __x64_sys_bpf+0x78/0x90 [ 1736.365254][ C1] do_syscall_64+0x4c/0xa0 [ 1736.369710][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1736.375669][ C1] [ 1736.378020][ C1] Last potentially related work creation: [ 1736.383755][ C1] kasan_save_stack+0x3a/0x60 [ 1736.388467][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1736.393877][ C1] call_rcu+0x14f/0x990 [ 1736.398080][ C1] nf_unregister_net_hooks+0xc7/0x130 [ 1736.403485][ C1] nf_defrag_ipv6_disable+0x91/0xe0 [ 1736.408744][ C1] nf_ct_netns_put+0x371/0x510 [ 1736.413547][ C1] nf_conncount_destroy+0x3d/0x150 [ 1736.418699][ C1] ovs_ct_exit+0x98/0x200 [ 1736.423066][ C1] ovs_exit_net+0xe9/0x7a0 [ 1736.427523][ C1] cleanup_net+0x706/0xba0 [ 1736.432002][ C1] process_one_work+0x8a2/0x1160 [ 1736.436976][ C1] worker_thread+0xaa2/0x1270 [ 1736.441692][ C1] kthread+0x29d/0x330 [ 1736.445801][ C1] ret_from_fork+0x1f/0x30 [ 1736.450259][ C1] [ 1736.452615][ C1] Second to last potentially related work creation: [ 1736.459226][ C1] kasan_save_stack+0x3a/0x60 [ 1736.463974][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 1736.469386][ C1] call_rcu+0x14f/0x990 [ 1736.473584][ C1] nf_unregister_net_hooks+0xc7/0x130 [ 1736.478997][ C1] cleanup_net+0x591/0xba0 [ 1736.483456][ C1] process_one_work+0x8a2/0x1160 [ 1736.488433][ C1] worker_thread+0xaa2/0x1270 [ 1736.493125][ C1] kthread+0x29d/0x330 [ 1736.497204][ C1] ret_from_fork+0x1f/0x30 [ 1736.501643][ C1] [ 1736.503978][ C1] The buggy address belongs to the object at ffff888059944680 [ 1736.503978][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 1736.518132][ C1] The buggy address is located 16 bytes inside of [ 1736.518132][ C1] 64-byte region [ffff888059944680, ffff8880599446c0) [ 1736.531251][ C1] [ 1736.533600][ C1] The buggy address belongs to the physical page: [ 1736.540033][ C1] page:ffffea0001665100 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888059944380 pfn:0x59944 [ 1736.551506][ C1] memcg:ffff888074706201 [ 1736.555760][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1736.563339][ C1] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888017442780 [ 1736.571939][ C1] raw: ffff888059944380 000000008020001e 00000001ffffffff ffff888074706201 [ 1736.580538][ C1] page dumped because: kasan: bad access detected [ 1736.586979][ C1] page_owner tracks the page as allocated [ 1736.592702][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 4277, tgid 4277 (syz-executor), ts 71094530528, free_ts 21841989114 [ 1736.611038][ C1] post_alloc_hook+0x173/0x1a0 [ 1736.615827][ C1] get_page_from_freelist+0x1a1e/0x1ab0 [ 1736.621399][ C1] __alloc_pages+0x1ec/0x4f0 [ 1736.626016][ C1] alloc_slab_page+0x5d/0x160 [ 1736.630712][ C1] new_slab+0x87/0x2c0 [ 1736.634823][ C1] ___slab_alloc+0xbc6/0x1240 [ 1736.639517][ C1] __kmem_cache_alloc_node+0x1a0/0x260 [ 1736.644993][ C1] __kmalloc_node+0xa0/0x240 [ 1736.649619][ C1] kvmalloc_node+0x6c/0x180 [ 1736.654155][ C1] nf_hook_entries_grow+0x309/0x730 [ 1736.659374][ C1] __nf_register_net_hook+0x2c9/0x910 [ 1736.664767][ C1] nf_register_net_hook+0xae/0x190 [ 1736.669900][ C1] nf_register_net_hooks+0x40/0x1a0 [ 1736.675142][ C1] brnf_device_event+0x12e/0x1d0 [ 1736.680098][ C1] raw_notifier_call_chain+0xcb/0x160 [ 1736.685484][ C1] register_netdevice+0x163f/0x1b00 [ 1736.690701][ C1] page last free stack trace: [ 1736.695386][ C1] free_unref_page_prepare+0x8b4/0x9a0 [ 1736.700866][ C1] free_unref_page+0x2e/0x3f0 [ 1736.705560][ C1] free_contig_range+0x9d/0x150 [ 1736.710433][ C1] destroy_args+0xf0/0xa0a [ 1736.714918][ C1] debug_vm_pgtable+0x33c/0x38e [ 1736.719832][ C1] do_one_initcall+0x26a/0x840 [ 1736.724614][ C1] do_initcall_level+0x137/0x1e4 [ 1736.729631][ C1] do_initcalls+0x4b/0x8a [ 1736.733983][ C1] kernel_init_freeable+0x415/0x5be [ 1736.739221][ C1] kernel_init+0x19/0x1b0 [ 1736.743568][ C1] ret_from_fork+0x1f/0x30 [ 1736.748020][ C1] [ 1736.750374][ C1] Memory state around the buggy address: [ 1736.756024][ C1] ffff888059944580: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1736.764116][ C1] ffff888059944600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1736.772196][ C1] >ffff888059944680: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1736.780278][ C1] ^ [ 1736.785674][ C1] ffff888059944700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1736.793758][ C1] ffff888059944780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1736.801830][ C1] ================================================================== [ 1736.809909][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1736.817117][ C1] CPU: 1 PID: 7379 Comm: syz.0.9172 Not tainted syzkaller #0 [ 1736.824499][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1736.834565][ C1] Call Trace: [ 1736.837855][ C1] [ 1736.840715][ C1] dump_stack_lvl+0x188/0x24e [ 1736.845445][ C1] ? memcpy+0x3c/0x60 [ 1736.849435][ C1] ? show_regs_print_info+0x12/0x12 [ 1736.854650][ C1] ? load_image+0x400/0x400 [ 1736.859171][ C1] panic+0x2e5/0x730 [ 1736.863103][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1736.868145][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1736.872666][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1736.878569][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1736.883442][ C1] check_panic_on_warn+0x80/0xa0 [ 1736.888395][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 1736.893527][ C1] end_report+0x66/0x110 [ 1736.897790][ C1] kasan_report+0x118/0x140 [ 1736.902321][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 1736.907453][ C1] kasan_check_range+0x235/0x290 [ 1736.912415][ C1] ? __bpf_get_stackid+0x6c9/0x920 [ 1736.917545][ C1] memcpy+0x3c/0x60 [ 1736.921370][ C1] __bpf_get_stackid+0x6c9/0x920 [ 1736.926333][ C1] bpf_get_stackid_pe+0x33f/0x400 [ 1736.931388][ C1] bpf_prog_329ce602f177131b+0x21/0x36 [ 1736.936885][ C1] bpf_overflow_handler+0x522/0x7c0 [ 1736.942127][ C1] ? bpf_overflow_handler+0xd9/0x7c0 [ 1736.947437][ C1] ? perf_event_switch_output+0x760/0x760 [ 1736.953176][ C1] ? sched_clock_cpu+0x6e/0x260 [ 1736.958043][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1736.964343][ C1] __perf_event_overflow+0x448/0x610 [ 1736.969656][ C1] perf_swevent_hrtimer+0x3ef/0x590 [ 1736.974881][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1736.980111][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 1736.985331][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1736.991259][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1736.996135][ C1] __hrtimer_run_queues+0x521/0xd70 [ 1737.001355][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1737.007358][ C1] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 1737.013359][ C1] ? cpu_clock_event_read+0x50/0x50 [ 1737.018574][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1737.023706][ C1] hrtimer_interrupt+0x3c5/0x9c0 [ 1737.028675][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 1737.034671][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1737.040332][ C1] [ 1737.043280][ C1] [ 1737.046234][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1737.052238][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 1737.058071][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 d0 fd dc 08 e8 0b 2d 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1737.077692][ C1] RSP: 0018:ffffc900053278f8 EFLAGS: 00000282 [ 1737.083775][ C1] RAX: 6aacb264da1e6a00 RBX: 0000000000000000 RCX: 6aacb264da1e6a00 [ 1737.091764][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0d20 [ 1737.099753][ C1] RBP: ffffc90005327950 R08: ffff8880b8f3ab03 R09: 1ffff110171e7560 [ 1737.107744][ C1] R10: dffffc0000000000 R11: ffffed10171e7561 R12: ffff88803002bb80 [ 1737.115752][ C1] R13: dffffc0000000000 R14: ffff888041f4d940 R15: ffff8880b8f3b5d0 [ 1737.123799][ C1] ? finish_task_switch+0x265/0x8f0 [ 1737.129042][ C1] __schedule+0x11d9/0x40e0 [ 1737.133585][ C1] ? __sched_text_start+0x8/0x8 [ 1737.138468][ C1] ? plist_add+0x3d4/0x480 [ 1737.142930][ C1] schedule+0xb9/0x180 [ 1737.147051][ C1] ? futex_wait_queue+0x23/0x1b0 [ 1737.152003][ C1] futex_wait_queue+0x134/0x1b0 [ 1737.156871][ C1] futex_wait+0x1e8/0x5e0 [ 1737.161226][ C1] ? futex_wait_setup+0x270/0x270 [ 1737.166285][ C1] ? perf_poll+0x1b0/0x1b0 [ 1737.170734][ C1] do_futex+0x310/0x320 [ 1737.174920][ C1] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1737.180841][ C1] __se_sys_futex+0x381/0x410 [ 1737.185538][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 1737.190331][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 1737.195111][ C1] do_syscall_64+0x4c/0xa0 [ 1737.199545][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1737.204242][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1737.208948][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1737.214853][ C1] RIP: 0033:0x7f7c3e19bf79 [ 1737.219283][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.238907][ C1] RSP: 002b:00007f7c3f12d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1737.247340][ C1] RAX: ffffffffffffffda RBX: 00007f7c3e415fa8 RCX: 00007f7c3e19bf79 [ 1737.255327][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c3e415fa8 [ 1737.263321][ C1] RBP: 00007f7c3e415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.271329][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1737.279317][ C1] R13: 00007f7c3e416038 R14: 00007fffc1d15c80 R15: 00007fffc1d15d68 [ 1737.287321][ C1] [ 1737.290928][ C1] Kernel Offset: disabled [ 1737.295261][ C1] Rebooting in 86400 seconds..