last executing test programs: 4.899761899s ago: executing program 1 (id=1326): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) socket$kcm(0x23, 0x2, 0x0) (async) r4 = socket$kcm(0x23, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001000000000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3161f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c0", 0x80}, {&(0x7f0000000880)="4f0430b773745455932126efc5db584e00f2d9837a5676e253e81a70f9755c178b07254280be866018160120629f9e034b82fd9870b385276d412194f1f70cc63513f600ad3c31bc0403edee0dd4c26087a1a4e9fae5fa6a", 0x58}], 0x2}, 0x4009884) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r7 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x18}, 0xc) 3.951773038s ago: executing program 1 (id=1339): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="0400"/14]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98b}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.89161948s ago: executing program 0 (id=1332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000003000000040000000800000088000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x5) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x19, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', r2, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xff, 0x40, 0x10, 0x5, 0x0, 0x7, 0x4f0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xacd, 0x0, @perf_config_ext={0xd, 0x2c67c570}, 0x4000, 0x3, 0x1, 0x0, 0x3ff, 0xfffff9f9, 0x3, 0x0, 0x800, 0x0, 0x9}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b80006990e00000015000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xb7}, {&(0x7f00000000c0)="38e3c9cd0ccb3770cc45b415fd812b54b056e4d738296240115e6f04fa340a7244", 0x21}], 0x2}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) gettid() (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x53}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20, '\x00', 0x0, @sk_msg}, 0x94) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r4], 0x48) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0}, 0x3000c085) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) (async) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) 3.529239071s ago: executing program 1 (id=1333): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00)=@o_path={&(0x7f0000000ac0)='./file0\x00', 0x0, 0x2000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x9, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6fda71fa}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xb, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x3, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000b40)=[r1, r2], &(0x7f0000000b80)=[{0x3, 0x1, 0x8, 0x7}, {0x0, 0x5, 0xf, 0xc}, {0x5, 0x5, 0x2, 0x8}, {0x0, 0x4, 0xa, 0xb}, {0x0, 0x4, 0x10, 0x6}, {0x4, 0x4, 0x8, 0x8}, {0x5, 0x1, 0xa, 0xa}], 0x10, 0x80000001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r10 = socket$kcm(0x10, 0x2, 0x4) close(r10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r11) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r11, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff020025902e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xffff, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r12, 0x4) 3.449849894s ago: executing program 0 (id=1334): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x23, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$kcm(0x22, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300080c5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040), 0x4) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80044943, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) sendmsg$tipc(r3, 0x0, 0x20000041) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40c50ffafdf9abfd, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.799635904s ago: executing program 2 (id=1336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3842, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x81, &(0x7f0000000380)=[{}], 0x8, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x2, 0x4e21, @multicast1}, 0x10, 0xfffffffffffffffd, 0x0, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc1}}, @ip_retopts={{0x58, 0x0, 0x7, {[@rr={0x7, 0xf, 0x33, [@dev={0xac, 0x14, 0x14, 0x32}, @empty, @private=0xa010102]}, @noop, @cipso={0x86, 0x35, 0x6f292e7411a7d3e0, [{0x6, 0x5, "8e9c20"}, {0x2, 0xd, "5d7b079987a5d2b712c615"}, {0x0, 0x11, "2e0b8f051503d3a93c350c328eba91"}, {0x0, 0xc, "d37392819d0bfee7babd"}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0xfc, 0x0, 0x3, [0x3, 0x400, 0x6cb, 0x40, 0x0, 0x4]}, @ssrr={0x89, 0x3, 0xde}, @ssrr={0x89, 0x1b, 0x1d, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x130}, 0x4041800) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r3, 0x2e, 0x1, 0x4071, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800110000000000fd0900000000000095200002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0xa, 0x6, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x541b, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000000000300000d00000000060000000000000005"], &(0x7f0000000400)=""/188, 0x3e, 0xbc, 0x1}, 0x28) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) (async) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000020000085000000d000000095"], 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) (async, rerun: 64) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x31ac4453, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) 2.649990078s ago: executing program 3 (id=1337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004"], &(0x7f0000001540)=""/4096, 0x58, 0x1000, 0xa}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000880), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf2, 0xf2, 0x5, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0xa, 0x2}, @volatile={0x6, 0x0, 0x0, 0x9, 0x1}, @datasec={0x4, 0xa, 0x0, 0xf, 0x2, [{0x3, 0x7fff, 0x7fffffff}, {0x2, 0x6, 0x2}, {0x4, 0x0, 0x6}, {0x1, 0x6, 0x46f3}, {0x4, 0x101, 0xfb6}, {0x1, 0x4, 0x4}, {0x4, 0x57f}, {0x4, 0x101, 0x9ec}, {0x3, 0x7, 0x9}, {0x2, 0xac5, 0x80000000}], 'bK'}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xa}, {0x4, 0x5}, {0xf, 0x4}, {0x10, 0x4}]}, @volatile={0xd, 0x0, 0x0, 0x9, 0x4}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @volatile={0x8, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x0, 0x0]}}, &(0x7f00000007c0)=""/104, 0x111, 0x68, 0x1, 0xfff, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.349139758s ago: executing program 3 (id=1338): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2020000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x8, 0xd2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xe}, 0x10c320, 0xc8, 0x10001, 0x3, 0xb, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x40009, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x186e2, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000002be97027f7c7c38345828a99fa9083ed6cf2db6b91055eecebfdc56f0efc7a803108794fe99c89a41e1a6573e0a5d855b03338fdf50b1483a246a30c74f351ecc1a64c00a74c87c625d4b373a3bb1bc1df1ff68b07a9642bcf231878cd4f1e15f59a000015a4a34684f2146286d03cdc9e44834afc1b18b842aaacd8ed4eec39141980d927592285a3c4ae7900"/178], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 2.135320605s ago: executing program 1 (id=1340): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, &(0x7f0000000000), 0x8) (async) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="90005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000100), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c10b60015862642b520207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$kcm(r1, 0x0, 0x100) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01801807000006b3260aaadf6fb13db05f9a5f007d00000000000000000000020000f0ff"], 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x38, 0x0, 0xfffffffffffffffe}}, 0x10) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x2e072fe122b37128, 0x0) sendmsg$sock(r3, &(0x7f0000000a80)={&(0x7f0000000380)=@in6={0xa, 0x4e22, 0xa299, @private1, 0x9}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000880)="75c07778086ad58ff9567add5bb56cf9d872945f105e2f3d287235e6427c025854d65837dc0e98746187b0b1f39e9a09ae076c5cfc7ac63250fb6d07d7c766cbf827124adae64c8a6433619270315cb55aee2b11ae1814890ba82b43767710b13992b21151dcd20f0285837b615c5c3c5ea3dd9692c0743ea3b05293f1623a88871390bc06aec23ee31436163699cbd3afb6", 0x92}, {&(0x7f0000000940)="699ce5f74717f8d63d1c0000a594ac78dca6daba30862faf1728f8b6978ff875e059417b73767b76da82f5208272baf685242f202a252c7c2270266dfa2d42b0aa45dfbf7d82f8b7c9fdecb75cd741f2abdeaed77739505761154a77cb89631ce822a4b282f04d1d6ecead9d9ab920f9e4ee860103b2201ba87773e4dbc6cc6b76868cd0e4e6cc45490e57f0b8f69a2bdb2fd847f059339e8e2375c1cb895ede9b80bc3808f908e9e1ca08c1f8a1f4d7b3fd3bc09bc93c0ce4f850d29b7038e53ff3efa06d5cc613bf3055e1e8825ffbe2bf88da00e73cb9ef3200a8832832171b628b884830063e17d82cc52fff1ffb84b16508dcea9a72", 0xf8}], 0x2}, 0x40040) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='@\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="5daa0000000000007910180000000000950000000000000052b4343b52f4b2b1f6e414090ab16fb286094d082f916fe18546a7779110fc14f3375bb85be12c49e4c0094683307b77cb1246e7c65a3cb0386238710532946e825e0eb29f06e4c3f04a4fba8acceec8ac3728f3f6ec2cd007fada26ce9b8ca0690f1940702a10f4747477ef802762f794d1cb73fcf6384c52af5c0a54d44c74886dc6f9948e88940b8c7459b7083a00c0eb08"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, 0x0) recvmsg$kcm(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/171, 0xab}, {&(0x7f0000001cc0)=""/86, 0x56}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)=""/180, 0xb4}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/115, 0x73}], 0x7, &(0x7f0000002f40)=""/182, 0xb6}, 0x2020) (async) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x49) 1.853737433s ago: executing program 2 (id=1341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x3, [@fwd={0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @var={0x1, 0x0, 0x0, 0xe, 0x4}]}, {0x0, [0x5f]}}, 0x0, 0x4f, 0x0, 0x2}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x8, 0x9, 0x800, r1, 0xd4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x9}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0x94) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004200000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x502, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0xc000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) setsockopt$sock_attach_bpf(r7, 0x1, 0x14, &(0x7f0000000040)=r8, 0x3b) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x600, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r6, 0x3a, 0x1, 0x2, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r6, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x1, &(0x7f00000002c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000300)='GPL\x00', 0x9, 0xe0, &(0x7f0000000580)=""/224, 0x40f00, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xd, 0x1, 0x4}, 0x10, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x10, 0x80000100}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@ifindex=r12, r9, 0xf, 0x4, r9, @void, @value=r10, @void, @void, r11}, 0x20) 1.821947124s ago: executing program 3 (id=1342): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x6, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000", 0x28}, {&(0x7f0000000900)="63f48eeb93bf", 0x6}], 0x2}, 0x40) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x6, 0x0, 0x9, 0x752bc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb1e"}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_clone(0xc0000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000580)) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x2018, r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x9, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x25, 0x1, 0x0) write$cgroup_subtree(r10, 0x0, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="d40000000000000063113500000000009500000000000001d695736119fb29f65f5b062b7952f29a6d73cba187377b8a5301754b5d68e16bb6d5f0d337e50e9d927de217e06d4dea4a2a33229927ebfaee56dbc78467"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 1.351246918s ago: executing program 0 (id=1343): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000740)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000008c0)={r2, &(0x7f00000007c0)="39d5dfbc1f08d4e3db78f5bc7e9c07e88444e5348182005dbe6ef2fdbbc1c569c27e629472ef7ba8e6911bf0176244bc51137f70de6f6159c7c36f9ea7ce28ccc4f72b3fbe03f5f942c2356ac37f46256ab0fa875f188ef3ef9c2f9f12ceb7f8eed5cdc3ca668965dbd2a5ffe21f886cf54d95df9763b56992d701eb8e5607b0fed90c860d0639ed9b3eddc644023380728a4799ad0128c197cbc75227450fd84523b5ec758b0cc9ed1755517475f1f45cd3d9b53b8b0f8fcef46b89283d8605bb9e33a4cf"}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0xc3ff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {0x0, 0x3000000}]}]}, {0x0, [0x30, 0x5f, 0x1e]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3a}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}]}, 0x0, 0x10000, 0xa0, &(0x7f00000001c0)=""/160, 0x41000, 0x36, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x2, 0x3, 0x4}, 0x10, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x10, 0x740ab45a}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'veth1_to_team\x00', @multicast}) recvmsg(r5, &(0x7f0000000700)={&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)=""/20, 0x14}], 0x1, &(0x7f00000006c0)=""/20, 0x14}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3fff8000}, 0x0, 0xbe6b, 0x43a1bd76, 0x7, 0x9, 0x7, 0x81, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.349953898s ago: executing program 1 (id=1344): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)='%-5lx \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) 1.085785877s ago: executing program 2 (id=1345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079108900000000009500000000007b9b"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000430033"], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @struct={0x2, 0x8, 0x0, 0x4, 0x0, 0x3, [{0x4, 0x3, 0x1}, {0x4, 0x2, 0x8}, {0x3, 0x1, 0x63a}, {0xa, 0x4, 0xe5}, {0xf, 0x4}, {0x3, 0x0, 0x3f2}, {0xf, 0x3, 0x2}, {0xb, 0x2, 0x3}]}]}, {0x0, [0x5f, 0x2e, 0x2e]}}, &(0x7f0000000140)=""/165, 0x95, 0xa5, 0x0, 0x8}, 0x28) 870.559904ms ago: executing program 2 (id=1346): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0xc, 0x0, 0x10000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)}, 0x40) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./cgroup\x00', 0x0, 0x4008, r0}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000100)='./cgroup/../file0\x00', r1, 0x4000, r0}, 0x18) 866.322934ms ago: executing program 3 (id=1347): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x9f, 0x0, 0x0, 0x0, 0x1ff, 0x2080, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x10, 0xc6, 0x1000, 0x8, 0x5, 0x3, 0xd5, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='\x00') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'rlimit'}, {0x2b, 'cpu'}, {0x2b, 'pids'}, {0x2d, 'rdma'}, {0x0, 'blkio'}, {0x2b, 'memory'}, {0x2b, 'memory'}, {0x2b, 'pids'}]}, 0x36) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180)="28701dde8edeecc55246323d1eed4820f4635f2bc65a2113880a78963b907ec4af3fdd4c6aa763e840aa98c780a616a640c150ac43b1b91a2e58b7d2c1e3a5f1117eda82439acc789d657a7d8f601c1f89088479efc3c35b1276276d4dd72184c343c5610d3cfbd589c917433acc403e3c9725225df2cc105469924114b726ccaa0227eeea6f5634e7bbb61c336e36498e576964d34ab5a2598ae7a638872c3be760fa80d02e1ef702ccb3", &(0x7f0000000240)=""/20}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='memory.numa_stat\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000003c0)={r5, r3}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000004c0)={r4}) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000540)='syz0\x00', 0x1ff) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@o_path={&(0x7f0000000580)='./file0\x00', 0x0, 0x4000, r1}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$inet(r7, &(0x7f00000007c0)={&(0x7f0000000640)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000680)="ba6157dfbc8a57f69c9ca4ea314bc48524d97e399ce74d0931e4bf70072e5071ce77b3c793709385c255d56bdf4b34332f744365216bb128ce275324a2c3e4d6e4e44efde5767667b2ac21f985c56fc7aec77e396e3d30bac95917b561e2b45c6bf5eb8744", 0x65}], 0x1, &(0x7f0000000740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @private=0xa010100}}}], 0x50}, 0x41) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00') perf_event_open$cgroup(&(0x7f00000008c0)={0x2, 0x80, 0x9, 0x5, 0x1, 0x3, 0x0, 0x104, 0x4a0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000880), 0xc}, 0x100db2, 0x7ff, 0x8, 0x4, 0x7, 0xffff, 0x7f, 0x0, 0x7fff, 0x0, 0x8001}, r2, 0x5, r0, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) socket$kcm(0x29, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', 0x0, 0x10, r9}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r4, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0x4, '\x00', r10, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) recvmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000b00)=@alg, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b80)=""/201, 0xc9}, {&(0x7f0000000c80)=""/83, 0x53}, {&(0x7f0000000d00)=""/169, 0xa9}], 0x3, &(0x7f0000000e00)=""/124, 0x7c}, 0x1000) openat$cgroup_procs(r1, &(0x7f0000000ec0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000f00)='cpu.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x5, 0x2, 0x1}, 0x50) 809.767885ms ago: executing program 0 (id=1348): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e35400800038025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e35400800038025581d00d1bd00"/46, 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000100008040000008ff0f000061300000a9c8163387c511e016481fa79cd8c09b897182e56927938238f4d6191133a04ecc2749c16d12daeae6a0b5ae3795787ae415a5c3ddd9daa279ef5300e859a0a0ad208ae6fba2fb5bd6a35cc7ae2e99bb184bc08efab3f9db6b8b68d263c8722f52f1e7478b581322adfad706031d80645863ea1e0001e5111dd907911b87c39072c63e5c208c17d9d8da514b5aa908b207963757b91680f1e21d1308e2eec631c351c24eaed699fcc587687d173d38e942888bfb5c3c9298ef6385bb0000000000"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x40f00}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000100008040000008ff0f000061300000a9c8163387c511e016481fa79cd8c09b897182e56927938238f4d6191133a04ecc2749c16d12daeae6a0b5ae3795787ae415a5c3ddd9daa279ef5300e859a0a0ad208ae6fba2fb5bd6a35cc7ae2e99bb184bc08efab3f9db6b8b68d263c8722f52f1e7478b581322adfad706031d80645863ea1e0001e5111dd907911b87c39072c63e5c208c17d9d8da514b5aa908b207963757b91680f1e21d1308e2eec631c351c24eaed699fcc587687d173d38e942888bfb5c3c9298ef6385bb0000000000"], &(0x7f00000005c0)='GPL\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x40f00}, 0x94) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x8, 0x2}, 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x10, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000011c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f00000011c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000010000800016ffbfd651b06a8653a9c177abc39fa00100007e5bd90600a7", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000570000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000000)=r8, 0x4a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', r10, 0xffffffffffffffff, 0x4, 0x5}, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000880)={0x4, 0x0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0xffffffffffffffff, 0x5, 0x10}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)='%pB \x00'}, 0x20) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1}, &(0x7f0000000b00), &(0x7f0000000b40)='%pS \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x40, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xc}, [@jmp={0x5, 0x0, 0x0, 0x1, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3e2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i}, @jmp={0x5, 0x0, 0x8, 0x1, 0x4, 0xfffffffffffffffe, 0x8}]}, &(0x7f0000000500)='syzkaller\x00', 0x4, 0xf5, &(0x7f0000000700)=""/245, 0x41000, 0x0, '\x00', r10, @fallback=0x18, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x3, 0x3, 0x9, 0xf}, 0x10, r12, r1, 0x3, &(0x7f0000000bc0)=[0xffffffffffffffff, r13, r14, r15, r16, r17, r18], &(0x7f0000000c00)=[{0x0, 0x4, 0x3, 0x9}, {0x3, 0x2, 0xe, 0x2}, {0x3, 0x2, 0xc, 0x9}]}, 0x94) 757.196707ms ago: executing program 1 (id=1349): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) mkdir(&(0x7f0000000080)='./file0\x00', 0x91) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x91) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000015c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000200)=""/36, 0x24}, {&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/253, 0xfd}, {&(0x7f0000001480)=""/80, 0x50}], 0x6, &(0x7f0000001580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x102) sendmsg$sock(r3, &(0x7f0000002a80)={&(0x7f0000001600)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001680)="54f0bfe4f2ff28e6c375a0965283f93a153472e1bdf8a58688e10c680892cf8a2e44e9965c8747752e710b47eb04be2a51439f55ab1e4fe5d2b52bde", 0x3c}, {&(0x7f00000016c0)="2687e685d3e94583dd60edd722859a77b48e0dd86de8b8a90984faeab98f4360316e7f69c94f7fd51638ac7ceab1e10a2ca017483842ab43a006bbea67d8f1b2b907a1f9caafe2a40488890f44a4694647787fe22f369aa4d90b2ebd3659a2c4cf03b2d933733665ea9bb3b3a15defa2779777654ed670561141211181144ecc43ff284855b8253c1012b1bc", 0x8c}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="5a740c5c209fb177e174007c46b6f04a0c81915c68a9abfb76e13d764bbb2ac8d4227b42e1a952150beb836aac6ecdb745ad28742ae12cc92cd4663b044434a673b0d21d6efb01270381fc5d531a767a2909a702cf323053fbe5f3c19a99756d3080cd4521378af90565320718de3b0771", 0x71}, {&(0x7f0000002800)="1bc988aeb806e908e50f94ea98fe58f7b431436db650f126ed12f1851d0f8c70f3f6cf75", 0x24}, {&(0x7f0000002840)="38911a721c28e0c5926f9c551de5310c55820e4a21fe24eabdc39d7526922a26458692feb2c89643c841c247d90352a87ab5eebca768b46a6a71620f2cd306a927e1755fcbd409214767501dd7c01777e1450ce31305a408bc62c98c30837b281a0ace2755c8fe53dc612d4bb1d23b57d40c0e4541347f5c36a5910705f3484ab1280e3ffd2b8f10ec784c1e234f3b120dbdeb23", 0x94}, {&(0x7f0000002900)="ec35ee1b2cc74662862fa13f80e209746f19b19fbd6b3d4b1de05c807c26013446938bebb30ce7168bfe03917fd2c56cde7ee721701d95d37eaea4120725cc9bcb0d569e89870a0491f9850fd330bf3bcc34f5d1c3e68c47c207f16611a98c28537149564a8b263b517dba2c5c8b139f6684140839ec8d5b6c3b535a7c13c8654b70b827698702cf94aa8ed3ec6546eb5b3615dbeee532e88473a87b97b89cd7f8b889e3b281e9df788d19cba0fb39829e7ea1ab6dbae51169367ea5aab48beffe48c01ec3c6e22d2268785c4072e79e7f99b95b823005fdefaabdcc5007ac70cc1f41a0da1cfa71d3fb51f403632fa720d31ce46e642f089c", 0xf9}], 0x7}, 0x4) (async) sendmsg$sock(r3, &(0x7f0000002a80)={&(0x7f0000001600)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000001680)="54f0bfe4f2ff28e6c375a0965283f93a153472e1bdf8a58688e10c680892cf8a2e44e9965c8747752e710b47eb04be2a51439f55ab1e4fe5d2b52bde", 0x3c}, {&(0x7f00000016c0)="2687e685d3e94583dd60edd722859a77b48e0dd86de8b8a90984faeab98f4360316e7f69c94f7fd51638ac7ceab1e10a2ca017483842ab43a006bbea67d8f1b2b907a1f9caafe2a40488890f44a4694647787fe22f369aa4d90b2ebd3659a2c4cf03b2d933733665ea9bb3b3a15defa2779777654ed670561141211181144ecc43ff284855b8253c1012b1bc", 0x8c}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="5a740c5c209fb177e174007c46b6f04a0c81915c68a9abfb76e13d764bbb2ac8d4227b42e1a952150beb836aac6ecdb745ad28742ae12cc92cd4663b044434a673b0d21d6efb01270381fc5d531a767a2909a702cf323053fbe5f3c19a99756d3080cd4521378af90565320718de3b0771", 0x71}, {&(0x7f0000002800)="1bc988aeb806e908e50f94ea98fe58f7b431436db650f126ed12f1851d0f8c70f3f6cf75", 0x24}, {&(0x7f0000002840)="38911a721c28e0c5926f9c551de5310c55820e4a21fe24eabdc39d7526922a26458692feb2c89643c841c247d90352a87ab5eebca768b46a6a71620f2cd306a927e1755fcbd409214767501dd7c01777e1450ce31305a408bc62c98c30837b281a0ace2755c8fe53dc612d4bb1d23b57d40c0e4541347f5c36a5910705f3484ab1280e3ffd2b8f10ec784c1e234f3b120dbdeb23", 0x94}, {&(0x7f0000002900)="ec35ee1b2cc74662862fa13f80e209746f19b19fbd6b3d4b1de05c807c26013446938bebb30ce7168bfe03917fd2c56cde7ee721701d95d37eaea4120725cc9bcb0d569e89870a0491f9850fd330bf3bcc34f5d1c3e68c47c207f16611a98c28537149564a8b263b517dba2c5c8b139f6684140839ec8d5b6c3b535a7c13c8654b70b827698702cf94aa8ed3ec6546eb5b3615dbeee532e88473a87b97b89cd7f8b889e3b281e9df788d19cba0fb39829e7ea1ab6dbae51169367ea5aab48beffe48c01ec3c6e22d2268785c4072e79e7f99b95b823005fdefaabdcc5007ac70cc1f41a0da1cfa71d3fb51f403632fa720d31ce46e642f089c", 0xf9}], 0x7}, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002ac0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000002b00)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002bc0)={r7, &(0x7f0000002b40)="c0d5f88681a5f1d69a0e9166333d639481e792d1b5f4dc8b5456c84627931de6fed34ac96acfdadc4747deadb7a8b495728e6f3e6852c618dee7aff615219befbaf282c74b250d85595e45c16c4a7d4d"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000002bc0)={r7, &(0x7f0000002b40)="c0d5f88681a5f1d69a0e9166333d639481e792d1b5f4dc8b5456c84627931de6fed34ac96acfdadc4747deadb7a8b495728e6f3e6852c618dee7aff615219befbaf282c74b250d85595e45c16c4a7d4d"}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={r5, 0xe0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000002d40)=[0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000002dc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002e00), &(0x7f0000002e40), 0x8, 0x81, 0x8, 0x8, &(0x7f0000002e80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003140)={0x6, 0x3, &(0x7f0000002c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc3b}}, &(0x7f0000002c40)='syzkaller\x00', 0x0, 0x6c, &(0x7f0000002c80)=""/108, 0x41000, 0x52, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000003040)={0x0, 0x3, 0x400, 0xff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003080)=[r5], &(0x7f00000030c0)=[{0x1, 0x5, 0xf, 0x7}, {0x0, 0x3, 0xa, 0x6}, {0x4, 0x3, 0x9, 0x8}, {0x3, 0x5, 0xd, 0x9}, {0x1, 0x1, 0x8, 0x2}], 0x10, 0x3}, 0x94) getpid() recvmsg(r2, &(0x7f00000033c0)={&(0x7f0000003200)=@phonet, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/120, 0x78}, {&(0x7f0000003300)=""/71, 0x47}], 0x2}, 0x40010003) (async) recvmsg(r2, &(0x7f00000033c0)={&(0x7f0000003200)=@phonet, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/120, 0x78}, {&(0x7f0000003300)=""/71, 0x47}], 0x2}, 0x40010003) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000035c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000003400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb7d9a70, 0x0, 0x0, 0x0, 0x2}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xcaa7}]}, &(0x7f0000003440)='syzkaller\x00', 0x0, 0xb4, &(0x7f0000003480)=""/180, 0x41100, 0x23f790d47d533a41, '\x00', r11, 0x1c, r2, 0x8, &(0x7f0000003540)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000003580)={0x5, 0xa, 0x2, 0x4}, 0x10, 0x13d45, r7, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003680)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003680)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x10, 0x1a, &(0x7f0000003800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x2f}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003900)='GPL\x00', 0x9, 0x52, &(0x7f0000003940)=""/82, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, r9, 0x8, &(0x7f00000039c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x9, &(0x7f0000003a00)=[r6, r8, r6, r5], &(0x7f0000003a40)=[{0x0, 0x1, 0x4, 0x6}, {0x2, 0x1, 0x7, 0x6}, {0x1, 0x2, 0x2, 0x7}, {0x5, 0x5, 0x3, 0x9}, {0x1, 0x3, 0x8, 0xb}, {0x3, 0x2, 0x6, 0x7}, {0x3, 0x3, 0x10, 0xa}, {0x2, 0x3, 0x4, 0x5}, {0x1, 0x2, 0xb, 0x6}], 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000003c00)={0x9, 0x10, &(0x7f0000003700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x0, 0x3, 0xb, 0x2, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003780)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x2, '\x00', r11, @fallback=0x2e, r2, 0x8, &(0x7f00000037c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r14, 0x1, 0x0, &(0x7f0000003bc0)=[{0x1, 0x1, 0x5}], 0x10, 0xc5ce}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003c00)={0x9, 0x10, &(0x7f0000003700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x4, 0x0, 0x3, 0xb, 0x2, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003780)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x2, '\x00', r11, @fallback=0x2e, r2, 0x8, &(0x7f00000037c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r14, 0x1, 0x0, &(0x7f0000003bc0)=[{0x1, 0x1, 0x5}], 0x10, 0xc5ce}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000003f40)={&(0x7f0000003d00)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003f00)=[{&(0x7f0000003d40)="3eeaadac9e42a63d928e830808c2cabbe8dfb939da3c53afd95d4c09be6b450507bfac854e1a33d92400ac79ed33854ba7d1203c7de3cd2705d64056b6a21a519198aeb9dc004f6e69ef7c8e4ea1f586cda8c7c31316a01f9859ac1c3e4371911a6b74a705b97bf48f9529c1689917e2c6b7f6735ec69187310d70ab51cc0e0b10540130839f03c0d9d5bcebf7d0af093f58ede15c06fb9a2d5766f125e14d5a03ab9e3c28557ac3760a1e320fe8aa", 0xaf}, {&(0x7f0000003e00)="59684d3f59ca196ca2e5c8cff03939188db360ed3067076f26a8627a536782519a6823e4b1acf3e7dddb61a8d01db9150901b540cef4d4ee4cc53d1d4e6ce7a67be7992ee4a230da687e3cf4ae2f4e0fbaca8e68bfbf738330290de3c10d2e9ff43211f2f469365872dba24fa5fbc4898bb0b8af29adfec09efcd4512b00b6fa91c63b5e6290119bd8f340d6ec294c3e54ff0825ee73adeac0239337b0bb94b4d1d3e58171faa5097c879b7f178507e4a7b155edb4c2039a096f93417a41f57d9137d7", 0xc3}], 0x2}, 0x800) syz_clone(0x10000200, &(0x7f0000003f80)="28a1c6a88f26c889206a5dd4ba298b89a416a4f8a8269032387efc507b5f694ba675ec470eb0f90572fb74df188af493c08734c330424bc893b6442a4632e921d2c9b685d23609e5dc367671dd2a2b14607753042afff0777d2575004f5de343f6b00db4864598f520b98d5bd84fe06f6aeec11641e507e488e10bb8a225df38b328ecce3ed69b44f36d4cc79a8eab2f7b82533c7a00f202d242", 0x9a, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)="ab5c9650bc69078f5321f52dde5c6bbd0baefa8916e512bc89263f0916c5c81856f91819dad0f6fdb4e6") (async) syz_clone(0x10000200, &(0x7f0000003f80)="28a1c6a88f26c889206a5dd4ba298b89a416a4f8a8269032387efc507b5f694ba675ec470eb0f90572fb74df188af493c08734c330424bc893b6442a4632e921d2c9b685d23609e5dc367671dd2a2b14607753042afff0777d2575004f5de343f6b00db4864598f520b98d5bd84fe06f6aeec11641e507e488e10bb8a225df38b328ecce3ed69b44f36d4cc79a8eab2f7b82533c7a00f202d242", 0x9a, &(0x7f0000004040), &(0x7f0000004080), &(0x7f00000040c0)="ab5c9650bc69078f5321f52dde5c6bbd0baefa8916e512bc89263f0916c5c81856f91819dad0f6fdb4e6") r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r11, r6, 0x3, 0x3, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000004180)={0x0, r10}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000043c0)={r13, 0x58, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004480)={0x11, 0x6, &(0x7f00000041c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x59}, @ldst={0x0, 0x3, 0x2, 0x5, 0x4, 0x40, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x4, 0x5, 0xffffffffffffffc0, 0xfffffffffffffff0}]}, &(0x7f0000004200)='syzkaller\x00', 0x5, 0xe7, &(0x7f0000004240)=""/231, 0x40f00, 0x4, '\x00', r17, 0x0, r7, 0x8, 0xfffffffffffffffc, 0x0, 0x10, &(0x7f0000004400)={0x1, 0x2, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000004440)=[{0x2, 0x3, 0x7, 0xa}, {0x4, 0x4, 0xc, 0x6}, {0x2, 0x1, 0xa, 0x7}, {0x4, 0x4, 0x5, 0xd}], 0x10, 0x7d92}, 0x94) sendmsg$kcm(r4, &(0x7f0000004ac0)={&(0x7f0000004540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}}}, 0x80, &(0x7f0000004680)=[{&(0x7f00000045c0)="a648d348ae62eb40cb5424e5d956406b4880852d2621e69b105bd1d3d42f729430075226e8958ba77671b81da8ade50be11a9c45974d6574f7a76504906ff416d79d07904cc42df1e9c08ce401023cda209f22cd2b0ddc292920a1dd8c4831d6fbf8b7a631708b48d79b838daea657b8c7dbcc3afc07dbd8ff2649ecae25b373a7b8b8dd7b0186ad13eecfc1", 0x8c}], 0x1, &(0x7f00000046c0)=[{0xe8, 0x138, 0x7, "ad92133798dea9d8f13cc59657830ffc7a409b816e66455cd35bfadbbcda5da69bde7f1f73f62d74dc79b71080b76a5a3d8eb12b5d7e0658330c7ec86d8b20ec8b0d60f7631536708717ce096b11aea49a5d4a87466ca73ecacd8d8a0390e008bd4126f083d9f13cba0bc33fd5415714b60eb5a2a7ecb9a946099d42069178c9b0354f397448b58539d541828061a4e868e4114524a8b9aac81f29d0bf8a63d8cca10f5ef8ce1534299a86e1a088ecd4f1208b952551475c98f3fcd02c9f9914b37b718fce42eaf40ce69c7d7d4cf57949b2a4bbd731898a"}, {0x70, 0x107, 0x4, "ecba8b4398b0a1cf99c8f7cb83174895af237152cac5670044c7e52fba9c24ceee9f598c85686107468d8aa4eedcde6266029898679a4ac86ddcecf2d3ce48f359a25b6be2d8c5129aae765968f2a2cb95bb17e3de78495540bd49c7d8883e"}, {0x38, 0x10a, 0x1, "1d272eb65d6a3f3b7ae7f14774d2c3f817e8276442852ecb003d22e699ff752b9f3d"}, {0xf0, 0x10d, 0x8, "05f3454d702d8d6e7555b30766fb560bb06e98d1b0e6a762e989775cc038fe13169816c0d4e71bc9ee672a02f37a051e6ee384a4b33f2db5ac3caf9cc935aaa7e254d5a30fcf787a39f3d443883d8728ed18e1a982e0045d33009fb6ef29860568b87051acbf89a95004cba46cbd310089751c3dd0a33e24f4fb3252d9a80ca749349e5967bf99eee69d3f70357fbbaf288d28c8e76b95bdc4f0bbca6768ae9182a92419d2d6c4d8d61a0c340923b072e64cfb8a924a8b9524c0939e6347bbd8ec5c875d9b0cdc995b847336186a8c8c382401db9ce8c89c1fb995af"}, {0xd8, 0x3a, 0x32, "ca95031de553d92d0c0a294708136368ffc4f494115d107ee074bc4f8946d9bdb82f046954952241931574fdb7cb6a1c1fa0b2310ebf2e638a79db23f29c71b4c3e0ed8c9230bf16e12003286e7882791376ad97a93145d2acf9e61485bbfd6edb9dc0898d06efb66a222916fa2385872fdc9bc1fd318491c5301f73224c903aad6c75e76b75625b46ea39d1f695286eba9629735d1786512a5935a7a0a970e03352f400670dd2a72e2ad526453bb1ba7a7bc291b79218afabf9b9c862fc1e102f"}, {0x20, 0x10a, 0x1000, "4c1f767c92f13ebe933c6d717a6fba"}, {0x28, 0x101, 0x1, "e88a72b45352e0b35472487ff5c501ddd18dd0"}, {0x28, 0x3a, 0x5, "213488574fa5d65c508ce0d43727cd2d9b85"}], 0x3c8}, 0x4000) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f0000004b00)=r11) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004d00)={0x6, 0xc, &(0x7f0000004b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_fd={0x18, 0xa, 0x1, 0x0, r16}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000004bc0)='GPL\x00', 0x7f, 0x0, 0x0, 0xc9927c347a0d2016, 0x4, '\x00', r17, 0x25, r2, 0x8, &(0x7f0000004c00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000004c40)={0x4, 0x8, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004c80)=[r3, r2, r4, r6, 0xffffffffffffffff, r5], &(0x7f0000004cc0)=[{0x1, 0x5, 0xa, 0x1}, {0x2, 0x4, 0x2, 0x7}, {0x4, 0x3, 0x7, 0x1}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000050c0)={0x6, 0x10, &(0x7f0000004dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004e40)='GPL\x00', 0x200, 0x70, &(0x7f0000004e80)=""/112, 0x41100, 0x20, '\x00', r17, 0x25, r5, 0x8, &(0x7f0000004f00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000004f40)={0x0, 0x6, 0x7fffffff, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000005040)=[r13, 0xffffffffffffffff], &(0x7f0000005080)=[{0x4, 0x5, 0xa, 0x9}, {0x5, 0x1, 0x1, 0x5}], 0x10, 0x5}, 0x94) 680.569899ms ago: executing program 2 (id=1350): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xfc, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2020000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x8, 0xd2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xe}, 0x10c320, 0xc8, 0x10001, 0x3, 0xb, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x40009, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x186e2, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000007000000000000000000000095000000000000002be97027f7c7c38345828a99fa9083ed6cf2db6b91055eecebfdc56f0efc7a803108794fe99c89a41e1a6573e0a5d855b03338fdf50b1483a246a30c74f351ecc1a64c00a74c87c625d4b373a3bb1bc1df1ff68b07a9642bcf231878cd4f1e15f59a000015a4a34684f2146286d03cdc9e44834afc1b18b842aaacd8ed4eec39141980d927592285a3c4ae7900"/178], &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 457.782556ms ago: executing program 0 (id=1351): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r2, 0x3, 0x4, 0x1}, 0x50) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'geneve1\x00', @broadcast}) (async) sendmsg(r4, &(0x7f0000001c40)={&(0x7f0000000180)=@x25, 0x80, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000004c0)="70c4e5cba04830dc161fe1f16e14d9b75a38d44d01e2f9568f9acca21335ac89b4cb9a89a4355aa39e703668414f2a31d2dd2fb23494f32e6639d75237c4c50615d7fbc1ba0425b80b1396eaaa70334ee6cf5813e6c990b890686ba65a31dcea4694cd111376dacf0584fe5495c0b49d5c9ce777636454cc53ac3e5725cada1135ac7c3993e118c6e7e51318c39d8183a594e7fb7369ea326c239b90c0baed37853156338117de478960ccc1779679ad8b82f551bf1b35d7fd", 0xb9}, {&(0x7f00000006c0)="bbc4f01080bee0ea9421dc33021473b04a5ad623efcd018aef1c4acb20f030d8f767af6487e4edf891af33602449bf96671a26e167d84b5031db2ecc7e9fde6559b64c21e036a5dba43dc710816eaaedd04e60cb206ce4cc87f8fc5c988c19e477e445b9470941be518380de8a7a87a29924a5ca700d1c4e96aff703270d7eb653daaa770bbbdcd880c61c8859b208cfb97bd286ee2ce7cac807d0d3527f04cfec570528d5e5", 0xa6}, {&(0x7f0000000780)="016884279bb2a702c858ad7f8eb6b50115739cdae9a32760152b6100e4c22725fb2160c7f1841c68747a92d550b2b7f6dd690c8bc5da00df84239e1e0c22940ece0b44f8a9fdd7deba965b95ab4170217774107224f84a941205fbcf14e399de1344cf4b72eeb5108e2bd7b623cd70c73d538ea932a48b1e031c6c0936784c040128b1f66a8cde1c4618b57e101e3e2b2349e73ab29d6cd8e19c9c0fd49b1a3d499ca660390fade937bdddb6", 0xac}, {&(0x7f0000000840)="7807dfdb79bad109615bc71465ff08b8c85185d7636af632dfacf49f6259b0ab36423fa962abf0c5ed77df2234c0bff2cb418adce1e55d0a58983567e08a87767e844160cedf419d8b293fb8528e7517a6df26b1c4c093de864690d975d7c84c0c3c9b34273ad15e31b793f23723c410599f86aa051b38ce5933f35b133479b5558b35f8b2ffb649237e4c75548f54d86f02f100f735360e4fc5537cb104d5b34d9e3677eb52dadac1254f646ca8221b4027fb736507e4ace7f0afed733379386631bf8226713dc9c7463aa8104904e637af2367a76dd0260fc49703677d9f627e", 0xe1}, {&(0x7f0000000980)="42b7257916a2776ee80028fc85b58315a8b2491719636491edceefd0f23b7792dc65dfca72d9473d9c97cf4802543be1f0ed6a1c63377eb7e26789f7d4121ca5c89442ee9a8e117b844f52425a69a264f2224258e0145947fb8011f0cefa0e087cbf4bb7c1a5b9159e85652cb34595c3ce79cc12ebebf56024365bfd10a23bbf3edea40bc3cc00d8e2b69519cf8d1a26afafdd6a83d68204ff53715abf51a3aeb784d28ca904aafe17f00cf97c71148fabbace70c5f6043aa23b591ddf40d5437ffb04", 0xc3}], 0x6, &(0x7f0000000b00)=[{0x10, 0x1e, 0x9}, {0x90, 0x10b, 0x5, "9bc9c5c6f58cf880c9af6065a0ad5cc5c4cc246bf3ec8e8cdc9d3b23620fc7e9287f0fc69839f0d1df5df924322106c3a45e6c1c4edfc3c78eaaf14276084e0eabaaa81e655f6716677788a77c2ffceaada4640a5553e12f7ccccb3cfbd92c69b6a51398b6e35d798fb0d9aa4343486961d624f4cd94111e5a3be60c55"}], 0xa0}, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f00000003c0)="30fb2ed213d04ba11922257ed600714601666bc39ccec1bf94e2cb38d6187fb616f7112b95f901c3c94655218bbc91e7acfce244c4246222ef454d2def1ea54eda60b06023057a557bfd7e61ecce49fe05e00e3bdd89951ca6c8140099d70e3da55cf3c0af041e9d24322bb623656fdc9866395ffc32baa82bde1bd8eff0621d526dfe586580c08d"}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r2, &(0x7f0000000580)={'a', ' *:* ', 'rw\x00'}, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 386.118718ms ago: executing program 3 (id=1352): r0 = socket$kcm(0x10, 0x1, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000005000000000000000000008500000017000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="dc4dc043102f21b225154d65ac2329c6e30c45c890f52756317dbdbc", 0x0, 0xffe, 0x0, 0x0, 0x42, 0x0, 0x0, 0x1, 0x9}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x4, r1}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0xfe5a, 0x0, &(0x7f0000000200)="32087d1c9cb361397a127acf6646", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000240)="ed663da62ea6fca1c4a8c1828e7684b53da852bf0eccdb09c7cea9b75c55fbaea18ac45dcd1533d5d672f870856f5631724049e349d41106b46edfc6dd5fbeddffd71fec4b89909109710eecb8f7be67a12615ece8005147bdb13a2d56fc14508432560ff66b06e5d6d4c15e46a82102e072b02c7e47507eb9915b5258026f129b9500dd8040b26fbb9f54905f5d76de3f3b201af88ed79af0eaf7e842c2797eac653d70578e548667deb51a5e4368ef7e27b7c91e5369fbe2462feea04554fb978d838ac51d66bcd76e12c7dbf3528ef4979202b544d2"}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) recvmsg$unix(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1b0000001400000000000000", @ANYRES32, @ANYBLOB="96eb3d", @ANYRES64=0x0], 0x20) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000400000012"], 0x48) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d380, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x100, 0x0, 0xfffffbff, 0x3, 0x10000003, 0x0, 0xa}, 0x0, 0x1, r7, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) close(r9) 253.209313ms ago: executing program 2 (id=1353): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91724fc60100005000a000200053582c137153e37000c0680040002000a00", 0x33fe0}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001b00)={0x0, r3, 0x0, 0x1, &(0x7f0000001ac0)='\x00'}, 0x30) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 141.587586ms ago: executing program 0 (id=1354): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0xfe0d, 0x0, &(0x7f00000001c0)="259a53f271a76d2608004c6588a80a3888ca2f15138d8c387cb76f5520d4aaeb8d000bf7e1902c6187c56fe8532e32d06932eac5", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40811) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x41) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061104800000000007104250000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x12) gettid() setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1355): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0xffff, 0xc0, 0x1, 0x9d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x1}, 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x0, 0x0, &(0x7f0000000540)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000000040)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x0, 0xd, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x2, 0xffffffff, 0xffffffca}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x10, 0x7}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 79.908594][ T5760] cgroup: Unknown subsys name 'net' [ 80.041220][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.691927][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.488008][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.496420][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.505432][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.512923][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.520697][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.528229][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.531584][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.539979][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.550664][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.558284][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.565791][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.574675][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.582967][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.590804][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.614644][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.622744][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.630333][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.645076][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.653935][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.661775][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.678160][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.686753][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.695236][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.703116][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.129304][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 84.175135][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 84.288910][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.306429][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.378358][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.386946][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.394739][ T5776] bridge_slave_0: entered allmulticast mode [ 84.402292][ T5776] bridge_slave_0: entered promiscuous mode [ 84.447157][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.457188][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.466075][ T5773] bridge_slave_0: entered allmulticast mode [ 84.473185][ T5773] bridge_slave_0: entered promiscuous mode [ 84.499832][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.507199][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.514816][ T5776] bridge_slave_1: entered allmulticast mode [ 84.522020][ T5776] bridge_slave_1: entered promiscuous mode [ 84.549957][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.557174][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.564863][ T5773] bridge_slave_1: entered allmulticast mode [ 84.572246][ T5773] bridge_slave_1: entered promiscuous mode [ 84.621340][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.660484][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.680299][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.712417][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.719905][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.727813][ T5774] bridge_slave_0: entered allmulticast mode [ 84.735032][ T5774] bridge_slave_0: entered promiscuous mode [ 84.765686][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.786609][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.796540][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.803970][ T5774] bridge_slave_1: entered allmulticast mode [ 84.810974][ T5774] bridge_slave_1: entered promiscuous mode [ 84.828474][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.838239][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.845788][ T5775] bridge_slave_0: entered allmulticast mode [ 84.855596][ T5775] bridge_slave_0: entered promiscuous mode [ 84.863473][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.870559][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.877975][ T5775] bridge_slave_1: entered allmulticast mode [ 84.885251][ T5775] bridge_slave_1: entered promiscuous mode [ 84.904163][ T5776] team0: Port device team_slave_0 added [ 84.932816][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.958017][ T5776] team0: Port device team_slave_1 added [ 84.965972][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.000037][ T5773] team0: Port device team_slave_0 added [ 85.045893][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.058226][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.069067][ T5773] team0: Port device team_slave_1 added [ 85.077301][ T5774] team0: Port device team_slave_0 added [ 85.086496][ T5774] team0: Port device team_slave_1 added [ 85.093376][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.100344][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.129283][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.169869][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.177144][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.203243][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.250891][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.258145][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.284294][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.298379][ T5775] team0: Port device team_slave_0 added [ 85.308067][ T5775] team0: Port device team_slave_1 added [ 85.315839][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.323060][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.349380][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.362286][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.369381][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.396026][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.409403][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.416575][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.442731][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.492938][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.499928][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.528831][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.558277][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.565432][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.591507][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.633441][ T5782] Bluetooth: hci3: command tx timeout [ 85.641026][ T5776] hsr_slave_0: entered promiscuous mode [ 85.648023][ T5776] hsr_slave_1: entered promiscuous mode [ 85.671612][ T5775] hsr_slave_0: entered promiscuous mode [ 85.678379][ T5775] hsr_slave_1: entered promiscuous mode [ 85.685501][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.693352][ T5775] Cannot create hsr debugfs directory [ 85.715162][ T5782] Bluetooth: hci2: command tx timeout [ 85.715460][ T5773] hsr_slave_0: entered promiscuous mode [ 85.728601][ T5773] hsr_slave_1: entered promiscuous mode [ 85.735260][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.743196][ T5773] Cannot create hsr debugfs directory [ 85.793390][ T5781] Bluetooth: hci1: command tx timeout [ 85.799216][ T5782] Bluetooth: hci0: command tx timeout [ 85.812229][ T5774] hsr_slave_0: entered promiscuous mode [ 85.819439][ T5774] hsr_slave_1: entered promiscuous mode [ 85.825882][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.833588][ T5774] Cannot create hsr debugfs directory [ 86.255068][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.271846][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.283660][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.308108][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.343882][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.374274][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.391341][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.410611][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.480338][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.494950][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.513908][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.524063][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.622160][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.633938][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.651077][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.669998][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.776980][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.824734][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.841554][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.848970][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.891351][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.902076][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.909307][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.919709][ T27] cfg80211: failed to load regulatory.db [ 86.942318][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.025512][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.045023][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.061836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.069067][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.083443][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.098051][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.118158][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.125329][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.154746][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.162273][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.197206][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.204412][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.231269][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.280946][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.288159][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.323475][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.330623][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.499533][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.601065][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.713310][ T5782] Bluetooth: hci3: command tx timeout [ 87.739963][ T5774] veth0_vlan: entered promiscuous mode [ 87.791279][ T5774] veth1_vlan: entered promiscuous mode [ 87.803921][ T5782] Bluetooth: hci2: command tx timeout [ 87.873104][ T5782] Bluetooth: hci0: command tx timeout [ 87.878578][ T5782] Bluetooth: hci1: command tx timeout [ 87.888486][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.997248][ T5774] veth0_macvtap: entered promiscuous mode [ 88.027449][ T5773] veth0_vlan: entered promiscuous mode [ 88.043933][ T5774] veth1_macvtap: entered promiscuous mode [ 88.060552][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.075434][ T5773] veth1_vlan: entered promiscuous mode [ 88.109648][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.128818][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.150638][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.164172][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.174611][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.183672][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.192412][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.270383][ T5776] veth0_vlan: entered promiscuous mode [ 88.306630][ T5776] veth1_vlan: entered promiscuous mode [ 88.319257][ T5773] veth0_macvtap: entered promiscuous mode [ 88.341278][ T5773] veth1_macvtap: entered promiscuous mode [ 88.413290][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.424436][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.447029][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.455001][ T5775] veth0_vlan: entered promiscuous mode [ 88.466782][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.487245][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.522102][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.537484][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.549238][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.568054][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.577463][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.587925][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.597233][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.620771][ T5775] veth1_vlan: entered promiscuous mode [ 88.649324][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.658201][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.667088][ T5776] veth0_macvtap: entered promiscuous mode [ 88.682916][ T5776] veth1_macvtap: entered promiscuous mode [ 88.770185][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.785735][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.800174][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.817633][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.832771][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.857747][ T5775] veth0_macvtap: entered promiscuous mode [ 88.922426][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.928403][ C1] hrtimer: interrupt took 76524 ns [ 88.937716][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.948524][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.959351][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.974720][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.983619][ T5775] veth1_macvtap: entered promiscuous mode [ 88.998904][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.009095][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.066213][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.080868][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.089658][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.098578][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.120015][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.132707][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.153545][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.173322][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.189578][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.201288][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.218095][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.229286][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.259445][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.292092][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.304507][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.316125][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.327790][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.338539][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.350736][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.362785][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.379463][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.388503][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.397662][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.406507][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.588589][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.615110][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.690115][ T5847] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.697027][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.740223][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.792821][ T5782] Bluetooth: hci3: command tx timeout [ 89.887589][ T5782] Bluetooth: hci2: command tx timeout [ 89.945055][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.953596][ T5781] Bluetooth: hci0: command tx timeout [ 89.959181][ T5782] Bluetooth: hci1: command tx timeout [ 89.976799][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.079866][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.103352][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.797223][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 91.007445][ T5868] Zero length message leads to an empty skb [ 91.160867][ T5872] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 91.257064][ T5872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10'. [ 91.317813][ T5872] ipvlan1: entered promiscuous mode [ 91.389244][ T5872] ipvlan1: entered allmulticast mode [ 91.426192][ T5872] veth0_vlan: entered allmulticast mode [ 91.513671][ T5872] bridge0: port 3(ipvlan1) entered blocking state [ 91.520734][ T5872] bridge0: port 3(ipvlan1) entered disabled state [ 91.581105][ T5872] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 91.671845][ T5873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.873195][ T5782] Bluetooth: hci3: command tx timeout [ 91.938316][ T5873] syz.1.8 (5873) used greatest stack depth: 20136 bytes left [ 91.952667][ T5782] Bluetooth: hci2: command tx timeout [ 91.999492][ T5872] syz.0.10 (5872) used greatest stack depth: 19368 bytes left [ 92.034808][ T5782] Bluetooth: hci1: command tx timeout [ 92.041158][ T5782] Bluetooth: hci0: command tx timeout [ 92.419961][ T5888] @0Ù: renamed from bond_slave_1 (while UP) [ 95.141700][ T5922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.585909][ T5928] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.24'. [ 95.658509][ T5928] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.24'. [ 96.105285][ T5941] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.26'. [ 96.146423][ T5941] tc_dump_action: action bad kind [ 96.191806][ T5940] bridge_slave_1: left allmulticast mode [ 96.224028][ T5940] bridge_slave_1: left promiscuous mode [ 96.248198][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.307629][ T5940] bridge_slave_0: left allmulticast mode [ 96.336536][ T5940] bridge_slave_0: left promiscuous mode [ 96.394154][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.836845][ T5954] netlink: 'syz.1.32': attribute type 1 has an invalid length. [ 96.854578][ T5954] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.32'. [ 97.225627][ T5960] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 97.236820][ T5960] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.34'. [ 98.574718][ T5997] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40'. [ 99.466183][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.562133][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.584712][ T5997] bond0 (unregistering): Released all slaves [ 99.683176][ T5992] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.070244][ T6019] netlink: 144 bytes leftover after parsing attributes in process `syz.1.44'. [ 100.671840][ T6029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 100.679785][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 100.688087][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 100.696175][ T6029] IPv6: NLM_F_CREATE should be set when creating new route [ 101.082648][ T6038] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.49'. [ 102.415322][ T6044] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.52'. [ 103.008473][ T6056] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 103.508237][ T6061] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 103.603359][ T6061] team0: Device ipvlan1 failed to register rx_handler [ 104.318550][ T6082] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.63'. [ 104.627271][ T6092] C: renamed from team_slave_0 (while UP) [ 104.674979][ T6092] netlink: 'syz.0.65': attribute type 3 has an invalid length. [ 104.702602][ T6092] netlink: 152 bytes leftover after parsing attributes in process `syz.0.65'. [ 104.939207][ T6100] netlink: 'syz.0.68': attribute type 28 has an invalid length. [ 104.976359][ T6100] netlink: 'syz.0.68': attribute type 3 has an invalid length. [ 105.006701][ T6100] netlink: 132 bytes leftover after parsing attributes in process `syz.0.68'. [ 106.169532][ T6120] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.71'. [ 107.011304][ T6123] netlink: 'syz.3.73': attribute type 21 has an invalid length. [ 107.036734][ T6123] netlink: 128 bytes leftover after parsing attributes in process `syz.3.73'. [ 107.297907][ T6135] netlink: 'syz.0.76': attribute type 3 has an invalid length. [ 107.312889][ T6135] netlink: 152 bytes leftover after parsing attributes in process `syz.0.76'. [ 108.077098][ T6150] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 108.108818][ T6150] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.81'. [ 108.134535][ T6150] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 109.096811][ T6156] warning: `syz.1.80' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.468343][ T6160] @0Ù: renamed from bond_slave_1 (while UP) [ 109.648919][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.684015][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.721797][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.744290][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.794563][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.826574][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.872024][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.899987][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 109.922197][ T6165] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.86'. [ 110.186293][ T6171] C: renamed from team_slave_0 (while UP) [ 110.290225][ T6171] netlink: 'syz.2.87': attribute type 3 has an invalid length. [ 110.317521][ T6173] delete_channel: no stack [ 110.346449][ T6173] delete_channel: no stack [ 113.694983][ T6213] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 114.095916][ T6222] Driver unsupported XDP return value 0 on prog (id 156) dev N/A, expect packet loss! [ 114.172588][ T6213] veth0_vlan: left promiscuous mode [ 114.178752][ T6222] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 114.193445][ T6213] veth0_vlan: entered promiscuous mode [ 114.217967][ T6222] __nla_validate_parse: 29 callbacks suppressed [ 114.217994][ T6222] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.103'. [ 114.220046][ T6213] team0: Device veth0_vlan failed to register rx_handler [ 114.486482][ T6213] syz.3.99 (6213) used greatest stack depth: 18024 bytes left [ 114.532590][ T6218] netlink: 'syz.2.101': attribute type 13 has an invalid length. [ 114.550752][ T6218] netlink: 'syz.2.101': attribute type 58 has an invalid length. [ 114.572604][ T6218] netlink: 152 bytes leftover after parsing attributes in process `syz.2.101'. [ 114.918024][ T6229] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.105'. [ 114.964750][ T6233] netlink: 6 bytes leftover after parsing attributes in process `syz.0.105'. [ 114.987454][ T6233] openvswitch: netlink: Flow actions attr not present in new flow. [ 115.034483][ T6229] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 115.110830][ T6226] netlink: 'syz.1.104': attribute type 21 has an invalid length. [ 115.419081][ T6247] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.109'. [ 115.653285][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 116.782854][ T6268] raw_sendmsg: syz.3.113 forgot to set AF_INET. Fix it! [ 116.905006][ T6281] netlink: 203296 bytes leftover after parsing attributes in process `syz.0.115'. [ 116.931568][ T6281] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 116.959917][ T6281] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 121.258029][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 121.866364][ T6353] netlink: 'syz.3.138': attribute type 49 has an invalid length. [ 122.251712][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz.2.137'. [ 122.998651][ T6375] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.143'. [ 123.285648][ T6385] netlink: 'syz.0.146': attribute type 10 has an invalid length. [ 123.355719][ T6385] team0: Device veth1_macvtap failed to register rx_handler [ 125.933188][ T6428] netlink: 'syz.3.158': attribute type 2 has an invalid length. [ 125.940923][ T6428] netlink: 'syz.3.158': attribute type 1 has an invalid length. [ 125.982604][ T6428] netlink: 9 bytes leftover after parsing attributes in process `syz.3.158'. [ 126.065587][ T6430] netlink: 16199 bytes leftover after parsing attributes in process `syz.2.159'. [ 126.588980][ T6443] netlink: 'syz.3.163': attribute type 8 has an invalid length. [ 126.607435][ T6443] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.163'. [ 127.787622][ T6412] delete_channel: no stack [ 128.102900][ T6467] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 128.110726][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.169'. [ 128.133114][ T6467] team0: entered promiscuous mode [ 128.148590][ T6467] C: entered promiscuous mode [ 128.165022][ T6467] team_slave_1: entered promiscuous mode [ 128.200722][ T6467] team0: entered allmulticast mode [ 128.257912][ T6467] C: entered allmulticast mode [ 128.289581][ T6467] team_slave_1: entered allmulticast mode [ 128.339146][ T6467] bridge0: port 3(team0) entered blocking state [ 128.388776][ T6470] syz.0.169: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 128.438017][ T6467] bridge0: port 3(team0) entered disabled state [ 128.466768][ T6467] bridge0: port 3(team0) entered blocking state [ 128.474179][ T6467] bridge0: port 3(team0) entered forwarding state [ 128.502880][ T6470] CPU: 0 PID: 6470 Comm: syz.0.169 Not tainted syzkaller #0 [ 128.510245][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.520363][ T6470] Call Trace: [ 128.523687][ T6470] [ 128.526656][ T6470] dump_stack_lvl+0x18c/0x250 [ 128.531399][ T6470] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.537612][ T6470] ? show_regs_print_info+0x20/0x20 [ 128.542852][ T6470] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.549073][ T6470] warn_alloc+0x246/0x340 [ 128.553469][ T6470] ? zone_watermark_ok_safe+0x230/0x230 [ 128.559104][ T6470] ? kasan_set_track+0x5f/0x70 [ 128.563932][ T6470] ? kasan_set_track+0x4e/0x70 [ 128.568750][ T6470] ? __kasan_kmalloc+0x8f/0xa0 [ 128.573691][ T6470] ? xsk_init_queue+0xad/0x100 [ 128.579055][ T6470] ? xsk_setsockopt+0x4e5/0x760 [ 128.583973][ T6470] ? do_sock_setsockopt+0x175/0x1a0 [ 128.589217][ T6470] ? __x64_sys_setsockopt+0x182/0x200 [ 128.594643][ T6470] __vmalloc_node_range+0x126/0x1330 [ 128.600018][ T6470] ? free_vm_area+0x50/0x50 [ 128.604588][ T6470] vmalloc_user+0x74/0x80 [ 128.608982][ T6470] ? xskq_create+0xbf/0x170 [ 128.613541][ T6470] xskq_create+0xbf/0x170 [ 128.617950][ T6470] xsk_init_queue+0xad/0x100 [ 128.622604][ T6470] xsk_setsockopt+0x4e5/0x760 [ 128.627348][ T6470] ? xsk_poll+0x680/0x680 [ 128.631755][ T6470] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.637967][ T6470] ? xsk_poll+0x680/0x680 [ 128.642354][ T6470] ? do_sock_setsockopt+0x15e/0x1a0 [ 128.647699][ T6470] ? xsk_poll+0x680/0x680 [ 128.652181][ T6470] do_sock_setsockopt+0x175/0x1a0 [ 128.657255][ T6470] ? __fdget+0x180/0x210 [ 128.661566][ T6470] __x64_sys_setsockopt+0x182/0x200 [ 128.666834][ T6470] do_syscall_64+0x55/0xb0 [ 128.671358][ T6470] ? clear_bhb_loop+0x40/0x90 [ 128.676109][ T6470] ? clear_bhb_loop+0x40/0x90 [ 128.680851][ T6470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.686802][ T6470] RIP: 0033:0x7f875dd9ce59 [ 128.691287][ T6470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.710952][ T6470] RSP: 002b:00007f875ec70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.719424][ T6470] RAX: ffffffffffffffda RBX: 00007f875e016090 RCX: 00007f875dd9ce59 [ 128.727456][ T6470] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 128.735471][ T6470] RBP: 00007f875de32d6f R08: 0000000000000004 R09: 0000000000000000 [ 128.743503][ T6470] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 128.751528][ T6470] R13: 00007f875e016128 R14: 00007f875e016090 R15: 00007ffffcd9cc18 [ 128.759564][ T6470] [ 128.843259][ T6470] Mem-Info: [ 128.856784][ T6470] active_anon:16261 inactive_anon:0 isolated_anon:0 [ 128.856784][ T6470] active_file:17600 inactive_file:39962 isolated_file:0 [ 128.856784][ T6470] unevictable:768 dirty:30 writeback:0 [ 128.856784][ T6470] slab_reclaimable:10209 slab_unreclaimable:91138 [ 128.856784][ T6470] mapped:26469 shmem:11675 pagetables:598 [ 128.856784][ T6470] sec_pagetables:0 bounce:0 [ 128.856784][ T6470] kernel_misc_reclaimable:0 [ 128.856784][ T6470] free:1340126 free_pcp:7148 free_cma:0 [ 129.016053][ T6470] Node 0 active_anon:66056kB inactive_anon:0kB active_file:70400kB inactive_file:159648kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106876kB dirty:116kB writeback:0kB shmem:46164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10396kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 129.177570][ T6470] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 129.283712][ T6470] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.317246][ T6470] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 129.323239][ T6470] Node 0 DMA32 free:1448052kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:67512kB inactive_anon:0kB active_file:70400kB inactive_file:158812kB unevictable:1536kB writepending:116kB present:3129332kB managed:2586940kB mlocked:0kB bounce:0kB free_pcp:9060kB local_pcp:5876kB free_cma:0kB [ 129.354570][ T6470] lowmem_reserve[]: 0 0 0 0 0 [ 129.359507][ T6470] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.398492][ T6470] lowmem_reserve[]: 0 0 0 0 0 [ 129.412071][ T6470] Node 1 Normal free:3894572kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20548kB local_pcp:10144kB free_cma:0kB [ 129.521049][ T6470] lowmem_reserve[]: 0 0 0 0 0 [ 129.526246][ T6470] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.562562][ T6470] Node 0 DMA32: 3*4kB (UME) 923*8kB (UE) 595*16kB (UM) 977*32kB (UM) 607*64kB (UM) 321*128kB (UME) 138*256kB (M) 33*512kB (M) 10*1024kB (UM) 4*2048kB (UME) 305*4096kB (M) = 1448052kB [ 129.643692][ T6470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.672612][ T6470] Node 1 Normal: 241*4kB (UME) 57*8kB (UME) 40*16kB (UME) 45*32kB (UME) 18*64kB (UE) 4*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3894572kB [ 129.742718][ T6470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.752365][ T6470] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.814169][ T6470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 129.842614][ T6470] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 129.872464][ T6470] 65941 total pagecache pages [ 129.877467][ T6470] 0 pages in swap cache [ 129.881718][ T6470] Free swap = 124996kB [ 129.937672][ T6470] Total swap = 124996kB [ 129.941935][ T6470] 2097051 pages RAM [ 129.962639][ T6470] 0 pages HighMem/MovableOnly [ 129.967400][ T6470] 416930 pages reserved [ 129.971615][ T6470] 0 pages cma reserved [ 130.617283][ T6495] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 130.659968][ T6495] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 130.717594][ T6496] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 130.763356][ T6497] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 130.879967][ T6493] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 131.147910][ T6493] team0: Port device wlan1 added [ 131.215899][ T6494] netlink: 'syz.1.178': attribute type 10 has an invalid length. [ 131.441573][ T6498] netlink: 'syz.1.178': attribute type 19 has an invalid length. [ 131.551189][ T6497] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 132.362862][ T6542] netlink: 'syz.3.189': attribute type 21 has an invalid length. [ 132.410969][ T6542] netlink: 132 bytes leftover after parsing attributes in process `syz.3.189'. [ 133.020780][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.033030][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.419467][ T6583] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.200'. [ 136.447199][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'. [ 136.821957][ T6575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.851657][ T6580] netlink: 144 bytes leftover after parsing attributes in process `syz.3.200'. [ 137.829579][ T6600] netlink: 'syz.3.205': attribute type 25 has an invalid length. [ 137.891726][ T6600] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.205'. [ 138.013851][ T6602] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 138.021605][ T6602] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 138.050796][ T6602] netlink: 9 bytes leftover after parsing attributes in process `syz.2.204'. [ 138.669253][ T6615] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 138.696467][ T6615] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 138.799046][ T6611] netlink: 'syz.3.207': attribute type 29 has an invalid length. [ 138.920632][ T6617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.210'. [ 139.013449][ T6618] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.210'. [ 139.032841][ T6618] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.210'. [ 139.490704][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 140.335860][ T6640] netlink: 'syz.2.216': attribute type 16 has an invalid length. [ 140.352965][ T6640] netlink: 2 bytes leftover after parsing attributes in process `syz.2.216'. [ 141.017750][ T6656] syzkaller0: entered promiscuous mode [ 141.026894][ T6656] syzkaller0: entered allmulticast mode [ 141.138573][ T6661] netlink: 'syz.2.223': attribute type 28 has an invalid length. [ 141.154860][ T6661] netlink: 2 bytes leftover after parsing attributes in process `syz.2.223'. [ 143.729511][ T6663] netlink: 14 bytes leftover after parsing attributes in process `syz.0.224'. [ 143.802655][ T6663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.837279][ T6663] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 143.865841][ T6663] bond0 (unregistering): Released all slaves [ 143.909654][ T6668] batadv0: entered promiscuous mode [ 143.958179][ T6685] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 143.970675][ T6685] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.229'. [ 144.240395][ T6690] netlink: 'syz.0.231': attribute type 4 has an invalid length. [ 144.254116][ T6690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.231'. [ 144.474335][ T6703] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.235'. [ 144.692186][ T6712] netlink: 164 bytes leftover after parsing attributes in process `syz.3.238'. [ 145.138917][ T6726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.240'. [ 145.241270][ T6723] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.241'. [ 148.315573][ T6743] syzkaller0: entered promiscuous mode [ 148.321359][ T6743] syzkaller0: entered allmulticast mode [ 148.936898][ T6768] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.253'. [ 149.485687][ T6777] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.256'. [ 150.681911][ T6780] netlink: 26 bytes leftover after parsing attributes in process `syz.1.257'. [ 151.563397][ T6808] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.264'. [ 152.018859][ T6818] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 152.028855][ T6818] netlink: 'syz.1.275': attribute type 4 has an invalid length. [ 152.041192][ T6818] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.275'. [ 152.118955][ T6820] syzkaller0: entered promiscuous mode [ 152.124653][ T6820] syzkaller0: entered allmulticast mode [ 152.218526][ T6823] netlink: 'syz.1.268': attribute type 10 has an invalid length. [ 152.227556][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.268'. [ 152.237499][ T6823] netlink: 'syz.1.268': attribute type 10 has an invalid length. [ 152.245989][ T6823] netlink: 40 bytes leftover after parsing attributes in process `syz.1.268'. [ 153.693528][ T6839] delete_channel: no stack [ 154.666015][ T6840] netlink: 'syz.1.274': attribute type 4 has an invalid length. [ 154.677703][ T6841] ±ÿ: renamed from lo (while UP) [ 154.731056][ T6856] netlink: 140 bytes leftover after parsing attributes in process `syz.2.277'. [ 154.817755][ T6860] netlink: 'syz.0.278': attribute type 19 has an invalid length. [ 155.344139][ T6874] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.282'. [ 156.187986][ T6889] netlink: 'syz.0.287': attribute type 2 has an invalid length. [ 156.202372][ T6889] netlink: 'syz.0.287': attribute type 8 has an invalid length. [ 156.216256][ T6889] netlink: 132 bytes leftover after parsing attributes in process `syz.0.287'. [ 159.866394][ T6924] netlink: 'syz.2.296': attribute type 10 has an invalid length. [ 159.896939][ T6924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.296'. [ 159.945663][ T6924] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 159.976629][ T6924] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.031708][ T6924] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 160.058165][ T6932] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.298'. [ 160.103082][ T6932] netlink: zone id is out of range [ 160.124223][ T6932] netlink: zone id is out of range [ 160.130061][ T6932] netlink: zone id is out of range [ 160.146388][ T6932] netlink: zone id is out of range [ 160.162151][ T6932] netlink: zone id is out of range [ 160.177965][ T6932] netlink: zone id is out of range [ 160.190521][ T6932] netlink: zone id is out of range [ 160.202720][ T6932] netlink: zone id is out of range [ 160.222640][ T6932] netlink: zone id is out of range [ 160.228046][ T6932] netlink: zone id is out of range [ 160.304900][ T6934] netlink: 'syz.3.299': attribute type 10 has an invalid length. [ 160.324023][ T6934] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.299'. [ 161.240642][ T6960] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 161.260230][ T6960] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 161.513689][ T6972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.314'. [ 161.555623][ T6972] netlink: 60 bytes leftover after parsing attributes in process `syz.2.314'. [ 161.600403][ T6974] netlink: 105 bytes leftover after parsing attributes in process `syz.3.315'. [ 161.643349][ T6974] netlink: 105 bytes leftover after parsing attributes in process `syz.3.315'. [ 162.004510][ T6982] netlink: 'syz.1.317': attribute type 8 has an invalid length. [ 162.012440][ T6982] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.317'. [ 162.919870][ T7002] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.322'. [ 163.031232][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.453185][ T7046] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 165.577795][ T7046] bridge0: port 3(team0) entered disabled state [ 168.397844][ T7046] bridge0: port 3(team0) entered disabled state [ 168.458971][ T7046] C: left promiscuous mode [ 168.467972][ T7046] C: left allmulticast mode [ 168.529462][ T7046] team0 (unregistering): Port device C removed [ 168.556727][ T7046] team_slave_1: left promiscuous mode [ 168.573867][ T7046] team_slave_1: left allmulticast mode [ 168.623177][ T7046] team0 (unregistering): Port device team_slave_1 removed [ 168.686176][ T7065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.341'. [ 169.465414][ T7085] C: renamed from team_slave_0 (while UP) [ 169.514442][ T7085] netlink: 156 bytes leftover after parsing attributes in process `syz.3.349'. [ 169.915680][ T5781] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 169.925013][ T7094] netlink: 'syz.3.352': attribute type 39 has an invalid length. [ 170.063192][ T7097] netlink: 26 bytes leftover after parsing attributes in process `syz.1.351'. [ 171.058691][ T7121] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.359'. [ 171.156994][ T7122] netlink: 'syz.2.359': attribute type 29 has an invalid length. [ 171.243874][ T7122] netlink: 'syz.2.359': attribute type 29 has an invalid length. [ 171.281392][ T7125] netlink: 21 bytes leftover after parsing attributes in process `syz.3.361'. [ 171.299988][ T7125] ksmbd: Unknown IPC event: 0, ignore. [ 171.521563][ T7132] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.364'. [ 174.211466][ T7195] syzkaller0: entered promiscuous mode [ 174.311545][ T7195] syzkaller0: entered allmulticast mode [ 174.382810][ T7201] netlink: 'syz.0.384': attribute type 10 has an invalid length. [ 174.835225][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.843116][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.227024][ T7222] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.389'. [ 177.437824][ T7228] netlink: 'syz.1.390': attribute type 13 has an invalid length. [ 177.454046][ T7228] netlink: 168 bytes leftover after parsing attributes in process `syz.1.390'. [ 178.412595][ T7237] netlink: 156 bytes leftover after parsing attributes in process `syz.3.394'. [ 178.513452][ T7252] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 178.521458][ T7252] batadv0: left promiscuous mode [ 179.457520][ T7260] netlink: 'syz.0.400': attribute type 2 has an invalid length. [ 179.498157][ T7260] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.400'. [ 179.557745][ T7266] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 179.583781][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 180.727665][ T7292] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.409'. [ 180.770173][ T7292] net_ratelimit: 42 callbacks suppressed [ 180.770189][ T7292] openvswitch: netlink: IP tunnel dst address not specified [ 180.814420][ T7297] netlink: 'syz.2.409': attribute type 2 has an invalid length. [ 180.843026][ T7297] netlink: 11835 bytes leftover after parsing attributes in process `syz.2.409'. [ 180.995016][ T7294] netlink: 26 bytes leftover after parsing attributes in process `syz.3.408'. [ 181.399496][ T7310] netlink: 14 bytes leftover after parsing attributes in process `syz.2.413'. [ 181.538146][ T7317] netlink: 'syz.0.416': attribute type 21 has an invalid length. [ 181.548424][ T7317] netlink: 'syz.0.416': attribute type 6 has an invalid length. [ 181.579206][ T7317] netlink: 40459 bytes leftover after parsing attributes in process `syz.0.416'. [ 181.766291][ T7317] macvlan1: entered promiscuous mode [ 181.804999][ T7317] macvlan1: entered allmulticast mode [ 181.811461][ T7317] veth1_vlan: entered allmulticast mode [ 182.253338][ T7329] netlink: 'syz.2.417': attribute type 21 has an invalid length. [ 182.261310][ T7329] netlink: 156 bytes leftover after parsing attributes in process `syz.2.417'. [ 182.908917][ T7348] C: renamed from team_slave_0 (while UP) [ 182.961412][ T7348] netlink: 'syz.1.423': attribute type 3 has an invalid length. [ 182.988799][ T7348] netlink: 152 bytes leftover after parsing attributes in process `syz.1.423'. [ 183.019494][ T7348] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 183.170475][ T7355] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.425'. [ 183.239247][ T7341] syzkaller0: entered promiscuous mode [ 183.263191][ T7341] syzkaller0: entered allmulticast mode [ 184.300711][ T7371] netlink: 'syz.3.429': attribute type 2 has an invalid length. [ 184.325527][ T7371] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.429'. [ 187.219616][ T7360] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 187.227584][ T7360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.426'. [ 187.238286][ T7360] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 187.245393][ T7360] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.272794][ T7360] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 187.308774][ T7390] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.434'. [ 187.371383][ T7393] netlink: 'syz.0.437': attribute type 3 has an invalid length. [ 187.379677][ T7393] netlink: 152 bytes leftover after parsing attributes in process `syz.0.437'. [ 187.389659][ T7393] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.646528][ T7399] netlink: 'syz.1.435': attribute type 2 has an invalid length. [ 187.682649][ T7399] netlink: 'syz.1.435': attribute type 3 has an invalid length. [ 187.690344][ T7399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.435'. [ 188.384481][ T7413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.880135][ T7455] netlink: 'syz.3.452': attribute type 10 has an invalid length. [ 191.906054][ T7455] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.944140][ T7455] bond0: (slave team0): Enslaving as an active interface with an up link [ 191.955856][ T7472] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.458'. [ 192.154839][ T7474] syz_tun: refused to change device tx_queue_len [ 192.161470][ T7476] netlink: 'syz.3.460': attribute type 3 has an invalid length. [ 192.189346][ T7476] netlink: 152 bytes leftover after parsing attributes in process `syz.3.460'. [ 192.207018][ T7476] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.238976][ T7474] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.459'. [ 192.351140][ T7485] netlink: 'syz.3.463': attribute type 10 has an invalid length. [ 192.365854][ T7485] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.463'. [ 192.392049][ T7481] netlink: 'syz.2.462': attribute type 4 has an invalid length. [ 192.441278][ T7489] netlink: 'syz.1.464': attribute type 9 has an invalid length. [ 192.441803][ T7481] netlink: 152 bytes leftover after parsing attributes in process `syz.2.462'. [ 192.449129][ T7489] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.464'. [ 192.649722][ T7495] netlink: 'syz.2.465': attribute type 5 has an invalid length. [ 192.662731][ T7495] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 192.670569][ T7495] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.465'. [ 192.687682][ T7494] netlink: 'syz.2.465': attribute type 5 has an invalid length. [ 192.709670][ T7494] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 192.722222][ T7494] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.465'. [ 193.359295][ T7515] netlink: 'syz.1.472': attribute type 3 has an invalid length. [ 193.389086][ T7515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.472'. [ 193.419415][ T7515] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.569032][ T7520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.474'. [ 193.619197][ T7520] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 193.670668][ T7526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.476'. [ 194.275121][ T7532] netlink: 26 bytes leftover after parsing attributes in process `syz.0.479'. [ 194.309875][ T7525] netlink: 44 bytes leftover after parsing attributes in process `syz.2.477'. [ 194.451340][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.457846][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615720][ T7527] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 194.654903][ T7527] syzkaller0: entered promiscuous mode [ 194.672618][ T7527] syzkaller0: entered allmulticast mode [ 194.770069][ T7542] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 195.174221][ T7555] sock: sock_timestamping_bind_phc: sock not bind to device [ 195.387402][ T7561] delete_channel: no stack [ 195.416866][ T7561] delete_channel: no stack [ 195.946127][ T7577] tap0: tun_chr_ioctl cmd 1074025675 [ 195.951759][ T7577] tap0: persist enabled [ 196.078581][ T7577] tap0: tun_chr_ioctl cmd 21731 [ 196.172125][ T7577] tap0: tun_chr_ioctl cmd 1074025675 [ 196.191552][ T7577] tap0: persist enabled [ 196.746034][ T7594] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 196.798730][ T7601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.066608][ T7619] validate_nla: 4 callbacks suppressed [ 198.066641][ T7619] netlink: 'syz.0.506': attribute type 3 has an invalid length. [ 198.102720][ T7619] __nla_validate_parse: 5 callbacks suppressed [ 198.102752][ T7619] netlink: 152 bytes leftover after parsing attributes in process `syz.0.506'. [ 198.129944][ T7619] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 198.600854][ T7642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.515'. [ 199.674576][ T7674] netlink: 'syz.2.518': attribute type 1 has an invalid length. [ 199.682417][ T7674] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.518'. [ 199.870103][ T7681] netlink: 'syz.2.519': attribute type 3 has an invalid length. [ 199.910173][ T7681] netlink: 152 bytes leftover after parsing attributes in process `syz.2.519'. [ 199.984838][ T7684] netlink: 'syz.1.521': attribute type 11 has an invalid length. [ 199.992974][ T7684] netlink: 176 bytes leftover after parsing attributes in process `syz.1.521'. [ 200.041959][ T7686] netlink: 'syz.3.522': attribute type 29 has an invalid length. [ 200.050425][ T7686] netlink: 'syz.3.522': attribute type 29 has an invalid length. [ 200.177557][ T7691] netlink: 'syz.2.523': attribute type 4 has an invalid length. [ 200.186836][ T7691] netlink: 164 bytes leftover after parsing attributes in process `syz.2.523'. [ 200.524972][ T7698] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.525'. [ 200.584165][ T7698] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.525'. [ 200.685745][ T7698] tipc: Started in network mode [ 200.780788][ T7698] tipc: Node identity b, cluster identity 73 [ 200.804371][ T7698] tipc: Node number set to 11 [ 201.073200][ T7705] tap1: tun_chr_ioctl cmd 1074025694 [ 201.598191][ T7724] netlink: 'syz.2.533': attribute type 33 has an invalid length. [ 201.630347][ T7724] netlink: 160 bytes leftover after parsing attributes in process `syz.2.533'. [ 202.928397][ T7752] netlink: 'syz.1.541': attribute type 3 has an invalid length. [ 202.940536][ T7752] netlink: 152 bytes leftover after parsing attributes in process `syz.1.541'. [ 202.956995][ T7755] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 202.965492][ T7752] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.987456][ T7755] syz.2.542 (7755) used obsolete PPPIOCDETACH ioctl [ 203.162271][ T7759] validate_nla: 1 callbacks suppressed [ 203.162288][ T7759] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 203.197687][ T7759] team0: Device hsr_slave_0 failed to register rx_handler [ 203.305665][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 203.315544][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 203.326753][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 203.339721][ T7764] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 203.829851][ T7773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.298443][ T7786] delete_channel: no stack [ 204.323578][ T7786] delete_channel: no stack [ 204.481501][ T7796] syzkaller0: entered promiscuous mode [ 204.488441][ T7796] syzkaller0: entered allmulticast mode [ 205.522442][ T7801] netlink: 'syz.3.558': attribute type 2 has an invalid length. [ 205.530371][ T7801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.558'. [ 205.777016][ T7813] netlink: 'syz.3.562': attribute type 23 has an invalid length. [ 206.295165][ T7821] netlink: 128 bytes leftover after parsing attributes in process `syz.1.563'. [ 206.361134][ T7821] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 206.754665][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 206.761907][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 206.768048][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.774235][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 206.845984][ T7864] netlink: 188 bytes leftover after parsing attributes in process `syz.0.575'. [ 208.053585][ T7891] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.583'. [ 208.122898][ T7891] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.583'. [ 208.140942][ T7891] netlink: 2 bytes leftover after parsing attributes in process `syz.1.583'. [ 209.001504][ T7918] netlink: 'syz.3.592': attribute type 39 has an invalid length. [ 209.748901][ T7932] netlink: 'syz.3.596': attribute type 10 has an invalid length. [ 210.200779][ T7932] team0: Port device wlan1 added [ 210.287503][ T7949] netlink: 184 bytes leftover after parsing attributes in process `syz.2.600'. [ 210.342266][ T7949] C: entered allmulticast mode [ 210.695582][ T7965] netlink: 'syz.3.606': attribute type 29 has an invalid length. [ 210.759137][ T7965] netlink: 'syz.3.606': attribute type 29 has an invalid length. [ 210.939666][ T7965] netlink: 'syz.3.606': attribute type 29 has an invalid length. [ 211.615026][ T7996] netlink: 184 bytes leftover after parsing attributes in process `syz.1.614'. [ 211.631148][ T7997] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 211.641760][ T7997] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.613'. [ 211.656460][ T7996] C: entered allmulticast mode [ 212.172575][ T8007] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 212.180460][ T8007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.197782][ T8007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.233115][ T8007] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 212.320147][ T7986] delete_channel: no stack [ 212.332415][ T8009] syzkaller0: entered promiscuous mode [ 212.382811][ T8009] syzkaller0: entered allmulticast mode [ 213.106594][ T8033] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.626'. [ 214.224966][ T8018] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.621'. [ 214.234303][ T8021] netlink: 184 bytes leftover after parsing attributes in process `syz.0.623'. [ 214.248132][ T8021] C: entered allmulticast mode [ 214.254326][ T8033] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.626'. [ 215.472016][ T8052] delete_channel: no stack [ 215.522082][ T8059] netlink: 176 bytes leftover after parsing attributes in process `syz.1.636'. [ 216.976946][ T8092] netlink: 176 bytes leftover after parsing attributes in process `syz.1.647'. [ 217.350971][ T5786] Bluetooth: hci2: ISO packet too small [ 217.626822][ T8119] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 217.667644][ T8119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.656'. [ 217.679125][ T8122] netlink: 'syz.2.656': attribute type 3 has an invalid length. [ 217.702692][ T8122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.656'. [ 217.728857][ T8122] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 217.752305][ T8121] syz.0.657[8121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.753577][ T8121] syz.0.657[8121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.766725][ T8124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.658'. [ 218.067522][ T8133] netlink: 176 bytes leftover after parsing attributes in process `syz.1.659'. [ 219.153160][ T8154] netlink: 'syz.0.666': attribute type 4 has an invalid length. [ 219.186247][ T8154] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 219.205825][ T8154] syzkaller1: linktype set to 786 [ 219.999637][ T8169] netlink: 'syz.0.673': attribute type 4 has an invalid length. [ 220.047914][ T8173] netlink: 168 bytes leftover after parsing attributes in process `syz.1.670'. [ 222.009013][ T8206] netlink: 168 bytes leftover after parsing attributes in process `syz.3.683'. [ 222.182666][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.682'. [ 222.267680][ T8209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.682'. [ 222.413143][ T8209] netlink: 13 bytes leftover after parsing attributes in process `syz.1.682'. [ 227.141413][ T8249] netlink: 168 bytes leftover after parsing attributes in process `syz.1.693'. [ 227.436574][ T8253] delete_channel: no stack [ 227.443601][ T8253] delete_channel: no stack [ 227.497675][ T8255] netlink: 'syz.3.697': attribute type 39 has an invalid length. [ 227.533189][ T8257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.696'. [ 227.583152][ T8257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.696'. [ 227.619868][ T8257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.696'. [ 227.663341][ T8261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.696'. [ 228.214283][ T8266] netlink: 'syz.2.700': attribute type 4 has an invalid length. [ 228.291790][ T8266] netlink: 152 bytes leftover after parsing attributes in process `syz.2.700'. [ 228.374728][ T8266] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 228.588800][ T8267] netlink: 'syz.2.700': attribute type 21 has an invalid length. [ 228.620186][ T8267] netlink: 128 bytes leftover after parsing attributes in process `syz.2.700'. [ 228.652556][ T8267] netlink: 'syz.2.700': attribute type 4 has an invalid length. [ 228.761016][ T8275] netlink: 'syz.1.702': attribute type 21 has an invalid length. [ 229.175886][ T8288] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.707'. [ 229.212594][ T8290] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.707'. [ 229.508093][ T8299] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.711'. [ 229.519300][ T8299] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 229.527936][ T8299] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 229.688241][ T8296] netlink: 'syz.1.710': attribute type 2 has an invalid length. [ 230.960308][ T8347] netlink: 'syz.1.723': attribute type 3 has an invalid length. [ 231.057102][ T8358] netlink: 'syz.0.727': attribute type 10 has an invalid length. [ 231.527959][ T8359] syzkaller0: entered promiscuous mode [ 231.542592][ T8359] syzkaller0: entered allmulticast mode [ 231.914324][ T8385] netlink: 'syz.3.735': attribute type 9 has an invalid length. [ 233.989714][ T8409] netlink: 'syz.1.739': attribute type 10 has an invalid length. [ 233.998302][ T8409] team0: Device hsr_slave_0 failed to register rx_handler [ 235.046809][ T8441] netlink: 'syz.2.750': attribute type 2 has an invalid length. [ 235.064858][ T8441] __nla_validate_parse: 8 callbacks suppressed [ 235.064873][ T8441] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.750'. [ 235.183843][ T8441] netlink: 'syz.2.750': attribute type 9 has an invalid length. [ 235.222625][ T8441] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.750'. [ 235.490781][ T8458] netlink: 'syz.0.755': attribute type 1 has an invalid length. [ 235.499876][ T8458] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.755'. [ 235.510219][ T8458] netlink: 9 bytes leftover after parsing attributes in process `syz.0.755'. [ 236.783724][ T8505] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.769'. [ 236.852357][ T8510] netlink: 'syz.2.771': attribute type 11 has an invalid length. [ 236.868045][ T8510] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 236.884035][ T8510] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 236.891735][ T8510] netlink: 'syz.2.771': attribute type 2 has an invalid length. [ 236.899867][ T8510] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.771'. [ 237.070591][ T8514] FAULT_INJECTION: forcing a failure. [ 237.070591][ T8514] name failslab, interval 1, probability 0, space 0, times 1 [ 237.114178][ T8514] CPU: 0 PID: 8514 Comm: syz.0.773 Not tainted syzkaller #0 [ 237.121525][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.131610][ T8514] Call Trace: [ 237.134927][ T8514] [ 237.137886][ T8514] dump_stack_lvl+0x18c/0x250 [ 237.142626][ T8514] ? show_regs_print_info+0x20/0x20 [ 237.147859][ T8514] ? load_image+0x420/0x420 [ 237.152386][ T8514] ? __might_sleep+0xe0/0xe0 [ 237.156993][ T8514] ? __lock_acquire+0x7d40/0x7d40 [ 237.162051][ T8514] should_fail_ex+0x39d/0x4d0 [ 237.166778][ T8514] should_failslab+0x9/0x20 [ 237.171298][ T8514] slab_pre_alloc_hook+0x59/0x310 [ 237.176357][ T8514] ? __get_vm_area_node+0x125/0x370 [ 237.181567][ T8514] __kmem_cache_alloc_node+0x53/0x250 [ 237.186961][ T8514] ? __get_vm_area_node+0x125/0x370 [ 237.192188][ T8514] kmalloc_node_trace+0x26/0xe0 [ 237.197060][ T8514] __get_vm_area_node+0x125/0x370 [ 237.202109][ T8514] __vmalloc_node_range+0x36e/0x1330 [ 237.207500][ T8514] ? netlink_sendmsg+0x602/0xbf0 [ 237.212457][ T8514] ? netlink_insert+0x109f/0x13a0 [ 237.217525][ T8514] ? netlink_data_ready+0x10/0x10 [ 237.222574][ T8514] ? free_vm_area+0x50/0x50 [ 237.227101][ T8514] ? netlink_sendmsg+0x602/0xbf0 [ 237.232056][ T8514] vmalloc+0x79/0x90 [ 237.235984][ T8514] ? netlink_sendmsg+0x602/0xbf0 [ 237.240948][ T8514] netlink_sendmsg+0x602/0xbf0 [ 237.245739][ T8514] ? netlink_getsockopt+0x590/0x590 [ 237.250959][ T8514] ? aa_sock_msg_perm+0x94/0x150 [ 237.255923][ T8514] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 237.261229][ T8514] ? security_socket_sendmsg+0x80/0xa0 [ 237.266709][ T8514] sock_write_iter+0x2df/0x420 [ 237.271500][ T8514] ? sock_read_iter+0x3e0/0x3e0 [ 237.276377][ T8514] ? common_file_perm+0x198/0x1f0 [ 237.281435][ T8514] vfs_write+0x46c/0x990 [ 237.285701][ T8514] ? file_end_write+0x250/0x250 [ 237.290577][ T8514] ? __fget_files+0x43d/0x4b0 [ 237.295286][ T8514] ? __fdget_pos+0x1d8/0x330 [ 237.299903][ T8514] ? ksys_write+0x75/0x260 [ 237.304346][ T8514] ksys_write+0x150/0x260 [ 237.308706][ T8514] ? __ia32_sys_read+0x90/0x90 [ 237.313504][ T8514] ? lockdep_hardirqs_on+0x98/0x150 [ 237.318734][ T8514] do_syscall_64+0x55/0xb0 [ 237.323168][ T8514] ? clear_bhb_loop+0x40/0x90 [ 237.327878][ T8514] ? clear_bhb_loop+0x40/0x90 [ 237.332584][ T8514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.338502][ T8514] RIP: 0033:0x7f875dd9ce59 [ 237.342929][ T8514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.362556][ T8514] RSP: 002b:00007f875ec91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.370989][ T8514] RAX: ffffffffffffffda RBX: 00007f875e015fa0 RCX: 00007f875dd9ce59 [ 237.378981][ T8514] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.386970][ T8514] RBP: 00007f875ec91090 R08: 0000000000000000 R09: 0000000000000000 [ 237.394954][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.402952][ T8514] R13: 00007f875e016038 R14: 00007f875e015fa0 R15: 00007ffffcd9cc18 [ 237.410943][ T8514] [ 237.453228][ T8514] syz.0.773: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 237.471010][ T8514] CPU: 0 PID: 8514 Comm: syz.0.773 Not tainted syzkaller #0 [ 237.478330][ T8518] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.774'. [ 237.487535][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.487548][ T8514] Call Trace: [ 237.487557][ T8514] [ 237.487565][ T8514] dump_stack_lvl+0x18c/0x250 [ 237.487593][ T8514] ? show_regs_print_info+0x20/0x20 [ 237.487614][ T8514] ? load_image+0x420/0x420 [ 237.506277][ T8517] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.775'. [ 237.508646][ T8514] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.520779][ T8518] netlink: zone id is out of range [ 237.527465][ T8514] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 237.527500][ T8514] warn_alloc+0x246/0x340 [ 237.527534][ T8514] ? __get_vm_area_node+0x125/0x370 [ 237.527566][ T8514] ? zone_watermark_ok_safe+0x230/0x230 [ 237.527606][ T8514] ? rcu_is_watching+0x15/0xb0 [ 237.527641][ T8514] ? __get_vm_area_node+0x356/0x370 [ 237.527678][ T8514] __vmalloc_node_range+0x393/0x1330 [ 237.527706][ T8514] ? netlink_insert+0x109f/0x13a0 [ 237.527757][ T8514] ? netlink_data_ready+0x10/0x10 [ 237.586342][ T8514] ? free_vm_area+0x50/0x50 [ 237.591001][ T8514] ? netlink_sendmsg+0x602/0xbf0 [ 237.595980][ T8514] vmalloc+0x79/0x90 [ 237.599922][ T8514] ? netlink_sendmsg+0x602/0xbf0 [ 237.604987][ T8514] netlink_sendmsg+0x602/0xbf0 [ 237.609805][ T8514] ? netlink_getsockopt+0x590/0x590 [ 237.615047][ T8514] ? aa_sock_msg_perm+0x94/0x150 [ 237.620318][ T8514] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 237.625644][ T8514] ? security_socket_sendmsg+0x80/0xa0 [ 237.631127][ T8514] sock_write_iter+0x2df/0x420 [ 237.635917][ T8514] ? sock_read_iter+0x3e0/0x3e0 [ 237.640907][ T8514] ? common_file_perm+0x198/0x1f0 [ 237.645966][ T8514] vfs_write+0x46c/0x990 [ 237.650251][ T8514] ? file_end_write+0x250/0x250 [ 237.655126][ T8514] ? __fget_files+0x43d/0x4b0 [ 237.659911][ T8514] ? __fdget_pos+0x1d8/0x330 [ 237.664525][ T8514] ? ksys_write+0x75/0x260 [ 237.668984][ T8514] ksys_write+0x150/0x260 [ 237.673360][ T8514] ? __ia32_sys_read+0x90/0x90 [ 237.678168][ T8514] ? lockdep_hardirqs_on+0x98/0x150 [ 237.683407][ T8514] do_syscall_64+0x55/0xb0 [ 237.687846][ T8514] ? clear_bhb_loop+0x40/0x90 [ 237.692553][ T8514] ? clear_bhb_loop+0x40/0x90 [ 237.697341][ T8514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.703254][ T8514] RIP: 0033:0x7f875dd9ce59 [ 237.707683][ T8514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.727312][ T8514] RSP: 002b:00007f875ec91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.735771][ T8514] RAX: ffffffffffffffda RBX: 00007f875e015fa0 RCX: 00007f875dd9ce59 [ 237.743849][ T8514] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 237.751842][ T8514] RBP: 00007f875ec91090 R08: 0000000000000000 R09: 0000000000000000 [ 237.759843][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.767831][ T8514] R13: 00007f875e016038 R14: 00007f875e015fa0 R15: 00007ffffcd9cc18 [ 237.775844][ T8514] [ 237.812333][ T8514] Mem-Info: [ 237.815997][ T8514] active_anon:8927 inactive_anon:0 isolated_anon:0 [ 237.815997][ T8514] active_file:17713 inactive_file:40006 isolated_file:0 [ 237.815997][ T8514] unevictable:768 dirty:83 writeback:0 [ 237.815997][ T8514] slab_reclaimable:10483 slab_unreclaimable:93646 [ 237.815997][ T8514] mapped:24099 shmem:1361 pagetables:519 [ 237.815997][ T8514] sec_pagetables:0 bounce:0 [ 237.815997][ T8514] kernel_misc_reclaimable:0 [ 237.815997][ T8514] free:1347292 free_pcp:6264 free_cma:0 [ 237.864630][ T8514] Node 0 active_anon:35708kB inactive_anon:0kB active_file:70852kB inactive_file:159824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96396kB dirty:332kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10592kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no [ 237.926611][ T8514] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 237.986340][ T8514] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.019376][ T8514] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 238.045942][ T8514] Node 0 DMA32 free:1477184kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35976kB inactive_anon:0kB active_file:70852kB inactive_file:158996kB unevictable:1536kB writepending:336kB present:3129332kB managed:2586940kB mlocked:0kB bounce:0kB free_pcp:5084kB local_pcp:2736kB free_cma:0kB [ 238.087004][ T8531] netlink: 144 bytes leftover after parsing attributes in process `syz.1.784'. [ 238.107578][ T8514] lowmem_reserve[]: 0 0 0 0 0 [ 238.112373][ T8514] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.144231][ T8514] lowmem_reserve[]: 0 0 0 0 0 [ 238.149002][ T8514] Node 1 Normal free:3896624kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18720kB local_pcp:8992kB free_cma:0kB [ 238.178999][ T8514] lowmem_reserve[]: 0 0 0 0 0 [ 238.188850][ T8514] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.201918][ T8514] Node 0 DMA32: 1096*4kB (UM) 1564*8kB (UME) 1986*16kB (UME) 1149*32kB (UME) 798*64kB (UME) 346*128kB (UME) 190*256kB (UME) 55*512kB (ME) 25*1024kB (M) 15*2048kB (UM) 284*4096kB (UM) = 1477184kB [ 238.226015][ T8514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 238.258121][ T8514] Node 1 Normal: 240*4kB (UME) 58*8kB (UME) 40*16kB (UME) 99*32kB (UME) 23*64kB (UE) 4*128kB (UME) 1*256kB (U) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3896624kB [ 238.283861][ T8514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.312702][ T8514] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.322172][ T8514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.331944][ T8514] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.356281][ T8514] 59082 total pagecache pages [ 238.361003][ T8514] 0 pages in swap cache [ 238.368352][ T8514] Free swap = 124996kB [ 238.376962][ T8514] Total swap = 124996kB [ 238.381243][ T8514] 2097051 pages RAM [ 238.385131][ T8514] 0 pages HighMem/MovableOnly [ 238.389900][ T8514] 416930 pages reserved [ 238.398271][ T8514] 0 pages cma reserved [ 238.820776][ T8553] Ÿë: port 1(veth0_to_team) entered blocking state [ 238.832105][ T8553] Ÿë: port 1(veth0_to_team) entered disabled state [ 238.842420][ T8553] veth0_to_team: entered allmulticast mode [ 238.880274][ T8553] veth0_to_team: entered promiscuous mode [ 238.996548][ T8564] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 239.026048][ T8564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.150337][ T8564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.419537][ T8580] netlink: 164 bytes leftover after parsing attributes in process `syz.2.792'. [ 239.977402][ T8597] bridge_slave_1: default FDB implementation only supports local addresses [ 240.413931][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.709569][ T8638] __nla_validate_parse: 3 callbacks suppressed [ 240.709588][ T8638] netlink: 60 bytes leftover after parsing attributes in process `syz.1.809'. [ 240.821226][ T8643] netlink: 'syz.0.810': attribute type 17 has an invalid length. [ 240.874311][ T8643] netlink: 160 bytes leftover after parsing attributes in process `syz.0.810'. [ 241.185168][ T8653] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.813'. [ 241.264204][ T8655] netlink: 164 bytes leftover after parsing attributes in process `syz.3.814'. [ 241.703413][ T8675] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 241.724340][ T8675] netlink: 156 bytes leftover after parsing attributes in process `syz.1.820'. [ 242.176499][ T8687] netlink: 'syz.1.823': attribute type 19 has an invalid length. [ 242.208107][ T8687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.823'. [ 244.771646][ T8746] netlink: 830 bytes leftover after parsing attributes in process `syz.1.840'. [ 244.836233][ T8748] netlink: 'syz.0.839': attribute type 1 has an invalid length. [ 244.864818][ T8748] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.839'. [ 245.375019][ T8767] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 245.948556][ T8771] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.845'. [ 246.058938][ T8771] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.845'. [ 246.204693][ T8778] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.845'. [ 246.299854][ T8782] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.845'. [ 246.648907][ T8798] netlink: 164 bytes leftover after parsing attributes in process `syz.1.852'. [ 247.118538][ T8811] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 247.144997][ T8811] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.858'. [ 248.336650][ T8831] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.864'. [ 248.371466][ T8832] netlink: 164 bytes leftover after parsing attributes in process `syz.0.864'. [ 248.481020][ T8834] netpci0: tun_chr_ioctl cmd 1074812117 [ 249.360503][ T8845] netlink: 'syz.3.867': attribute type 17 has an invalid length. [ 249.443050][ T8845] netlink: 152 bytes leftover after parsing attributes in process `syz.3.867'. [ 249.466671][ T8845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.555282][ T8855] sit0: entered allmulticast mode [ 249.593297][ T8856] sit0: entered promiscuous mode [ 249.711842][ T8858] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 250.329399][ T8888] netlink: 'syz.0.881': attribute type 3 has an invalid length. [ 250.377388][ T8888] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'. [ 250.677401][ T8894] netlink: 'syz.2.882': attribute type 33 has an invalid length. [ 251.500960][ T8929] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 251.521837][ T8929] __nla_validate_parse: 2 callbacks suppressed [ 251.521853][ T8929] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.892'. [ 251.557247][ T8929] netlink: 1 bytes leftover after parsing attributes in process `syz.1.892'. [ 251.593816][ T8930] netlink: 'syz.1.892': attribute type 4 has an invalid length. [ 251.612766][ T8930] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.892'. [ 253.067745][ T8940] netlink: 164 bytes leftover after parsing attributes in process `syz.0.897'. [ 253.483191][ T8958] netlink: 'syz.1.902': attribute type 21 has an invalid length. [ 253.511057][ T8961] TCP: TCP_TX_DELAY enabled [ 253.512699][ T8958] netlink: 'syz.1.902': attribute type 6 has an invalid length. [ 253.564922][ T8958] netlink: 132 bytes leftover after parsing attributes in process `syz.1.902'. [ 253.670256][ T8965] sit0: entered allmulticast mode [ 253.704740][ T8967] sit0: entered promiscuous mode [ 254.050195][ T8979] netlink: 'syz.2.908': attribute type 39 has an invalid length. [ 254.306955][ T8986] netlink: 188 bytes leftover after parsing attributes in process `syz.1.912'. [ 254.636068][ T8998] netlink: 'syz.0.915': attribute type 21 has an invalid length. [ 254.862989][ T9006] netlink: 'syz.3.918': attribute type 21 has an invalid length. [ 254.875070][ T9006] netlink: 132 bytes leftover after parsing attributes in process `syz.3.918'. [ 255.551023][ T9014] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.920'. [ 255.591310][ T9014] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 255.655922][ T9018] netlink: 132 bytes leftover after parsing attributes in process `syz.3.922'. [ 255.740289][ T9022] netlink: 'syz.0.924': attribute type 10 has an invalid length. [ 255.877315][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883854][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.927643][ T9025] syzkaller0: entered promiscuous mode [ 255.942616][ T9025] syzkaller0: entered allmulticast mode [ 256.301768][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 256.681347][ T9043] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 258.010031][ T9043] netlink: 'syz.1.930': attribute type 29 has an invalid length. [ 258.018795][ T9048] netlink: 'syz.3.931': attribute type 2 has an invalid length. [ 258.183686][ T9059] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 258.245691][ T9059] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 258.256205][ T9061] netlink: 'syz.1.934': attribute type 11 has an invalid length. [ 258.295202][ T9061] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.934'. [ 258.844090][ T9072] netlink: 763 bytes leftover after parsing attributes in process `syz.1.938'. [ 259.156187][ T9081] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.940'. [ 260.015656][ T9091] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 260.964323][ T9093] netlink: 'syz.0.943': attribute type 10 has an invalid length. [ 261.010555][ T9100] netlink: 'syz.2.944': attribute type 2 has an invalid length. [ 261.095412][ T9109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.946'. [ 261.193181][ T9116] netlink: 'syz.2.948': attribute type 27 has an invalid length. [ 261.946394][ T9147] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 261.959644][ T9147] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 261.976735][ T9147] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 261.989765][ T9147] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 262.002075][ T9147] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 262.135162][ T9147] netlink: 'syz.2.958': attribute type 29 has an invalid length. [ 262.257647][ T9151] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.960'. [ 262.392604][ T9158] netlink: 148 bytes leftover after parsing attributes in process `syz.2.961'. [ 262.513482][ T9157] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 262.646395][ T9169] netlink: 164 bytes leftover after parsing attributes in process `syz.2.965'. [ 262.662255][ T9166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.964'. [ 263.525329][ T9180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.969'. [ 264.001505][ T9207] tun0: tun_chr_ioctl cmd 2147767507 [ 264.214076][ T9215] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.978'. [ 264.432095][ T9215] netlink: 164 bytes leftover after parsing attributes in process `syz.3.978'. [ 264.533892][ T9230] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.982'. [ 264.966344][ T9251] netlink: 128 bytes leftover after parsing attributes in process `syz.2.987'. [ 264.977060][ T9250] netlink: 128 bytes leftover after parsing attributes in process `syz.2.987'. [ 266.084612][ T9282] validate_nla: 6 callbacks suppressed [ 266.084628][ T9282] netlink: 'syz.0.996': attribute type 3 has an invalid length. [ 266.194386][ T5786] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 266.194467][ T5786] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 266.263360][ T9282] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.996'. [ 266.346006][ T9282] netlink: 164 bytes leftover after parsing attributes in process `syz.0.996'. [ 269.586555][ T9301] syzkaller0: entered allmulticast mode [ 269.901683][ T9313] syzkaller0: left allmulticast mode [ 270.654957][ T9321] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1008'. [ 271.012946][ T9327] can: request_module (can-proto-0) failed. [ 271.416695][ T9327] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 271.541359][ T9327] team0: Device vxcan0 is of different type [ 272.503593][ T9358] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 272.550500][ T9358] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1016'. [ 273.045632][ T9363] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 273.133174][ T9363] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 273.218716][ T9363] netlink: 'syz.1.1019': attribute type 29 has an invalid length. [ 273.881057][ T9386] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1027'. [ 273.915240][ T9386] netlink: zone id is out of range [ 273.930691][ T9386] netlink: zone id is out of range [ 273.936451][ T9386] netlink: zone id is out of range [ 273.964502][ T9386] netlink: zone id is out of range [ 273.970208][ T9386] netlink: zone id is out of range [ 273.980036][ T9386] netlink: zone id is out of range [ 273.987120][ T9386] netlink: zone id is out of range [ 273.992768][ T9386] netlink: zone id is out of range [ 273.999471][ T9386] netlink: zone id is out of range [ 274.048713][ T9386] netlink: zone id is out of range [ 274.114738][ T9388] netlink: 'syz.2.1027': attribute type 10 has an invalid length. [ 274.518809][ T9388] team0: Port device macvlan0 added [ 274.873526][ T9398] vlan1: entered promiscuous mode [ 274.893519][ T9398] vlan1: entered allmulticast mode [ 275.079360][ T5786] Bluetooth: hci2: Malformed LE Event: 0x02 [ 275.089958][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 275.455492][ T9417] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1036'. [ 275.743759][ T9421] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1039'. [ 276.340686][ T9451] netlink: 'syz.2.1045': attribute type 10 has an invalid length. [ 276.362763][ T9453] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1047'. [ 276.391092][ T9453] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 277.015827][ T9453] netlink: 'syz.0.1047': attribute type 29 has an invalid length. [ 277.489507][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1054'. [ 277.501387][ T9475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1054'. [ 277.518689][ T9475] netlink: 'syz.1.1054': attribute type 11 has an invalid length. [ 277.528239][ T9475] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1054'. [ 277.561462][ T9475] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 277.753218][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 278.075850][ T9498] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1062'. [ 278.243008][ T9500] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1063'. [ 278.563876][ T9508] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 278.582601][ T9508] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1065'. [ 278.659761][ T9508] batman_adv: batadv0: Adding interface: veth0_vlan [ 278.678745][ T9508] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.716922][ T9508] batman_adv: batadv0: Interface activated: veth0_vlan [ 278.868894][ T9514] netlink: 'syz.3.1068': attribute type 4 has an invalid length. [ 279.609559][ T9549] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1076'. [ 280.990173][ T9584] __nla_validate_parse: 2 callbacks suppressed [ 280.990200][ T9584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1088'. [ 281.136699][ T9590] veth1_macvtap: left promiscuous mode [ 281.197231][ T9590] veth1_macvtap: entered promiscuous mode [ 281.213706][ T9590] macsec0: entered promiscuous mode [ 281.229596][ T9590] macsec0: entered allmulticast mode [ 281.251736][ T9590] veth1_macvtap: entered allmulticast mode [ 281.648451][ T9608] netlink: 'syz.1.1094': attribute type 2 has an invalid length. [ 281.994406][ T9619] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 282.005626][ T9619] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 282.375189][ T9635] pim6reg1: entered promiscuous mode [ 282.380604][ T9635] pim6reg1: entered allmulticast mode [ 282.974908][ T9655] netlink: 'syz.3.1108': attribute type 21 has an invalid length. [ 282.999991][ T9655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1108'. [ 283.023311][ T9656] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1107'. [ 283.047319][ T9656] net_ratelimit: 218 callbacks suppressed [ 283.047336][ T9656] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 283.093791][ T9655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1108'. [ 283.213774][ T9656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 283.243545][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 283.263895][ T9656] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1107'. [ 283.305828][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 283.321043][ T9656] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1107'. [ 284.061601][ T9685] netlink: 'syz.1.1117': attribute type 19 has an invalid length. [ 284.083160][ T9685] netlink: 13664 bytes leftover after parsing attributes in process `syz.1.1117'. [ 284.412884][ T9692] tap0: tun_chr_ioctl cmd 1074025677 [ 284.419079][ T9692] tap0: linktype set to 778 [ 284.438163][ T9693] tap0: tun_chr_ioctl cmd 2147767511 [ 285.567723][ T9714] netlink: 'syz.2.1125': attribute type 29 has an invalid length. [ 285.607775][ T9714] netlink: 'syz.2.1125': attribute type 29 has an invalid length. [ 285.641307][ T9719] netlink: 'syz.2.1125': attribute type 29 has an invalid length. [ 285.680721][ T9720] veth1_macvtap: left promiscuous mode [ 285.777447][ T9720] veth1_macvtap: entered promiscuous mode [ 285.792933][ T9720] macsec0: entered promiscuous mode [ 285.813002][ T9720] macsec0: entered allmulticast mode [ 285.819048][ T9720] veth1_macvtap: entered allmulticast mode [ 285.934441][ T9724] netlink: 'syz.2.1129': attribute type 10 has an invalid length. [ 285.977713][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.019449][ T9724] bridge_slave_1: left allmulticast mode [ 286.028407][ T9724] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.798010][ T9757] veth1_macvtap: left promiscuous mode [ 286.873576][ T9757] veth1_macvtap: entered promiscuous mode [ 286.882323][ T9757] macsec0: entered promiscuous mode [ 286.894034][ T9757] macsec0: entered allmulticast mode [ 286.899380][ T9757] veth1_macvtap: entered allmulticast mode [ 287.168584][ T9773] netlink: 'syz.2.1143': attribute type 1 has an invalid length. [ 287.184804][ T9773] netlink: 'syz.2.1143': attribute type 2 has an invalid length. [ 287.203012][ T9773] __nla_validate_parse: 1 callbacks suppressed [ 287.203026][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1143'. [ 288.071933][ T9802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1152'. [ 290.457736][ T9836] netlink: 'syz.2.1160': attribute type 10 has an invalid length. [ 290.546760][ T9836] team0: Device ipvlan1 failed to register rx_handler [ 290.570542][ T9830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1159'. [ 291.334719][ T9851] netlink: 'syz.0.1165': attribute type 4 has an invalid length. [ 291.705931][ T9872] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 291.734700][ T9872] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1172'. [ 292.787312][ T9903] netlink: 'syz.0.1181': attribute type 2 has an invalid length. [ 292.852725][ T9903] netlink: 'syz.0.1181': attribute type 8 has an invalid length. [ 292.861772][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1181'. [ 293.699230][ T9922] netlink: 'syz.3.1186': attribute type 4 has an invalid length. [ 293.904334][ T9922] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1186'. [ 294.813192][ T9949] netlink: 'syz.0.1192': attribute type 28 has an invalid length. [ 295.327020][ T9966] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 295.365463][ T9965] netlink: 'syz.0.1198': attribute type 39 has an invalid length. [ 295.626807][ T9975] netlink: 'syz.3.1200': attribute type 3 has an invalid length. [ 295.651006][ T9975] netlink: 'syz.3.1200': attribute type 1 has an invalid length. [ 295.682675][ T9975] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1200'. [ 295.705065][ T9975] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 296.870362][ T9991] netlink: 'syz.3.1203': attribute type 6 has an invalid length. [ 297.486886][T10013] netlink: 'syz.1.1210': attribute type 10 has an invalid length. [ 297.505661][T10013] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1210'. [ 297.517821][T10013] dummy0: entered promiscuous mode [ 297.523161][T10013] dummy0: entered allmulticast mode [ 297.542054][T10013] bridge0: port 3(dummy0) entered blocking state [ 297.552196][T10013] bridge0: port 3(dummy0) entered disabled state [ 297.567061][T10013] bridge0: port 3(dummy0) entered blocking state [ 297.573614][T10013] bridge0: port 3(dummy0) entered forwarding state [ 297.588414][T10010] netlink: 'syz.2.1209': attribute type 21 has an invalid length. [ 297.616803][T10010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1209'. [ 297.626510][T10010] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 297.747777][T10019] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1211'. [ 301.523436][T10069] delete_channel: no stack [ 301.623738][T10075] netlink: 'syz.2.1227': attribute type 19 has an invalid length. [ 301.631749][T10075] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 302.460408][T10105] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1235'. [ 302.561176][T10110] netlink: 'syz.0.1238': attribute type 9 has an invalid length. [ 302.569612][T10110] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1238'. [ 303.272289][T10137] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 303.670351][T10152] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 303.681655][T10152] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 306.513631][T10241] netlink: 'syz.0.1279': attribute type 1 has an invalid length. [ 306.534201][T10241] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1279'. [ 307.028758][T10251] syz_tun: entered allmulticast mode [ 307.712374][T10281] netlink: 'syz.0.1290': attribute type 9 has an invalid length. [ 307.780263][T10283] netlink: 'syz.2.1291': attribute type 2 has an invalid length. [ 307.794459][T10283] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1291'. [ 308.581360][T10296] netlink: 'syz.1.1295': attribute type 3 has an invalid length. [ 308.592569][T10296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1295'. [ 308.854281][T10298] netlink: 6459 bytes leftover after parsing attributes in process `syz.1.1296'. [ 310.645977][T10328] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1302'. [ 312.365273][T10371] geneve1: entered promiscuous mode [ 312.382032][T10371] geneve1: entered allmulticast mode [ 313.063280][T10384] veth0_vlan: entered allmulticast mode [ 313.240697][T10387] netlink: 'syz.3.1319': attribute type 2 has an invalid length. [ 313.252130][T10387] netlink: 'syz.3.1319': attribute type 8 has an invalid length. [ 313.265824][T10387] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1319'. [ 313.400978][T10384] veth0_vlan: left promiscuous mode [ 313.646756][T10384] veth0_vlan: entered promiscuous mode [ 314.360713][T10416] netlink: 'syz.1.1326': attribute type 3 has an invalid length. [ 314.416289][T10416] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1326'. [ 317.072749][T10471] netlink: 'syz.3.1342': attribute type 10 has an invalid length. [ 317.089590][T10471] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 317.346307][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.362789][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.586940][T10471] netlink: 'syz.3.1342': attribute type 39 has an invalid length. [ 318.134725][T10490] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1348'. [ 318.172744][T10494] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1348'. [ 318.555617][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 318.608137][T10508] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1353'. [ 319.065157][T10510] ================================================================== [ 319.073404][T10510] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 319.081265][T10510] Write of size 32 at addr ffff88805efce510 by task syz.0.1354/10510 [ 319.089363][T10510] [ 319.091719][T10510] CPU: 1 PID: 10510 Comm: syz.0.1354 Not tainted syzkaller #0 [ 319.099223][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.109327][T10510] Call Trace: [ 319.112645][T10510] [ 319.115611][T10510] dump_stack_lvl+0x18c/0x250 [ 319.120336][T10510] ? __lock_acquire+0x7d40/0x7d40 [ 319.125400][T10510] ? show_regs_print_info+0x20/0x20 [ 319.130627][T10510] ? load_image+0x420/0x420 [ 319.135158][T10510] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 319.140651][T10510] ? __virt_addr_valid+0x18c/0x540 [ 319.145784][T10510] ? __virt_addr_valid+0x469/0x540 [ 319.150924][T10510] print_report+0xa8/0x210 [ 319.155370][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.160527][T10510] kasan_report+0x117/0x150 [ 319.165074][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.170210][T10510] kasan_check_range+0x241/0x290 [ 319.175193][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.180323][T10510] __asan_memcpy+0x40/0x70 [ 319.184771][T10510] __bpf_get_stackid+0x6bf/0x900 [ 319.189731][T10510] bpf_get_stackid_pe+0x2f0/0x410 [ 319.194785][T10510] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 319.200268][T10510] bpf_overflow_handler+0x1fc/0x510 [ 319.205496][T10510] ? bpf_overflow_handler+0xde/0x510 [ 319.210802][T10510] ? tp_perf_event_destroy+0x20/0x20 [ 319.216120][T10510] ? perf_trace_preemptirq_template+0x144/0x330 [ 319.222419][T10510] ? __perf_event_account_interrupt+0x187/0x280 [ 319.228685][T10510] __perf_event_overflow+0x447/0x630 [ 319.233995][T10510] perf_swevent_event+0x319/0x570 [ 319.239041][T10510] ? perf_tp_event+0x1520/0x1520 [ 319.243996][T10510] ? trace_call_bpf+0xc3/0x6c0 [ 319.248781][T10510] ? trace_call_bpf+0x5e9/0x6c0 [ 319.253658][T10510] ___perf_sw_event+0x4a7/0x730 [ 319.258532][T10510] ? ___perf_sw_event+0x199/0x730 [ 319.263575][T10510] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 319.270022][T10510] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.276204][T10510] ? lockdep_hardirqs_on+0x98/0x150 [ 319.281422][T10510] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.287598][T10510] __perf_sw_event+0x139/0x270 [ 319.292409][T10510] do_user_addr_fault+0x123e/0x12c0 [ 319.297641][T10510] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 319.303670][T10510] ? rcu_is_watching+0x15/0xb0 [ 319.308480][T10510] exc_page_fault+0x64/0x100 [ 319.313113][T10510] asm_exc_page_fault+0x26/0x30 [ 319.318023][T10510] RIP: 0033:0x7ffffcde7a21 [ 319.322463][T10510] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 319.342124][T10510] RSP: 002b:00007f875ec90ff0 EFLAGS: 00010203 [ 319.348221][T10510] RAX: 0001bba8381f85c6 RBX: 00007ffffcde30b0 RCX: 0000000000000018 [ 319.356213][T10510] RDX: 0000000001f2db1a RSI: 00007f875ec910b0 RDI: 7fffffffffffffff [ 319.364208][T10510] RBP: 00007f875ec91030 R08: 000000000000013f R09: 0000000000745d1e [ 319.372206][T10510] R10: 000000a554d3c999 R11: 000000000000f38e R12: 0000000000000010 [ 319.380208][T10510] R13: 00007f875e016038 R14: 00007ffffcde3080 R15: 000000000000f38e [ 319.388215][T10510] [ 319.391250][T10510] [ 319.393590][T10510] Allocated by task 10510: [ 319.398021][T10510] kasan_set_track+0x4e/0x70 [ 319.402639][T10510] __kasan_kmalloc+0x8f/0xa0 [ 319.407248][T10510] __kmalloc_node+0xb4/0x230 [ 319.411868][T10510] bpf_map_area_alloc+0x5e/0x110 [ 319.416830][T10510] prealloc_elems_and_freelist+0x86/0x1c0 [ 319.422578][T10510] stack_map_alloc+0x33a/0x4c0 [ 319.427378][T10510] map_create+0x877/0x12f0 [ 319.431809][T10510] __sys_bpf+0x651/0x890 [ 319.436076][T10510] __x64_sys_bpf+0x7c/0x90 [ 319.440529][T10510] do_syscall_64+0x55/0xb0 [ 319.444964][T10510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.450869][T10510] [ 319.453197][T10510] The buggy address belongs to the object at ffff88805efce500 [ 319.453197][T10510] which belongs to the cache kmalloc-cg-64 of size 64 [ 319.467384][T10510] The buggy address is located 16 bytes inside of [ 319.467384][T10510] allocated 40-byte region [ffff88805efce500, ffff88805efce528) [ 319.481391][T10510] [ 319.483740][T10510] The buggy address belongs to the physical page: [ 319.490174][T10510] page:ffffea00017bf380 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805efcef00 pfn:0x5efce [ 319.501650][T10510] memcg:ffff88807d6f1001 [ 319.505907][T10510] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 319.513467][T10510] page_type: 0xffffffff() [ 319.517839][T10510] raw: 00fff00000000800 ffff888017c4da00 ffffea0000936700 0000000000000004 [ 319.526448][T10510] raw: ffff88805efcef00 000000008020001f 00000001ffffffff ffff88807d6f1001 [ 319.535048][T10510] page dumped because: kasan: bad access detected [ 319.541495][T10510] page_owner tracks the page as allocated [ 319.547242][T10510] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5773, tgid 5773 (syz-executor), ts 264589669839, free_ts 264589210135 [ 319.565677][T10510] post_alloc_hook+0x1c1/0x200 [ 319.570475][T10510] get_page_from_freelist+0x1951/0x19e0 [ 319.576047][T10510] __alloc_pages+0x1f0/0x460 [ 319.580672][T10510] alloc_slab_page+0x5d/0x160 [ 319.585360][T10510] new_slab+0x87/0x2d0 [ 319.589453][T10510] ___slab_alloc+0xc5d/0x12f0 [ 319.594163][T10510] __kmem_cache_alloc_node+0x19e/0x250 [ 319.599648][T10510] kmalloc_trace+0x2a/0xe0 [ 319.604086][T10510] alloc_fdtable+0xca/0x2c0 [ 319.608611][T10510] dup_fd+0x786/0xa50 [ 319.612611][T10510] copy_files+0xc3/0x120 [ 319.616867][T10510] copy_process+0x15ab/0x3dc0 [ 319.621558][T10510] kernel_clone+0x24b/0x8a0 [ 319.626083][T10510] __x64_sys_clone+0x1b7/0x230 [ 319.630866][T10510] do_syscall_64+0x55/0xb0 [ 319.635299][T10510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.641207][T10510] page last free stack trace: [ 319.645888][T10510] free_unref_page_prepare+0x7b2/0x8c0 [ 319.651369][T10510] free_unref_page+0x32/0x2e0 [ 319.656112][T10510] vfree+0x1a6/0x320 [ 319.660029][T10510] __do_replace+0x858/0x990 [ 319.664569][T10510] do_ip6t_set_ctl+0xb48/0xe10 [ 319.669362][T10510] nf_setsockopt+0x263/0x280 [ 319.673968][T10510] do_sock_setsockopt+0x175/0x1a0 [ 319.679004][T10510] __x64_sys_setsockopt+0x182/0x200 [ 319.684212][T10510] do_syscall_64+0x55/0xb0 [ 319.688643][T10510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 319.694566][T10510] [ 319.696905][T10510] Memory state around the buggy address: [ 319.702548][T10510] ffff88805efce400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 319.710626][T10510] ffff88805efce480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 319.718700][T10510] >ffff88805efce500: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 319.726775][T10510] ^ [ 319.732159][T10510] ffff88805efce580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 319.740261][T10510] ffff88805efce600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 319.748336][T10510] ================================================================== [ 319.756463][T10510] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 319.763747][T10510] CPU: 1 PID: 10510 Comm: syz.0.1354 Not tainted syzkaller #0 [ 319.771223][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.781294][T10510] Call Trace: [ 319.784585][T10510] [ 319.787531][T10510] dump_stack_lvl+0x18c/0x250 [ 319.792250][T10510] ? show_regs_print_info+0x20/0x20 [ 319.797470][T10510] ? load_image+0x420/0x420 [ 319.801998][T10510] panic+0x2dc/0x730 [ 319.805912][T10510] ? __lock_acquire+0x7d40/0x7d40 [ 319.810969][T10510] ? bpf_jit_dump+0xd0/0xd0 [ 319.815485][T10510] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 319.821393][T10510] ? _raw_spin_unlock+0x40/0x40 [ 319.826260][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.831382][T10510] check_panic_on_warn+0x84/0xa0 [ 319.836339][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.841473][T10510] end_report+0x6f/0x130 [ 319.845735][T10510] kasan_report+0x128/0x150 [ 319.850255][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.855393][T10510] kasan_check_range+0x241/0x290 [ 319.860360][T10510] ? __bpf_get_stackid+0x6bf/0x900 [ 319.865486][T10510] __asan_memcpy+0x40/0x70 [ 319.869934][T10510] __bpf_get_stackid+0x6bf/0x900 [ 319.874894][T10510] bpf_get_stackid_pe+0x2f0/0x410 [ 319.879952][T10510] bpf_prog_63958b2bb0b64835+0x33/0x48 [ 319.885432][T10510] bpf_overflow_handler+0x1fc/0x510 [ 319.890658][T10510] ? bpf_overflow_handler+0xde/0x510 [ 319.896002][T10510] ? tp_perf_event_destroy+0x20/0x20 [ 319.901327][T10510] ? perf_trace_preemptirq_template+0x144/0x330 [ 319.907594][T10510] ? __perf_event_account_interrupt+0x187/0x280 [ 319.913868][T10510] __perf_event_overflow+0x447/0x630 [ 319.919194][T10510] perf_swevent_event+0x319/0x570 [ 319.924243][T10510] ? perf_tp_event+0x1520/0x1520 [ 319.929205][T10510] ? trace_call_bpf+0xc3/0x6c0 [ 319.934008][T10510] ? trace_call_bpf+0x5e9/0x6c0 [ 319.938896][T10510] ___perf_sw_event+0x4a7/0x730 [ 319.943771][T10510] ? ___perf_sw_event+0x199/0x730 [ 319.948817][T10510] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 319.955263][T10510] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.961437][T10510] ? lockdep_hardirqs_on+0x98/0x150 [ 319.966659][T10510] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.972867][T10510] __perf_sw_event+0x139/0x270 [ 319.977655][T10510] do_user_addr_fault+0x123e/0x12c0 [ 319.982872][T10510] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 319.988874][T10510] ? rcu_is_watching+0x15/0xb0 [ 319.993660][T10510] exc_page_fault+0x64/0x100 [ 319.998277][T10510] asm_exc_page_fault+0x26/0x30 [ 320.003177][T10510] RIP: 0033:0x7ffffcde7a21 [ 320.007615][T10510] Code: 48 89 c2 eb a7 4c 29 d2 48 0f ba e2 3e 0f 82 ad 00 00 00 48 bf ff ff ff ff ff ff ff 7f 48 21 fa 49 0f af d1 48 01 c2 48 d3 ea <48> 89 55 c0 31 c0 48 81 fa 00 ca 9a 3b 72 1c 31 c9 48 81 c2 00 36 [ 320.027235][T10510] RSP: 002b:00007f875ec90ff0 EFLAGS: 00010203 [ 320.033319][T10510] RAX: 0001bba8381f85c6 RBX: 00007ffffcde30b0 RCX: 0000000000000018 [ 320.041321][T10510] RDX: 0000000001f2db1a RSI: 00007f875ec910b0 RDI: 7fffffffffffffff [ 320.049310][T10510] RBP: 00007f875ec91030 R08: 000000000000013f R09: 0000000000745d1e [ 320.057474][T10510] R10: 000000a554d3c999 R11: 000000000000f38e R12: 0000000000000010 [ 320.065460][T10510] R13: 00007f875e016038 R14: 00007ffffcde3080 R15: 000000000000f38e [ 320.073459][T10510] [ 320.077082][T10510] Kernel Offset: disabled [ 320.081415][T10510] Rebooting in 86400 seconds..