last executing test programs: 20.58408895s ago: executing program 3 (id=2991): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xec, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x1b, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x5c}, {}, {}, [@map_idx_val={0x18, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x99}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)='GPL\x00', 0xbbd2, 0xc7, &(0x7f00000004c0)=""/199, 0x40f00, 0x22, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x3, 0x93, 0x10000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r2, r2, r2, r2], 0x0, 0x10, 0x8}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r0}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r2, 0x2, 0x0, 0x1e, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000900)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@map, r3, 0x3e, 0x0, r4, @void, @value=r7, @void, @void, r6}, 0x20) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000002180)={&(0x7f0000000940)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)="2d15cb475e57f2d335ec7a7ce40ac8ee9203630eccbdb54a4a821f740b38f7765db426ade9270993e0c37d7a60516a5138a4ba1cba31c1a4c3caf8ce0770730178231f740c102223f95e4d89dc5bfcecbeb845b95a3afb1cf1f80d7a5b493f81a7cbc54c632b4f215ab02678e10dfafdeb8f5fffa57d135481c12329fc7d49213b7a79186fc30396e78dcc8ed123ec97b9314cb3ca57b77b05ec72c0a66266698ddab6fe170d19f08f1bb25cf66f1c9924aba71cdfeecca80fef08c772971806aa", 0xc1}, {&(0x7f0000000ac0)="c5f52b7b417f7a86a584f260d29dd444b0f14993545fb7463d360154877a7e7efd607c837e66e72f15c35af52465be8b040176f7eda529ba0a553790562a14e0da57e75864268d739ded34aad7249ec7068a93cb30e3f9273795e42a933e3d8d1ab31fd7279448b01b089826636aaeb719902d102ce741c7392e6c0cd138f1cb8de82e8e5d857d3532827a6a9270442241249e6042bc6a313503df26ef200939337f2820dc8a37cc23095d56a1820c0897c9f3a7aa70961c16314936f411b25455c454489700219265d60b31fd7769", 0xcf}], 0x2, &(0x7f0000000c00)=[{0x50, 0x10e, 0x400, "e8495dfe2d5c66404016bcaef5337afad55c22d90e9cd856221d4757bf5581d47109347c6a7e4f686088db11bf2c6f44c9311e8ac5cb600519b52a6654"}, {0xd8, 0x11, 0xeb2a, "a4f388c4e4f500d0d12ce2781ce1fd64085e78f49a3869a84d8d11bac03407dbd89c21a6a5dd71c18b6479ccad72ce969ada5bd0f01b3c483f76197da300c97205cdf5e4edfba74238d39b73d0a8c0599931fd1b1286ff56a18cbe57e5e3c7e3555dbcf9327bb48910840a3558a243a8805db8a27a33f7d34dbc394e3bfdf27129532fd6f6e8c972a2fbff43041b7fbb0ac82ff530a05dd36a28ebf76d818282daae2d6d85176818128fce2902d8d884551dec75cb802a5e63dfbe2aa79fe15ccd41f642"}, {0x10, 0x113, 0x8}, {0xe0, 0x111, 0x9, "042b4254abe4e1d3178748d1ec3f72925d052532faa7e85c39f52121ac592d94ead816fd0e0d10715c95e5941e273acd0001842aeb9f5af1a0d1fde58feb8489d9e7397b210fb07a57e367e0789755548451d93bb29de86ce79cd159b24105ea1f509fd3a0336e1f0bc139ae91a7f7bd57b4a45450ec844cf3456a7f25a92003b0362b9de4be57bc021c887eedfbca47c9ac1c741d0d693e97511ad318af9df8a7238d4c1bcc1e25be2c0dfe27b746e470e4202886b067e14a8915c0f107ebab1a4b9c42e325b97f49865db189baac"}, {0xd0, 0x111, 0x9, "56b4a5c69e90c500ab7d436af4993f2d9a69e16d1ace10f32e86c6d17dd77b2ac2ac78f6a98c40dea5be51d21f0b48de027a19a5dae31be535747849bc973528dbdb9068ec6104f8331157307210a3ba405b27b3e1a77937df772cfa4bf65acf5ac242fa5e68518aaff7b8a4e574b61479e09abee50ea2d130a78efdf681baaed34ee52fe1f8de30951005abf6671a8a71619cbab75bbb1585a57c985fc6ac4d23da74759e0296db181269f944754930e8453a51528c981f9234"}, {0xe0, 0x102, 0x8, "7a0c8508fdb4f84cba2f10e474c2dc5e7d296aa519f123e7f528ef15d968553e9ed1c48870ad922e53a64cce453158f9c5a25e7cc20bf6db1423d491d085b452167803d408ecbce3b177c5ac360a3db64aa8c61ea2ef25c3c8ad3cb960923c2e2a541d4bf121f8ef25acad72128c1e1bf2a9cf44f925795c9a4f00787e5f4d84cdc5db8867b7f753f7ea04ba4044f4a3f8ba8a07d10c95ac4d5e866e3a6aba8b92a0d220d6c1d4fa3b4239de2774e1976e1903b186df94b7e42cad3e867449e7bdb512cd13855273dec999"}, {0x68, 0x88, 0x0, "c70bac9353a00fac930ef5e74b45942c83b38aa9d1224132b7f89caf6c02985f42fe085436151a2eced526d5dc6580580e569e57bd8e30be1bfec921cf91d6e2396696352616acb5ce751d646848bb45ed92575614"}, {0x88, 0x10a, 0x2, "2cc5fe7fb29f999138c5570119c85395a760f0b533d125f11a4e72af1d5e41b0f17d0aca4df00f16c70923ed54434feaabef0af2e2ed6b68c65fb9f4750ec4026b19a7a95706f63788d37d25069ec31ae13b089e16199886d62fe80730bdea0061f50bb21f71a45a6fe50a9234bdbb358414778a468c8b21"}, {0x1010, 0x117, 0x8, "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"}, {0x98, 0x118, 0x2, "dfc35235aa045abe503dc32e9c90407d1af3405ead7a96d22684a7e7a66b77776d11e4c0c03ebdd1e967309c9c9ea2f7ae60bdd46bbb66bf218c1f28217470401627bc0eb19acbde2fbb6290556d17e0355504abb71a4b41cee569b9aefe028578d86370d9b7866abd91262a72cdd3a4931287fd033940fb0b42c2909b32394439"}], 0x1560}, 0x44010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002240)={{r5, 0xffffffffffffffff}, &(0x7f00000021c0), &(0x7f0000002200)=r3}, 0x20) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002280)={0x0, r9}, 0x8) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000022c0)={0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002500)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x6, '\x00', r1, r7, 0x2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002600)={{r5, 0xffffffffffffffff}, &(0x7f0000002580), &(0x7f00000025c0)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x6, 0x5, &(0x7f0000002300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000002340)='syzkaller\x00', 0x2, 0xff, &(0x7f0000002380)=""/255, 0x41100, 0x66079becc32378a3, '\x00', r1, 0x25, r5, 0x8, &(0x7f0000002480)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000024c0)={0x4, 0xd, 0xa, 0x118}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002640)=[r2, r12, r9, r13, r5, r5, r11, r7, r5, 0x1], &(0x7f0000002680)=[{0x3, 0x2, 0x6, 0xa}], 0x10, 0x4, @value=r10}, 0x94) r14 = syz_clone(0x10c00, &(0x7f0000002780)="db22985b212ffd53ca3bff8fa9fc9742aae1da8a7b58536f5cfc955d34982a77f7f4f18c82cc2d20e8f5e883be021558378efb93ae6fb95a084a3b6a2a793f02df84ccb73fc289df18ebb7859fc5606b297b3f6f2baf2d502c1967977a98b8c376c0a2699fe95d70d3eeae31e2c5", 0x6e, &(0x7f0000002800), &(0x7f0000002840), &(0x7f0000002880)="0ade6a74079b922d2e4aa92afaac3ffeefdfc261e2a05022598fc701b705e50f07d51d3a1486b711a6bbbf61490aefc4b1e3a29563c97fbba08ddc1f8930aed16259999a157f362c7a8645b2872c542879c2b86103bf6a4dc2675f1a97c7adbf373969325a3b7995d7a4c3d925d7ef4784708ca73cab2aa811f425") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002940)={r14, r5, 0x0, 0x2, &(0x7f0000002900)='+\x00'}, 0x30) write$cgroup_netprio_ifpriomap(r5, &(0x7f0000002980)={'veth0_to_team', 0x32, 0x35}, 0x10) r15 = openat$cgroup_ro(r7, &(0x7f00000029c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x1f, 0x8, 0x5, 0x9, 0x40100, r2, 0x8000, '\x00', r1, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) sendmsg$sock(r7, &(0x7f0000002f00)={&(0x7f0000002a80)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @loopback}, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000002b00)}, {&(0x7f0000002b40)="d59a2b3a27122286ff07577b6bde0d344fc3c3d4a02ba808a90cf37e67b438168d4f3df2d6c9ff73b6a0f1a040b4b295bdf860e3045357a1434a50666ee4afb4151d35be6f86649df47d29f32424257e1e27c01aaa4e091b15aac194689431e5950d91b060614a2b10fe4ae85ba4ba6217a128065cea3b25365c84834104f136f57df983c0fb76c1c750e1f738e15774e20ee57870ab0f44e51a1b75986496a632b32056a75fffac0e3179170217c4dd", 0xb0}, {&(0x7f0000002c00)="368ee111e9d592e5e992f1bb3debee7e1bd7df733078168f64b2a7d6fb98430b4e9535bec24d2523abf2efefff8e6b327cbac625b1348dadbac7ca5c14abb50f229ed898d1565b18d9bf8c648a2608cd641a7f85b7d49d2c95f51d9e83526bfdf4bae2b2af631f9187293d4066cee9d8420bcda62e4e5b941fd2902dfacfef52fd5d248b67d3d138b94dffececfeef529c5d992afc641c6f2755b6691f40bd5ae1e8189758c370cae4338f4e2a14e6803fd26cf08a150ba17751de88dcff6da908e176759dc0cd2a45374b3052235bc23317b0b9725b6e26145da7b8105208d100e7fb3bae27354d109b3597247479", 0xef}, {&(0x7f0000002d00)="655c8d97438f5b9e69e29309b6fdfe1f34c6c1e9f042aff741970be3f64686a67818ddc45c3ca730e70baebc165c0a369c1167ddd724fac43298585e44879575e433561fc1a82f0b0a260f71745936721c99ec00d250c29f201d8cc41fbb111a9cf5a6167a8d9f6b8139e4dd92b35dac309004cca09710f52f1379efb7a2c3e08e81a6f04af6066c49613691ae117039725709e15be3608c07798227503d083c9fb3e5c8a7abb5160309ba", 0xab}, {&(0x7f0000002dc0)="c17a59ae67deef22c915f6673fb96cf782f30b9e97601aeb36c241c49eedd8bb216a7b7599960889082b89f5162b3c5f80d1e0e92b3db16e6afaeae0ed4b843fc6876f51fcbcabd595f90d5bcd2e88c74087", 0x52}, {&(0x7f0000002e40)="2b50297235c1b3b54c3493240ab480723859d8f8f0d04f77a19a675d5f6960d6c034d89e53b2a3afac0cfca371e29d4f", 0x30}], 0x6}, 0x8004) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002f80)={r14, r5, 0x0, 0x2, &(0x7f0000002f40)='+\x00'}, 0x30) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x1000, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000030c0)={r12, 0x58, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) write$cgroup_int(r7, &(0x7f0000003100)=0x5, 0x12) r17 = openat$cgroup_ro(r5, &(0x7f0000003140)='blkio.bfq.io_serviced\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000031c0)={0x6, &(0x7f0000003180)=[{0x2, 0x4e, 0x0, 0x5}, {0x5, 0x1, 0x6, 0x5}, {0x6, 0x8, 0x4, 0x3}, {0x5d6, 0x2, 0xf9}, {0x0, 0x2, 0x6d, 0x4}, {0x4, 0xff, 0xa4, 0xb7}]}) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@bloom_filter={0x1e, 0x0, 0x7, 0xfffffff7, 0x9cd91374a4aed91f, 0xffffffffffffffff, 0x1, '\x00', r16, r17, 0x1, 0x2, 0x2, 0x9, @value=r17}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003280)={0x2, 0x4, 0x8, 0x1, 0x80, r18, 0x6, '\x00', r1, r15, 0x5, 0x2, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(r17, 0xc008240a, &(0x7f0000003300)={0x3, 0x0, [0x0, 0x0, 0x0]}) 20.422450124s ago: executing program 3 (id=2993): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0x13c}, {&(0x7f0000000380)="e5b45403e478a2cb943ae968d43d447dcf4ef16d1daefaaa891447ea0a182d014ee1de3e97d573d0b0c51f96e85f325fd11cc30b6a493a4f832c9dc250ce3b79ec75901f30fa370c1f6b3cdce17184455d80b334c8449cf293dc0f4943c12659ac3f89e13f7a2e5485dc47b2e429e52ea9a8ba5185d2e306684c4d9c29bba79e07d32202e8985a411dcd544b1df8a7cb3bbaec120c2dc8bf09bb3dd9fb9a192f7456658d9c34dd1688e5330914478aac213d9a6aeb42d2e7b54ceebabb0216fc5fe834f0a2fb332a2baaa9f070a6c135213f6931721936b2a0659077c64bdd6135177d860e89274e5c7baafccddde39d7af1f27ac3014dded5eceee450b5d73ae2db245560e4dfff1430d9c0a24d69cca1c97b6916db35a156c641e05ae64e580c0a96eff53aebb4e5c9294ce418155ac4c934fd325b2d1f8d48f9637b2ce5d719a827a361f498477416ec279676b5274969810a9a47076f1f2ca342f7d1d0f60a483b4b9ce01301b1c381bfdf6c67271554f773d2df41e14199f43e08d0803ac0f11cc68ba59fbd709bddad162f8fc05376678db863e3b23a8d619beebf95090066abd786b501dee118a4fc541cf3199eaf433ef4ef32f0c4bf67c192b04f80200806397eb0e6b65fb88678c9b524a841a4f257523fa8dfbc177a0b25cd25562ede441a8b402c77f66d90d4190988c6ae2f1c7c4245fe655762851484bf494988b426b2e5754215b83de8006b86edc00d3391448daa2fdce19c058b787e50424652300d5364602112c335cee6db5e5006c2968658c170d375803ccc9706f7a9c5eb4ccc3a38a8e7f3e8a29fddb7a1847498b82ac6e1450e7f52238f1082a69adc9e6c66823d139caa089577803b4fa045fbb659fa968a9c16f9ae8bd70c6eb608f4928e4845b0f1a6612fdc9e3a2f525783fc860fc6f522e90e5e2d7c51a87c35e3959887f070031e7769430c7305f28ab49a741c23a794bbf162e8be7a76a058289183b92244b7cd0b724cea78dff829db5a8c0c62b64e03ad55af3371542c7b63a6daf0ad81c5ad10639704cd9860101a", 0x2f2}], 0x2, 0x0, 0x0, 0x5865}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85", 0x12}], 0x1}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r2 = socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x29, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)}, 0x20) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b28, 0x0) 19.931951006s ago: executing program 3 (id=2996): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa3c}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) socket$kcm(0x2, 0x1, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b904021d0804000000000f000aa1180015000600142603600e1208000f0000810401a80016002000014003fcff0007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x28000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e6182949a36c23d3b48df", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) 19.569456545s ago: executing program 3 (id=2999): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af8", 0xe}, {&(0x7f0000000080)}, {&(0x7f0000000340)}], 0x3}, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000000)=r3, 0x4) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000500)=@nl=@unspec, 0x80, &(0x7f0000000600)=[{&(0x7f0000000580)=""/62, 0x3e}, {0x0}], 0x2, &(0x7f0000000640)=""/48, 0x30}, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./cgroup/file0/file0\x00', r3, 0x4000, r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa21, 0x0, 0x498a, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 19.112438176s ago: executing program 3 (id=3003): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x7, 0x12) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) syz_clone(0x100, &(0x7f0000000280)="3bce9e79bf096e994aaa3865ed277c0ad3bf83a27f54cb4972c61bac577a94804e8acb8721c3eb9e3c7235c2c68bf024c5109679b85dd92d77736e3f049071adf9c0ef84dd49d6f6e726ecd733c97d777969c0943c78f3eb0d6d7dc3f605347d5297951852e5cb3561c6f55724a600ed90c8e7bc3e642d1888dae3a517a8a9f4ffd481f4aaf6b5979f417c6cc5a23cb5372cd12e1865d7d0ac31e4d302305c06fa2678bbde15af20769f55727aeed5be2fac0ab57dbd4bbaedb66d2a3b566d56ac6c59f394", 0xc5, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="087404d8eb7aec225032aa9de1958ea7ce277e2eef36233fa1f5b82752992c1ef29276c22d3737251e00aee394e24d36e1783e852c845a71cbb19c35760bb857424c8d99d6bfcb67205055f7a69ff30151bc46ee84d5893ffd230954f44dcf0654d76183ca140716f6d4b6a1fd93de32fad9ddce8a61763658181141fbbeefaf8ef7ebadf071844011f07d13eb279e4144bfb2b4caf22c1bc4c9a7812e10c377c3a5f759ad13e80bf5592c73a8b884614a3ee051a137a23b1665e9c66cda58f4b7a95f94fce4ccdd12cae0b9b543c2f01deccd9286f8e1243b5bf05b99b608571f66d7639772fff08a55611415b8ce4b2b13384c029839d8") r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x2}]}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x61]}}, &(0x7f0000000740)=""/74, 0x52, 0x4a, 0x0, 0x7, 0x10000, @value=r4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x22, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x600000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5e}}, @generic={0x4, 0x0, 0x0, 0xfff, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xd, 0x8, 0x7, 0x8, 0xffffffffffffffe6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0xfffffffa, 0x2b, &(0x7f0000000680)=""/43, 0x40f00, 0x40, '\x00', r2, 0x0, r6, 0x8, &(0x7f0000000800)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xe, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000880)=[{0x5, 0x4, 0xd, 0x9}, {0x3, 0x3, 0x10, 0xc}, {0x1, 0x1, 0xf}, {0x1, 0x2, 0x10, 0x2}], 0x10, 0x8}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r3, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000ac0)={0x0, r5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x5, 0xc, 0x0, 0x70082, 0x1, 0x10000, '\x00', r7, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc, @void, @value, @value=r8}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/66, 0x42}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f0000000c40)=""/7, 0x7}, {&(0x7f0000000c80)=""/16, 0x10}], 0x4, &(0x7f0000000d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130}, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x7, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x7, 0x10, 0x0, 0x2, 0x8000, r9, 0x4, '\x00', 0x0, r15, 0x0, 0x0, 0x4, 0x0, @value=r23}, 0x50) write$cgroup_pid(r24, &(0x7f0000000f80)=r16, 0x12) setsockopt$sock_attach_bpf(r18, 0x1, 0x32, &(0x7f0000000fc0)=r11, 0x4) openat$cgroup(r13, &(0x7f0000001000)='syz1\x00', 0x200002, 0x0) r25 = bpf$ITER_CREATE(0x21, &(0x7f0000001040)={r19}, 0x8) r26 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x5, 0x0, r19, 0x0, '\x00', r2, r12, 0x3, 0x4, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={r23, 0x20, &(0x7f0000002400)={&(0x7f0000002240)=""/214, 0xd6, 0x0, &(0x7f0000002340)=""/139, 0x8b}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002500)={0x1c, 0x15, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r26}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xb7}, @alu={0x7, 0x1, 0x0, 0x3, 0xa, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffe}, @ldst={0x1, 0x0, 0x3, 0x6, 0x7, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000011c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001200)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, r12, 0x8, &(0x7f0000002200)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r27, r22, 0x1, &(0x7f0000002480)=[r13, r12], &(0x7f00000024c0)=[{0x0, 0x4, 0xd, 0xd}], 0x10, 0x8}, 0x94) r28 = bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0x11, 0x26, &(0x7f00000025c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x8, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0xd, 0x8, 0x2, 0x9, 0x1}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @cb_func={0x18, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002700)='syzkaller\x00', 0x6a, 0x1b, &(0x7f0000002740)=""/27, 0x40f00, 0x80, '\x00', r2, @fallback=0x5, r21, 0x8, &(0x7f0000002780)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r27, r20, 0x0, &(0x7f00000027c0)=[r24, r21, r26, r12, r25], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002940)={r17, r10, 0x0, 0x4, &(0x7f0000002900)='{\xa2)\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000028c0)={@cgroup=r14, r28, 0x3d, 0x24, r24, @void, @void, @void, @value=r29}, 0x20) gettid() recvmsg$unix(r24, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002980)=""/204, 0xcc}], 0x1, &(0x7f0000002ac0)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x100) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002b80)={r1, 0x80}, 0xc) socket$kcm(0x29, 0x2, 0x0) 18.53437019s ago: executing program 3 (id=3007): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) syz_clone(0x40000080, &(0x7f0000000080)="268ac2f1ea0da3baf409af9404202772bc39db2a04f1c568cc1484061062cc2240eb1810c8693c58b3802e46d93beadb34a0b41d72443c67e4147149c65ea79fa698f48c2d7fa8afdd9d7dee15ad5fcf3d8c2011e4ececd943734edd101f7a4ccd525a950c861597ee686b51d9170e0e4cf393f24fa875db5950590bef0d23b4bacf0d5157a7eb1bc5f56de7c84a7368005153174d6d0e3cdd6329ee213a5d266677812b1247db9313a103b8d4d7559c3cbd7fc202f1890696fe7cca24559c3f64df800c98bd97924a70c932fd7057d87aa9409c6b133971543017b762b873c1897f1f", 0xe3, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)="0767265b829d3b103d2b7124012996259d1be0ba1a038a63bd5366fb633a5c22a9aad5a97635bc53095dde0a2dd96092b15238b43e5db9597595f7454cb80e190f990f64fa128b0d3410f069748fa4c1ae114ba6cb048be109f8e37a7af4e962c8bd") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000036000000d2e057c89500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe8, 0xfffffffffffffffc}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000680)={r2, &(0x7f0000000540)="9cab1398c1531bc8b36409caa4b5db5f7b0c9fd9ee47f621ff9bf3442cf63d2190b6b1a9e6416aa5c215d6213f9663d2a13881c16ae3a30bdc23e6fa1ba6c5e997ec6fbace6cd9ab422abb31ef9f66d7ba1ecde4792f6ba7d6f68a965e5f82447402957633c56f0bd329188f57f35f12a202e909777fca8412a218d253f8bd6448808130c59ed659dabdaa2610e6099ed2d8a4c8b559f3bc4dce809b41936d5b5b2b46aea3911141e3685541b720d07585534a0471"}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='GPL\x00') socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x202000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000340)={'veth1_to_batadv\x00', @multicast}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 9.840211991s ago: executing program 2 (id=3037): socket$kcm(0xa, 0x1, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000012020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001a00000085000000c800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeee}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000070000000700040000a000000040000000500008427000000100000000100000008000000000000000002000000090000000e00000000000000070000000000000000000003000000000400000002000000ea5900000a00000000000011020000000400000000612e5f0061006100"/135], &(0x7f00000005c0)=""/76, 0x92, 0x4c, 0x1, 0x8, 0x10000}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r6], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000004000000050000000700000080000000", @ANYRES32=r5, @ANYBLOB="0500000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="050000000200000004000000feffffffffffffff0000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e000000050000000000000025000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="980000000000000000000000000000da9e594f0e0a26e8fbff7f00"/41], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0094072844e235a2402f43acb2f0e2304e90f659aa0b610543898b71"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 9.564651638s ago: executing program 2 (id=3039): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001240)={&(0x7f0000000f80)="738387c0bdd4aace60e54dab0b6f0f87b2c51ce466e6bbae5766f6285dd5edfdebbe8de112bf8f041f2d2e9b24d570afe17ee959fff02e76fd92947f3bdc1fb141d4c8295c77a06e81644fb8178f2414d6448f30de7e5da3172c27d2c7a5d47137076a803709305d75a32a96c20281806c17829f2501aed9da1a2bbd1c5ca62566b5a54bfba4f2e98ee9a8e1b3d95727bd03027ff15a05beaf0d5dc06f0ddefa38876d83c6e1e2112db4aca9e14b99c86e2bf6377159973639cc14be4810935528494e23e2108dc3d6f66426dc5b3e", &(0x7f0000001080)=""/77, &(0x7f0000001100)="0f6062c0bad2a2729a1563667361f3cf0a54696712ad24de4cc9656e95d18d259290a1c7ccf10ecbb382081f30dd506357fdeb2f2a31e2a35fedb8408d7efeca85cb0af33180240a81c66790649b5fd682e350622b41ebba72961eb74ca50cab922bb102045df9fdb9bdf98131f461", &(0x7f0000001180)="2f34506ef3749143d35eb74bfc2ebb1aa540ba2553621267c607a23dbef44ec8bed929a0c1b20d0675c7657363954bcd454d7625e403041592d457acfd0560cb763050588cfc9a82aa6d0a865c589bc58504670f7e247b123ef039703d6c50ef91321591f7f674a3d9a9e1d85a9d26d0352910f2d6eb261192a232f50d9136321a885f4369d2da05a8c4a4206478d40957dfbcb9d1e0f53098e889504c5d054b60df56f533b8fc6eefa8c3143fede6ec92b8e3ec69", 0x2, r3, 0x4}, 0x38) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x1, 0x800, 0x9, 0x6722c, r11, 0x1, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r2}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x11, &(0x7f0000000300)=@raw=[@alu={0x4, 0x0, 0x6, 0x3, 0xb, 0xfffffffffffffffe, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0x1, 0x5, 0x60, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x7, 0xa7, &(0x7f0000000500)=""/167, 0x0, 0x5, '\x00', r4, @fallback, r5, 0x8, &(0x7f00000007c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000e00)=[r8, 0xffffffffffffffff, 0x1, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000e40)=[{0x1, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x6, 0x2}, {0x2, 0x4, 0x1}, {0x2, 0x4, 0x9, 0x1}, {0x4, 0x5, 0xb, 0x7}, {0x4, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.360214233s ago: executing program 4 (id=3040): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47f82000000adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727afbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a74dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7421e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f309eb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d000000007a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc38311f0918707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b5420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b3368210686dab3a6be8b8d4bd9347c83cb693aebab072fe479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf3800"/1071], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0x93}]}) (async) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xa42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x4920, 0x1, 0x0, 0x3, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) (async) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xc, 0xe, &(0x7f00000033c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) (async) r7 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) (rerun: 64) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r7, 0x4) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'team_slave_0\x00', 0xc00}) (async) recvmsg$kcm(r7, &(0x7f0000000440)={&(0x7f00000001c0)=@alg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000240)=""/186, 0xba}, {&(0x7f0000000540)=""/167, 0xa7}, {&(0x7f0000000940)=""/59, 0x3b}, {&(0x7f0000000400)=""/37, 0x25}, {&(0x7f0000001b40)=""/4111, 0x100f}, {&(0x7f0000001680)=""/119, 0x77}, {&(0x7f0000001700)=""/234, 0xea}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f0000000780)=""/20, 0x14}, {&(0x7f0000001940)=""/11, 0xb}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000680)=""/140, 0x8c}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000001840)=""/196, 0xc4}, {&(0x7f00000007c0)=""/73, 0x49}], 0xf, &(0x7f0000000980)=""/169, 0xa9}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x1f4, 0x16, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (rerun: 32) 7.168340636s ago: executing program 2 (id=3042): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x10880, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x40a1, 0x0, 0x3, 0x1, 0x7, 0x1913e8d1, 0x8, 0x0, 0x1, 0x0, 0x81}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) (async) r0 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x10880, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x40a1, 0x0, 0x3, 0x1, 0x7, 0x1913e8d1, 0x8, 0x0, 0x1, 0x0, 0x81}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) socket$kcm(0x29, 0x5, 0x0) (async) r2 = socket$kcm(0x29, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r3, r4}) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x4, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="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", 0xfa}], 0x1, &(0x7f00000003c0)=[{0x90, 0x119, 0x9, "7416957c4fc41037eb61cabb0b490b0f6da4cd738652658e34279a3547e338eca20851c5df2e1f26f2ccd1171df2a9d1bc9fa73a03f48462f271f10484f2eac8894b48e32c73ca10a5ee721e40081e20df82bd4b5ec53999f1dcde5ca5fbb064ba842ad95eae40249065d708a25eaa9478b91e941cf57dcceb86"}], 0x90}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x4, {0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="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", 0xfa}], 0x1, &(0x7f00000003c0)=[{0x90, 0x119, 0x9, "7416957c4fc41037eb61cabb0b490b0f6da4cd738652658e34279a3547e338eca20851c5df2e1f26f2ccd1171df2a9d1bc9fa73a03f48462f271f10484f2eac8894b48e32c73ca10a5ee721e40081e20df82bd4b5ec53999f1dcde5ca5fbb064ba842ad95eae40249065d708a25eaa9478b91e941cf57dcceb86"}], 0x90}, 0x0) socketpair(0x29, 0x6, 0x9, &(0x7f00000004c0)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8c40, 0x0) sendmsg$kcm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="ce8a5db55da2fadf5c72cee82b93dc7e9be2f8b008236b73cde530d516084789051d030146221a4f5fe205512961254e72aea7b1244ea49de1414ec32bcdd51eda4c6bcd55dec22662db5b25bf11722d8578acc64e6b9738ece118f7616c97370060e0f2e394089ab49ca59e5ffae9da77844a7b194384fde40a1430070815408b2f2e627a3e817df12599381779f64c26549818343b3c525c98dee74e21d23adedd674cdf6f1768eafaf5165c71173a2a177a3c6609147bba24a9", 0xbb}, {&(0x7f0000000600)="24f09203e7ca15b3081c4dd04b0fe22788d2b97dd8658ffdf727ea", 0x1b}, {&(0x7f0000000640)="65f2c9bfcdb915189ca708a70657f28c2fe7a0e3b9a02f25d0e3d5de9b375abd718da1c02be944e86c0ae727fd7b59d2533d26ff65", 0x35}, {&(0x7f0000000680)="e6587bce8b3f8b95b6bad70f2e49fbf9106c1192803dfc00c68078ce4eee66eb496ef59a8205ef03b8f1ac88205097c4269f04b43c", 0x35}, {&(0x7f00000006c0)="3aae489f9c37ac0c565b27ae7b4d70d5990f8a5b51655d84334adfb67d7fc0af8a1571ef417c0248c7", 0x29}, {&(0x7f0000000700)="768d69675ff495d3544f5d5f466981fb9393343ff0e382eca5e9d90b962d8669ce6c9aafcd93c8ba5d5e3ffae3ef46855e6b0682b5c1a7259f6d128fe714b6fba0d79cfe682250455a5109460e7d2607248be1488f2c1f1975f4f658bc1938fb07165a9657c654fb9dc922c7d7ae3dff460a6e58f3b1518ff967abf1f6f94c03576b1277b608464f24de3095fcd986348930af13db06a9963ef8d5cb76fa6f5f4a0820bb3d9d900e81fb661bef77c3c946b677988bbf48e22390fe6b2b051cd35028a16484fda41978d611140c033d4da04eced15110044d08b283", 0xdb}], 0x6}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000008c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0x3d, 0x33, &(0x7f0000000900)="491565a89fbdad9bad55d6b7d29e760c457d486be1ccf4bd7cdf93c884430781fb0082adea07633ce2565f0cc6025c3810b62fe95953e84429915ac03f", &(0x7f0000000940)=""/51, 0x5, 0x0, 0x32, 0xf, &(0x7f0000000980)="67776268ef4cf9a885805ff624f0af6b974575fcf851fcc8caa4cc238a927a0b1239bce851a46cab48a35770963d962921a0", &(0x7f00000009c0)="4e127a4f35e256021401999824f2bc", 0x1, 0x0, 0x3}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x1d, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6afe, 0x0, 0x0, 0x0, 0x72c}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x6, 0x1, 0xb, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x7, 0xed, &(0x7f0000000c00)=""/237, 0x100, 0x2a, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000d00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0xa, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000d80)=[r4, r4, r4, r0, r4, r4], &(0x7f0000000dc0)=[{0x5, 0x5, 0xd, 0x3}, {0x5, 0x1, 0x5, 0x4}, {0x0, 0x1, 0xd, 0xc}, {0x4, 0x4, 0xc, 0x7}, {0x0, 0x5, 0xb, 0x2}, {0x1, 0x4, 0x6, 0x6}, {0x5, 0x3, 0xcf3, 0x9}], 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000f00)=@generic={&(0x7f0000000a80)='./file0\x00', r6}, 0x18) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000f40)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000f40)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) syz_clone(0x24002800, &(0x7f0000000f80)="0796f478cb700cfd74158b4f83a1488498423b8c00dd418f936ebc8fd02bb38822cd4b39f96110880115bd9be19bc020fb3bbedbb11142f604244ca5ee7e0aab84f0a5790e50d931d28cadf59636500faaa13a1d02daa25882db0a0fbf6f9d20d53de73d442434", 0x67, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="989101b4b70fe49a9d0774ad0daa2bf78505ebd34d826818d2be2bb4bee3f608b6a3d911b7c31b5d4857f85903c0c058801faccd3316aa07dcc578b9f863b1ca20275fab274579df63ca2e4706e1c75452f77e8a59d7f757a7a928b5e0129fefc9f129d3dd640123540d5f0a3cbbb1698895858fa736236f1aea6898ebc00c3fcc649cd8d4c7fc86b4dad96dc4ad3e58dca94fc13ca08e53805bf5d8d9cd0956f7dc70132e28fd5585f730b3f0f7d525e8ce57757ca2f55989cf5fdd180545a2217a499e6f712c36eea1dc4a8e84bf76a03264007857103b0014c74b8aa172bb4a6de605f31db15203139005accecacc71a4b6f7a5d19b") (async) r7 = syz_clone(0x24002800, &(0x7f0000000f80)="0796f478cb700cfd74158b4f83a1488498423b8c00dd418f936ebc8fd02bb38822cd4b39f96110880115bd9be19bc020fb3bbedbb11142f604244ca5ee7e0aab84f0a5790e50d931d28cadf59636500faaa13a1d02daa25882db0a0fbf6f9d20d53de73d442434", 0x67, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="989101b4b70fe49a9d0774ad0daa2bf78505ebd34d826818d2be2bb4bee3f608b6a3d911b7c31b5d4857f85903c0c058801faccd3316aa07dcc578b9f863b1ca20275fab274579df63ca2e4706e1c75452f77e8a59d7f757a7a928b5e0129fefc9f129d3dd640123540d5f0a3cbbb1698895858fa736236f1aea6898ebc00c3fcc649cd8d4c7fc86b4dad96dc4ad3e58dca94fc13ca08e53805bf5d8d9cd0956f7dc70132e28fd5585f730b3f0f7d525e8ce57757ca2f55989cf5fdd180545a2217a499e6f712c36eea1dc4a8e84bf76a03264007857103b0014c74b8aa172bb4a6de605f31db15203139005accecacc71a4b6f7a5d19b") write$cgroup_pid(r4, &(0x7f0000001180)=r7, 0x12) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000011c0)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001200)={'vcan0\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001200)={'vcan0\x00', @remote}) write$cgroup_type(r4, &(0x7f0000001240), 0x9) (async) write$cgroup_type(r4, &(0x7f0000001240), 0x9) syz_open_procfs$namespace(r7, &(0x7f0000001280)='ns/net\x00') (async) syz_open_procfs$namespace(r7, &(0x7f0000001280)='ns/net\x00') ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000012c0)={r2}, 0x8) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000001340)={0x7, &(0x7f0000001300)=[{0x2, 0x0, 0x81, 0x101}, {0xf9, 0x40, 0x8, 0x5}, {0x1, 0x7f, 0x7c, 0x7}, {0x5, 0x8, 0x94, 0xf}, {0x2, 0x7f, 0x2, 0x9}, {0x80, 0x78, 0x98, 0x1}, {0x400, 0xe, 0x25, 0xa0}]}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000001340)={0x7, &(0x7f0000001300)=[{0x2, 0x0, 0x81, 0x101}, {0xf9, 0x40, 0x8, 0x5}, {0x1, 0x7f, 0x7c, 0x7}, {0x5, 0x8, 0x94, 0xf}, {0x2, 0x7f, 0x2, 0x9}, {0x80, 0x78, 0x98, 0x1}, {0x400, 0xe, 0x25, 0xa0}]}) gettid() perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0x7, 0x3, 0x10, 0x0, 0xff, 0xc0d0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xec8, 0x1dc}, 0x122008, 0x80, 0x5, 0x0, 0x2, 0x7fffffff, 0x4, 0x0, 0x5, 0x0, 0x1}, r7, 0xa, r8, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000001400)={r4, r4}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001500)={r4, &(0x7f0000001440)="31404836471ec342f821e0dc6ac57609183faa5e244591e3a6d7fb298311826b93865497b23a67ed1a322d6f3201de6cf030fc97e4ae45b0229b15039b94ca3fec7abd78d330cee355e592cc32dcf7019b05161e43de", &(0x7f00000014c0)=""/31, 0x4}, 0x20) 7.166961286s ago: executing program 4 (id=3043): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000006a4b58cd0cd9c1ab15663a0c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="f11700000100000000000000e80100000000002088755942d289702eecfb973dbb0ecfab7df8a895da0d5089b048f879ad24dc25104da11331b3c77b0e841bd3ba83dd7532cef2db6101e1bce20a4fd536700000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8, 0x3, '\x00', 0x0, r7, 0x3, 0x80}, 0x50) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) 6.792387515s ago: executing program 2 (id=3046): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000004000000280000002800000002004aaed8f900000200f30e000000040e000000000000000900000002000000050000000000000b01"], 0x0, 0x42, 0x0, 0x1}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2c, 0x3, 0x0, &(0x7f0000000740)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="090000000d000000e67f0000ffffffff42000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000007ff9250fe622ab00000000000000000000401c000000470e63bec35ae945033018250c661dac868816b62c933730ebde985f0ceed45b5c5f4b8aec246c"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 6.387151055s ago: executing program 1 (id=3047): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000040000000800", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00S'], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4, r8}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001d40)={0x0, 0x0, 0x0, &(0x7f0000001cc0)="4c459fd1f6c3326aa6092df52a3bf06658f7f0d3c503678ee6bd030080dc7a966166c6f584c7aa97d65d96466ca87eb7252112c18ef0d48dabb6f1307966ce006a2d46a231d4699c3d0c6b9062166a4554edc6d412d20bf040936e", 0x4, r6}, 0x38) r9 = socket$kcm(0x2b, 0x1, 0x0) close(r9) socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r9) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r10, 0x1c) close(0x3) 6.061743823s ago: executing program 1 (id=3048): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000004c0), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, 0xffffffffffffffff, 0x2000000}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8903, &(0x7f00000005c0)) 5.74492937s ago: executing program 0 (id=3049): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xc8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 5.74391562s ago: executing program 4 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000005", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYRES32], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x58, '\x00', 0x0, @sk_reuseport}, 0x94) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000600)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc2643cc24ad64d86fb4780827ca784a8af3376c2567bfde74dc50e16c81b71450af026459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f", 0x407}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a0038001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba1", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40) recvmsg(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000016000b63d26a04000000b2e4522408bb", 0x14}], 0x1}, 0x54) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xe6503, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x19}, 0x0, 0x80, 0x7, 0x0, 0x7}, 0x0, 0xfff0000000000000, 0xffffffffffffffff, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x401, 0x0, r0, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) 5.138878545s ago: executing program 0 (id=3051): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x31, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbe, 0xbe, 0x6, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x1b, 0x3}, @typedef={0x2}, @struct={0x8, 0x4, 0x0, 0x4, 0x1, 0x8, [{0x10, 0x1, 0x6}, {0x7, 0x2, 0xfffffc01}, {0x4, 0x3, 0x2c}, {0x8, 0x3, 0x9}]}, @datasec={0xd, 0x6, 0x0, 0xf, 0x2, [{0x2, 0x885, 0x10000}, {0x2, 0x0, 0x4}, {0x3, 0x3, 0x9}, {0x3, 0xcf61, 0x31}, {0x1, 0xffff8000, 0x10001}, {0x1, 0x5, 0x3}], '[\t'}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x2b, 0x0, 0x68, 0x1}]}, {0x0, [0x30, 0x2e, 0x0, 0x61]}}, &(0x7f0000000480)=""/142, 0xde, 0x8e, 0x0, 0xffff0000, 0x10000}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x6cf}, @cb_func={0x18, 0x6}, @generic={0x2, 0x2, 0x2, 0x7fff, 0x800}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @generic={0x9, 0xf, 0x9, 0x2, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xf1, &(0x7f0000000280)=""/241, 0x41100, 0x20, '\x00', 0x0, @fallback=0x9, r2, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xd, 0x3ebe179e, 0x10000}, 0x10, r4, 0xffffffffffffffff, 0x4, &(0x7f0000000980)=[r5], &(0x7f00000009c0)=[{0x0, 0x5, 0x9, 0x1}, {0x0, 0x5, 0xf, 0x5}, {0x1, 0x1, 0x9, 0x8}, {0x2, 0x2, 0xc, 0x6}], 0x10, 0x7}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r6, r5}, 0xc) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000bc0)='syz1\x00', 0x200002, 0x0) r8 = perf_event_open$cgroup(&(0x7f0000000c40)={0x2, 0x80, 0x4, 0xee, 0x5, 0x9, 0x0, 0xffffffffffff2e91, 0x28000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000c00), 0x6}, 0x6021, 0x9, 0xfffeffff, 0x9, 0x4, 0x5, 0x0, 0x0, 0x5, 0x0, 0xb}, 0xffffffffffffffff, 0xf, r5, 0x3) perf_event_open$cgroup(&(0x7f0000000b40)={0x2, 0x80, 0x7, 0xd5, 0xbc, 0x7, 0x0, 0x31, 0x21080, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000b00), 0x2}, 0x8026, 0x5, 0xf, 0x9, 0x1, 0x6, 0xff, 0x0, 0x10000, 0x0, 0x7fffffffffffffff}, r7, 0x7, r8, 0x4) r9 = socket$kcm(0x29, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000d00)={r10}) socketpair(0x22, 0x5, 0xfff, &(0x7f0000000d40)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r2, 0x20, &(0x7f0000001080)={&(0x7f0000000f00)=""/253, 0xfd, 0x0, &(0x7f0000001000)=""/76, 0x4c}}, 0x10) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000d80)=@raw=[@map_fd={0x18, 0x4, 0x1, 0x0, r1}], &(0x7f0000000dc0)='syzkaller\x00', 0xaad3, 0x57, &(0x7f0000000e00)=""/87, 0x41100, 0x50, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000e80)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x4, 0x9, 0x3ff, 0x1f}, 0x10, r12, 0x0, 0x3, &(0x7f0000001100)=[r5], &(0x7f0000001140)=[{0x0, 0x1, 0x0, 0x2}, {0x4, 0x1, 0xa, 0x5}, {0x3, 0x2, 0x1, 0xc}], 0x10, 0x4}, 0x94) r14 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000001240)=r13, 0x4) openat$cgroup_procs(r7, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) r15 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r15, 0x89e0, &(0x7f00000012c0)={r11, r13}) socket$kcm(0x29, 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000001300)='THAWED\x00', 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@cgroup=r7, 0x24, 0x1, 0x10, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001500)={r5, 0x58, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r18 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@union={0x10, 0x3, 0x0, 0x5, 0x0, 0x8, [{0xa, 0x4, 0x8}, {0xd, 0x4}, {0xa, 0x2, 0x8}]}]}, {0x0, [0x61, 0x0, 0x2f, 0x61, 0x2e, 0x5f]}}, &(0x7f00000015c0)=""/93, 0x50, 0x5d, 0x1, 0x6, 0x10000}, 0x28) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2d, '\x00', r17, r18, 0x5, 0x3, 0x3}, 0x50) r20 = openat$cgroup_type(r16, &(0x7f0000001700), 0x2, 0x0) write$cgroup_type(r20, &(0x7f0000001740), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x18, 0xe, &(0x7f0000001780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r19}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r19}}, @ldst={0x2, 0x3, 0x0, 0x2, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f0000001800)='GPL\x00', 0x8, 0x18, &(0x7f0000001840)=""/24, 0x40f00, 0xa, '\x00', r3, @fallback=0x36, r18, 0x8, &(0x7f0000001880)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000018c0)={0x3, 0x2, 0x1, 0x8}, 0x10, r4, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001900)=[{0x5, 0x5, 0x8, 0x4}, {0x2, 0x4, 0x1, 0x9}, {0x5, 0x1, 0xa}, {0x4, 0x1, 0x3, 0x4}, {0x3, 0x3, 0xf, 0x4}], 0x10, 0x4}, 0x94) 5.110103556s ago: executing program 1 (id=3052): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002340)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000006000000000000850000006c"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790701757df37538e486dd63"], 0xfdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001240)={&(0x7f0000000f80)="738387c0bdd4aace60e54dab0b6f0f87b2c51ce466e6bbae5766f6285dd5edfdebbe8de112bf8f041f2d2e9b24d570afe17ee959fff02e76fd92947f3bdc1fb141d4c8295c77a06e81644fb8178f2414d6448f30de7e5da3172c27d2c7a5d47137076a803709305d75a32a96c20281806c17829f2501aed9da1a2bbd1c5ca62566b5a54bfba4f2e98ee9a8e1b3d95727bd03027ff15a05beaf0d5dc06f0ddefa38876d83c6e1e2112db4aca9e14b99c86e2bf6377159973639cc14be4810935528494e23e2108dc3d6f66426dc5b3e", &(0x7f0000001080)=""/77, &(0x7f0000001100)="0f6062c0bad2a2729a1563667361f3cf0a54696712ad24de4cc9656e95d18d259290a1c7ccf10ecbb382081f30dd506357fdeb2f2a31e2a35fedb8408d7efeca85cb0af33180240a81c66790649b5fd682e350622b41ebba72961eb74ca50cab922bb102045df9fdb9bdf98131f461", &(0x7f0000001180)="2f34506ef3749143d35eb74bfc2ebb1aa540ba2553621267c607a23dbef44ec8bed929a0c1b20d0675c7657363954bcd454d7625e403041592d457acfd0560cb763050588cfc9a82aa6d0a865c589bc58504670f7e247b123ef039703d6c50ef91321591f7f674a3d9a9e1d85a9d26d0352910f2d6eb261192a232f50d9136321a885f4369d2da05a8c4a4206478d40957dfbcb9d1e0f53098e889504c5d054b60df56f533b8fc6eefa8c3143fede6ec92b8e3ec69", 0x2, r3, 0x4}, 0x38) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0xec, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1, 0x1, 0x800, 0x9, 0x6722c, r11, 0x1, '\x00', r6, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r2}, 0x20) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x11, &(0x7f0000000300)=@raw=[@alu={0x4, 0x0, 0x6, 0x3, 0xb, 0xfffffffffffffffe, 0x4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x2, 0x1, 0x5, 0x60, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000003c0)='GPL\x00', 0x7, 0xa7, &(0x7f0000000500)=""/167, 0x0, 0x5, '\x00', r4, @fallback, r5, 0x8, &(0x7f00000007c0)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000e00)=[r8, 0xffffffffffffffff, 0x1, r9, r10, r11, r12, r13, r14, r15], &(0x7f0000000e40)=[{0x1, 0x2, 0x10, 0xc}, {0x5, 0x2, 0x6, 0x2}, {0x2, 0x4, 0x1}, {0x2, 0x4, 0x9, 0x1}, {0x4, 0x5, 0xb, 0x7}, {0x4, 0x3, 0x5, 0xc}], 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000040)=r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.109685746s ago: executing program 2 (id=3053): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x485, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r4 = syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3, 0x5}, 0x0, 0x46, 0xc2b7, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x400000000000004}, r4, 0x8, 0xffffffffffffffff, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20840, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c80)={@fallback=r7, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 4.903740421s ago: executing program 4 (id=3054): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x10c002, 0x36, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea033200fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200), 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x80) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x15, &(0x7f00000000c0), 0xb9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f2, &(0x7f0000000080)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', r8, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) 2.324560393s ago: executing program 1 (id=3055): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200040}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r4}, 0xc) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x20008840) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0xfffffffffffff801}, 0xc02bdc374a9bfa96, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r3, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000100000000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000052969029d58a56c599433c7bd802dffe3638fe7532c97ef2329c6ca280dad9f135f3fbb50e81aeebfd2cd8f029d9ae9b2600"/141, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186900000000000000000000faffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000542bf4fffcffffff9500000000000000"], &(0x7f0000000400)='GPL\x00', 0x3, 0x2f, &(0x7f0000000540)=""/47, 0x41100, 0x40, '\x00', r8, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xe, 0x4, 0x5}, 0x10, 0x30325, r1, 0x0, &(0x7f0000000940), 0x0, 0x10, 0xa}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x80a00, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r9, 0x400454c9, 0x1) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000a80)={'veth1_to_hsr\x00', 0x100}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000000cc0)=[{}], 0x8, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x30, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) 2.323379923s ago: executing program 0 (id=3064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, r0, 0x9, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0xa}, 0x19183, 0x1, 0x5, 0x7, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000a00)=ANY=[], 0x38}, 0x41) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000600)}, 0x10) 2.101003049s ago: executing program 4 (id=3056): socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004081) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x10c002, 0xac5d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x15, &(0x7f0000000500), 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x3, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x1e, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101, 0xa6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.991513491s ago: executing program 0 (id=3057): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000040), 0x3) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x80}, 0x104007, 0xac5d, 0x80000001, 0x0, 0x0, 0xffffceb0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000027c0)="d8000000300009116144f782db44b904021d080005000700e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000ffffffff000071060000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x98, &(0x7f00000002c0)=""/152}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0xe, 0x0, &(0x7f0000001ac0)="5df0552b6738b42bce947cd13bcf", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.576979792s ago: executing program 0 (id=3058): r0 = socket$kcm(0xa, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x19, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff9}}, @map_fd={0x18, 0x3}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x29}, @alu={0x4, 0x1, 0xd, 0x0, 0x4, 0x1, 0x10}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x5, 0xff, &(0x7f0000000300)=""/255, 0x40f00, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x3, 0x8, 0x8}, {0x5, 0x2, 0x0, 0xb}], 0x10, 0xe}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@fallback=r0, 0x35, 0x0, 0x7fff, &(0x7f0000000600)=[0x0], 0x1, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0}, 0x40) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000840)={0xd49, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r6, r4, 0x35, 0x30, 0x0, @void, @void, @void, @value=r7, r5}, 0x20) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c", @ANYRESDEC, @ANYRESOCT=r3], 0xffdd) socketpair(0x21, 0x1000, 0x6, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, 0x0}, 0x100f2) 1.348585657s ago: executing program 1 (id=3059): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="0568f3a944724427e3d969aeb184105b49b4a8c41d2ab5f6", 0x18}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="f5c56090f87da6ae5a8cced3db84fa609f5731645b0e", 0x16}, {&(0x7f0000000240)="b39b5e0c2a3dc76f7d322cf1b1e27fffce8c1264d5d6cf97c34e98d2c691fcc5d1cb9bdec3b594e73cb4a9a6a5b32623cc763ac51de9bf0a4757dc4775f915988583f05d06758ccd5ac3a24b8d454425eccfd4e05d138adc97117d4a6c678e7591c91b180b11ade7beb90665bb004d55da544faa01afefdadfcc6433f07a170a63e255508559eb4449d74456f6bd23b042c53acf5e902bb5b42aa7a729b629b059d79456e44258cbe19f28f8503771cbe29b8dec6ccf00b4fe26ab4d4777760ecbeefefabca639073f41ca968673dd8bc0cc99efda2df01a4a4b00511d14987285e4", 0xe2}, {&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000440)="e99099f059e515365ca4270ef9bcebb8ef8b8b57da4ea282bbde7d1be531a1164bd29a8ce6", 0x25}, {&(0x7f0000000480)="e685773d7d76ab634d828d44cb11ca84629850bdace34aaf37ad7e71d473d559cb1d", 0x22}, {&(0x7f0000000500)="e50f5e78707c81999e1145a1f8798ff5c01ce059dc7a8db07aa596296401ff7d922e2c124997d4807f70c97bea578eb7453dd63cc4d8ad4b40d7603110dd28c6217f5c91c8454c6839a30915a4306da028715f3af81750c67c98daf5d9bb44aa33d65d1f312f151d877e38ec087bd9cdfba695ac0e12e562c25483ed1a2b88e5013ebb91c88e570d9aa2e20eb82d2f4ae19c35bbb03b799cbb36918ff6622bfa3edde73560138573322e71f02d21c7b15ed68236f3325c7f416733654c119a04", 0xc0}, {&(0x7f00000005c0)="509e45c498010fcb600dfefea350a02d11ba6d2b7fd29edaf386c018a9d29d7116ffd0c1383301f798f450663b7833529d55c2cf0e61983e61ee581c569bbd779f52f8c9722691eaf13da2b19696e3a9a069d7b66b1e82a9deaa8f546ec3c81d4c37fe44151e18a62aceb2e8898379006c2d24b4ff37a21c572e6ffe6311ae1a3ca93158d95f99b006a5f7598a7314df7dc8ae3b9990b0e68c3f47df15506b581367189977b6f7a14f268472eedce47f9ec34d5378166d86dcde61b5ec6671fcf0272d610ce07466928acee8326ac26f3c8f98f53485b38040b0bd78ddf387ae1057ce116cc38aec805d66cfe36f9e03", 0xf0}], 0x9}, 0x20000800) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)="616f9fa0", &(0x7f0000000680), 0x1006, r0}, 0x38) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000c00)=[0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0], 0x0, 0x1c, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000cc0), &(0x7f0000000fc0), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[], 0x0, 0x56}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r5, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001000)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r6 = syz_clone(0x101000, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0), &(0x7f0000000f00), 0x0) r7 = gettid() r8 = gettid() sendmsg$unix(r5, &(0x7f0000001200)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000700)="abf9f6ec49177f11a1bd29eb0e6680655d5d21f523f13b2479eb35793eeb2d6bc63ff6918ee5d562efa6322373e8f849c20fcf", 0x33}, {&(0x7f0000000740)="6345b012ceba34a31241edfbd44aac9daa4a3c955229e843d1cb269a974518b0e17a13474eaf04082337ac326cf0e98679932336dbf3b4feeb8c3c811a6d27eb7078d868a0848d70b92240b9815b603f7f269975d72ad703aa103a79123fb81e7dd623531f8419a6340a2baf2c5b19eabb298fd72d69eba49f7ed661a36c3bab4488288c3aa5fa8c99376d2ca220c8daf1d16305f4a18a06154fd2513737ee336544987d29edf304858762b452d2cdf56792ece403519cc604432e26", 0xbc}, {&(0x7f00000008c0)="0fbb2f08fe177e9a16b5ff9ac8d2e39700796fbc32c402673ce95b39b3133e83ff017df3e2e272baa32f3f234a1fb402e963276f641203bca7561d0bbd32363f0cbbc4996dca342e84afb0b1fb966e041f48c3ca9944bc171817366644d2bec40be594e547e7c84c28dc919c45ed0140d5d78880cdacc0a07d97bb0c12325ef3e4c4b918cb11a3b32cc5f538c1b6e0b5676e35e5f6f47c303985b7cb", 0x9c}, {&(0x7f00000009c0)}, {&(0x7f0000000a80)="1014d3b3828c935b1d077f9c18ad1f47b3b1291f437a72b2a0242ad2516b6a961e11119315e6f92a79aae0ea2d64852d3475bf73083f7e6df5084c749b96bb6a8bb8f2439a9f795b48e3da23afc8d3d3a2c78623e74af77933037a77aa4962e553f2e53050d017ef4f21554d1f80f9002567e3dc4afacc8d97addcc3a7f23dceb2abbfbde14452ec15d7e93e2ea048714a224fbc7aefa2bc9ad6f3ff461eab6caa", 0xa1}, {0x0}, {0x0}, {&(0x7f0000000d00)="7a2faeec0446cb76183c7d40a27794aa454adc0a23d33779c1d4897d26d74697c7c70df8dad72bacdfb85fc20bcc566f2a5aa97f67", 0x35}], 0xa, &(0x7f0000001140)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r5, r3, r5]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x80, 0x20000000}, 0x2000c835) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000840)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0xde5, 0x0, 0xffffffffffffffff, 0x836, '\x00', r9, r1, 0x3, 0x1, 0x4}, 0x50) 213.991004ms ago: executing program 1 (id=3060): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000006a4b58cd0cd9c1ab15663a0c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r5, &(0x7f0000000180)="9e29c175f2d0bac72f29c8a648626000de42eb34654f697171d7a7bb5b5334fa197770893b1f9d7ebf3fa5a04a208e6200cdcf02756976f446a92d4494cb03466a57defaab9ec56198178957367d8602cf8f0485fece40f24295bc31cdad61849952a5e9946d9015528c9656c6744d8eb289f37903b0ce63d561ab02fa87d9", &(0x7f0000000280)=""/223}, 0xb) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="f11700000100000000000000e80100000000002088755942d289702eecfb973dbb0ecfab7df8a895da0d5089b048f879ad24dc25104da11331b3c77b0e841bd3ba83dd7532cef2db6101e1bce20a4fd536700000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r8, 0x3, '\x00', 0x0, r7, 0x3, 0x80}, 0x50) sendmsg$kcm(r4, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) 213.519395ms ago: executing program 4 (id=3061): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xc8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 212.508925ms ago: executing program 0 (id=3070): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) syz_open_procfs$namespace(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu<=0||!') syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=3062): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9e}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fef7ffff000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000040000000850000007300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a8000000850000000600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): bytes leftover after parsing attributes in process `syz.0.1363'. [ 331.216831][ T9254] netlink: 'syz.4.1380': attribute type 10 has an invalid length. [ 331.294203][ T9254] device hsr0 entered promiscuous mode [ 331.324402][ T9254] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 331.350352][ T9254] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 331.364586][ T9254] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 331.380966][ T9254] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 331.590873][ T9263] netlink: 'syz.4.1382': attribute type 39 has an invalid length. [ 331.618612][ T9263] device macvlan0 entered promiscuous mode [ 331.887096][ T9270] netlink: 'syz.1.1384': attribute type 2 has an invalid length. [ 331.942268][ T9270] netlink: 'syz.1.1384': attribute type 8 has an invalid length. [ 331.993299][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1384'. [ 332.023446][ T9274] netlink: 'syz.3.1385': attribute type 1 has an invalid length. [ 332.035456][ T9274] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1385'. [ 332.419251][ T9282] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 332.442779][ T9282] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1388'. [ 334.319374][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1398'. [ 334.408677][ T4273] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 334.962128][ T9352] netlink: 4027 bytes leftover after parsing attributes in process `syz.0.1404'. [ 335.532064][ T9358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.765479][ T4273] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 335.883011][ T9357] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 335.935861][ T9357] syzkaller1: linktype set to 0 [ 336.719978][ T9376] device syzkaller0 entered promiscuous mode [ 342.874752][ T9421] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1422'. [ 343.473763][ T9457] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1433'. [ 343.583221][ T9463] netlink: 'syz.2.1435': attribute type 3 has an invalid length. [ 343.600219][ T9454] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1433'. [ 343.630875][ T9463] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1435'. [ 344.010125][ T9474] device syzkaller0 entered promiscuous mode [ 344.576995][ T9488] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1443'. [ 345.900697][ T9509] delete_channel: no stack [ 346.457841][ T9528] tun0: tun_chr_ioctl cmd 1074812118 [ 346.867846][ T9547] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1456'. [ 347.035247][ T9554] FAULT_INJECTION: forcing a failure. [ 347.035247][ T9554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.073304][ T9554] CPU: 0 PID: 9554 Comm: syz.4.1459 Not tainted syzkaller #0 [ 347.080773][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.090888][ T9554] Call Trace: [ 347.094218][ T9554] [ 347.097190][ T9554] dump_stack_lvl+0x188/0x24e [ 347.101975][ T9554] ? show_regs_print_info+0x12/0x12 [ 347.107253][ T9554] ? load_image+0x410/0x410 [ 347.111823][ T9554] ? __lock_acquire+0x7c40/0x7c40 [ 347.116944][ T9554] ? __kmem_cache_alloc_node+0x19d/0x270 [ 347.122651][ T9554] should_fail_ex+0x390/0x4c0 [ 347.127406][ T9554] _copy_from_user+0x2c/0x170 [ 347.132173][ T9554] ___bpf_copy_key+0xb0/0x100 [ 347.136925][ T9554] map_update_elem+0x2b2/0x6a0 [ 347.141770][ T9554] __sys_bpf+0x4ec/0x780 [ 347.146119][ T9554] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.151574][ T9554] ? lock_chain_count+0x20/0x20 [ 347.156493][ T9554] __x64_sys_bpf+0x78/0x90 [ 347.160981][ T9554] do_syscall_64+0x4c/0xa0 [ 347.165475][ T9554] ? clear_bhb_loop+0x60/0xb0 [ 347.170254][ T9554] ? clear_bhb_loop+0x60/0xb0 [ 347.175001][ T9554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 347.180963][ T9554] RIP: 0033:0x7ff45699e0d9 [ 347.185432][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.205096][ T9554] RSP: 002b:00007ff4578ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.213570][ T9554] RAX: ffffffffffffffda RBX: 00007ff456c25fa0 RCX: 00007ff45699e0d9 [ 347.221600][ T9554] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000002 [ 347.229627][ T9554] RBP: 00007ff4578ea090 R08: 0000000000000000 R09: 0000000000000000 [ 347.237650][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.245677][ T9554] R13: 00007ff456c26038 R14: 00007ff456c25fa0 R15: 00007fff17ce9d68 [ 347.253721][ T9554] [ 347.300548][ T9556] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1460'. [ 347.451384][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 347.477630][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1462'. [ 347.499402][ T9563] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1462'. [ 348.258491][ T9593] __nla_validate_parse: 4 callbacks suppressed [ 348.258510][ T9593] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1470'. [ 348.330935][ T9594] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 348.380427][ T9593] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 348.714623][ T9603] netlink: 279 bytes leftover after parsing attributes in process `syz.3.1472'. [ 349.016647][ T9622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1477'. [ 349.129333][ T9623] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1477'. [ 349.253028][ T9627] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1479'. [ 349.662469][ T9640] IPv6: Can't replace route, no match found [ 350.640264][ T9658] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1488'. [ 350.654976][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 350.687096][ T9658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.066113][ T9690] device syzkaller0 entered promiscuous mode [ 352.285899][ T9697] netlink: 'syz.0.1499': attribute type 21 has an invalid length. [ 352.946302][ T9719] netlink: 'syz.2.1506': attribute type 11 has an invalid length. [ 352.962012][ T9719] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1506'. [ 353.004647][ T9719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.266574][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1509'. [ 355.295391][ T9733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1509'. [ 355.317681][ T9737] netlink: 'syz.1.1509': attribute type 21 has an invalid length. [ 355.325723][ T9737] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 355.344551][ T9755] netlink: 'syz.2.1516': attribute type 39 has an invalid length. [ 356.196322][ T9781] netlink: 'syz.1.1524': attribute type 27 has an invalid length. [ 356.233467][ T9781] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1524'. [ 356.559814][ T9788] netlink: 'syz.2.1528': attribute type 3 has an invalid length. [ 356.589194][ T9788] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1528'. [ 357.735859][ T9817] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 357.753191][ T9817] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1536'. [ 357.782964][ T9818] netlink: 7906 bytes leftover after parsing attributes in process `syz.3.1537'. [ 357.850347][ T9821] FAULT_INJECTION: forcing a failure. [ 357.850347][ T9821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.891838][ T9821] CPU: 1 PID: 9821 Comm: syz.1.1538 Not tainted syzkaller #0 [ 357.899330][ T9821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.909428][ T9821] Call Trace: [ 357.912754][ T9821] [ 357.915728][ T9821] dump_stack_lvl+0x188/0x24e [ 357.920536][ T9821] ? show_regs_print_info+0x12/0x12 [ 357.925798][ T9821] ? load_image+0x410/0x410 [ 357.930396][ T9821] ? __lock_acquire+0x7c40/0x7c40 [ 357.935572][ T9821] ? snprintf+0xe5/0x140 [ 357.939898][ T9821] should_fail_ex+0x390/0x4c0 [ 357.944762][ T9821] _copy_to_user+0x2c/0x130 [ 357.949382][ T9821] simple_read_from_buffer+0xe3/0x150 [ 357.954857][ T9821] proc_fail_nth_read+0x1a6/0x220 [ 357.959943][ T9821] ? proc_fault_inject_write+0x310/0x310 [ 357.965621][ T9821] ? fsnotify_perm+0x248/0x550 [ 357.970531][ T9821] ? proc_fault_inject_write+0x310/0x310 [ 357.976200][ T9821] vfs_read+0x2db/0x960 [ 357.980477][ T9821] ? kernel_read+0x1e0/0x1e0 [ 357.985107][ T9821] ? __fget_files+0x28/0x460 [ 357.989789][ T9821] ? __fget_files+0x3fc/0x460 [ 357.994523][ T9821] ? __fdget_pos+0x2ae/0x360 [ 357.999153][ T9821] ? ksys_read+0x70/0x260 [ 358.003527][ T9821] ksys_read+0x14d/0x260 [ 358.007821][ T9821] ? vfs_write+0x9a0/0x9a0 [ 358.012278][ T9821] ? lockdep_hardirqs_on+0x94/0x140 [ 358.017516][ T9821] do_syscall_64+0x4c/0xa0 [ 358.021971][ T9821] ? clear_bhb_loop+0x60/0xb0 [ 358.026779][ T9821] ? clear_bhb_loop+0x60/0xb0 [ 358.031505][ T9821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.037441][ T9821] RIP: 0033:0x7fdda7d5e90e [ 358.041884][ T9821] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.061525][ T9821] RSP: 002b:00007fdda8c04fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.069974][ T9821] RAX: ffffffffffffffda RBX: 00007fdda8c056c0 RCX: 00007fdda7d5e90e [ 358.077993][ T9821] RDX: 000000000000000f RSI: 00007fdda8c050a0 RDI: 0000000000000006 [ 358.085995][ T9821] RBP: 00007fdda8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 358.094000][ T9821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.102019][ T9821] R13: 00007fdda8026038 R14: 00007fdda8025fa0 R15: 00007fffd9884068 [ 358.110048][ T9821] [ 358.340552][ T9830] netlink: 112084 bytes leftover after parsing attributes in process `syz.2.1539'. [ 358.371159][ T9830] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 358.497297][ T9839] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1543'. [ 358.674272][ T9841] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1544'. [ 358.704620][ T9841] device hsr_slave_0 left promiscuous mode [ 358.715022][ T9841] device hsr_slave_1 left promiscuous mode [ 359.258275][ T9866] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 359.266305][ T9866] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1552'. [ 359.812236][ T9897] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 359.818746][ T9897] syzkaller1: linktype set to 0 [ 359.824039][ T9896] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 360.464294][ T9916] netlink: 'syz.3.1567': attribute type 3 has an invalid length. [ 360.486382][ T9916] __nla_validate_parse: 1 callbacks suppressed [ 360.486401][ T9916] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1567'. [ 360.867055][ T9925] netlink: 'syz.1.1569': attribute type 3 has an invalid length. [ 360.888849][ T9925] netlink: 'syz.1.1569': attribute type 1 has an invalid length. [ 360.907944][ T9925] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1569'. [ 360.979335][ T9934] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1571'. [ 361.208877][ T9934] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 361.216700][ T9934] CPU: 0 PID: 9934 Comm: syz.2.1571 Not tainted syzkaller #0 [ 361.224129][ T9934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.234245][ T9934] Call Trace: [ 361.237570][ T9934] [ 361.240571][ T9934] dump_stack_lvl+0x188/0x24e [ 361.245329][ T9934] ? show_regs_print_info+0x12/0x12 [ 361.250608][ T9934] ? load_image+0x410/0x410 [ 361.257069][ T9934] sysfs_warn_dup+0x8a/0xa0 [ 361.261901][ T9934] sysfs_do_create_link_sd+0xc0/0x110 [ 361.267347][ T9934] device_add+0x83b/0x1050 [ 361.271981][ T9934] wiphy_register+0x1d8b/0x2aa0 [ 361.277019][ T9934] ? cfg80211_event_work+0x40/0x40 [ 361.282222][ T9934] ? minstrel_ht_alloc+0x894/0xa20 [ 361.287519][ T9934] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 361.293748][ T9934] ieee80211_register_hw+0x2d48/0x39f0 [ 361.299377][ T9934] ? ieee80211_register_hw+0xf61/0x39f0 [ 361.305000][ T9934] ? ieee80211_register_hw+0xf61/0x39f0 [ 361.310642][ T9934] ? ieee80211_tasklet_handler+0x20/0x20 [ 361.316347][ T9934] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 361.322307][ T9934] ? __debug_object_init+0xed/0x440 [ 361.327656][ T9934] ? memset+0x1e/0x40 [ 361.331789][ T9934] ? __hrtimer_init+0x189/0x270 [ 361.336781][ T9934] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 361.342664][ T9934] ? memcpy+0x3c/0x60 [ 361.346717][ T9934] hwsim_new_radio_nl+0xab7/0xc90 [ 361.351829][ T9934] genl_family_rcv_msg_doit+0x22f/0x350 [ 361.357517][ T9934] ? end_current_label_crit_section+0x170/0x170 [ 361.363938][ T9934] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 361.369909][ T9934] ? bpf_lsm_capable+0x5/0x10 [ 361.374743][ T9934] ? security_capable+0x85/0xb0 [ 361.379678][ T9934] genl_rcv_msg+0x601/0x790 [ 361.384256][ T9934] ? lock_chain_count+0x20/0x20 [ 361.389183][ T9934] ? genl_bind+0x360/0x360 [ 361.393663][ T9934] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 361.400112][ T9934] netlink_rcv_skb+0x1ef/0x440 [ 361.405018][ T9934] ? genl_bind+0x360/0x360 [ 361.409527][ T9934] ? netlink_ack+0x1160/0x1160 [ 361.414472][ T9934] ? down_read+0x1a8/0x2d0 [ 361.418978][ T9934] genl_rcv+0x24/0x40 [ 361.423016][ T9934] netlink_unicast+0x7ad/0x920 [ 361.427883][ T9934] netlink_sendmsg+0x8ad/0xbd0 [ 361.432714][ T9934] ? netlink_getsockopt+0x550/0x550 [ 361.438012][ T9934] ? apparmor_socket_sendmsg+0x8a/0x330 [ 361.443637][ T9934] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 361.448984][ T9934] ? security_socket_sendmsg+0x7c/0xa0 [ 361.454523][ T9934] ? netlink_getsockopt+0x550/0x550 [ 361.459788][ T9934] ____sys_sendmsg+0x5ed/0x9a0 [ 361.464737][ T9934] ? __sys_sendmsg_sock+0x30/0x30 [ 361.469838][ T9934] ? __import_iovec+0x306/0x510 [ 361.474796][ T9934] ? import_iovec+0x6f/0xa0 [ 361.479376][ T9934] ___sys_sendmsg+0x2a2/0x360 [ 361.484137][ T9934] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.489065][ T9934] __se_sys_sendmsg+0x1c3/0x2b0 [ 361.494089][ T9934] ? __x64_sys_sendmsg+0x80/0x80 [ 361.499121][ T9934] ? lockdep_hardirqs_on+0x94/0x140 [ 361.504389][ T9934] do_syscall_64+0x4c/0xa0 [ 361.508873][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 361.513649][ T9934] ? clear_bhb_loop+0x60/0xb0 [ 361.518396][ T9934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.524356][ T9934] RIP: 0033:0x7fa98699e0d9 [ 361.528829][ T9934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.548506][ T9934] RSP: 002b:00007fa98789f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.556983][ T9934] RAX: ffffffffffffffda RBX: 00007fa986c25fa0 RCX: 00007fa98699e0d9 [ 361.565011][ T9934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 361.573062][ T9934] RBP: 00007fa986a35024 R08: 0000000000000000 R09: 0000000000000000 [ 361.581112][ T9934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.589146][ T9934] R13: 00007fa986c26038 R14: 00007fa986c25fa0 R15: 00007ffcc5156a68 [ 361.597203][ T9934] [ 361.916942][ T9956] netlink: 'syz.0.1577': attribute type 6 has an invalid length. [ 361.941059][ T9956] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1577'. [ 362.156576][ T9962] delete_channel: no stack [ 363.588518][T10019] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 364.792129][T10008] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1589'. [ 364.803885][T10017] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1589'. [ 365.833441][T10061] netlink: 'syz.4.1600': attribute type 29 has an invalid length. [ 367.621812][T10063] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1603'. [ 367.642486][T10065] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1602'. [ 367.660115][T10061] netlink: 'syz.4.1600': attribute type 29 has an invalid length. [ 367.912734][T10073] netlink: 'syz.4.1605': attribute type 10 has an invalid length. [ 367.965331][T10075] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1605'. [ 368.213149][T10073] team0: Port device geneve1 added [ 368.920291][T10101] tap0: tun_chr_ioctl cmd 2147767521 [ 368.968060][T10104] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1616'. [ 369.085951][T10107] netlink: 'syz.2.1617': attribute type 10 has an invalid length. [ 369.115380][T10107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1617'. [ 369.174846][T10107] batman_adv: batadv0: Adding interface: virt_wifi0 [ 369.181906][T10107] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.208186][T10107] batman_adv: batadv0: Interface activated: virt_wifi0 [ 369.358368][T10113] netlink: 'syz.3.1619': attribute type 2 has an invalid length. [ 369.420886][T10113] device 0 entered promiscuous mode [ 369.566445][T10126] netlink: 'syz.0.1623': attribute type 11 has an invalid length. [ 369.652307][T10126] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1623'. [ 371.817105][T10147] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1628'. [ 372.190839][T10160] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1629'. [ 372.985278][T10179] netlink: 'syz.2.1637': attribute type 3 has an invalid length. [ 373.026792][T10179] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1637'. [ 373.196726][T10189] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1639'. [ 373.234956][T10183] device syzkaller0 entered promiscuous mode [ 373.392384][T10196] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1643'. [ 374.586524][T10221] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 374.602835][T10221] pim6reg0: linktype set to 780 [ 375.153528][T10254] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1658'. [ 375.476178][T10263] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1661'. [ 375.540019][T10258] netlink: 'syz.2.1660': attribute type 10 has an invalid length. [ 376.312463][T10258] team0 (unregistering): Port device team_slave_0 removed [ 376.373476][T10258] team0 (unregistering): Port device team_slave_1 removed [ 376.393170][T10258] team0 (unregistering): Port device bridge_slave_1 removed [ 376.461232][T10263] netlink: 'syz.3.1661': attribute type 21 has an invalid length. [ 376.481093][T10263] netlink: 'syz.3.1661': attribute type 20 has an invalid length. [ 376.573271][T10277] netlink: 'syz.4.1668': attribute type 21 has an invalid length. [ 376.607830][T10277] IPv6: NLM_F_CREATE should be specified when creating new route [ 377.029343][T10291] netlink: 'syz.2.1673': attribute type 27 has an invalid length. [ 377.057562][T10291] netlink: 'syz.2.1673': attribute type 3 has an invalid length. [ 377.066240][T10291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1673'. [ 377.130931][T10297] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1673'. [ 377.793640][T10316] netlink: 'syz.3.1681': attribute type 39 has an invalid length. [ 378.078422][T10319] netlink: 'syz.4.1682': attribute type 3 has an invalid length. [ 378.099876][T10319] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1682'. [ 378.225232][T10288] delete_channel: no stack [ 378.490732][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.497235][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.354084][T10332] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 381.373263][T10332] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1685'. [ 381.411416][T10335] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1688'. [ 381.600169][T10351] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1689'. [ 385.522938][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1699'. [ 385.900549][T10387] netlink: 'syz.0.1698': attribute type 7 has an invalid length. [ 385.908641][T10387] netlink: 'syz.0.1698': attribute type 7 has an invalid length. [ 385.916593][T10387] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.1698'. [ 387.356374][T10386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1699'. [ 387.374635][T10394] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1698'. [ 388.065943][T10409] device syzkaller0 entered promiscuous mode [ 392.658915][T10441] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1709'. [ 394.587296][T10476] sctp: [Deprecated]: syz.4.1718 (pid 10476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.587296][T10476] Use struct sctp_sack_info instead [ 394.637555][T10482] sctp: [Deprecated]: syz.4.1718 (pid 10482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 394.637555][T10482] Use struct sctp_sack_info instead [ 396.464466][T10524] netlink: 'syz.3.1733': attribute type 10 has an invalid length. [ 396.576209][T10526] netlink: 'syz.2.1734': attribute type 2 has an invalid length. [ 396.610961][T10526] netlink: 'syz.2.1734': attribute type 4 has an invalid length. [ 396.611662][T10533] netlink: 'syz.1.1736': attribute type 29 has an invalid length. [ 396.667544][T10526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1734'. [ 396.696640][T10527] delete_channel: no stack [ 396.728014][T10533] netlink: 'syz.1.1736': attribute type 29 has an invalid length. [ 396.763364][T10535] netlink: 'syz.1.1736': attribute type 29 has an invalid length. [ 397.241313][T10538] netlink: 'syz.1.1736': attribute type 29 has an invalid length. [ 397.260655][T10533] netlink: 'syz.1.1736': attribute type 29 has an invalid length. [ 397.296861][T10531] delete_channel: no stack [ 397.661551][T10562] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1743'. [ 397.946602][T10573] netlink: 'syz.0.1747': attribute type 7 has an invalid length. [ 397.990792][T10573] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.1747'. [ 401.081094][T10627] netlink: 'syz.1.1760': attribute type 10 has an invalid length. [ 401.452494][T10632] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1763'. [ 405.300091][T10669] validate_nla: 2 callbacks suppressed [ 405.300130][T10669] netlink: 'syz.4.1773': attribute type 3 has an invalid length. [ 405.348827][T10669] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1773'. [ 405.413535][T10679] netlink: 'syz.2.1777': attribute type 3 has an invalid length. [ 405.474604][T10679] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1777'. [ 405.863315][T10687] netlink: 'syz.0.1778': attribute type 29 has an invalid length. [ 405.901917][T10687] netlink: 'syz.0.1778': attribute type 29 has an invalid length. [ 406.431776][T10682] delete_channel: no stack [ 408.291906][T10735] device syzkaller0 entered promiscuous mode [ 410.420102][T10756] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1794'. [ 410.430319][T10761] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1796'. [ 410.440634][T10761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.451323][T10761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.462212][T10761] device batadv_slave_1 entered promiscuous mode [ 410.469989][T10762] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1794'. [ 411.652447][T10819] netlink: 'syz.1.1810': attribute type 3 has an invalid length. [ 411.710837][T10819] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1810'. [ 412.138497][T10822] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1812'. [ 412.508676][T10829] netlink: 'syz.0.1813': attribute type 1 has an invalid length. [ 412.526831][T10829] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1813'. [ 413.460309][T10875] TCP: TCP_TX_DELAY enabled [ 413.784638][T10887] netlink: 'syz.2.1828': attribute type 13 has an invalid length. [ 413.823678][T10887] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1828'. [ 413.853549][T10887] @: renamed from team_slave_0 [ 414.297654][T10896] netlink: 'syz.0.1831': attribute type 3 has an invalid length. [ 414.305642][T10896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1831'. [ 414.392115][T10898] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1833'. [ 414.508898][T10903] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 415.362598][T10917] netlink: 'syz.4.1837': attribute type 3 has an invalid length. [ 415.394020][T10918] netlink: 'syz.4.1837': attribute type 8 has an invalid length. [ 415.428817][T10917] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 415.457764][T10918] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 415.501069][T10917] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1837'. [ 415.527583][T10918] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.1837'. [ 415.963316][T10931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1839'. [ 416.634977][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 416.731144][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 416.827021][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 416.945357][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 416.972411][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 417.017043][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 417.026728][T10951] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1847'. [ 417.548684][T10974] FAULT_INJECTION: forcing a failure. [ 417.548684][T10974] name failslab, interval 1, probability 0, space 0, times 0 [ 417.577859][T10969] mac80211_hwsim hwsim9 »»»»»»ÿÿ: renamed from wlan0 [ 417.617113][T10974] CPU: 1 PID: 10974 Comm: syz.1.1852 Not tainted syzkaller #0 [ 417.624665][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.634780][T10974] Call Trace: [ 417.638103][T10974] [ 417.641078][T10974] dump_stack_lvl+0x188/0x24e [ 417.645867][T10974] ? show_regs_print_info+0x12/0x12 [ 417.651141][T10974] ? load_image+0x410/0x410 [ 417.655706][T10974] ? __might_sleep+0xd0/0xd0 [ 417.660446][T10974] ? __lock_acquire+0x7c40/0x7c40 [ 417.665536][T10974] ? verify_lock_unused+0x140/0x140 [ 417.670808][T10974] should_fail_ex+0x390/0x4c0 [ 417.675567][T10974] should_failslab+0x5/0x20 [ 417.680194][T10974] slab_pre_alloc_hook+0x59/0x300 [ 417.685289][T10974] ? __get_vm_area_node+0x122/0x330 [ 417.690624][T10974] __kmem_cache_alloc_node+0x4f/0x270 [ 417.696052][T10974] ? __get_vm_area_node+0x122/0x330 [ 417.701313][T10974] kmalloc_node_trace+0x22/0xe0 [ 417.706314][T10974] __get_vm_area_node+0x122/0x330 [ 417.711381][T10974] ? __local_bh_enable_ip+0x136/0x1c0 [ 417.716891][T10974] __vmalloc_node_range+0x357/0x1380 [ 417.722235][T10974] ? netlink_sendmsg+0x5ec/0xbd0 [ 417.727236][T10974] ? netlink_insert+0x28d/0x13b0 [ 417.732241][T10974] ? free_vm_area+0x50/0x50 [ 417.736803][T10974] ? netlink_sendmsg+0x5ec/0xbd0 [ 417.741785][T10974] vmalloc+0x75/0x80 [ 417.745731][T10974] ? netlink_sendmsg+0x5ec/0xbd0 [ 417.750717][T10974] netlink_sendmsg+0x5ec/0xbd0 [ 417.755539][T10974] ? netlink_getsockopt+0x550/0x550 [ 417.760801][T10974] ? apparmor_socket_sendmsg+0x8a/0x330 [ 417.766423][T10974] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 417.771763][T10974] ? security_socket_sendmsg+0x7c/0xa0 [ 417.777288][T10974] sock_write_iter+0x2d5/0x3e0 [ 417.782119][T10974] ? sock_read_iter+0x3a0/0x3a0 [ 417.787046][T10974] ? common_file_perm+0x171/0x1c0 [ 417.792152][T10974] vfs_write+0x482/0x9a0 [ 417.796467][T10974] ? file_end_write+0x250/0x250 [ 417.801393][T10974] ? __fget_files+0x3fc/0x460 [ 417.806136][T10974] ? __fdget_pos+0x1d4/0x360 [ 417.810780][T10974] ? ksys_write+0x70/0x260 [ 417.815253][T10974] ksys_write+0x14d/0x260 [ 417.819637][T10974] ? __ia32_sys_read+0x80/0x80 [ 417.824460][T10974] ? lockdep_hardirqs_on+0x94/0x140 [ 417.829705][T10974] do_syscall_64+0x4c/0xa0 [ 417.834178][T10974] ? clear_bhb_loop+0x60/0xb0 [ 417.838913][T10974] ? clear_bhb_loop+0x60/0xb0 [ 417.843658][T10974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.849617][T10974] RIP: 0033:0x7fdda7d9e0d9 [ 417.854098][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.873759][T10974] RSP: 002b:00007fdda8c05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.882220][T10974] RAX: ffffffffffffffda RBX: 00007fdda8025fa0 RCX: 00007fdda7d9e0d9 [ 417.890227][T10974] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000004 [ 417.898246][T10974] RBP: 00007fdda8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 417.906255][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.914302][T10974] R13: 00007fdda8026038 R14: 00007fdda8025fa0 R15: 00007fffd9884068 [ 417.922351][T10974] [ 417.964052][T10974] syz.1.1852: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 418.087289][T10974] CPU: 0 PID: 10974 Comm: syz.1.1852 Not tainted syzkaller #0 [ 418.094862][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.105019][T10974] Call Trace: [ 418.108343][T10974] [ 418.111320][T10974] dump_stack_lvl+0x188/0x24e [ 418.116066][T10974] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 418.122627][T10974] ? show_regs_print_info+0x12/0x12 [ 418.127902][T10974] ? load_image+0x410/0x410 [ 418.132472][T10974] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 418.138955][T10974] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 418.145519][T10974] warn_alloc+0x242/0x330 [ 418.149951][T10974] ? zone_watermark_ok_safe+0x270/0x270 [ 418.155567][T10974] ? __get_vm_area_node+0x318/0x330 [ 418.160819][T10974] ? __local_bh_enable_ip+0x136/0x1c0 [ 418.166252][T10974] __vmalloc_node_range+0x37c/0x1380 [ 418.171614][T10974] ? netlink_insert+0x28d/0x13b0 [ 418.176623][T10974] ? free_vm_area+0x50/0x50 [ 418.181197][T10974] ? netlink_sendmsg+0x5ec/0xbd0 [ 418.186188][T10974] vmalloc+0x75/0x80 [ 418.190139][T10974] ? netlink_sendmsg+0x5ec/0xbd0 [ 418.195124][T10974] netlink_sendmsg+0x5ec/0xbd0 [ 418.199958][T10974] ? netlink_getsockopt+0x550/0x550 [ 418.205206][T10974] ? apparmor_socket_sendmsg+0x8a/0x330 [ 418.211164][T10974] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 418.216529][T10974] ? security_socket_sendmsg+0x7c/0xa0 [ 418.222049][T10974] sock_write_iter+0x2d5/0x3e0 [ 418.226866][T10974] ? sock_read_iter+0x3a0/0x3a0 [ 418.231778][T10974] ? common_file_perm+0x171/0x1c0 [ 418.236871][T10974] vfs_write+0x482/0x9a0 [ 418.241186][T10974] ? file_end_write+0x250/0x250 [ 418.246100][T10974] ? __fget_files+0x3fc/0x460 [ 418.250846][T10974] ? __fdget_pos+0x1d4/0x360 [ 418.255492][T10974] ? ksys_write+0x70/0x260 [ 418.259977][T10974] ksys_write+0x14d/0x260 [ 418.264381][T10974] ? __ia32_sys_read+0x80/0x80 [ 418.269212][T10974] ? lockdep_hardirqs_on+0x94/0x140 [ 418.274460][T10974] do_syscall_64+0x4c/0xa0 [ 418.278936][T10974] ? clear_bhb_loop+0x60/0xb0 [ 418.283669][T10974] ? clear_bhb_loop+0x60/0xb0 [ 418.288399][T10974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.294342][T10974] RIP: 0033:0x7fdda7d9e0d9 [ 418.298802][T10974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.318453][T10974] RSP: 002b:00007fdda8c05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 418.326913][T10974] RAX: ffffffffffffffda RBX: 00007fdda8025fa0 RCX: 00007fdda7d9e0d9 [ 418.334927][T10974] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000004 [ 418.342935][T10974] RBP: 00007fdda8c05090 R08: 0000000000000000 R09: 0000000000000000 [ 418.350968][T10974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.358985][T10974] R13: 00007fdda8026038 R14: 00007fdda8025fa0 R15: 00007fffd9884068 [ 418.367015][T10974] [ 419.271211][T10974] Mem-Info: [ 419.274431][T10974] active_anon:30455 inactive_anon:0 isolated_anon:0 [ 419.274431][T10974] active_file:19039 inactive_file:40082 isolated_file:0 [ 419.274431][T10974] unevictable:768 dirty:240 writeback:0 [ 419.274431][T10974] slab_reclaimable:21245 slab_unreclaimable:108404 [ 419.274431][T10974] mapped:40347 shmem:24554 pagetables:810 [ 419.274431][T10974] sec_pagetables:0 bounce:0 [ 419.274431][T10974] kernel_misc_reclaimable:0 [ 419.274431][T10974] free:1281849 free_pcp:9904 free_cma:0 [ 419.440354][T10974] Node 0 active_anon:127420kB inactive_anon:0kB active_file:76156kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161388kB dirty:960kB writeback:0kB shmem:102480kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11412kB pagetables:3240kB sec_pagetables:0kB all_unreclaimable? no [ 419.536649][T10974] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 419.674509][T10974] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 419.786914][T10974] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 419.806976][T10974] Node 0 DMA32 free:1184548kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:148432kB inactive_anon:0kB active_file:76156kB inactive_file:160124kB unevictable:1536kB writepending:960kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:23488kB local_pcp:5952kB free_cma:0kB [ 419.910444][T10974] lowmem_reserve[]: 0 0 1 1 1 [ 419.934705][T10974] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 420.078802][T10974] lowmem_reserve[]: 0 0 0 0 0 [ 420.104100][T10974] Node 1 Normal free:3899644kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:16608kB local_pcp:7808kB free_cma:0kB [ 420.232370][T10974] lowmem_reserve[]: 0 0 0 0 0 [ 420.254794][T10974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 420.354397][T10974] Node 0 DMA32: 2243*4kB (UE) 531*8kB (UM) 479*16kB (UE) 341*32kB (UME) 271*64kB (U) 20*128kB (UM) 3*256kB (U) 1*512kB (E) 1*1024kB (U) 0*2048kB 268*4096kB (UM) = 1151732kB [ 420.450162][T10974] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 420.490187][T10974] Node 1 Normal: 243*4kB (UME) 60*8kB (UME) 29*16kB (UME) 32*32kB (UE) 18*64kB (UME) 12*128kB (UME) 5*256kB (UME) 1*512kB (M) 1*1024kB (U) 2*2048kB (UE) 949*4096kB (M) = 3899644kB [ 420.637534][T10974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.761334][T10974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.981574][T10974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 421.090773][T10974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 421.147408][T10974] 105005 total pagecache pages [ 421.157420][T10974] 0 pages in swap cache [ 421.161660][T10974] Free swap = 124996kB [ 421.206523][T10974] Total swap = 124996kB [ 421.227555][T10974] 2097051 pages RAM [ 421.231459][T10974] 0 pages HighMem/MovableOnly [ 421.236177][T10974] 415223 pages reserved [ 421.317420][T10974] 0 pages cma reserved [ 422.555585][T11033] __nla_validate_parse: 60 callbacks suppressed [ 422.555608][T11033] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1872'. [ 426.108226][T11075] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1879'. [ 426.127489][T11075] tc_dump_action: action bad kind [ 426.839261][T11096] netlink: 'syz.4.1885': attribute type 29 has an invalid length. [ 426.927099][T11096] netlink: 'syz.4.1885': attribute type 29 has an invalid length. [ 426.962900][T11102] netlink: 'syz.4.1885': attribute type 29 has an invalid length. [ 427.480984][T11117] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1888'. [ 427.800225][T11127] netlink: 'syz.2.1891': attribute type 2 has an invalid length. [ 427.900853][T11127] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1891'. [ 427.911157][T11121] device syzkaller0 entered promiscuous mode [ 431.695384][T11148] syz.0.1897[11148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.696982][T11148] syz.0.1897[11148] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 433.242886][T11172] netlink: 'syz.1.1904': attribute type 7 has an invalid length. [ 433.267034][T11172] netlink: 'syz.1.1904': attribute type 7 has an invalid length. [ 433.277483][T11172] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.1904'. [ 435.575716][T11134] device syzkaller0 entered promiscuous mode [ 438.031342][T11149] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.045751][T11149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.068754][T11179] netlink: 'syz.4.1906': attribute type 21 has an invalid length. [ 438.276277][T11189] netlink: 'syz.1.1908': attribute type 39 has an invalid length. [ 438.414773][T11191] bridge0: port 3(dummy0) entered disabled state [ 438.421598][T11191] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.429477][T11191] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.259954][T11225] netlink: 'syz.3.1918': attribute type 2 has an invalid length. [ 439.295731][T11225] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 439.314523][T11229] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1919'. [ 439.318120][T11225] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 439.386890][T11225] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.1918'. [ 439.880859][T11241] netlink: 'syz.3.1921': attribute type 3 has an invalid length. [ 439.897505][T11241] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1921'. [ 439.931203][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.937733][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.008129][T11236] device syzkaller0 entered promiscuous mode [ 443.952018][T11274] netlink: 'syz.2.1930': attribute type 1 has an invalid length. [ 443.961493][T11274] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1930'. [ 444.676363][T11300] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1939'. [ 445.705715][T11323] netlink: 'syz.1.1945': attribute type 46 has an invalid length. [ 445.726043][T11323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1945'. [ 445.787181][T11323] sock: sock_timestamping_bind_phc: sock not bind to device [ 445.821255][T11323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1945'. [ 445.883760][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.082863][T11323] device bridge_slave_0 left promiscuous mode [ 446.096997][T11323] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.662568][T11324] netlink: 'syz.0.1948': attribute type 3 has an invalid length. [ 446.672588][T11324] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.1948'. [ 447.849439][T11375] device wlan1 entered promiscuous mode [ 451.358167][T11394] netlink: 'syz.0.1965': attribute type 10 has an invalid length. [ 451.366374][T11394] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1965'. [ 451.705693][T11405] netlink: 'syz.3.1970': attribute type 4 has an invalid length. [ 451.735773][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 452.931084][T11448] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1980'. [ 453.892575][T11480] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1990'. [ 453.990146][T11480] netlink: zone id is out of range [ 454.075636][T11480] netlink: zone id is out of range [ 454.172472][T11480] netlink: zone id is out of range [ 454.258253][T11480] netlink: zone id is out of range [ 454.330677][T11480] netlink: zone id is out of range [ 454.360951][T11480] netlink: zone id is out of range [ 454.397269][T11480] netlink: zone id is out of range [ 454.414881][T11480] netlink: zone id is out of range [ 454.480536][T11480] netlink: zone id is out of range [ 454.551667][T11480] netlink: zone id is out of range [ 454.710095][T11486] device syzkaller0 entered promiscuous mode [ 456.435919][T11495] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1995'. [ 458.974302][T11502] netlink: 'syz.2.1998': attribute type 33 has an invalid length. [ 458.982511][T11502] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1998'. [ 458.992102][T11502] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 459.018713][T11502] net_ratelimit: 204 callbacks suppressed [ 459.018730][T11502] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.051968][T11500] Â: renamed from pim6reg1 [ 459.078593][T11507] netlink: 'syz.2.1998': attribute type 12 has an invalid length. [ 459.086484][T11507] netlink: 'syz.2.1998': attribute type 15 has an invalid length. [ 459.220329][T11520] netlink: 8161 bytes leftover after parsing attributes in process `syz.3.2002'. [ 459.302750][T11520] netlink: 'syz.3.2002': attribute type 4 has an invalid length. [ 459.316415][T11525] netlink: 'syz.1.2004': attribute type 3 has an invalid length. [ 459.330124][T11520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'. [ 459.339273][T11525] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 459.347092][T11525] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2004'. [ 459.362647][T11520] netlink: 'syz.3.2002': attribute type 27 has an invalid length. [ 459.375742][T11520] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2002'. [ 459.391312][T11526] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 459.418853][T11526] netlink: 'syz.0.2005': attribute type 4 has an invalid length. [ 459.427594][T11526] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2005'. [ 459.476674][T11535] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 459.495028][T11535] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2005'. [ 460.089082][T11537] device syzkaller0 entered promiscuous mode [ 460.102386][T11551] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2010'. [ 460.586576][T11553] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2012'. [ 461.447510][T11561] delete_channel: no stack [ 463.412823][T11602] __nla_validate_parse: 1 callbacks suppressed [ 463.412847][T11602] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.2026'. [ 464.376141][T11562] validate_nla: 4 callbacks suppressed [ 464.376157][T11562] netlink: 'syz.3.2015': attribute type 10 has an invalid length. [ 464.401195][T11570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2018'. [ 464.608046][T11610] netlink: 'syz.1.2030': attribute type 25 has an invalid length. [ 464.637745][T11610] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2030'. [ 464.668939][T11612] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2028'. [ 464.724652][T11612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.951705][T11628] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 464.985516][T11628] dvmrp1: linktype set to 768 [ 465.040946][T11632] cgroup: fork rejected by pids controller in /syz2 [ 465.399555][T11754] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2040'. [ 465.652103][T11756] netlink: 'syz.4.2039': attribute type 25 has an invalid length. [ 465.782157][T11756] netlink: 'syz.4.2039': attribute type 28 has an invalid length. [ 466.112057][T11793] device lo entered promiscuous mode [ 466.208825][T11795] netlink: 'syz.3.2043': attribute type 29 has an invalid length. [ 466.299732][T11793] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 466.507601][T11800] netlink: 'syz.1.2044': attribute type 2 has an invalid length. [ 466.531209][T11795] netlink: 'syz.3.2043': attribute type 29 has an invalid length. [ 466.629833][T11800] netlink: 'syz.1.2044': attribute type 22 has an invalid length. [ 466.647560][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 466.663799][T11801] netlink: 'syz.3.2043': attribute type 29 has an invalid length. [ 466.895939][ T4599] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.942130][T11816] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2048'. [ 467.085788][ T4599] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.108755][T11816] netlink: 'syz.1.2048': attribute type 13 has an invalid length. [ 467.116643][T11816] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.2048'. [ 467.180041][ T4599] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.268842][ T4599] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.503055][T11835] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2050'. [ 467.538024][T11834] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2050'. [ 467.652628][ T4599] device 0 left promiscuous mode [ 468.608428][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.618766][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.627013][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.636286][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.644861][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 468.653221][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.790534][ T4273] Bluetooth: hci1: ACL packet too small [ 468.796230][ T4273] Bluetooth: hci1: ACL packet too small [ 469.273607][T11891] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2064'. [ 469.569647][T11861] chnl_net:caif_netlink_parms(): no params data found [ 469.669434][T11902] device veth1_macvtap left promiscuous mode [ 469.675826][T11902] device macsec0 left promiscuous mode [ 470.301912][T11923] validate_nla: 4 callbacks suppressed [ 470.301943][T11923] netlink: 'syz.0.2072': attribute type 29 has an invalid length. [ 470.335868][T11915] device veth1_macvtap entered promiscuous mode [ 470.349561][T11915] device macsec0 entered promiscuous mode [ 470.387269][T11923] netlink: 'syz.0.2072': attribute type 29 has an invalid length. [ 470.416863][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.475524][T11928] netlink: 'syz.0.2072': attribute type 29 has an invalid length. [ 470.566104][T11861] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.607655][T11861] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.648889][T11861] device bridge_slave_0 entered promiscuous mode [ 470.677976][T11928] netlink: 'syz.0.2072': attribute type 29 has an invalid length. [ 470.712100][T11861] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.727688][T11861] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.727706][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 470.749943][T11861] device bridge_slave_1 entered promiscuous mode [ 470.772972][T11923] can: request_module (can-proto-0) failed. [ 470.873893][T11861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.993613][T11861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.398625][T11861] team0: Port device team_slave_0 added [ 471.682261][T11861] team0: Port device team_slave_1 added [ 471.731550][T11962] netlink: 'syz.3.2078': attribute type 2 has an invalid length. [ 471.750773][T11962] netlink: 'syz.3.2078': attribute type 8 has an invalid length. [ 471.764294][T11962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2078'. [ 471.801699][T11861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.815537][T11861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.843842][T11861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.908210][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.916134][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.955745][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.977574][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.041153][ T4599] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 472.081399][ T4599] batman_adv: batadv0: Removing interface: virt_wifi0 [ 472.116827][ T4599] device bridge_slave_0 left promiscuous mode [ 472.139105][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.180224][T11983] delete_channel: no stack [ 472.219346][ T4599] device veth0_macvtap left promiscuous mode [ 472.815931][ T4273] Bluetooth: hci2: command 0x041b tx timeout [ 473.656702][T11861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.665242][T11861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.692808][T11861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.758825][T11991] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2085'. [ 473.960103][T11861] device hsr_slave_0 entered promiscuous mode [ 474.012146][T11861] device hsr_slave_1 entered promiscuous mode [ 474.031022][T11861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.057404][T11861] Cannot create hsr debugfs directory [ 474.371967][T12024] netlink: 'syz.3.2091': attribute type 10 has an invalid length. [ 474.398901][T12024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2091'. [ 474.467949][T12024] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 474.629440][T12033] netlink: 'syz.0.2092': attribute type 21 has an invalid length. [ 474.647987][T12033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2092'. [ 474.891097][ T4273] Bluetooth: hci2: command 0x040f tx timeout [ 475.765252][T11861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.835859][T12062] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2101'. [ 475.854176][T12062] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.2101'. [ 475.873708][T12062] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2101'. [ 475.898964][T11861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.929990][T11861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 475.940642][T11861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 476.103022][T12071] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2100'. [ 476.216014][T11861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.230298][T12077] netlink: 153204 bytes leftover after parsing attributes in process `syz.4.2101'. [ 476.259313][T12077] netlink: get zone limit has 4 unknown bytes [ 476.276190][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.294501][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.321319][T11861] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.350944][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.373067][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.391969][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.399188][ T6866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.430310][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 476.453938][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.471339][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.484446][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.492789][ T6866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.511567][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.541427][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.573254][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.593817][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.643082][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.670274][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.709846][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.738900][T12091] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2106'. [ 476.790438][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.804379][ T6866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.842654][T11861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 476.879244][T11861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 476.901505][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 476.934959][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 476.967513][ T4273] Bluetooth: hci2: command 0x0419 tx timeout [ 477.254384][T12103] device syzkaller0 entered promiscuous mode [ 480.433680][T12129] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2115'. [ 480.605199][ T4273] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 480.802377][T12147] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2117'. [ 481.068903][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.076556][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.142902][T11861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.237523][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.281422][ T4596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.391073][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 481.418536][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 481.488899][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 481.528169][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 481.570040][T11861] device veth0_vlan entered promiscuous mode [ 481.623382][T11861] device veth1_vlan entered promiscuous mode [ 481.695023][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.738132][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.789074][T11861] device veth0_macvtap entered promiscuous mode [ 481.818060][T11861] device veth1_macvtap entered promiscuous mode [ 481.902801][T11861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.932351][T11861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.989093][T11861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.996493][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 482.036993][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 482.063224][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 482.094415][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 482.162806][T11861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.192559][T11861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.241611][T11861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.263493][T12199] netlink: 'syz.1.2129': attribute type 21 has an invalid length. [ 482.275673][T12199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2129'. [ 482.297188][T12199] netlink: 'syz.1.2129': attribute type 5 has an invalid length. [ 482.315023][T12199] netlink: 'syz.1.2129': attribute type 6 has an invalid length. [ 482.357926][T12199] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2129'. [ 482.385733][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.405171][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.436955][T11861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.465020][T11861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.504398][T11861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.542149][T11861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.603569][T12205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2130'. [ 482.941057][ T4596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.968792][ T4596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.030444][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.067397][ T4598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.081830][ T4598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.097717][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.380001][T12223] delete_channel: no stack [ 484.035096][T12257] netlink: 'syz.4.2141': attribute type 12 has an invalid length. [ 484.065826][T12257] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2141'. [ 484.291315][T12266] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2142'. [ 484.382854][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2145'. [ 484.681594][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2147'. [ 484.700106][T12277] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2147'. [ 485.501080][T12305] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2153'. [ 485.566426][T12305] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2153'. [ 486.139072][T12313] netlink: 'syz.0.2156': attribute type 16 has an invalid length. [ 486.167742][T12313] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2156'. [ 486.474054][T12321] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2160'. [ 486.638735][T12325] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2161'. [ 486.924738][T12335] netlink: 'syz.0.2163': attribute type 39 has an invalid length. [ 487.491648][T12361] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2172'. [ 487.610538][T12360] delete_channel: no stack [ 487.937175][T12381] syz.4.2176[12381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.246470][T12397] netlink: 'syz.4.2181': attribute type 1 has an invalid length. [ 488.301923][T12397] netlink: 63743 bytes leftover after parsing attributes in process `syz.4.2181'. [ 488.339919][T12402] netlink: 'syz.1.2183': attribute type 10 has an invalid length. [ 488.524868][T12402] device veth0_vlan left promiscuous mode [ 488.552364][T12402] device veth0_vlan entered promiscuous mode [ 488.610582][T12402] team0: Device veth0_vlan failed to register rx_handler [ 488.707740][T12403] netlink: 'syz.0.2184': attribute type 1 has an invalid length. [ 492.915615][T12451] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 492.938708][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2191'. [ 492.977211][T12451] device ªªªªª6ÿÿ left promiscuous mode [ 492.997875][T12451] device ªªªªª6ÿÿ entered promiscuous mode [ 493.622519][T12451] bridge0: port 3(ªªªªª6ÿÿ) entered blocking state [ 493.630660][T12451] bridge0: port 3(ªªªªª6ÿÿ) entered disabled state [ 493.645360][T12451] A link change request failed with some changes committed already. Interface ªªªªª6ÿÿ may have been left with an inconsistent configuration, please check. [ 493.825823][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªª6ÿÿ: link becomes ready [ 493.835442][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.844951][ T6868] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 495.897988][T12472] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2198'. [ 495.907274][T12472] bridge_slave_1: default FDB implementation only supports local addresses [ 495.927917][T12478] netlink: 'syz.2.2200': attribute type 21 has an invalid length. [ 495.946218][T12478] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 495.970270][T12478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2200'. [ 496.163861][T12486] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2202'. [ 496.637392][T12508] netlink: 'syz.4.2207': attribute type 10 has an invalid length. [ 496.699353][T12508] team0: Device nlmon0 is of different type [ 496.984732][T12518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2209'. [ 497.095553][T12522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2211'. [ 497.641291][T12539] netlink: 'syz.4.2216': attribute type 39 has an invalid length. [ 497.681821][T12550] netlink: 'syz.0.2218': attribute type 3 has an invalid length. [ 497.693801][T12550] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2218'. [ 497.820763][T12558] netlink: 'syz.2.2219': attribute type 29 has an invalid length. [ 497.821749][T12549] netlink: 'syz.0.2218': attribute type 3 has an invalid length. [ 497.848125][T12558] netlink: 'syz.2.2219': attribute type 29 has an invalid length. [ 497.860122][T12549] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2218'. [ 497.978389][T12566] netlink: 'syz.3.2222': attribute type 3 has an invalid length. [ 498.048278][T12566] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2222'. [ 498.243719][T12575] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2225'. [ 498.256432][T12575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 498.299822][T12575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.448466][T12576] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2225'. [ 498.485374][T12578] netlink: 'syz.2.2226': attribute type 16 has an invalid length. [ 498.507736][T12576] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 498.512523][T12578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2226'. [ 498.542775][T12576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.301094][T12590] device syzkaller0 entered promiscuous mode [ 499.430985][T12613] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2233'. [ 501.379778][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.386162][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.499357][T12634] validate_nla: 1 callbacks suppressed [ 501.499373][T12634] netlink: 'syz.2.2237': attribute type 13 has an invalid length. [ 501.516518][T12634] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2237'. [ 501.529423][T12634] syz_tun: refused to change device tx_queue_len [ 501.535855][T12634] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 501.698671][T12643] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2239'. [ 502.283212][T12661] netlink: 'syz.2.2242': attribute type 1 has an invalid length. [ 504.435077][T12718] netlink: 'syz.1.2259': attribute type 12 has an invalid length. [ 504.470260][T12718] netlink: 'syz.1.2259': attribute type 15 has an invalid length. [ 504.495778][T12716] netlink: 'syz.0.2256': attribute type 13 has an invalid length. [ 504.526248][T12716] netlink: 'syz.0.2256': attribute type 14 has an invalid length. [ 504.572518][T12716] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2256'. [ 506.307695][T12750] device syzkaller0 entered promiscuous mode [ 506.334210][T12752] netlink: 'syz.4.2268': attribute type 27 has an invalid length. [ 509.652772][T12767] netlink: 'syz.0.2275': attribute type 21 has an invalid length. [ 509.660863][T12774] netlink: 'syz.3.2276': attribute type 2 has an invalid length. [ 509.672641][T12774] netlink: 'syz.3.2276': attribute type 8 has an invalid length. [ 509.680966][T12774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2276'. [ 509.696364][T12782] netlink: 'syz.2.2279': attribute type 10 has an invalid length. [ 509.728415][T12782] device macvlan0 entered promiscuous mode [ 509.771250][T12782] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 509.793948][T12783] netlink: 'syz.1.2278': attribute type 13 has an invalid length. [ 509.807398][T12783] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2278'. [ 509.849359][T12783] syz_tun: refused to change device tx_queue_len [ 509.856273][T12783] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 509.907463][T12797] netlink: 'syz.0.2281': attribute type 10 has an invalid length. [ 509.942141][T12797] team0: Device wg1 is of different type [ 510.530953][T12809] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2284'. [ 510.544247][T12809] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 511.751849][T12847] netlink: 'syz.1.2295': attribute type 7 has an invalid length. [ 513.089368][T12877] netlink: 'syz.3.2305': attribute type 9 has an invalid length. [ 513.097210][T12877] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2305'. [ 513.494005][T12883] netlink: 'syz.0.2308': attribute type 21 has an invalid length. [ 513.531019][T12883] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2308'. [ 514.240930][T12919] netlink: 'syz.2.2315': attribute type 29 has an invalid length. [ 514.546626][T12925] device batadv0 entered promiscuous mode [ 514.692219][T12940] validate_nla: 1 callbacks suppressed [ 514.692240][T12940] netlink: 'syz.1.2321': attribute type 3 has an invalid length. [ 514.758035][T12940] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2321'. [ 516.074231][T12993] netlink: 'syz.1.2334': attribute type 2 has an invalid length. [ 516.149048][T12993] netlink: 'syz.1.2334': attribute type 8 has an invalid length. [ 516.204664][T12993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2334'. [ 516.336952][T13008] netlink: 'syz.1.2334': attribute type 2 has an invalid length. [ 516.460556][T13008] netlink: 'syz.1.2334': attribute type 8 has an invalid length. [ 516.472574][T13008] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2334'. [ 516.960097][T13023] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2344'. [ 517.443421][T13026] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2346'. [ 517.561934][T13032] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 517.663171][T13034] netlink: 'syz.3.2348': attribute type 3 has an invalid length. [ 517.697619][T13034] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2348'. [ 517.707720][T13032] device syz_tun entered promiscuous mode [ 517.847636][T13043] netlink: 'syz.0.2350': attribute type 8 has an invalid length. [ 517.866811][T13043] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2350'. [ 517.893504][T13032] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 518.566573][T13074] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 518.625197][T13075] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.2357'. [ 518.750298][T13075] netlink: zone id is out of range [ 518.755561][T13075] netlink: zone id is out of range [ 518.807128][T13074] team0: Port device geneve1 added [ 518.908731][T13075] netlink: zone id is out of range [ 518.913974][T13075] netlink: zone id is out of range [ 519.027618][T13075] netlink: zone id is out of range [ 519.057688][T13075] netlink: zone id is out of range [ 519.088094][T13075] netlink: zone id is out of range [ 519.093325][T13075] netlink: zone id is out of range [ 519.151668][T13075] netlink: zone id is out of range [ 519.156888][T13075] netlink: zone id is out of range [ 520.924517][T13120] netlink: 'syz.0.2368': attribute type 33 has an invalid length. [ 520.985626][T13120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2368'. [ 521.042079][T13120] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 521.982322][T13139] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2375'. [ 522.215976][T13146] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2374'. [ 522.422948][T13146] netlink: 4952 bytes leftover after parsing attributes in process `syz.4.2374'. [ 522.518931][T13146] tc_dump_action: action bad kind [ 523.596276][T13171] netlink: 'syz.2.2383': attribute type 21 has an invalid length. [ 523.625848][T13171] netlink: 'syz.2.2383': attribute type 2 has an invalid length. [ 523.663088][T13171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2383'. [ 523.720858][T13172] netlink: 8161 bytes leftover after parsing attributes in process `syz.3.2384'. [ 524.515694][T13190] net_ratelimit: 158 callbacks suppressed [ 524.515718][T13190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.084130][T13197] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 526.016327][T13211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2393'. [ 526.038998][T13213] netlink: 'syz.1.2393': attribute type 12 has an invalid length. [ 526.057223][T13213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2393'. [ 526.239968][T13218] netlink: 'syz.0.2396': attribute type 4 has an invalid length. [ 526.260251][T13218] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2396'. [ 526.482778][T13223] device syzkaller0 entered promiscuous mode [ 526.503135][T13230] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2399'. [ 526.517693][T13230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.557179][T13233] device wlan1 entered promiscuous mode [ 526.738235][T13237] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2402'. [ 526.855796][T13248] syz.0.2406[13248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 526.856012][T13248] syz.0.2406[13248] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 527.634547][T13274] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2410'. [ 529.427418][T13266] netlink: 'syz.3.2410': attribute type 41 has an invalid length. [ 529.435385][T13265] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2409'. [ 529.470086][T13274] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 529.719934][T13282] device wlan1 left promiscuous mode [ 529.761736][T13282] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2413'. [ 529.796867][T13291] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2417'. [ 529.962177][T13302] netlink: 'syz.0.2418': attribute type 2 has an invalid length. [ 530.156258][T13312] device veth1_macvtap left promiscuous mode [ 530.205995][T13312] device veth1_macvtap entered promiscuous mode [ 530.234769][T13312] device macsec0 entered promiscuous mode [ 531.101845][T13339] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2428'. [ 531.380653][T13353] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 531.395849][T13357] netlink: 'syz.0.2434': attribute type 13 has an invalid length. [ 531.406603][T13357] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2434'. [ 531.417718][T13357] syz_tun: refused to change device tx_queue_len [ 531.424131][T13357] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 531.457550][T13353] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 531.481714][T13358] netlink: 'syz.4.2432': attribute type 29 has an invalid length. [ 531.513651][T13363] netlink: 'syz.1.2435': attribute type 27 has an invalid length. [ 532.034634][T13382] netlink: 'syz.0.2440': attribute type 4 has an invalid length. [ 532.053991][T13383] netlink: 'syz.0.2440': attribute type 4 has an invalid length. [ 532.067618][T13382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2440'. [ 532.067985][T13383] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2440'. [ 532.125308][T13387] netlink: 'syz.3.2441': attribute type 39 has an invalid length. [ 532.824421][T13410] netlink: 'syz.1.2448': attribute type 29 has an invalid length. [ 533.022143][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 533.042217][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 533.080113][T13407] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2447'. [ 533.150847][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 533.211576][T13407] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2447'. [ 533.309527][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2447'. [ 533.470910][T13410] netlink: 'syz.1.2448': attribute type 29 has an invalid length. [ 534.227803][T13450] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.247272][T13450] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.305350][T13450] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.347125][T13450] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.577118][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 535.152364][T13472] : renamed from caif0 [ 535.340917][T13472] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 535.798530][ T4273] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 535.987215][T13516] device netdevsim0 entered promiscuous mode [ 536.314137][T13524] __nla_validate_parse: 5 callbacks suppressed [ 536.314160][T13524] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2479'. [ 536.913855][T13540] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2483'. [ 537.252040][T13547] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2484'. [ 537.395758][T13547] team0: Port device team_slave_0 removed [ 537.433988][T13547] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 537.705217][T13568] validate_nla: 5 callbacks suppressed [ 537.705238][T13568] netlink: 'syz.1.2492': attribute type 28 has an invalid length. [ 537.726620][T13568] netlink: 'syz.1.2492': attribute type 4 has an invalid length. [ 537.734607][T13568] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2492'. [ 537.746328][T13568] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2492'. [ 537.756887][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 537.779605][T13568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.821216][T13571] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2494'. [ 538.470579][T13600] netlink: 'syz.1.2502': attribute type 10 has an invalid length. [ 538.491412][T13600] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2502'. [ 538.648416][T13599] netlink: 'syz.1.2502': attribute type 10 has an invalid length. [ 538.722366][T13599] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2502'. [ 539.208816][T13613] netlink: 'syz.0.2499': attribute type 3 has an invalid length. [ 539.252848][T13613] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2499'. [ 540.736356][T13633] netlink: 'syz.1.2510': attribute type 11 has an invalid length. [ 541.367011][T13636] netlink: 'syz.3.2507': attribute type 39 has an invalid length. [ 542.035296][T13665] netlink: 'syz.1.2519': attribute type 10 has an invalid length. [ 543.400424][T13673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 543.530462][T13680] netlink: 'syz.4.2523': attribute type 16 has an invalid length. [ 543.667884][T13680] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2523'. [ 545.763648][T13704] netlink: 'syz.4.2527': attribute type 10 has an invalid length. [ 545.811294][T13704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2527'. [ 545.897498][T13704] device dummy0 entered promiscuous mode [ 545.904028][T13704] bridge0: port 3(dummy0) entered blocking state [ 545.997597][T13704] bridge0: port 3(dummy0) entered disabled state [ 546.047922][T13704] bridge0: port 3(dummy0) entered blocking state [ 546.054473][T13704] bridge0: port 3(dummy0) entered listening state [ 546.218142][T13718] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2530'. [ 547.050891][T13711] netlink: 'syz.3.2530': attribute type 2 has an invalid length. [ 547.079779][T13711] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2530'. [ 547.362480][T13732] device pim6reg1 entered promiscuous mode [ 547.660502][T13757] netlink: 'syz.2.2540': attribute type 9 has an invalid length. [ 547.680854][T13757] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2540'. [ 548.089273][ C0] bridge0: port 3(dummy0) entered learning state [ 548.664847][T13770] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2544'. [ 548.721324][T13772] netlink: 'syz.1.2546': attribute type 5 has an invalid length. [ 548.977921][T13782] netlink: 'syz.2.2548': attribute type 17 has an invalid length. [ 549.005917][T13782] netlink: 'syz.2.2548': attribute type 16 has an invalid length. [ 549.053670][T13787] netlink: 'syz.2.2548': attribute type 29 has an invalid length. [ 549.080157][T13782] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2548'. [ 549.249536][T13787] netlink: 'syz.2.2548': attribute type 29 has an invalid length. [ 549.294873][T13793] netlink: 'syz.2.2548': attribute type 29 has an invalid length. [ 549.661945][T13803] netlink: 'syz.3.2553': attribute type 7 has an invalid length. [ 550.177470][ C0] bridge0: port 3(dummy0) entered forwarding state [ 550.184129][ C0] bridge0: topology change detected, propagating [ 551.283742][T13863] netlink: 'syz.1.2566': attribute type 10 has an invalid length. [ 551.362417][T13867] netlink: 'syz.0.2568': attribute type 39 has an invalid length. [ 551.383718][T13867] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2568'. [ 551.681092][T13877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2572'. [ 551.771985][T13877] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2572'. [ 551.858325][T13879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2572'. [ 553.037132][T13905] netlink: 'syz.2.2581': attribute type 10 has an invalid length. [ 553.192916][T13905] team0: Device gre0 is of different type [ 554.259221][T13933] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2586'. [ 554.337108][T13923] Ÿ: renamed from syzkaller0 [ 554.988907][T13949] netlink: 'syz.3.2592': attribute type 10 has an invalid length. [ 555.633347][T13956] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 558.835290][T13979] netlink: 'syz.0.2599': attribute type 2 has an invalid length. [ 559.093531][T13979] device 0 entered promiscuous mode [ 559.753000][T14004] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2606'. [ 560.219361][T14024] netlink: 'syz.0.2612': attribute type 3 has an invalid length. [ 560.258169][T14024] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2612'. [ 560.533607][T14037] netlink: 'syz.3.2617': attribute type 2 has an invalid length. [ 560.566665][T14037] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2617'. [ 561.043450][T14058] netlink: 'syz.4.2623': attribute type 3 has an invalid length. [ 561.100848][T14058] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2623'. [ 561.112375][T14064] netlink: 'syz.3.2622': attribute type 29 has an invalid length. [ 561.136630][T14065] delete_channel: no stack [ 561.153521][T14065] delete_channel: no stack [ 561.228542][T14064] netlink: 'syz.3.2622': attribute type 29 has an invalid length. [ 561.369750][T14055] netlink: 'syz.3.2622': attribute type 29 has an invalid length. [ 561.382382][T14067] netlink: 'syz.3.2622': attribute type 29 has an invalid length. [ 561.422091][T14074] netlink: 'syz.4.2627': attribute type 1 has an invalid length. [ 561.467694][T14074] netlink: 'syz.4.2627': attribute type 3 has an invalid length. [ 561.489754][T14074] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2627'. [ 561.615170][T14080] netlink: 'syz.2.2628': attribute type 1 has an invalid length. [ 561.667349][T14080] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2628'. [ 562.183451][T14123] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2639'. [ 562.292052][T14125] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2640'. [ 562.494095][T14123] device syzkaller0 entered promiscuous mode [ 562.836939][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.843366][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.745863][T14146] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 565.761856][T14146] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 565.763018][T14175] validate_nla: 1 callbacks suppressed [ 565.763064][T14175] netlink: 'syz.4.2651': attribute type 10 has an invalid length. [ 565.774388][T14146] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 567.099844][T14215] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2664'. [ 567.694669][T14246] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2672'. [ 567.704186][T14246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.382038][T14266] netlink: 'syz.2.2676': attribute type 10 has an invalid length. [ 568.480698][T14269] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2678'. [ 568.766227][T14266] team0: Port device wlan1 added [ 569.708762][T14306] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2687'. [ 569.727954][T14305] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2688'. [ 569.740955][T14306] openvswitch: netlink: Message has 6 unknown bytes. [ 570.109778][T14311] device syzkaller0 entered promiscuous mode [ 573.030318][T14331] netlink: 'syz.2.2695': attribute type 10 has an invalid length. [ 573.059065][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.079059][T14331] device bridge_slave_1 left promiscuous mode [ 573.085377][T14331] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.102162][T14331] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 573.122231][T14335] netlink: 'syz.4.2696': attribute type 10 has an invalid length. [ 573.159868][T14335] team0: Port device veth0_to_bond added [ 573.269104][T14338] netlink: 'syz.1.2698': attribute type 10 has an invalid length. [ 573.385936][T14340] device syzkaller0 entered promiscuous mode [ 573.432786][T14338] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2698'. [ 573.746875][T14350] netlink: 'syz.2.2701': attribute type 6 has an invalid length. [ 573.757458][T14350] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2701'. [ 574.438525][T14377] netlink: 'syz.3.2707': attribute type 1 has an invalid length. [ 574.446378][T14377] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2707'. [ 576.498645][T14358] netlink: 'syz.1.2703': attribute type 21 has an invalid length. [ 576.506604][T14358] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2703'. [ 576.547499][T14361] netlink: 'syz.2.2704': attribute type 8 has an invalid length. [ 576.555304][T14361] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2704'. [ 576.774500][T14399] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2716'. [ 576.896911][T14405] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2713'. [ 576.928524][T14396] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2713'. [ 577.381741][T14428] netlink: 'syz.0.2723': attribute type 3 has an invalid length. [ 577.403085][T14430] netlink: 'syz.3.2724': attribute type 19 has an invalid length. [ 577.416754][T14428] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2723'. [ 577.443470][T14430] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2724'. [ 579.229554][T14508] netlink: 'syz.1.2733': attribute type 2 has an invalid length. [ 579.241983][T14508] netlink: 'syz.1.2733': attribute type 8 has an invalid length. [ 579.250717][T14508] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2733'. [ 579.310417][T14515] netlink: 'syz.1.2733': attribute type 2 has an invalid length. [ 579.330219][T14515] netlink: 'syz.1.2733': attribute type 8 has an invalid length. [ 579.349472][T14515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2733'. [ 579.655684][T14510] netlink: 'syz.4.2734': attribute type 10 has an invalid length. [ 579.681128][T14510] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2734'. [ 579.714136][T14510] device bond0 entered promiscuous mode [ 579.731585][T14510] device bond_slave_0 entered promiscuous mode [ 579.749794][T14510] device bond_slave_1 entered promiscuous mode [ 579.773388][T14510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.847377][T14510] bridge0: port 4(bond0) entered blocking state [ 579.856008][T14510] bridge0: port 4(bond0) entered disabled state [ 579.866452][T14510] bridge0: port 4(bond0) entered blocking state [ 579.873261][T14510] bridge0: port 4(bond0) entered listening state [ 580.327843][T14529] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 580.456357][T14532] netlink: 'syz.4.2738': attribute type 21 has an invalid length. [ 580.498520][T14532] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2738'. [ 580.576768][T14532] netlink: 'syz.4.2738': attribute type 4 has an invalid length. [ 580.610704][T14532] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2738'. [ 581.573520][T14572] syz.0.2750[14572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.895915][T14584] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2753'. [ 581.929073][ C0] bridge0: port 4(bond0) entered learning state [ 583.239814][T14630] netlink: 'syz.2.2765': attribute type 10 has an invalid length. [ 583.283770][T14626] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2766'. [ 583.334362][T14632] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2766'. [ 583.725362][T14642] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2769'. [ 583.919201][T14642] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 583.961657][T14642] CPU: 1 PID: 14642 Comm: syz.4.2769 Not tainted syzkaller #0 [ 583.969236][T14642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.979355][T14642] Call Trace: [ 583.982690][T14642] [ 583.985665][T14642] dump_stack_lvl+0x188/0x24e [ 583.990416][T14642] ? show_regs_print_info+0x12/0x12 [ 583.995672][T14642] ? load_image+0x410/0x410 [ 584.000248][T14642] sysfs_warn_dup+0x8a/0xa0 [ 584.004820][T14642] sysfs_do_create_link_sd+0xc0/0x110 [ 584.010251][T14642] device_add+0x83b/0x1050 [ 584.014733][T14642] wiphy_register+0x1d8b/0x2aa0 [ 584.019019][ C0] bridge0: port 4(bond0) entered forwarding state [ 584.019646][T14642] ? cfg80211_event_work+0x40/0x40 [ 584.019717][T14642] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 584.019774][T14642] ieee80211_register_hw+0x2d48/0x39f0 [ 584.019814][T14642] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 584.026599][ C0] bridge0: topology change detected, propagating [ 584.031382][T14642] ? ieee80211_register_hw+0xf61/0x39f0 [ 584.031417][T14642] ? ieee80211_register_hw+0xf61/0x39f0 [ 584.031461][T14642] ? ieee80211_tasklet_handler+0x20/0x20 [ 584.072435][T14642] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 584.078419][T14642] ? __debug_object_init+0xed/0x440 [ 584.083675][T14642] ? memset+0x1e/0x40 [ 584.087732][T14642] ? __hrtimer_init+0x189/0x270 [ 584.092637][T14642] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 584.098426][T14642] ? memcpy+0x3c/0x60 [ 584.102460][T14642] hwsim_new_radio_nl+0xab7/0xc90 [ 584.107567][T14642] genl_family_rcv_msg_doit+0x22f/0x350 [ 584.113165][T14642] ? end_current_label_crit_section+0x170/0x170 [ 584.119472][T14642] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 584.125429][T14642] ? bpf_lsm_capable+0x5/0x10 [ 584.130163][T14642] ? security_capable+0x85/0xb0 [ 584.135081][T14642] genl_rcv_msg+0x601/0x790 [ 584.139651][T14642] ? genl_bind+0x360/0x360 [ 584.144120][T14642] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 584.150525][T14642] netlink_rcv_skb+0x1ef/0x440 [ 584.155357][T14642] ? genl_bind+0x360/0x360 [ 584.159826][T14642] ? netlink_ack+0x1160/0x1160 [ 584.164669][T14642] ? down_read+0x1a8/0x2d0 [ 584.169144][T14642] genl_rcv+0x24/0x40 [ 584.173178][T14642] netlink_unicast+0x7ad/0x920 [ 584.178012][T14642] netlink_sendmsg+0x8ad/0xbd0 [ 584.182891][T14642] ? netlink_getsockopt+0x550/0x550 [ 584.188150][T14642] ? apparmor_socket_sendmsg+0x8a/0x330 [ 584.193753][T14642] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 584.199088][T14642] ? security_socket_sendmsg+0x7c/0xa0 [ 584.204601][T14642] ? netlink_getsockopt+0x550/0x550 [ 584.209857][T14642] ____sys_sendmsg+0x5ed/0x9a0 [ 584.214691][T14642] ? __sys_sendmsg_sock+0x30/0x30 [ 584.219769][T14642] ? __import_iovec+0x306/0x510 [ 584.224689][T14642] ? import_iovec+0x6f/0xa0 [ 584.229258][T14642] ___sys_sendmsg+0x2a2/0x360 [ 584.234007][T14642] ? __sys_sendmsg+0x2a0/0x2a0 [ 584.238853][T14642] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 584.244701][T14642] __se_sys_sendmsg+0x1c3/0x2b0 [ 584.249609][T14642] ? __x64_sys_sendmsg+0x80/0x80 [ 584.254636][T14642] ? syscall_enter_from_user_mode+0x2a/0x80 [ 584.260604][T14642] do_syscall_64+0x4c/0xa0 [ 584.265085][T14642] ? clear_bhb_loop+0x60/0xb0 [ 584.269830][T14642] ? clear_bhb_loop+0x60/0xb0 [ 584.274571][T14642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.280521][T14642] RIP: 0033:0x7ff45699e0d9 [ 584.284976][T14642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.304637][T14642] RSP: 002b:00007ff4578c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.313113][T14642] RAX: ffffffffffffffda RBX: 00007ff456c26090 RCX: 00007ff45699e0d9 [ 584.321138][T14642] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 584.329152][T14642] RBP: 00007ff456a35024 R08: 0000000000000000 R09: 0000000000000000 [ 584.337158][T14642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.345168][T14642] R13: 00007ff456c26128 R14: 00007ff456c26090 R15: 00007fff17ce9d68 [ 584.353183][T14642] [ 584.783055][T14668] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2774'. [ 584.853650][T14666] netlink: 'syz.0.2773': attribute type 2 has an invalid length. [ 585.890916][T14694] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2782'. [ 587.025535][T14729] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2791'. [ 587.047868][T14729] netlink: 'syz.4.2791': attribute type 8 has an invalid length. [ 587.271553][T14740] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2792'. [ 589.787588][T14753] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 589.795399][T14753] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2795'. [ 590.228023][T14768] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2800'. [ 590.518337][T14780] netlink: 126612 bytes leftover after parsing attributes in process `syz.4.2803'. [ 590.527969][T14780] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2803'. [ 590.561885][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 590.738149][T14782] netlink: 'syz.4.2803': attribute type 10 has an invalid length. [ 590.804767][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.851346][T14782] device bridge_slave_1 left promiscuous mode [ 590.874617][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.104730][T14782] device bridge_slave_1 entered promiscuous mode [ 591.196454][T14782] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 591.849083][T14800] netlink: 'syz.3.2808': attribute type 3 has an invalid length. [ 591.856950][T14800] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2808'. [ 592.075571][T14814] netlink: 'syz.0.2812': attribute type 21 has an invalid length. [ 592.135472][T14814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.144042][T14814] IPv6: NLM_F_CREATE should be set when creating new route [ 592.154027][T14814] IPv6: NLM_F_CREATE should be set when creating new route [ 592.163327][T14809] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 592.163589][T14814] IPv6: NLM_F_CREATE should be set when creating new route [ 592.192225][T14809] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2811'. [ 592.220565][T14816] netlink: 'syz.1.2811': attribute type 29 has an invalid length. [ 592.231799][T14816] netlink: 'syz.1.2811': attribute type 29 has an invalid length. [ 592.470771][T14827] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2816'. [ 593.850544][T14840] tap0: tun_chr_ioctl cmd 1074025688 [ 593.925043][T14844] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2822'. [ 593.998553][T14846] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2823'. [ 594.832721][T14871] __nla_validate_parse: 1 callbacks suppressed [ 594.832741][T14871] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.2829'. [ 594.897016][T14871] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.2829'. [ 594.927686][T14871] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.2829'. [ 595.018170][T14879] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2833'. [ 595.154662][T14881] tap0: tun_chr_ioctl cmd 1074025688 [ 595.206756][T14881] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 595.225380][T14881] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 595.244521][T14881] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 595.270631][T14881] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 595.513717][T14892] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2837'. [ 595.613875][ T4273] Bluetooth: hci2: command 0x0406 tx timeout [ 596.579840][T14908] netlink: 'syz.0.2840': attribute type 10 has an invalid length. [ 596.616444][T14908] device netdevsim0 entered promiscuous mode [ 596.717182][T14913] netlink: 'syz.1.2841': attribute type 21 has an invalid length. [ 596.737242][T14913] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.766041][T14913] IPv6: Can't replace route, no match found [ 597.295562][T14917] netlink: 'syz.2.2842': attribute type 10 has an invalid length. [ 597.307387][T14917] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2842'. [ 597.368677][T14919] netlink: 'syz.2.2842': attribute type 39 has an invalid length. [ 599.052225][T14994] netlink: 'syz.4.2863': attribute type 21 has an invalid length. [ 599.098157][T14994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2863'. [ 599.183607][T14994] netlink: 'syz.4.2863': attribute type 21 has an invalid length. [ 599.219874][T14994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2863'. [ 599.344441][T15008] netlink: 'syz.1.2866': attribute type 29 has an invalid length. [ 599.346842][T14994] netlink: 'syz.4.2863': attribute type 21 has an invalid length. [ 599.405917][T14994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2863'. [ 599.457511][T14994] netlink: 'syz.4.2863': attribute type 21 has an invalid length. [ 599.475640][T14994] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2863'. [ 599.532212][T15008] netlink: 'syz.1.2866': attribute type 29 has an invalid length. [ 600.100681][T15027] __nla_validate_parse: 61 callbacks suppressed [ 600.100700][T15027] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2871'. [ 600.169377][T15026] delete_channel: no stack [ 600.470662][T15049] netlink: 355 bytes leftover after parsing attributes in process `syz.0.2877'. [ 601.017737][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.078498][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.118425][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.192795][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.224685][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.296080][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.340191][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.412897][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2886'. [ 601.605491][T15081] validate_nla: 91 callbacks suppressed [ 601.605510][T15081] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 601.658943][T15081] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 601.774055][T15081] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 601.788479][T15081] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 601.856184][T15081] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 602.232832][T15107] netlink: 'syz.3.2891': attribute type 21 has an invalid length. [ 602.966690][T15105] tipc: Started in network mode [ 602.975165][T15105] tipc: Node identity 9215a268, cluster identity 4711 [ 602.986901][T15105] tipc: Node number set to 2450891368 [ 603.281079][T15132] netlink: 'syz.3.2897': attribute type 11 has an invalid length. [ 603.318175][T15130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.535040][T15152] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 604.560980][T15152] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 604.582009][T15152] device veth0_to_bridge entered promiscuous mode [ 605.225533][T15177] __nla_validate_parse: 28 callbacks suppressed [ 605.225562][T15177] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2911'. [ 606.007192][T15207] cgroup: fork rejected by pids controller in /syz0 [ 609.953489][T15224] bridge0: port 4(bond0) entered disabled state [ 609.960409][T15224] bridge0: port 3(dummy0) entered disabled state [ 609.966950][T15224] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.070871][T15223] netlink: 'syz.1.2926': attribute type 10 has an invalid length. [ 610.086914][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.212749][T15222] netlink: 'syz.1.2926': attribute type 10 has an invalid length. [ 610.343750][T15239] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2925'. [ 610.803602][T15247] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2928'. [ 610.819746][T15247] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2928'. [ 610.999741][T15255] batadv_slave_0: mtu less than device minimum [ 611.009239][T14486] device 0 left promiscuous mode [ 611.091577][T15257] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.2933'. [ 611.127813][T15257] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.2933'. [ 611.406297][T15262] netlink: 'syz.4.2935': attribute type 4 has an invalid length. [ 611.428910][T15262] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2935'. [ 611.509589][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.519542][ T4273] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.528336][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.536310][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.547478][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 611.555078][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 613.490250][T15288] netlink: 'syz.4.2937': attribute type 21 has an invalid length. [ 613.607510][ T4280] Bluetooth: hci4: command 0x0409 tx timeout [ 613.721803][T15305] netlink: 'syz.2.2941': attribute type 21 has an invalid length. [ 613.747080][T15305] netlink: 'syz.2.2941': attribute type 1 has an invalid length. [ 613.777031][T15305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2941'. [ 613.797094][T15308] delete_channel: no stack [ 614.113049][T15270] chnl_net:caif_netlink_parms(): no params data found [ 614.812682][T15346] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2949'. [ 614.853420][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.863200][T15270] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.876740][T15270] device bridge_slave_0 entered promiscuous mode [ 614.909294][T15346] netlink: 'syz.3.2949': attribute type 1 has an invalid length. [ 614.919712][T15346] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.2949'. [ 614.969677][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.987106][T15270] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.996049][T15270] device bridge_slave_1 entered promiscuous mode [ 615.064843][T15351] device veth1_macvtap left promiscuous mode [ 615.122440][T15353] device veth1_macvtap entered promiscuous mode [ 615.172095][T15270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.231157][T15270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.296191][T15270] team0: Port device team_slave_0 added [ 615.323297][T14486] device veth0_to_bridge left promiscuous mode [ 615.331062][T14486] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 615.354781][T14486] device hsr_slave_0 left promiscuous mode [ 615.373503][T14486] device hsr_slave_1 left promiscuous mode [ 615.390580][T14486] bridge0: port 3(dummy0) entered disabled state [ 615.419168][T14486] device bridge_slave_1 left promiscuous mode [ 615.437160][T14486] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.456581][T14486] device bridge_slave_0 left promiscuous mode [ 615.471121][T14486] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.687461][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 615.868320][T15376] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2955'. [ 615.884267][T14486] team0 (unregistering): Port device geneve1 removed [ 616.241572][T14486] team0 (unregistering): Port device team_slave_1 removed [ 616.294530][T14486] team0 (unregistering): Port device team_slave_0 removed [ 616.790398][T15270] team0: Port device team_slave_1 added [ 616.951196][T15270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.978728][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.028658][T15270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.050834][T15270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.057998][T15270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.086287][T15270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.342804][T15394] device syzkaller0 entered promiscuous mode [ 617.388864][T15270] device hsr_slave_0 entered promiscuous mode [ 617.428540][T15270] device hsr_slave_1 entered promiscuous mode [ 617.455765][T15270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.469271][T15270] Cannot create hsr debugfs directory [ 617.767475][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 618.377963][T15437] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2969'. [ 619.848763][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 620.289261][T15448] netlink: 'syz.3.2972': attribute type 3 has an invalid length. [ 620.342774][T15448] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2972'. [ 620.632548][T15469] netlink: 'syz.4.2977': attribute type 3 has an invalid length. [ 620.685256][T15468] netlink: 'syz.4.2977': attribute type 3 has an invalid length. [ 620.706610][T15468] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2977'. [ 620.742730][T15469] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2977'. [ 620.780524][T15471] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2978'. [ 620.960798][T15479] netlink: 'syz.2.2980': attribute type 3 has an invalid length. [ 621.013753][T15479] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2980'. [ 621.363774][T15502] netlink: 'syz.4.2986': attribute type 29 has an invalid length. [ 621.450986][T15495] netlink: 'syz.3.2982': attribute type 4 has an invalid length. [ 621.462355][T15495] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2982'. [ 621.475869][T15502] netlink: 'syz.4.2986': attribute type 29 has an invalid length. [ 623.551180][T15520] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.2988'. [ 623.590147][T15270] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 623.659071][T15270] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 623.696120][T15270] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 623.803433][T15270] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 623.968432][T15540] netlink: 'syz.3.2993': attribute type 6 has an invalid length. [ 624.078625][T15540] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2993'. [ 624.228917][T15545] netlink: 'syz.2.2994': attribute type 28 has an invalid length. [ 624.250491][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.256850][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.451932][T15270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.526484][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.559739][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.605428][T15270] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.642221][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.674410][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.713108][ T4935] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.720385][ T4935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.762861][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.826797][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.855799][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.873030][T14486] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.880280][T14486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.917475][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.926316][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.959552][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 625.006507][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 625.030048][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 625.081911][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.196493][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 625.244312][T14489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.268426][T14489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.311620][T15270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.373801][T15270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.415922][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.425753][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.552728][T15591] netlink: 'syz.2.3006': attribute type 12 has an invalid length. [ 625.587694][T15591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3006'. [ 626.752159][T15617] netlink: 'syz.1.3010': attribute type 1 has an invalid length. [ 626.784951][T15617] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3010'. [ 629.238843][T14487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.264929][T14487] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.571811][T15270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.796035][T14487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.805508][T14487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.889805][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 629.947037][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 629.971509][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 629.988280][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.021167][T15270] device veth0_vlan entered promiscuous mode [ 630.107010][T15270] device veth1_vlan entered promiscuous mode [ 630.248297][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 630.280359][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 630.361208][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.375432][T14486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.421527][T15270] device veth0_macvtap entered promiscuous mode [ 630.535429][T15270] device veth1_macvtap entered promiscuous mode [ 630.713368][T15270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.747760][T15270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.767528][T15270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.788333][T15270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.842806][T15270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.864167][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 630.884146][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 630.917784][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 630.928295][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 630.958799][T15270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 630.978114][T15270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.997757][T15270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.028758][T15270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.074886][T15270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.118643][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 631.156425][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.187475][T15270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.218578][T15270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.233699][T15270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.244172][T15270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.689037][T15691] : port 1(ip6gretap0) entered blocking state [ 631.695329][T15691] : port 1(ip6gretap0) entered disabled state [ 631.728889][T15691] device ip6gretap0 entered promiscuous mode [ 631.899740][T14487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.952361][T14487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.066891][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 632.093123][T14487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.112193][T14487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.134535][ T4935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 632.823372][T15715] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3028'. [ 632.838231][T15715] netlink: zone id is out of range [ 632.844375][T15715] netlink: zone id is out of range [ 632.852335][T15715] netlink: zone id is out of range [ 632.861445][T15715] netlink: zone id is out of range [ 632.883343][T15715] netlink: zone id is out of range [ 632.916427][T15715] netlink: zone id is out of range [ 632.925038][T15715] netlink: zone id is out of range [ 632.992329][T15715] netlink: zone id is out of range [ 633.027840][T15715] netlink: zone id is out of range [ 633.061141][T15715] netlink: zone id is out of range [ 634.233841][ T4273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 634.244492][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 634.253107][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 634.262098][ T4273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 634.272010][ T4287] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 634.279959][ T4287] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 634.532532][ T4935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.724376][ T4935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.337801][ T4273] Bluetooth: hci3: command 0x0409 tx timeout [ 637.003543][ T4935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.047153][T15777] tap0: tun_chr_ioctl cmd 1074025688 [ 637.165636][ T4935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.336525][T15795] netlink: 'syz.1.3044': attribute type 2 has an invalid length. [ 637.581031][T15795] device 0 entered promiscuous mode [ 638.015017][T15746] chnl_net:caif_netlink_parms(): no params data found [ 638.391997][T15746] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.423611][ T4273] Bluetooth: hci3: command 0x041b tx timeout [ 638.462948][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.499466][T15746] device bridge_slave_0 entered promiscuous mode [ 638.539022][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.546223][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.602803][T15746] device bridge_slave_1 entered promiscuous mode [ 638.680158][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.716824][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.828143][T15746] team0: Port device team_slave_0 added [ 638.852118][T15746] team0: Port device team_slave_1 added [ 638.910762][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.931068][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.958063][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.974582][ T4935] device 0 left promiscuous mode [ 639.068447][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.075474][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.186747][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.497727][ T4273] Bluetooth: hci3: command 0x040f tx timeout [ 641.898018][ T4935] device ip6gretap0 left promiscuous mode [ 641.924540][ T4935] : port 1(ip6gretap0) entered disabled state [ 642.082055][T15746] device hsr_slave_0 entered promiscuous mode [ 642.133967][T15746] device hsr_slave_1 entered promiscuous mode [ 642.144378][T15746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.152622][T15746] Cannot create hsr debugfs directory [ 642.284695][T15873] netlink: 'syz.4.3056': attribute type 2 has an invalid length. [ 642.333057][T15875] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3056'. [ 642.493483][T15873] device 0 entered promiscuous mode [ 642.508350][T15880] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 642.567820][ T4273] Bluetooth: hci3: command 0x0419 tx timeout [ 642.591238][T15875] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 642.617540][T15875] CPU: 1 PID: 15875 Comm: syz.4.3056 Not tainted syzkaller #0 [ 642.625093][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 642.635205][T15875] Call Trace: [ 642.638530][T15875] [ 642.641500][T15875] dump_stack_lvl+0x188/0x24e [ 642.646296][T15875] ? show_regs_print_info+0x12/0x12 [ 642.651551][T15875] ? load_image+0x410/0x410 [ 642.656136][T15875] sysfs_warn_dup+0x8a/0xa0 [ 642.660702][T15875] sysfs_do_create_link_sd+0xc0/0x110 [ 642.666142][T15875] device_add+0x83b/0x1050 [ 642.670633][T15875] wiphy_register+0x1d8b/0x2aa0 [ 642.675572][T15875] ? cfg80211_event_work+0x40/0x40 [ 642.680760][T15875] ? minstrel_ht_alloc+0x894/0xa20 [ 642.685943][T15875] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 642.692073][T15875] ieee80211_register_hw+0x2d48/0x39f0 [ 642.697610][T15875] ? ieee80211_register_hw+0xf61/0x39f0 [ 642.703212][T15875] ? ieee80211_register_hw+0xf61/0x39f0 [ 642.708827][T15875] ? ieee80211_tasklet_handler+0x20/0x20 [ 642.714518][T15875] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 642.720472][T15875] ? __debug_object_init+0xed/0x440 [ 642.725719][T15875] ? memset+0x1e/0x40 [ 642.729748][T15875] ? __hrtimer_init+0x189/0x270 [ 642.734652][T15875] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 642.740444][T15875] ? memcpy+0x3c/0x60 [ 642.744491][T15875] hwsim_new_radio_nl+0xab7/0xc90 [ 642.749604][T15875] genl_family_rcv_msg_doit+0x22f/0x350 [ 642.755211][T15875] ? end_current_label_crit_section+0x170/0x170 [ 642.761523][T15875] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 642.767476][T15875] ? bpf_lsm_capable+0x5/0x10 [ 642.772213][T15875] ? security_capable+0x85/0xb0 [ 642.777136][T15875] genl_rcv_msg+0x601/0x790 [ 642.781693][T15875] ? lock_chain_count+0x20/0x20 [ 642.786614][T15875] ? genl_bind+0x360/0x360 [ 642.791082][T15875] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 642.797492][T15875] netlink_rcv_skb+0x1ef/0x440 [ 642.802321][T15875] ? genl_bind+0x360/0x360 [ 642.806810][T15875] ? netlink_ack+0x1160/0x1160 [ 642.811667][T15875] ? down_read+0x1a8/0x2d0 [ 642.816140][T15875] genl_rcv+0x24/0x40 [ 642.820176][T15875] netlink_unicast+0x7ad/0x920 [ 642.825015][T15875] netlink_sendmsg+0x8ad/0xbd0 [ 642.829841][T15875] ? netlink_getsockopt+0x550/0x550 [ 642.835100][T15875] ? apparmor_socket_sendmsg+0x8a/0x330 [ 642.840706][T15875] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 642.846042][T15875] ? security_socket_sendmsg+0x7c/0xa0 [ 642.851562][T15875] ? netlink_getsockopt+0x550/0x550 [ 642.856842][T15875] ____sys_sendmsg+0x5ed/0x9a0 [ 642.861690][T15875] ? __sys_sendmsg_sock+0x30/0x30 [ 642.866776][T15875] ? __import_iovec+0x306/0x510 [ 642.871703][T15875] ? import_iovec+0x6f/0xa0 [ 642.876278][T15875] ___sys_sendmsg+0x2a2/0x360 [ 642.881020][T15875] ? __sys_sendmsg+0x2a0/0x2a0 [ 642.885911][T15875] __se_sys_sendmsg+0x1c3/0x2b0 [ 642.890822][T15875] ? ct_nmi_exit+0x145/0x1c0 [ 642.895475][T15875] ? __x64_sys_sendmsg+0x80/0x80 [ 642.900501][T15875] ? lockdep_hardirqs_on+0x94/0x140 [ 642.905763][T15875] do_syscall_64+0x4c/0xa0 [ 642.910273][T15875] ? clear_bhb_loop+0x60/0xb0 [ 642.915034][T15875] ? clear_bhb_loop+0x60/0xb0 [ 642.919787][T15875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.925746][T15875] RIP: 0033:0x7ff45699e0d9 [ 642.930209][T15875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.949875][T15875] RSP: 002b:00007ff4578c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.958352][T15875] RAX: ffffffffffffffda RBX: 00007ff456c26090 RCX: 00007ff45699e0d9 [ 642.966377][T15875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 642.974402][T15875] RBP: 00007ff456a35024 R08: 0000000000000000 R09: 0000000000000000 [ 642.982431][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.990463][T15875] R13: 00007ff456c26128 R14: 00007ff456c26090 R15: 00007fff17ce9d68 [ 642.998508][T15875] [ 644.281333][T15746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 670.977949][ T4323] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2647 jiffies s: 85197 root: 0x2/. [ 671.011916][ T4323] rcu: blocking rcu_node structures (internal RCU debug): [ 671.035890][ T4323] Sending NMI from CPU 0 to CPUs 1: [ 671.041479][ C1] NMI backtrace for cpu 1 [ 671.041489][ C1] CPU: 1 PID: 15913 Comm: syz.2.3062 Not tainted syzkaller #0 [ 671.041506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.041515][ C1] RIP: 0010:__lock_acquire+0x671/0x7c40 [ 671.041546][ C1] Code: 00 31 db 48 81 c3 b9 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 c0 60 00 00 45 84 f6 0f 84 7b 05 00 00 0f b6 1b <48> 8b 44 24 40 42 0f b6 04 00 84 c0 0f 85 8a 61 00 00 41 f6 47 01 [ 671.041561][ C1] RSP: 0018:ffffc900001e0260 EFLAGS: 00000002 [ 671.041576][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff816404f5 [ 671.041587][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b12240 [ 671.041597][ C1] RBP: ffffc900001e0490 R08: dffffc0000000000 R09: 1ffffffff2162448 [ 671.041610][ C1] R10: dffffc0000000000 R11: fffffbfff2162449 R12: ffff88802c7164d8 [ 671.041623][ C1] R13: ffff88802c715a00 R14: 0000000000000002 R15: ffff88802c7165a0 [ 671.041635][ C1] FS: 00007fc8052386c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 671.041649][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 671.041661][ C1] CR2: 0000001b2fd18ff8 CR3: 00000000629b7000 CR4: 00000000003506e0 [ 671.041676][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 671.041687][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 671.041699][ C1] Call Trace: [ 671.041704][ C1] [ 671.041715][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 671.041749][ C1] ? verify_lock_unused+0x140/0x140 [ 671.041774][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 671.041798][ C1] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 671.041817][ C1] ? mark_lock+0x94/0x320 [ 671.041842][ C1] ? __lock_acquire+0x138a/0x7c40 [ 671.041870][ C1] lock_acquire+0x1bb/0x4a0 [ 671.041891][ C1] ? __virt_addr_valid+0x188/0x540 [ 671.042005][ C1] ? read_lock_is_recursive+0x10/0x10 [ 671.042029][ C1] ? verify_lock_unused+0x140/0x140 [ 671.042053][ C1] ? perf_trace_lock_acquire+0x101/0x3f0 [ 671.042076][ C1] ? __virt_addr_valid+0x188/0x540 [ 671.042098][ C1] __virt_addr_valid+0x1a5/0x540 [ 671.042128][ C1] ? __virt_addr_valid+0x188/0x540 [ 671.042153][ C1] kasan_addr_to_slab+0x9/0xc0 [ 671.042176][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 671.042193][ C1] irq_work_queue_on+0x10f/0x260 [ 671.042262][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 671.042306][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 671.042324][ C1] ? __cant_sleep+0x220/0x220 [ 671.042345][ C1] __rcu_read_unlock+0x78/0xd0 [ 671.042361][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 671.042408][ C1] trace_call_bpf+0x5bb/0x6b0 [ 671.042431][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 671.042457][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 671.042484][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 671.042499][ C1] ? sched_clock_cpu+0x6e/0x260 [ 671.042522][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 671.042552][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 671.042599][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 671.042625][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 671.042651][ C1] ? __irq_exit_rcu+0x147/0x230 [ 671.042668][ C1] ? irq_exit_rcu+0x20/0x20 [ 671.042686][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 671.042710][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 671.042735][ C1] trace_hardirqs_on+0x24/0x40 [ 671.042756][ C1] asm_sysvec_irq_work+0x16/0x20 [ 671.042779][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 671.042797][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 671.042811][ C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206 [ 671.042824][ C1] RAX: f4b410b042219400 RBX: 1ffff9200003c164 RCX: f4b410b042219400 [ 671.042837][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1820 RDI: ffffffff8adf5fa0 [ 671.042849][ C1] RBP: ffffc900001e0bd0 R08: ffffffff90b1226f R09: 1ffffffff216244d [ 671.042862][ C1] R10: dffffc0000000000 R11: fffffbfff216244e R12: 0000000000000246 [ 671.042873][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 671.042898][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 671.042924][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 671.042939][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 671.042960][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 671.042980][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 671.043037][ C1] __rcu_read_unlock+0x78/0xd0 [ 671.043053][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 671.043079][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 671.043096][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 671.043130][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 671.043158][ C1] __hrtimer_run_queues+0x522/0xc90 [ 671.043182][ C1] ? hw_scan_work+0xf00/0xf00 [ 671.043213][ C1] ? hrtimer_interrupt+0x980/0x980 [ 671.043237][ C1] hrtimer_run_softirq+0x173/0x290 [ 671.043260][ C1] handle_softirqs+0x291/0x910 [ 671.043279][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 671.043298][ C1] ? do_softirq+0x210/0x210 [ 671.043312][ C1] ? hrtimer_interrupt+0x775/0x980 [ 671.043336][ C1] __irq_exit_rcu+0x13b/0x230 [ 671.043352][ C1] ? irq_exit_rcu+0x20/0x20 [ 671.043374][ C1] irq_exit_rcu+0x5/0x20 [ 671.043388][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 671.043407][ C1] [ 671.043412][ C1] [ 671.043417][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 671.043441][ C1] RIP: 0010:perf_trace_init+0x9e/0x2d0 [ 671.043460][ C1] Code: 80 2e b8 8c 0f 84 75 01 00 00 4c 89 24 24 4c 8d 63 40 4c 89 e0 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 17 01 00 00 4d 63 24 24 <4c> 89 ff 4c 89 e6 e8 a7 04 f8 ff 4d 39 e7 0f 85 a9 00 00 00 4c 8d [ 671.043473][ C1] RSP: 0018:ffffc9000399fc38 EFLAGS: 00000246 [ 671.043486][ C1] RAX: 0000000000000000 RBX: ffffffff8def6ae0 RCX: 0000000000080000 [ 671.043497][ C1] RDX: ffffc9000d279000 RSI: 0000000000003137 RDI: 0000000000003138 [ 671.043508][ C1] RBP: 0000000000000002 R08: ffffffff8e2118af R09: 1ffffffff1c42315 [ 671.043520][ C1] R10: dffffc0000000000 R11: fffffbfff1c42316 R12: 0000000000000c5d [ 671.043531][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000011c [ 671.043552][ C1] ? perf_trace_init+0x1ac/0x2d0 [ 671.043588][ C1] perf_tp_event_init+0x89/0x110 [ 671.043608][ C1] perf_try_init_event+0x12b/0x3d0 [ 671.043630][ C1] ? perf_event_alloc+0xb28/0x21e0 [ 671.043646][ C1] perf_event_alloc+0xea0/0x21e0 [ 671.043671][ C1] __se_sys_perf_event_open+0x701/0x1ec0 [ 671.043695][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 671.043732][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 671.043751][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 671.043779][ C1] do_syscall_64+0x4c/0xa0 [ 671.043803][ C1] ? clear_bhb_loop+0x60/0xb0 [ 671.043826][ C1] ? clear_bhb_loop+0x60/0xb0 [ 671.043857][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.043879][ C1] RIP: 0033:0x7fc80439e0d9 [ 671.043894][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.043907][ C1] RSP: 002b:00007fc805238028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 671.043927][ C1] RAX: ffffffffffffffda RBX: 00007fc804625fa0 RCX: 00007fc80439e0d9 [ 671.043939][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 671.043951][ C1] RBP: 00007fc804435024 R08: 0000000000000000 R09: 0000000000000000 [ 671.043961][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 671.043972][ C1] R13: 00007fc804626038 R14: 00007fc804625fa0 R15: 00007ffda31a6a88 [ 671.043994][ C1]